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"})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"97699db60f89d03519fb5191a6c19810", 0x0, r7, {0x5, 0x2}, {0x7, 0xa6f4}, 0x3, [0x155580000000, 0x7fffffff, 0x5, 0x5, 0xe4, 0x7, 0x2, 0x7, 0xf40, 0x4, 0x5, 0x8001, 0xfffffffffffffffd, 0x1, 0xab9]})

08:48:03 executing program 7:
perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:48:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000548000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:03 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  804.649405] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  804.649405]    program syz-executor.5 not setting count and/or reply_len properly
[  804.659334] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  804.659334]    program syz-executor.5 not setting count and/or reply_len properly
08:48:03 executing program 4:
r0 = getpid()
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x68, 0x3f, 0x80, 0x3f, 0x0, 0x8, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x1, @perf_config_ext={0x10000, 0x6}, 0x0, 0x7, 0x5, 0x9, 0x10000, 0x8000, 0x30e, 0x0, 0x0, 0x0, 0x3}, r0, 0xf, r4, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001fc0)='/proc/meminfo\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r4, 0x1, 0x174)
r8 = syz_open_procfs$userns(r1, &(0x7f0000005d40))
r9 = openat$sndseq(0xffffffffffffff9c, 0xfffffffffffffffc, 0x22800)
r10 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r10, 0x6, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000005d80)={{0x1, 0x1, 0x18, <r11=>r2, {0x7c36}}, './file1/file0\x00'})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000300)={0x1738, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@generic="d073fdda5b625f7890ae05ca34805ed97c1b437b048dd332ac21a636bcc66abc5da8f2bef10387411488c97d7c43dd387780c198c8cdf9505f4c4c32198e9d254f9651a218d8954b2dcb46c2d970201863142330370371e5745f5f164f32bf9d677c62c2007ca37cb767cb5968560f171ab5f1775ef1ee810a3683949cc64a85acf6b799938335e1f39b876cf67f85d5dc2e0a3434a48b5a6404d40057daa50f0cfc2d43e786fd31cc420ade224719212a39831622c8ffec4cc28a0cb095aee60acec86f44db7ee9d72ffd1e3b8ace8731070fb7186cc8f0d00e6aaf52876a90d84411e19e9c8c65a1824deb2bd21b2abf2d6e0a519b7c8679b61560fda2386263b531cb4ef6867f3fa8d9fc1a549cf9a2fb16e0b3b3128b798155bceb39d20d45303ca1ba24259ded6a0f5211813a13459fcb3802934f0330eaf20bb3f2a22fd7a355592ceffa0dd0f778b5bd6f68fafe42b8ee190bc04cb9accdce780a993ff8a84edab7c5a84e5806353bf38769dfb89800591b77b37e6928c0328f17b67d3fdac8558515e1e15c3af023b7d12af0ccb277aecf2adffa62b81e42ee94f78b7b2b004ba982a144216b0cc18b8f08c6ab72ad6aec0b0b430908614bdf655b25f397297b0845a53ca6e902db9009885e1825cf2ba0d82cbe77e3b8c97be42ba31cdb94bd801270a01142db25159dcd47ad21ff00a915e09cbffd81493a09708c66ecd8c1d517235dc4994303b334686c50ac96ec96a35f7e85fb835bcc19e56d4fcad7bbddb754f900532188e227d98af151bdde39e27c2e3e03b1e2a9be45dfbb951e6eebf92f9d7c1016cdafc68341e21e41e49c320587ba895978ece9c7396dfc1c1350798350fabf77024ed6e4165a3b2352678af7556fff3df2015e44c687aa56f25ca3b8c80632a63d756d502dfd007391237e65412ea96c09b155f679871e548f8664760dc6a97af7b30eac5aa09e5c384e1a6815a480815cf44b2c6f420d35ade68f87c3abd461c9a2ef7c76dbe40f886df7c6b0722a7e9ea2da8f3454d0be62aed6ba1f59ff50ae4801ba07d12710c9610b6cd4a5e54332ffbbacda44da64e786a646acdecadba491532a9ac5e903fb89d5036f1f4fa6f399611a723b181cdac7158d37ad831abfe69ba016755f81ef28a6a824076a0374104cb8b2ce03325c7ac6481db08cefddb5c5e8050c299f70096780a8549171136fe829e6f614e98fda22b24430948573cd89e2693583ddd0c76304fdd24f7c623b21e42a4696dcdd778c28e5c07f514f733c72896652e25985aca6e8b2f93e592f179c27d0535aa0801e8b3638a65e2a791a4ff5bb3f0c6e9a47b130b99477f3024c4ea502ee7913fdf669c11cd9bb75e35e2ae408426650249a0ef0ec6b07f1e1586cbb51a43a949d4ed923ea634d356fccca5be6cb7e8e8d8dd01cd878413e42408c3533d172b94b024f8d3fb1a6cfc10882574cf14550f292ea50b53f15ba09ed791e32ef650b412e11aa59212b36fd22bf32980a43bdb2f4d3041a654c96a3123ebdf2091c01019847b967e2901911dd9365d3cd03dc715b62071a32d629e625514ef1e5eb75872cc5444297952447d85479938c0080333aa03740b4ef528db2f731330c3eba881c5c0551f3d85e8a15abd67b047516c0f3bb66e87161fb0db91c2d1f85c0cd53b44a23f8c9c6ed20b2587f451137f6d285a546bf911f4b134054bcf1d8535de71e97abef3096c6c9e662a8e02641e19ef54cd9c05acbbdd32825b18e5f34c3f4dd62142292a87c5e31866abcc5355d13038f07cc566dff8b6646517a3b5a05f3049a97c65270f54def9a2cd48f09c0d4b318f30ec10d9b1aed78c465819e2be0795595241709b7a9866354034177d30307de84d4d7bfcd118c561302576df2936c142d046b1495975e190fe402d27d0d6e6cec9eab1590d4beb7d74037b58a83b80840d2f5d7677d11c01738f4e1744a8a9be494e88b2f85624b9092b067c896c0714eba5a73d6ee2ec96c90b5fc67613041646f5468e8ab43c77ad9ae60efdc08116bf3d74f16c0f5be2957bff5c935d35d9eb469dc36d649994f942fa1111984cad6da4505ecd4f5aa8940cea91ac1eb1b69fb6c93d2e8ae11a93fbd04b86ec6db0c5811a93ffa45b28b0370b8ba6f9ac5150d60ecd894fb5857bd1665b67c9e39c8ae2b81e71ada5b029186a9f54ca434542c3e4672419c959c1a4da207b73d7434cdc936f1f944d18007cbd2c3c5ee6a41012b09ea101642b5f93dd61421dc2ac8e7220d2f99dce83cdf81e6fb806489eca546aa57d523934ce157bb1e805dfbac9e457ad698571604c88588a71c6d08bd80e7b0e054f62ff2069e0022a35c34f405bf1f88514495e49bd66d1abc6ac58cb406f017e82debbb76adb7fdffa8e9a847006d79c63fa99a47dc8ad24b3f0f2b9ec901363b1144b00e42357cf5fa189f364a8e240e2ac32cdc94b0d54bbabc0a8aca98929fcc27dd967f8931361df06c5dd4cb1ee793848cadb4d3c4ac292dc37eb90db6f91673d110c43e0b6eb9bdbeded44e0c8bed7b9e69f50d383c22e5f959cd7794276e974ddbe4e49013e3502485c3050f59a44475c35c2e41fc0317348e99870a191ef560df3c8fc6a128038dd4aaa8681b9681fe7b2f9be918b1e4f71f55219895e02e62773986d9ff1bfb503f153bf7476f5068dceb178fd19851096dabe094c4101c7b8667b1692172032dd5899e5a67b84b32347d71042a81e009ccc58d3115a757983b08c80087d097c9f7c89c8875013dd0bd492bc46c6b9588535c9042377e17e9d2fd670d8a537fe12175307e47fb297ca5f0b7800791dfac88c17a13865aba55dc435c4696bd087665fda087c06838b89392e6eb61778260c1c5bc7662ae0e5d3b0ea4b0ccbd95209bcdd0cdacb83fca91058d73dfcb587228ba0a2456243d0fcd0a0626bd07f8bf3f5eba4c8ad1f7d71b84ffa57c2f4d4b901995edbd6a4e8433c8149c08d710704638d9814fcca9f9d198f6ff61663d10eec0823d6474ed3f15e0e6178851799223a03c3b73f0e2bfe9212fd37e336f288f85887c93dc0c6bb67ff2cfcd46cd1fd3a49ddad896902347582b76578cb40459de74af70a96e45700a9293e15549c82bdaf4260dfee437192104496411bd3d0fa12071ac094e1e277967ab22671833cdce3329994e82e06e5aa4837b921000c9d156857576ee2f1ba6125adc3c86e56ca84acb571c3e562c4a5e19b05c49bc7d561489b4ac24af654a90e5934b20c9612e3f83b50b485539c5e0f0efdce833e99d030bdff0694d0dc682836ef76b8ebdb6de194f195019a47de052e17911828ad8f05a18b2af8d56a5b636c36d9cab1f5b387c8141f7fb39068dc0c5359b8e2953efd397c39ebabe0fa465b81f251be53dcd0d2bdf135734221922396d4bd3609a3464a90a3dbea4ceb242b7ce57f5eb9495e121d852d0c7e5c0eed2e47a5cb95bafb6f8cef67060d61fcd9f5a1988ae02468f45f2a7e9740cf4aa44c54c691d4c728a073c615c71a0fb03646061fc534a9967e1fc712a093f083944747186deae62f739b5c908481fc4c6f67fc0e689682bbd3dc1a922ad8caa3cdbbc4553aaf9da6073afb4795ef54ae5ea482540851ade898bf17ce2f9910ffc5128d37425f1717701cdf41b52a0d36a436fbe0aa91a1c4b07086d0f3ec4478a154da4f34f37c965730a6f2d5d01c47610e9f0777f2a5fb1c2516a431f3c9017ae45ce5d70dcd29a2b8f9e320adeb6597d5a55375cf9219b8cd68d2fc04b83833010924dd6ef62233168efe1623b49d629312c8b321ae6bf36a1e25942a3732e72041ae80e8081524c6f5d8598dc82c8c6e254c19492dcff83a2c8c70857d58134dc6b0749313faa043331bcca5a237cfcbe5870095a88e67aeafb4b7ea0737937d488f081dbc72d44ed6728a9fc0ed67f1193452a7c883b8dcad9106174961b52aa8319c4fd179c66ac061a2d3f1f8b912585702d9f20e85e58e6ce9b633eaff6a78535e1a58c8a93d90fa45b603c3264695ca042581b0ac583ad6375f7244ffd546f88db00a091c2f53788b5501e23c69c32119c9a022181b1609b77bb1a75d259a66ecd94b3135de701cf8db0222462ce0e2f8cb05f88a674e5d8f8eacea636668e3fd46005008cf5249af643cff17b9b9f4f04b409b13d8282945f428e2a503bb4b7632374ff71e52f38fff8d9379c0eb03a4347fd0394436b978b259c47fe61717e15836674c2215d86d7adbc8ea059f75145163e6b8a178a66dfe37d5de94892b80b3ebe32f0b8a8a01930e32b478ec9748516bde90696be2f0d6aebe1bbfa6e4ca0d933810a843b3ae7804135766b33321b0b8d5d8e0e957b2621ea6451de8ea3bda02a2824bfb4576e9666a31057a3d8807b0d6d87040419e3649a81a6d5ef3b4ea55054bf8f8bf5833abd1bcebd3af9f007bede536b17e515608dfae00befdd0b76fa76d1352bbf91c2a104bdf89a2b89ac1e3e04dac9fa609dac734d36433421fd2760559a8f3879cb551215f570385af1ab0c08fa04625f3dcde53f1f8fee86cd1a7cbcacafe09523b99e1441b233e1c3d43750db284e758f10877c6a6c211615e1289233767575427f1aa25399ce78361ff24a4f501dd25b30ed9f32a7cd40a73970d47af8eca128b9a78f16d3c4d3f2fdf4d3d312eb438d5e55306176d8f406690959631b560b8f32b1c30fbc02df7cd8b623d24c4391bd027512e2737d635bb59291c0cb5fd54a9de623a94f98fd4586a512200b33f8e20f9e77994825b348a8525bef2cae16f13a1a93391b1ab7d7e0dd1f999fec691a550fc652d7fff608a3258a5985452435ec1f20657c1c7d2b5e59ceb804c722cf7297ab432e7bd11537b118147f245b9dcf10dda9d6858c3c08ece402fe052f9e1b5266847d4c38fa826d024083bab37e60938172312c8989ef9b2e1c48279caf988cf7baaf80c795d6321e51abb6fe98b373568b99f8d1769d889c770c6e6044e9b68131936e2e7e36ace86fea4760a24dac893e82ab824a5876f2570e572f30530ae243cd37e747f16ed9020c11e31cc4fb64e09cba1ff109fe4dc5faa77ca8d73113358ed18646f09bd7805923f14e4ba2cf0a33b893a1c740a91c26aa4353a8872eb5615ad6bb77775dbac02463db0d572d410dcd3c7131aee8191e3a1801d2f5150186bbf4ea58eb625ad3876daa4fcc7bfa84f30a846532331fd5ac660e993dfdaf0839bca75383188310725e897283ef4f1baef7de82beb51d2e6288f51f76e5cce4252adc91c77b6ff7813fedb9e910a07d6e53f7d8d6d91a25981b4078419f704f3ca28300c0d15adcd9e93db4568591e6382de6d4db0de84c0c54ab0b00a999bfbaf6f8d7f2222bb0863ab556feabf26aed5fd98b3fa6edd24a852e878ccb182d09799cc71423a237a37be8ce674b9577affabb7f424a025181a0f4a44165d001b3d001199c32c33a70eafbc27a84ad030708a6383bea289e2b7f213bebd576d8745fcd129bbaa208c8d3fdfa379d0279344cd3af4b4a70a503b2c2303db9a41902d4a67a8b11047029c94bb39605d1046538cda07cbeae9e6444702062afee77e74fbf16f6f2ff7faaf604f5bce74d47067e434c66a324b608556e27e91c3875cff79f31ddade2cb4454c310b2af00e69cfc0bbab0611b5c619b95fd803be79f7476f71c62305f5f4acd075f99a61b8dcc6701dccf78d522ffa95cd55f99b30db74d6497edef8c0da7aa24bbe8aa801f4cf7fee5bbf52130df245508bc82293ea3e7e2478d7f29a885", @nested={0x1c4, 0x42, 0x0, 0x1, [@generic="6cc9d4521475c621fa163f45d1ee9e94f6b950195467faccfec9d2296e89b6143f329bb4d3b144ab181b31863f5220abd5", @typed={0x10, 0x36, 0x0, 0x0, @str='^\xf2(!()$)v\x1d-\x00'}, @generic="d1a07cc6cc94a38bab296877fd17d28fb39013ef6ce3a70a8916ffc01218a9c3fe9e8b237248a71dc1f6baaa2163481ae363c5542a2a05b240284d19f7cc1ce44527b825b436bcdb8655f61c0b34a3ca0ceb61787abfdaa9f9dc294f82050bc65867455d48af544a74bb84f552884880881bdfc4afb5620496d0234d0a1eee969cc99aa1b58ea6492888c6612beda370cdde3e185d0098929ac0b820a7a5c2c3c6412761794e39e73a932809500d45b312066afa580733432519acfb86e0020dfb255511938bb9bfcb0161ace2c4c56c500bd15d3615057a0b117ef90e7d1ff52d555899de56619af786cd67", @generic="7621c78e5272f31a341dfb818d8c9fd8227dc4b822651f082e3b0d7bd78b8b7c97e7941a0174cf9bab31e46452a09b4351b1ef7be965445707d79cb2b9621be07dc0f8d62926ec7df4f17141051ac767fbdc14a07ff8442cda59bbb45f1e67f5e630f8bebdf7b89cf4a827", @typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x8b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=r1}]}, @nested={0x1c, 0x67, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x160, 0x6a, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x200000}, @typed={0x8, 0x7f, 0x0, 0x0, @pid}, @typed={0xc, 0x70, 0x0, 0x0, @u64=0x2}, @generic="3d5f6aa708a4b9b976771498661fdead1774f3f89665654889ee8abdf8e80d91481aaebcc363aac93381b27432ab970de976698cd8887c74fd0dd4d51415aa8cd7aa60034dc733d7120c221863e5e9c2296cfbb93e0825a793d0fc107b626a1481d73ba7358cc748e5fcd138241cd432c8f9e7da3812d5cf5538e28535a343315c8b21464cce91cce66dcf36beba3c272591cbe64707ade8bf263b673fcb0851e290d663fb38517deba3426ec4f7f765e719d1454353b8aa588667c52a6c40505fd8e10e815fde9526d44d", @generic="52ad77ca486a428b62237401b405302602d7c682f1e1a59d4cbba86b11d130805e77b1f84c00445b20535b2a6743d939dba76debb306a5ed8acd48f70f84237dd1508f5c6e0cb52a28f3950aeeac16ba106b5551cc0911ba76292476cc58c38e37fc01388412e843718371c9ff7125541f0853ae14"]}, @nested={0x18, 0x42, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x80}, @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x1}]}, @generic, @nested={0x3cd, 0x1f, 0x0, 0x1, [@generic="33697d138e4705c866761992fb", @typed={0x8, 0x1b, 0x0, 0x0, @uid}, @generic="c2872e34bece4b2abc0ededd86b92e34d60f8fe8623b5ba1af345aed46752c82633f6a0feeeb3bf33782fe4b16d4cdf2233302157685a6767f9883f3469fe80b4e8509f35d0089a233fe7452dd30823650ff0d9332eba129cfc9e91c531fd8ca00cbeef4088e887878aacae105117dbfcf55a79e8c98961b3c2fb333a5de507e9625bfbbc6e1460feaa93b3f690f1d009d39e81cba82d1f316fa5fb9da52e471ac907192b0883b28797222c92d9209d0fdf14d", @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @typed={0x8, 0x7b, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@multicast2}, @generic="84940d665fd268a0ca912fe0b7c4ceb0b5099825c7188b57b8ceab5d0c2de367cf780e997690c945cd1d2635b30aafdd3dd00f237ef2c3edcdb51accd43467c9c35c0f31f932928b4f05210c6bf09878099e62d5f06e97a59056ee1b4d7bc814f7d0ed79d4e39aaa215a7acf9a32610756f273962e053abcca605ab999", @generic="8bbc4e5804c3d638427789cd2908806224196f34e0ea1acb0301f35c62bac238f3582eb39dc4d2e65b236eebbeb0c9fda837183e4ff0efddb8e540e96e22e075ddbe7846dd11e1736e45d337b94bdf1187701d02e018f2261a7c7e07b320d3096ebe05fb71c5a0c219df7974d2250a59a4a7c3171d7676356c2da0c764bc7382752d99cab455ad6049adda7e8159b5b886df7a7e04650b897c2fed31b3f187ed160c23ca52303b8abb52af8c7538e5baf94357f7f8b4f923c53b0e51b8020fe18eea566f2c81d3b33199c5376d7e14c28c33100c07b56c", @typed={0x4, 0x81}, @generic="bee4e06897df78c55804e0755703b60a54ea08d7767e8b9cf804d1ed22bd4576d300cbd62ac51fa0715977254da79029c920d24c1831051926a0425ce9332064cbfd7221ca6ec442125ac531bb9a565f9e0508051fecf4e05d2729aad71ba5538d6ef7e14a3b95a5a08406ad753aa865e999264050af53f5aaa12af3bb25d7a9ba882712c86d4671a4e8a3805e99dd9d5b76f72a008aebd9505c81382cc401aa8c0a6e6d60", @generic="a5ad621b758b0e6022ce7718be1a0110ce043bfd4e181ac54a9ced765431b6498dd63f85dbd297a5c919194dc0612ef7512bcd0dc9a4af9ce56f5405ca42b9a1f678878f66bd765a06c1f0ac87396a1f040d1c8217d784efe5983356afbb9e1e65b9abce0417bbc19ea6be197b6dafcefe3b8a15189b351395763155a6084a720ac83b8fa85ee46b079fe712ded7aedec7adc0b6f056f873b99f83cd8469aef1bd680f0754e098077d9d42b67483191cc87920ef9efbebb53780138a65fd811bb4abce71ffdcea504f83883db8d5f7e3fda547dce6b7b1313212a2a6a275c9c3298a8c45bebf26cb051c43ea"]}]}, 0x1738}, {&(0x7f0000001c40)={0x38, 0x24, 0x100, 0x70bd28, 0x25dfdbff, "", [@nested={0x26, 0xc, 0x0, 0x1, [@generic="88e330c8964b4010ac1206eb01fea53b86a3c52594a3239659d66bd39ee4b608b0c4"]}]}, 0x38}, {&(0x7f0000002000)={0x394, 0x1e, 0x100, 0x70bd2d, 0x25dfdbff, "", [@typed={0x4, 0x3b}, @nested={0xdd, 0x1e, 0x0, 0x1, [@generic="98b13c698feb422ae69c8de7bc7bd2180c85445c58e2079b7380c051215100e69871dce070539d139be89bd1874a7db0bfcb21083e01a95cc0b82c8e4321f09817caf72c5709cb4342e9cd69439b774521d354cd88828482941b2b35ff6274b6679363cc8e4e67c20ec28b3be32c966bc8dedf28c6fa57413fe4dcaba1ca0515c9a52c9bb65a48950e0faaa390f393b603dd56147c75132631b8cf9be1389e81a719c4f2f3a26ea035a4c801937b7540cb15e6e4b96ac94ab5638943882252feb2cfb88f664e646c0db2acf6439d9fafa5fcb95376526829cc"]}, @generic="651d8908b3738890a4da81440ca04cf89061b40815f4", @generic="7df4b9c6e954dd597a25bf5f739d68f549149a53ce35de124b2b61c4a5b765b44dafca1ff18c79c466a0fa884d5cb3d57834f1b3af0d1f1a26b17a10d99c4ddd5f12ea0ee707980b633dfea7aa65cd", @generic="43d9fd347630520f91e2fd5c9b49c8d7f734c915041710b30335844d5035379eb450fc17eecc6e363ec1d9bc32ce9187d024b173f5dc39e60515dcd0a9347e0ff4002a948ef2e27fc0f970ebc111586b1fdb9dc2861f0608fe627f6c0e8b30cf1aa58b4fcf4411fe07e03f6e6b8298069141d576151f612590b67eeccbd0a0a7d720728e5c0ec8132a7129c70386cf3a171e26bb366c18cd3e3a2f1b84d4e393a99756027d19b38ad5", @generic="3b42263b2bb4335b0d1b1844e4d0ab40631efb90faa5c7e8f919df1eeae4f416c0ff4f207f6df1b3ebe6c310193bb424b9180117e6e46601036441817c66ddc2830174a685bf1619af175b5a608d337fdd012c16df3f4e0799a01140dfa8faa54f28f06293060b7f0d0ee28e7820cd3f8681e656bfb3b09c2e119c", @nested={0x112, 0x76, 0x0, 0x1, [@generic="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", @typed={0xc, 0x5e, 0x0, 0x0, @u64}, @typed={0x4, 0x45}]}]}, 0x394}, {&(0x7f0000005e80)={0x2290, 0x16, 0x20, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x5c, 0x3, 0x0, 0x1, [@typed={0x56, 0x1a, 0x0, 0x0, @binary="6174c2021649f3e963481cc503562b275a0aac1aaa7d7e0d7a6a85a674ee1fcc8d83b57db6557b6a98da784248d16127bece7285a859bbda9f3995233a58bc374393b577782f123545c9fdfec1b5a78a0646"}]}, @typed={0x4, 0x6d}, @typed={0x8, 0x24, 0x0, 0x0, @uid=0xee00}, @nested={0x2216, 0x33, 0x0, 0x1, [@generic="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", @generic="629962b0d8894b486b0d6ac5f81726cf2d62ccd9c5b9ba208c30a9", @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="2e97085ee659a7fb0d17ab5f451ab36386cc9ae0411e5453ae63a7f05ef2497989eb706c317ebd2f2991d5929c6c6726ef5c1349f23652ba6e42eab7754fdf97bf5717deb8c8f4feff060c3eca41f53ab7c305db36feff6561003464e7ca7604761c12efd96c7f18ad4b6916bc69485d7d4918bb078d86c8368ac2e898499c4570c21f574f9fb145b37bd7843b78bb308521e9bea5cb6f28255ba7f3001ecefcd3f41bcea5f8a41a6a65ea28db75d6b91f8ec418dbc9956fb9fd4e5e3558659013dd8d0cbcf1b2b46f19d4c998c56b1e6b332a0e90a1", @typed={0x1004, 0x29, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x5a}, @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x1f}, @generic="b8a2d1292047a89b052a6bf5f5744e1332b7b46a03218d047c2094d2eff77ce0b159c1ef052e82788f0a8adcbad08b9727fa4fbb82d335b1632d44936458f5457c14", @generic="3bed5afccb979001193b39cb0aca693610b94ae13f6a2e9bf49839e815456a64c277a7593adde3ae4d6d34f64d52a53aadf5d331faca9017d9dc62b95e599c6c45b562fb9af8192eaefa44c9646b0276a26d8fb18a5bce44705baafa19a3d2497334b89d567f7606b3ed89ee0b3a4144b719a83f55702dc7e57233a25bb465ddfa01d2", @typed={0x31, 0x59, 0x0, 0x0, @binary="0e73285a20c8e10bbfd0635834f6a4c6ef8605d0416d39832712a332b08e3d0a205ea7993d03e6e3a80f99f81a"}]}]}, 0x2290}, {&(0x7f0000001c80)={0x224, 0x17, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="59c7a8568f9e8f870313dcb8adc5945ae48cec3d6c0e51c0268154ef163c696935132b187ccc8de59305e4a14a8ebf03e61f0d7e0c1149075d0264b98c73dca8dca1518c47b88cbbb259f39cf772f493c84f5aebf634f513fdc14204896801a94b0871fd3eea74e4e04285fb6a4f3196f0937f9cae7d43f5df44eab02766a7b5d76c4cc1eb0e7c07a848becc427c5b486264fe9eb8a0fd306732e57e6a6e3723da11c70da3aa8ba38fd036b2d312110741b302", @generic="c2e126a27b4d0117971a4c4dda5d1e84ab47a70efac2b8e20f78979f09a335b8e9b3c7f267ee98cc69860a436d4282d1c8dcbaee95c8d21d680d85acb582ae884672e438b0a8c3a04ddce4ca5e175e061d958b55a3194c6b0cf77c73c53628b1b582fa4d23075e04281c72a8f9f303d2b5fa85c34af2a87004fd967a8b9c2ce6df702b76", @typed={0x8, 0x8e, 0x0, 0x0, @pid}, @generic="d46284a4529b7e66f5924972bda808263f95fa0fa6a57d447f45f9f79d5975e5c9b187f0ca", @nested={0x99, 0x27, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @ipv4=@loopback}, @generic="6f21269b63531fd93e9fb6ad7e896567cd9d45f7e0352138594d99af1ad6f91db7a1fd14f98bd50c3aa541464da054d78570093f2b5b2e0251bebc6db26e360ba93bcefe5d7a79e94ad4fef64aabe2367fe3db30406f5d85a4203eb459ba6abf33e561391ccba9d17b1f91bf38b502bcb13d64aa09056f053984df2bee5352ae71cd9288c358dcd94bd53677cb"]}]}, 0x224}, {&(0x7f0000004640)={0x398, 0x34, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@generic="e3fadc6db8430315230afa19f04be07226f926626193091c64a6f10b59845c1636061284f4ee7053160821d981259d59a62c73c27f20606cfa75292fc16f557d0ade8e91ad794afaace2b6ce94faa07c051e547352d63bb29a542a2d97ebe7be4035701e2bf4403a1158", @generic="e0074c7cf98917d9b165ee6f4e3f60341222ee7e42fccfccb37e4afb3a0bf7f19d4b8340e4c31a7dee9600c4a2023bde032ece42549253ed9e28ab6a7fcdee9e5d997ffed459b7e80200a1c037564eb361cdb23f2eec3203df", @typed={0x12, 0x91, 0x0, 0x0, @str='/proc/meminfo\x00'}, @nested={0x1c0, 0x9, 0x0, 0x1, [@typed={0xc, 0x2d, 0x0, 0x0, @u64=0xe000000000000000}, @generic="5a9ff4e0a21e874633a0926ca56c92c375fd48304b4716f0377d20ef42d2dde291302b487d4cf2cdde1a", @generic="c209365f07cfffa166183cc9a7cc88fe7c3af59a3d4bb310b119dc41485e95276bc1f58c876708d232a7c2325244a9f2c0717681db4d2df6b2cf73ed7b4ea6d25da859709bea8fbeb9a6026b6bdc0c55e41497f5c27d90bfa006eb289316891072bc8f83278057e233ee943858d16c97d347f483c09699959f94e8f218f347c74e1204d9b28a513e2638e9835543909df068eff5a70d78664b202d4c7703c5661d44cc3aed0a3b5aef59e67024ad7f85543d42e5bdd8eb0d00858c18661de0d26f26166bc10d8bd047b5b7a9590dd7b8f679eaabf7c7181609a8b7ecec9ea38756dd7c6bcafd7a84c35c3c9fee0a529f8bcecce041a61aac6ad8d528ed7f", @generic="3688ec96a03082022b1dbb326c78c0cb5592fab8e3a84b769c9007ae79d69343b53484bc78df8ec044989a57609b0c89b80e0b9ad9b2596d10e7a2639dae8ded9cdf2fc4de625001ace864395bc0cccc840abb03a406f465aab25cefc7f3435bf6998ce332d0a7c7c2df6c4e3170303de67e0ea487ec52585d1d55a8ad4e7675", @typed={0x8, 0x95, 0x0, 0x0, @u32=0x5}]}, @generic="3dec925065816f3c01d1d261861ae9e84789bf2a42862c7f4f4160a65ca6ec52f9aaa82fba1a83469cfdc7500c0f993c23e6470c7d7db6b2a121b73240945a570d507349f096ac88dc190d88cdd8491f738295d7975549851ea25bb095656dca9f3abc19aaf001bbbd92cd7700d0bf13015ef2359e9e313a7df978c09c667515282accf917f486422722ad19d2e0288419520d17dd4d74b6ecd8e06e0fd4799d1afd160677392dc306089f4c2e0b54ca24fa6f5e4764c253e0806ad02d105a0d5caf43ce8b032e885982d602e3128a03456c0da2745a2878c66f7d5190d6d7964281c1a30328cae459dbf1327206"]}, 0x398}, {&(0x7f0000004a00)={0x132c, 0x29, 0x300, 0x70bd29, 0x25dfdbfb, "", [@nested={0x1088, 0x69, 0x0, 0x1, [@typed={0x4, 0x53}, @typed={0x30, 0x38, 0x0, 0x0, @binary="983c6812ecf0de6f45bcd4cda532d1c37b30fe9671fd79ef33bc0bf21eac9633885dcd46d93d25cc82fc7d75"}, @typed={0x2c, 0x5d, 0x0, 0x0, @binary="ea826fa8258f94a28ace9e814111cf105dbda9aa2102e47e4d05bc120ded1f8e2c5d7301e66fdf83"}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x5f, 0x0, 0x0, @fd}, @typed={0x8, 0x62, 0x0, 0x0, @fd}, @generic="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", @typed={0x4, 0x55}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x1}]}, @nested={0xb0, 0x73, 0x0, 0x1, [@typed={0x4, 0x4b}, @generic="800899a559f740c31cd5ccdcdfd807c36ab9ea90b1d3ea2809b3729885d17f19107ccfee0b199f85b69e45147b3c54c28785902d", @generic="e8d763071a3ac52de889ec114777b9e1c0ca5b798f2ee706df17", @typed={0x8, 0xf, 0x0, 0x0, @pid}, @typed={0x8, 0x72, 0x0, 0x0, @pid=r0}, @generic="7dc0f94f025b61946e6ba741432fb55975c8fd3c7f5f57ad3da898f644d87585005de0471371c6847d81444e4ab0", @typed={0x8, 0x52, 0x0, 0x0, @pid}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, @generic="0b3b4677bce6c833e47bdca3b6a8063d9a5f61a87c6a8a348b5660e6b3e08084aed61232f24bd0ecafa079983ec2d22672c9bf06dd471d698406b4a78f82a096d6c7001e1dbc58a22351a6eb6e96b38879d4598f8b2b28679abc572e8b233b056fc12a6e993e3894610492d353378ecb2195531e3840bc2428ee3c2b6ec2a58e31a2fa54eb69c6eda9a4c9c30f691f8bf99545bb3fb78544ff29c6de5776b8b67df02ec902419d267d9da42079842e6c025ddb7f8e99962592872601ef62dab1ab0106981d75f5c1f8d6a98130295c7e9752607a9163c9d7825472d9e5341f4dd4fcb3a107af6df2d2392fa18cb8bf", @generic="395ed02bdbb6404a00c3f75f5094c725732bac05dc2efbf8bcad362355eaa331d40eac76513f9d45dd7e31ab68e57aa22fefabb91ebfc7f6c981c129ac1701abf564cbec1fc9067e309f9c96a38f5deda4b3e8fb76fbcf7aada76fa50a304e5b429e9edeb2e4df47d952f2bf6b8e1f9e6e53067ce58bf70b0b83454edb1a471d501f2e0a7480bebd564cf15d90b21f905b524f49594035fb71bbfcadf23b1111d77b5d850f1fe5ea68e598dc45ff630058af752a473718e951cf91ca0e3d87fc093f46d130a8401c225bbebe99aaa8571f63041ec6040bac70fe64f67c1576d9ea90852ebd6c7bda9674dda9b98a659e32789026"]}, 0x132c}], 0x7, &(0x7f0000005dc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r7]}}, @rights={{0x28, 0x1, 0x1, [r8, r9, r10, r11, r3, r3]}}], 0x80, 0x4000010}, 0x20000044)
sendfile(r4, r5, 0x0, 0x10000027f)
getpid()
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0x4884)

08:48:03 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:48:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200054c000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:17 executing program 7:
perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:48:17 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000507000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:17 executing program 4:
r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
io_uring_setup(0x4637, &(0x7f00000003c0)={0x0, 0xfc9b, 0x1, 0x3, 0x31b, 0x0, r3})
syz_io_uring_setup(0x8eb, &(0x7f0000000140)={0x0, 0x771e, 0x0, 0x1, 0x137, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000340))
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x288000, 0x0)
recvfrom(r4, &(0x7f0000000240)=""/100, 0x64, 0x40010043, &(0x7f00000002c0)=@llc={0x1a, 0x305, 0x1, 0x2b, 0x0, 0x9}, 0x80)
pread64(0xffffffffffffffff, &(0x7f0000000440)=""/16, 0x10, 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r6 = getuid()
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r6}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000480)=0x7, 0x4)

08:48:17 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:48:17 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:48:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:48:17 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f000061c000/0x1000)=nil, 0x1000)

[  818.240013] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
08:48:17 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  818.240013]    program syz-executor.5 not setting count and/or reply_len properly
08:48:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000568000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:17 executing program 7:
perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:48:17 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  818.363808] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  818.363808]    program syz-executor.5 not setting count and/or reply_len properly
[  818.374307] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  818.374307]    program syz-executor.5 not setting count and/or reply_len properly
08:48:17 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f000061c000/0x1000)=nil, 0x1000)

08:48:17 executing program 0:
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
recvmmsg(r1, &(0x7f0000002e00)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/103, 0x67}], 0x1}, 0x7ff}, {{&(0x7f0000000480)=@llc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000640)=""/22, 0x16}], 0x4}, 0x8}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/220, 0xdc}, {&(0x7f0000001900)=""/168, 0xa8}, {&(0x7f0000001840)=""/22, 0x16}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002a40)=""/218, 0xda}, 0xadfd}, {{&(0x7f0000002b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001880)=""/21, 0x15}, {&(0x7f0000002bc0)=""/216, 0xd8}, {&(0x7f0000002cc0)=""/214, 0xd6}], 0x3}, 0x3a7b7e19}], 0x4, 0x20, &(0x7f0000002f00)={0x77359400})
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xcfeb, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r0, 0x1000b58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7fffffe, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5f1)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0, 0x6})

08:48:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200056c000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:17 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  818.513755] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  818.513755]    program syz-executor.5 not setting count and/or reply_len properly
[  818.528551] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  818.528551]    program syz-executor.5 not setting count and/or reply_len properly
08:48:17 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = getuid()
ioctl$CDROMPLAYMSF(r2, 0x5303, &(0x7f00000001c0)={0x6, 0x0, 0x1f, 0x3, 0x6, 0x40})
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="0400000000000000fe4fb5613eabea932000020000000000"], 0x3c, 0x0)
r4 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
keyctl$chown(0x4, r4, r5, r6)
stat(&(0x7f0000000580)='./file2\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [{0x8, 0x2, r1}, {0x8, 0x4, r1}, {0x8, 0x6}, {}, {0x8, 0x1, r1}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x2, r6}, {0x8, 0x6, r7}, {0x8, 0x1, r1}], {0x10, 0x1}, {0x20, 0x2}}, 0x6c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
r8 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r8, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='9p\x00', 0x0, r8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66646c7266646e6f3d6accf436cd721fbea83a64f7d3ad016357830bcafdbadc0c2913ae46576dc611b714358d40d08ec2ba0ffee9"])

[  818.642464] 9pnet: Could not find request transport: fdlrfdno=jÌô6Ír¾¨:d÷Ó­
cWƒÊýºÜ)®FWmÆ·5�@Ўºþé
08:48:33 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f000061c000/0x1000)=nil, 0x1000)

08:48:33 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002f2f66696c6530003c87c4db0397cb9288"])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x5, 0xff, 0x4, 0x7f, 0x6, 0x9, 0x4, [0x200, 0x7c, 0x6, 0xffc00000, 0x8, 0x6, 0xf6, 0x8000], [0x7f]}})
openat(r5, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r3, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={<r6=>r0, 0x8, 0x1, 0x400})
stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0x0, r7, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r8=>r6, {0x8}}, './file1\x00'})
openat(r8, &(0x7f0000000240)='./file0\x00', 0x40000, 0x80)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r9, &(0x7f0000000080)="01", 0x292e9)

08:48:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
readahead(0xffffffffffffffff, 0x0, 0x0)

08:48:33 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:48:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000574000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:33 executing program 7:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:48:33 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
recvfrom$unix(r0, &(0x7f0000000000)=""/123, 0x7b, 0xb1221e17c213064b, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xb9}}, './file0\x00'})
syz_emit_ethernet(0x3e, &(0x7f0000001380)={@random='\x00\t\b\x00\n\x00', @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0)

08:48:33 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  834.867671] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  834.867671]    program syz-executor.5 not setting count and/or reply_len properly
[  834.891018] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  834.891018]    program syz-executor.5 not setting count and/or reply_len properly
[  834.966846] syz_tun: refused to change device tx_queue_len
08:48:34 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x371443, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x8001, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "f53711f1dcb9e590480918541eb2fd19"}, 0x11, 0x2)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0193fcf7010000ae02000005000000630200000500000000000000000000004281e3b7453ecd62fbdbb3ca33b073bdac065ef8476ae9a210def18225002b8dd60d99e91158f78b291178598cf6177647c92c9bed2418ab9b9718c9f83f50c20a872f0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df55608b7f102c7935b00"/365], 0x163)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
sendfile(r2, r2, 0x0, 0x100000)

08:48:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200057a000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:34 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f000061c000/0x1000)=nil, 0x1000)

08:48:34 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  835.089598] perf: interrupt took too long (4044 > 3995), lowering kernel.perf_event_max_sample_rate to 49000
[  835.172410] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  835.172410]    program syz-executor.5 not setting count and/or reply_len properly
[  835.179866] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[  835.179866]    program syz-executor.5 not setting count and/or reply_len properly
[  835.346399] syz_tun: refused to change device tx_queue_len
08:48:51 executing program 7:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:48:51 executing program 0:
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff0a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x100)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x122)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000005c0))
socket$netlink(0x10, 0x3, 0x12)
syz_io_uring_setup(0x78fa, &(0x7f0000000700)={0x0, 0x0, 0x10, 0x2, 0x17a}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0))
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210, 0xbcf}, 0x0, 0x4, 0xffffffffffffffff, 0xb)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

08:48:51 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002, 0xa824}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000560c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r1=>0x0}], 0x1, "58d88a9bb4c374"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000570c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x1, "99c702483bc089"})
r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000009, 0x4, @perf_config_ext={0x3}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x3)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x242880, &(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYBLOB="d01d17b0431fa7d313cb455ee8e09ee90169d82a1e6d87cdf562f241e34fcd0cb918e21ec6be37973cea0cec1daa83670f62b0da2e84f821ef2c7ed1ed99f338379c4f4fdcabab32486daed5688572ecd8fb03692e3982ff3158eda497a46e3ed169fd40f8246539c1fecb6dcf19e8966493f0e27c3f0c56eb9e9ce6cdb35c32eaf3bcba22bb7a72829ddd660b1ec6f0c8bc2db626e414f15126c228802911b9aa20c711ff6f2bdd9231577c9270fc0d45e324a729bfb165c528f0bd78f6f4d8ad630df68f3e226ce7bddaa6cd3c12562d3036a5ab", @ANYRESOCT, @ANYBLOB="2c63716368653d667363616368652c76047273696f6e3d398813303021dd6adc70726976706f72742c9a907e9e766f61702c6c6f6f73652c006f736998616300", @ANYRESDEC])
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r3, 0x29, 0x6, 0x0, &(0x7f00000000c0))
lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat2(r2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)={0x18640, 0x2, 0x1}, 0x18)
faccessat2(r4, &(0x7f00000001c0)='./file2\x00', 0x1, 0x1000)

08:48:51 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:48:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500030008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:51 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:48:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
readahead(0xffffffffffffffff, 0x0, 0x0)

08:48:51 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

[  852.163976] sg_write: data in/out 101187551/247 bytes for SCSI command 0x21-- guessing data in;
[  852.163976]    program syz-executor.5 not setting count and/or reply_len properly
[  852.168192] sg_write: data in/out 101187551/247 bytes for SCSI command 0x21-- guessing data in;
[  852.168192]    program syz-executor.5 not setting count and/or reply_len properly
08:48:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000583040008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  852.303241] sg_write: data in/out 101187552/247 bytes for SCSI command 0x21-- guessing data in;
[  852.303241]    program syz-executor.5 not setting count and/or reply_len properly
[  852.317560] sg_write: data in/out 101187552/247 bytes for SCSI command 0x21-- guessing data in;
[  852.317560]    program syz-executor.5 not setting count and/or reply_len properly
08:48:51 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:48:51 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:48:51 executing program 7:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:48:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500050008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:48:51 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xb58a, 0x100000001, 0x2})
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x2, 0xffffffffffffffff, 0x6})
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000001500))
fcntl$setpipe(0xffffffffffffffff, 0x409, 0x7ee2000000000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000001400)={'syztnl2\x00', <r2=>0x0, 0x2f, 0xff, 0x8, 0x664, 0x54, @private2, @private1, 0x0, 0x10, 0x2, 0x426}})
connect(0xffffffffffffffff, &(0x7f0000001480)=@xdp={0x2c, 0xc, r2, 0x6}, 0x80)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)

08:48:51 executing program 4:
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
syz_open_procfs(0x0, 0x0)
r2 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x100, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000200)="c1d441b5cee5f9e3cc9d34ebf70e8330f134fb0f1adea77c3d72117b847a1774f0225d3d5f8d93719bf80b7125a261d531c84ae375a3dc60213233036d985b051722aefd717837f60931f84c426dfe892dcef83956be798a8056b863ddf0c263d5d6de0142d67e8751b846831c3367c21327696dc8d6323912d4e281600f7eb401d511c795635fa030ea32225e9ec85f17e50e5bdf740ba4a2607c90313d5a42a157872e26e4df2a173959b70ee43e3a731b295622595ee4b7c6ae84794d7f545826a79d04bea7475c2daeec53a209a6f363a092a1f8d07f4a76ec2913293b2bbafca52efaf2f65f5457071d29ea4ab59e7afecaab20a233f8ab127069a5c8", 0xff, 0x8001}, {&(0x7f0000000300)="0d649ad2a8461975b23d6b2c823f66ce6b502cb72fc516b3b390880c7449e80d6839b654fd68315cb3bd8559181257c6210fb6b877849aa9401b6a5ac2662602614cbf0910068b6c5d0eaed80ee9d1c3ec21a83f156f09", 0x57, 0x9}, {&(0x7f0000000380)="8771cad119c2ea0cc40fa6fc7ab03a7e85c8fdb77cc669550c16bd9d1da17ebab3ec1fa21dec99b42d30b11be64ad6f8245f5f973c5667085c56556dedc64ce13b9eff5117f1b28e9a4331779d3e3dc6b927264907e49a4cb3b1455d77be77b94e91627226737be7a7eb44f0666b", 0x6e, 0x1}, {&(0x7f0000000180)="c0d5bffa", 0x4, 0xe03}, {&(0x7f0000000400)="c05ddc8f437c875ecabfa4c9d60fbadb51116d4d09e427fcf5158f494964532446a30dfc68636e990784ef95d1974f5ad781f40b754bc39aa2372474b21457e23e4b7f693f8e9f905b4fad5f4e97d9e3b4f147d2fdd5f9dc04d4dac26fccbfe5b3d4ae7c216782c548cc5a12b69b309dc4e51cdfef064d419ec47d", 0x7b}, {&(0x7f0000000480)="9f4e999ffa20a956947178ea", 0xc, 0x841}], 0x9044, &(0x7f0000000580)={[{}, {'#!\\'}, {'\x8a[(/'}, {'@*'}, {'}}%{'}, {}, {'&*]'}, {}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]})
write$binfmt_aout(r2, &(0x7f00000005c0)={{0x10b, 0x0, 0x3, 0x59, 0x2c5, 0x1, 0x38b, 0xc5d}, "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"}, 0x1020)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r3, 0x0, 0x100000)

[  852.556586] sg_write: data in/out 101187553/247 bytes for SCSI command 0x21-- guessing data in;
[  852.556586]    program syz-executor.5 not setting count and/or reply_len properly
08:48:51 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  852.566781] sg_write: data in/out 101187553/247 bytes for SCSI command 0x21-- guessing data in;
[  852.566781]    program syz-executor.5 not setting count and/or reply_len properly
08:48:51 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:48:51 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)

08:49:10 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)

08:49:10 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:49:10 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500060008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:10 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:49:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
readahead(0xffffffffffffffff, 0x0, 0x0)

08:49:10 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0xa0002000})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x86387d85ff3e0573, 0x3, 0x10})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000140)={0x6, 0xfffffff9})
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]})
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000001100))
pwritev(r2, &(0x7f0000001440)=[{&(0x7f0000000200)='T', 0x1}], 0x1, 0xffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000001480)="9da9a8210f41fa25ba91ef7de5972b9ebc3e38b8f81568296fd41e844dbf4e5d231a2109521e747604b6d08cc16994f6bd3cab58008d84de8a80b5a399417f29bed11f08dbd114efcf11c7d64957332c4e676714005a4c8da69067e254126b3529ad1d54294a637eb2025e75563b873b3dfd3aae10b6e73a1b29e26ee26d50aa5b8cafc13f859f11ad8d60fadeb06e124f578a1730dc8f48c409611c3481d7dae6d872f122f48c36a0738b894eed7d119406b68421d89002e6bde1777a5669741f68db4b4b7b6aba9359253e06c743a559f7af20da9c29123cd197b75f4cbfe2f7314426334b2db07149a9c3c194a33718229857a854292b8cb2bc5f2e9299a790b195d2b3170a1f943145f96259a423527430defdcfd5a30d4aa7260c89aa57cb96851eed85127af6692ac0b8e285a7e0d300370aa6f6c989dbe8fe287932037fb03295a56bafdb0916cf0b6feafa77af114690799257f25d1cab338afec5d6197e0516b0a16b8d8948972c2f0c3da1865f948e6b38c558f46df0a6119645dd24cdbc56682156a4c5683fbe7b7d018d2494573245d25a85eadeb6326c8a3c5011bac76b3aa69a0023a928613e34cc23d7ab24c99282e66d1c48368b31576d7821c4c165aaf937e233b339fa9903d97638ca849afe4be2a3d0d56690af7c1da25ea74b5694cae98d79d10bfde54ec0146f9f75105936e87a079d11cbba6f5e47610ab9cc3cd5d4064b1e8e9badff4674b6731e5648bf718637238e452fa254cee06654fc649ebd0a10d55a0f40945ee5fc3ece0b10455cf452adf0cbd899bb188757020d5ede98ebd62c0c2cdb20e96e1d3cad798c490be870bc960a4bdd489821583355d273b711844c9a90cbb59d81155137fe2c18cbdb61a7cde4eb7e6961bca869e7ace0aec90fc4fab110a68c0319d026bce3ed00e1247b0bd800faa7c05f439c320359c12996b1b4ff89a0b78bb778cfc8c6863440918b8c7d73a969f5d1f4004e13f60099707abd8dc6b892ab765c72d21b9234520b16211b68e9ad3502e88bc41f9d5d8f3030d044401d8f6dfae9bf7b322313ae96dbed407ebd28a6ece1919804e56d88ee93265fb83880f34d178fdaa4ccd8bac32d9609f2177466dd92be6ad2b37905e05c61940c7347aec690872f998db1f9dba88cb95cff765516406501563ef6cd3efc70b15f7bd1d33b1faeaa618809259e938b3bbe74c87a20b20e619196699f19b6b6f864ef009a0c51363125a716c55c2c72a719750d68189a7024843e92c1448b6886c770264a34bddf748da3a938a5f8c3222b42a90cb34b65cc2893c90af7f3867ac2fb7256d1a5d315c45a4c1e4642e43ffe4e77d009bc8f7f693214be8928b7bc89b14bf05565836b86d84ff4066021cf230b95b77932b2dbf37236f9bb4bd59c996977d2c95a1ad1967a23486ee6623dcf7d6da028c254f922cc243758bf3c2c744ae1ff5211aa231aea5289d0251e57b626b1a2b70f7c3ad4dcae0c6dfc282f0ccb8dac30612cbcb5b45649db46ec11112a16a65511e61bf9821b2bcae7a572071c14e5f58c51be383fb9fe6a50c72b21bdc232def4eceb80358e55442c2f383a05e97fed3e095720021da0c3a8fbe69bb9bde100604e9bcfe2b2269ab63cb23b785a09a7e6a6806ae032e56e355640208289ada237ca3e52258f8064b2249e4315b0c64861c5f116337b39c68dfed2580a9393af04fba6887c6cd16be0d3aff49bcf8c2140babb98340d7566560da23af3130798be4c2f4b35a25eb901113175b00faf889fef96c8f4535b74c723d5974029d615668d1d2b58a4baf922e6ecdd86082419f78a1b80570cb5c2e43cb0d5de3fb2f4525fbe191b83c2048eb2e51049d128fe29e198cc082eba228f189018ba019094bc254c5a1344877aac8b2d2ea197108f148d193e0c31b206b827232f30c301c7862555a4a5c7a89291af8064a1b010496dcf90b759f05183da35214fae6bc711aba8dc0a9908fdfd253d0759e2678372878fe72981db8dce267098b2b2ce714a0de7fdbf60ad71e2dfe6b6bcf156c4cd51e22bc65c4a2d13f0ede3130b8fd17957c3568880d395f07d8662c159a59fe5e536204d9e41c8fdde87ec250204e72791653ef92af55101cedcd413603e48c47832dad3f56d47577d233d731fbdc3fbed6c172a92fe4a4ffb41e6d00997fb7be97b51787777eafcde61e43a545612e1a877f34d941596de79a0c56220ce951877bde696680f8a23255dd6f1a6014a5bb105d50a0302ea05f82cb2f98f8ccbeaaf8dbcc77d5cb26ddde95aaa9b41c0d2e40eafe66243897142e49c6d1130151271aa4040f62f98cdb0e966a616446820c6a7a36d65655e4eac0942eddd5b9c283e685e9160e3e343ea364e316f88bd9559a2896a44aca675739878b4c698c3fe9bcb203c795f18c1a90b08747f2334b9b93c626155b28e5a422828e8fc8b7c0f83afe359a521963deb63211c7f3aa60033810602ffc5db7f3990c365800cabcecd12cf1f2c106486570ffd569c0ee07f8eb685ff6275d2f97c1c665224e60624c0df834ba5ccc5d84dce9af1639d4600768f04cee449e2cbd08e56800ae078539c630f275a097beceb1cdbb97527665365a7091b39c7c98b3556d287005689ea4a48cdca5e5e77b128cec3f22366a23178ccb8146b3855d554c9c6e1b3c05bb85cff8f07f317066eaef3ba7aadc42568722fc45bc4b934268096fab0773e4292015e74ab9c2088ed673c22fcee6df0584e8bc372d5e75d8fce1764efc98018d22272e1969bf7b25f9d97c8a878c75f4a23f170c50322f1aa712a6faa258f6da1884af3bc52a736698f6478d754c39d28b85fb97d61a21fbb7af3bc048302ad2e8f1baa87de8d9302efd2437633f256b9b6cad230cc9df2446d0ecceeac61db3161ba7de14a9089c2e75f2f72e1f55f5de81768031e3abc425eb08ff39603832c3697dda30fac47c053bdb35884f2080ab8db5d3a1dac0b4ac9c0303cf7bdecde863f7bfe89801f47af72caf244c351775662725fc8a8ad72f30f9ecd8a1ee28badc944308b5535333738041b38c5a20330504d231c89f67f0f7455da4842dc9d2558c62d6b4fdd59845787a0b2c299f397d76978ae8625801a1936b289b9589fe60b5240ce88553a7929c200318a53fce0d25943da2568f5433905d9d98ddad0f5643167f59cefa293d8d085ee8db033492bb75921b0f6e272d1515532f1ecdb9117f01a6045e609f1c9252c8c409806d11985ef348503079b6786090ef7f0f284d6074b8fe55f9c4f75824b12e11a956dc41cd294d9eacceb0f482cfe5e05e20dcb700d25b578a8a57fcc0e2d3d03b6ad3c9add69eb2c81511622346530c0d51c87fa894b8133625ac616cd4ad73c7a940b3fdd735c7a9b6316c4eed84ae81257d9ad172c8e81fb418d00026bd01e591ab29828796e2005c18eb80ffcb0193e673f77a82d9876e19ceb2dca02ae9642442f74fff434db12af57de88f63bace33b65a1c7d625374e4fde0c59182bebd06b9e1fbd79245eaa033f0a75c08c42b0fb6fd94c5be09317e8feb3b29dfef64c00b9bff62029c370388d8848c43020b192bdd75379aa9e5d1e95ce3fc3224a3b66548ac602bed5b52156b9efada412ba79b2af21e6e7e4a09f6410ffd16d4214e3f59b0b6d808fd0c6bf20a7db7f82a3df61806e79ca42793063e69df09b87be42c649d1b04470f29b62835011db6b92d258c4796afdee1c53948c5527bbe976a0efb7c7273ec5a07126b5c32e26089e3512ed8a6dfd1e61fb9389a6e437a8d029bfddcc52e8d1dfabd0809706eefd55f0f855a8d5c02e73c275e73d0104bad119c57a955438e23fa1cc272488ee8d1c82bf2dfe80137b8a847a49224c48b30246aec56a7084982b5dedab9778fab6989ab0cfaa12ae5896e2085b423b629072004893f5d55160a38b3ed8fcf57a9c1ba5c7e62b45fe8347c7c02e3a0a5d24b789fb3585da9f2ab877554757f91cc13046b895594e58f84edee356ea7901a0f38cd2f589464fdc28daa43dea8dac3e3778155c91a75d2223a897440e358bb3cccf97baa11e70acb54b81b9188edd7718d632e0aa16964d62bcc08f1090a9e13cac5747f8fe6e048983da9e9a4c18ae6e4ca83a46ac86da1516f371c7a449bb766251e5816357c9097044bf8704e91ab59c99cc0281ca90765f78dfaed409a5aa918bd5bf930241808ae4aa4c6dc2d9d758144fc617879b3c06b89a71fbc4692128c19da15afbafdfa14968216d355a0adcf3c5f1f8f180d9b85ef017679753d14a32d9481833b319249b1757f354a1f8b278f0c08e4b33fd8eb808dbaa8cbde14b1ac6db602010339ea5492476b641601c2ac20cab12ed7a9684af6082e4ec2dcf66760e7ead02fc8ee9591777bbb19c62651f506ada66c5268d57dbe983f83ff1380b7dbb6acd5bb031e0083f553c458aa6eb344cbdcdcb4a19c07c3bd818de6d61f8e368eb4b6fb975b03db5a3645bee5b792edfe30ea3ed94d970088e2c9163e8b3a8c73c57a1d4369b4c4727ed9ad8e2bf5e4ba6d1f96c57e1af238ba85d7ce66b7d46f2bd2cd9e2c8f189409c780356043fbc821e9415173ad10856397ac60fdb7604dd280c62bb7bc99804639e34154b0b9e785daa722aef4d58160584c9b9c017d9c9d02ca939f5f70665ec44c9a0daaf0947a7768f0bd8195bae26bbbe2d0e45f9708bd5c9b5dc90ca37a93fa1791947efdcab94ade7c8956d2ab9870ee2953391433d4a67421b275a387c87de9e1189bdd643e504e92c957a082eb2e5f65bf5a2ca7df203ff894c56859f9e06d863507b3eb2951bde6beb66630dc640c02cc5d3777545209170b999fd095f9702bb473b603a2a520f60293e5696f02ee4e5bf7ebc0be8482b7f661c46c6a5a7bf7a5b06e95fff381945d0d7faf3bc329284decff85b1c7b266f708c9aa47f8f5d908213945579ec69f3589b6b7c48cf4b4e02adc10ca26eb3b286e9b6c48522015688fddef23f00d4832012537bc5f01997af626882cdee31b2f33773cba21e96bc42e26a402fa489e8ca00ab107ecf9e5f6eb14ac8315a395845db35867ecf0df325cc94ad928d6427d8553459d1013e1a73429ebb4cdd160836cac734967bd4d38e24121cf6a9585983bfae09c7bab8e72abc70ef67801c4020ea1b01e02bd6b6e941d5c70caa0cda34d91366eab9cdb3c3718b71503b6403e2a2a7c429f103ccd8d7c0f10ccad0f1f29e852bd8c50d1139f43d5dc814ac26d8e4f0f3f9564d354f99e58231769f0768e91585b7deb23c35c6d4440f3019228426143f7e631dc7d19b9cc3a6353ba2ab48a57811e08840f96e5f040eef9ca6a9fcffc66aa449792ee5bc64fa364724ba151648286ed6aa1dc4547fc6759b20ca47ffee53a8af78e3553462ef25d0e1d57fdfd04788891303349f961a126c7b710a9c2313d4d3de1bf1cfdfdd49940a609c14b04d8eab84f802f5a1104d092dbfddb8d28de74d49b9ec9f482d76cc63614cd04cfe4f3becad58f53ec62f9e4f5fe8acf3d2689567f07164e77f7359369bcf10d6bf0d391bb05accaa91c1879da56c82530763d214a2a01c201e3804fa700c5b2fd20c86365e1b150b594ee5f84c2b1a0d0977d696ce0f372262b14141a0e112a3d8efb142d71a17d7863000ec5dee88b48c8f4103b874786960ee9c0488e733da803e90e29a4811e2e437a6f53ca8520510139bd07c59a88a561e50c6e4ff92f0f44e8908f8ebf1a5ad25b6ae4101dbbbefe7e831b0072354b8dfba6cf8c43bbc", 0x1000}], 0x1, 0x400, 0x3, 0x16)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r4, 0x0, 0x100000)
openat(r1, &(0x7f0000000180)='./file1\x00', 0x80001, 0xd2)

08:49:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x80, 0x0, 0x7, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x20000010000}], 0x0, &(0x7f0000000040)=ANY=[])
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0)
fsetxattr$security_ima(r2, 0x0, 0x0, 0x9e, 0x3)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000300)={0x0, 0x20007, 0x6, 0x80000001, 0x0, "28ffb3c706a64eb97fab4b05a34db943696408"})
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xc, 0xa0, 0xba, 0x7, 0x0, 0x7, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x100000000, 0x5}, 0x1000, 0x0, 0x101, 0x4, 0x3, 0x0, 0x3, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
fcntl$getflags(r0, 0x3)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009380)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="14000005c290f7010000000098f308000000080000000000"], 0x18}}], 0x1, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000440)=""/194, &(0x7f0000000140)=0xc2)
r4 = dup(r3)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000180))
pipe(&(0x7f0000000400))

08:49:10 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[  871.207365] sg_write: data in/out 101187554/247 bytes for SCSI command 0x21-- guessing data in;
[  871.207365]    program syz-executor.5 not setting count and/or reply_len properly
[  871.215714] sg_write: data in/out 101187554/247 bytes for SCSI command 0x21-- guessing data in;
[  871.215714]    program syz-executor.5 not setting count and/or reply_len properly
08:49:10 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)

08:49:10 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500070008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:10 executing program 0:
kexec_load(0x3, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="015fe845075e38f5e960f3d9c55355467e4657405b68fe34413ac43841f1aaa7df145b70370bb4b1a869b7fb34e2c7c25e01533eff9fa37ef1612cbce2f3ceaea69b83ade22382920b34c57154736d5943057443e5c9a5c4f17fa630ac5dcb840b68ba5b391dacb5299894c2d42aca1d24d5c5b9b7709e034528abd5f28c464283d9a2dd6d221b4c2d1e9756879299a1241ef7854c3385d2023f920c04b91f3eadfe29e49f578619b8408914e9343fe9e5127a869c9808202aafc116a4f1893cd851bc4841f7a896b5b5300a", 0xcc, 0x2, 0x156}], 0x160000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

08:49:10 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  871.511730] sg_write: data in/out 101187555/247 bytes for SCSI command 0x21-- guessing data in;
[  871.511730]    program syz-executor.5 not setting count and/or reply_len properly
[  871.535694] sg_write: data in/out 101187555/247 bytes for SCSI command 0x21-- guessing data in;
[  871.535694]    program syz-executor.5 not setting count and/or reply_len properly
[  871.601495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
08:49:10 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 1)

08:49:10 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500480008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:10 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:49:10 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000010000001800000079987cc354ed60cdd7733ac67e383e13e8876d1eb6b3f0de8c9a30b5c21c9f4a1bea8135272c7088b44568d679eee2598bf88cf1f5025ce8d89b24c4af0e102a1285a6", @ANYRES32=r0, @ANYBLOB="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"])
perf_event_open(&(0x7f0000000280)={0x1, 0xfffffffffffffe11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x36)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000140)=0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000003c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
r5 = getuid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r5}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000180)=0xfffffffb)
sendfile(r2, r4, 0x0, 0xffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x3fc)
fsopen(&(0x7f0000000200)='devpts\x00', 0x0)

[  871.738968] FAULT_INJECTION: forcing a failure.
[  871.738968] name failslab, interval 1, probability 0, space 0, times 1
[  871.740525] CPU: 1 PID: 6478 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  871.741504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  871.742536] Call Trace:
[  871.742872]  <TASK>
[  871.743180]  dump_stack_lvl+0x8f/0xb7
[  871.743706]  should_fail_ex.cold+0x5/0xa
[  871.744257]  should_failslab+0x9/0x20
[  871.744768]  __kmem_cache_alloc_node+0x5b/0x400
[  871.745388]  ? do_shmat+0x560/0x10d0
[  871.745901]  kmalloc_trace+0x26/0x60
[  871.746406]  do_shmat+0x560/0x10d0
[  871.746895]  ? __pfx_do_shmat+0x10/0x10
[  871.747421]  ? perf_trace_preemptirq_template+0xa6/0x410
[  871.748143]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  871.748913]  __x64_sys_shmat+0xd0/0x170
[  871.749477]  ? __pfx___x64_sys_shmat+0x10/0x10
[  871.750074]  ? syscall_enter_from_user_mode+0x21/0x50
[  871.750764]  ? lockdep_hardirqs_on+0x7d/0x100
[  871.751365] sg_write: data in/out 101187620/247 bytes for SCSI command 0x21-- guessing data in;
[  871.751365]    program syz-executor.5 not setting count and/or reply_len properly
[  871.751375]  do_syscall_64+0x3f/0x90
[  871.751407]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  871.754485] RIP: 0033:0x7f269ad14b19
[  871.754978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  871.757268] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  871.758277] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  871.759190] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  871.760101] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  871.761021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  871.762056] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  871.763001]  </TASK>
[  871.769131] sg_write: data in/out 101187620/247 bytes for SCSI command 0x21-- guessing data in;
[  871.769131]    program syz-executor.5 not setting count and/or reply_len properly
08:49:10 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:49:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020005004c0008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:27 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:49:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r1, 0x0, 0x0)

08:49:27 executing program 4:
mkdir(&(0x7f00000003c0)='./file1\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000002c0), 0x24, 0x0)
symlinkat(&(0x7f00000000c0)='./file1/file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00')
rmdir(&(0x7f0000000000)='./file1\x00')

08:49:27 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 2)

08:49:27 executing program 0:
kexec_load(0x3, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="015fe845075e38f5e960f3d9c55355467e4657405b68fe34413ac43841f1aaa7df145b70370bb4b1a869b7fb34e2c7c25e01533eff9fa37ef1612cbce2f3ceaea69b83ade22382920b34c57154736d5943057443e5c9a5c4f17fa630ac5dcb840b68ba5b391dacb5299894c2d42aca1d24d5c5b9b7709e034528abd5f28c464283d9a2dd6d221b4c2d1e9756879299a1241ef7854c3385d2023f920c04b91f3eadfe29e49f578619b8408914e9343fe9e5127a869c9808202aafc116a4f1893cd851bc4841f7a896b5b5300a", 0xcc, 0x2, 0x156}], 0x160000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

08:49:27 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:49:27 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  888.595475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
08:49:27 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  888.637445] sg_write: data in/out 101187624/247 bytes for SCSI command 0x21-- guessing data in;
[  888.637445]    program syz-executor.5 not setting count and/or reply_len properly
[  888.646217] sg_write: data in/out 101187624/247 bytes for SCSI command 0x21-- guessing data in;
[  888.646217]    program syz-executor.5 not setting count and/or reply_len properly
08:49:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r1, 0x0, 0x0)

08:49:27 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 3)

08:49:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500680008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:27 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:49:27 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  888.789357] FAULT_INJECTION: forcing a failure.
[  888.789357] name failslab, interval 1, probability 0, space 0, times 0
[  888.790462] CPU: 1 PID: 6517 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  888.791002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  888.791552] Call Trace:
[  888.791740]  <TASK>
[  888.791910]  dump_stack_lvl+0x8f/0xb7
[  888.792205]  should_fail_ex.cold+0x5/0xa
[  888.792503]  ? __alloc_file+0x21/0x240
[  888.792787]  should_failslab+0x9/0x20
[  888.793073]  kmem_cache_alloc+0x5a/0x410
[  888.793373]  __alloc_file+0x21/0x240
[  888.793658]  alloc_empty_file+0x71/0x170
[  888.793955]  alloc_file+0x59/0x800
[  888.794222]  alloc_file_clone+0x26/0xc0
[  888.794512]  do_shmat+0x5db/0x10d0
[  888.794781]  ? __pfx_do_shmat+0x10/0x10
[  888.795069]  ? perf_trace_preemptirq_template+0xa6/0x410
[  888.795459]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  888.795871]  __x64_sys_shmat+0xd0/0x170
[  888.796164]  ? __pfx___x64_sys_shmat+0x10/0x10
[  888.796491]  ? syscall_enter_from_user_mode+0x21/0x50
[  888.796866]  ? lockdep_hardirqs_on+0x7d/0x100
[  888.797197]  do_syscall_64+0x3f/0x90
[  888.797471]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  888.797961] RIP: 0033:0x7f269ad14b19
[  888.798316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  888.799764] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  888.800452] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  888.800981] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  888.801497] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  888.802018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  888.802522] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  888.803060]  </TASK>
[  888.823600] sg_write: data in/out 101187652/247 bytes for SCSI command 0x21-- guessing data in;
[  888.823600]    program syz-executor.5 not setting count and/or reply_len properly
08:49:27 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[  888.836264] sg_write: data in/out 101187652/247 bytes for SCSI command 0x21-- guessing data in;
[  888.836264]    program syz-executor.5 not setting count and/or reply_len properly
08:49:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r1, 0x0, 0x0)

08:49:27 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:49:28 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:49:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020005006c0008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:28 executing program 0:
syz_emit_ethernet(0x32e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x2f8, 0x2c, 0x0, @private0, @rand_addr=' \x01\x00', {[@routing={0x11, 0x0, 0x0, 0x7}, @fragment={0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x66}, @hopopts={0x65, 0x33, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x7f, 0x7f, [0x1, 0x9, 0x7, 0x4, 0x2, 0x20]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x49, 0x8000, [0x2e61, 0xffff, 0xffffffffffffffc1, 0x3, 0x80, 0x8]}}, @pad1, @generic={0x1, 0x4e, "6461a40575904d52bc52134b8fb1791261428bac4c6737de9bc65e86cb396e0367b29bfcaf906acf6b238b669a19a25486c52601f9623943e3839acdf40b26496616dabbdb1b4414fc6472f89197"}, @generic={0x0, 0x98, "144171a2ecb1477a22930808d6de37865f50fdfb6293786c65e11a20783a947113a17cbbd323b2090317dba280587339b8c4a3b6bd06e4166caf7f1b2393aff6fc8291e4a2e14ddbc4ede8adaad00a3b4a7edc4d3e9e60f09510d32f5650b0e19da43c0a63671b603f532b4add5bb77a2c68d2c5589818efea267c5644d58f5061eed5f80bec5c604375292402ea04ff5e8f22c1a225cafd"}, @ra={0x5, 0x2, 0xfae}, @pad1, @enc_lim, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @dstopts={0x32, 0x10, '\x00', [@generic={0x6, 0x82, "145bd28d78a9cf37bad5bc328cb9bcb08bd92dd1e669181f0d35f2b9d6d36688b9166e461c4ec86000dbf4c95015bd5763ae7c4da171ad358eb24f44798859604bc342b610f144c0be6ab8da4b87ab847d3c3d30762d7e1b528d05c46c9bab0912c405e62f8852869ca886ca5f947cf83cb68e3be28c4f5d6e5d45601fe1a2629e23"}]}, @dstopts={0x2c, 0xf, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x10000}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x80, 0x81, "879a661161eae3892151aede51e0f3a94c929f67378ce837719e29ffa42c6fa614b2d612f108634455462f88f096bcd995109bd536ac216efe778b9fe1d6a6e3805af64d3f741f12db762f86240316e64d05535682f0ecf3fa432b1167c3b2b4a4b649870f6c0530b14d74ae341beb1192cd1ea20a10d93ef03540f9a7b58f5c6e"}, @hao={0xc9, 0x10, @empty}, @pad1, @jumbo]}]}}}}}, 0x0)
syz_emit_ethernet(0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08050004ffed2f0cff194e90398d3a31c0d6c32c3b2681a21d5150f961dde617ac4223a93eabac533ba28f3732f78989dfca98a38695843f41e6938c6c50aefe3b5301085263ee074a5d294f72b7257e12fcb48d303c93a10108ca56f5505774e50a30b1a147c45cd6406de5a691640402a9be628c02607e"], &(0x7f00000000c0)={0x0, 0x4, [0xb09, 0xce, 0xd72, 0xb53]})

08:49:28 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 4)

08:49:28 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:49:28 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:49:28 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

[  889.528430] sg_write: data in/out 101187656/247 bytes for SCSI command 0x21-- guessing data in;
[  889.528430]    program syz-executor.5 not setting count and/or reply_len properly
[  889.541458] sg_write: data in/out 101187656/247 bytes for SCSI command 0x21-- guessing data in;
[  889.541458]    program syz-executor.5 not setting count and/or reply_len properly
08:49:28 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:49:28 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 5)

08:49:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500740008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  889.634485] FAULT_INJECTION: forcing a failure.
[  889.634485] name failslab, interval 1, probability 0, space 0, times 0
[  889.635357] CPU: 1 PID: 6546 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  889.635890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  889.636427] Call Trace:
[  889.636613]  <TASK>
[  889.636781]  dump_stack_lvl+0x8f/0xb7
[  889.637071]  should_fail_ex.cold+0x5/0xa
[  889.637376]  ? security_file_alloc+0x38/0x170
[  889.637706]  should_failslab+0x9/0x20
[  889.637987]  kmem_cache_alloc+0x5a/0x410
[  889.638291]  security_file_alloc+0x38/0x170
[  889.638603]  __alloc_file+0xb6/0x240
[  889.638880]  alloc_empty_file+0x71/0x170
[  889.639174]  alloc_file+0x59/0x800
[  889.639443]  alloc_file_clone+0x26/0xc0
[  889.639734]  do_shmat+0x5db/0x10d0
[  889.640013]  ? __pfx_do_shmat+0x10/0x10
[  889.640296]  ? perf_trace_preemptirq_template+0xa6/0x410
[  889.640690]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  889.641114]  __x64_sys_shmat+0xd0/0x170
[  889.641403]  ? __pfx___x64_sys_shmat+0x10/0x10
[  889.641736]  ? syscall_enter_from_user_mode+0x21/0x50
[  889.642107]  ? lockdep_hardirqs_on+0x7d/0x100
[  889.642433]  do_syscall_64+0x3f/0x90
[  889.642700]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  889.643074] RIP: 0033:0x7f269ad14b19
[  889.643339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  889.644563] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  889.645102] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  889.645609] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  889.646124] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  889.646645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  889.647165] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  889.647691]  </TASK>
08:49:28 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  889.719581] sg_write: data in/out 101187664/247 bytes for SCSI command 0x21-- guessing data in;
[  889.719581]    program syz-executor.5 not setting count and/or reply_len properly
[  889.728193] sg_write: data in/out 101187664/247 bytes for SCSI command 0x21-- guessing data in;
[  889.728193]    program syz-executor.5 not setting count and/or reply_len properly
08:49:43 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 6)

08:49:43 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:49:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480)}, 0x1313, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xff, 0x0, 0x25, 0xf6, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp, 0x14, 0xd7, 0x5, 0xb, 0x6, 0x10000, 0x5, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xd, r1, 0x7)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)

08:49:43 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:49:43 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:49:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020005007a0008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:43 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[  904.754322] sg_write: data in/out 101187670/247 bytes for SCSI command 0x21-- guessing data in;
[  904.754322]    program syz-executor.5 not setting count and/or reply_len properly
[  904.758645] sg_write: data in/out 101187670/247 bytes for SCSI command 0x21-- guessing data in;
[  904.758645]    program syz-executor.5 not setting count and/or reply_len properly
08:49:43 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = getuid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r3 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
statx(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r3, r4, r5)
getgroups(0x4, &(0x7f0000000800)=[0x0, <r6=>0xffffffffffffffff, 0x0, 0xffffffffffffffff])
recvmmsg$unix(r0, &(0x7f0000002600)=[{{&(0x7f0000000880)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000900)=""/74, 0x4a}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/16, 0x10}], 0x3, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001b00)=""/142, 0x8e}, {&(0x7f0000001bc0)=""/44, 0x2c}, {&(0x7f0000001c00)=""/6, 0x6}], 0x3, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001d40)=""/142, 0x8e}, {&(0x7f0000001e00)=""/176, 0xb0}, {&(0x7f0000001ec0)=""/225, 0xe1}], 0x3, &(0x7f0000002000)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002080)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002100)=""/217, 0xd9}, {&(0x7f0000002200)=""/132, 0x84}, {&(0x7f00000022c0)=""/44, 0x2c}, {&(0x7f0000002300)=""/78, 0x4e}, {&(0x7f0000002380)=""/63, 0x3f}, {&(0x7f00000023c0)=""/225, 0xe1}], 0x6, &(0x7f0000002540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r7=>0x0}}}], 0x90}}], 0x4, 0x2123, &(0x7f0000002700)={0x77359400})
recvmmsg$unix(r0, &(0x7f0000004200)=[{{&(0x7f0000002740)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000027c0)=""/83, 0x53}, {&(0x7f0000002840)=""/202, 0xca}, {&(0x7f0000002940)=""/57, 0x39}, {&(0x7f0000002980)=""/178, 0xb2}, {&(0x7f0000002a40)=""/67, 0x43}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/136, 0x88}], 0x1, &(0x7f0000002d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000003240)=[{&(0x7f0000002e40)=""/179, 0xb3}, {&(0x7f0000002f00)=""/166, 0xa6}, {&(0x7f0000002fc0)=""/230, 0xe6}, {&(0x7f00000030c0)=""/138, 0x8a}, {&(0x7f0000003180)=""/17, 0x11}, {&(0x7f00000031c0)=""/38, 0x26}, {&(0x7f0000003200)=""/62, 0x3e}], 0x7}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000032c0)=""/57, 0x39}], 0x1, &(0x7f0000003340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r8=>0x0}}}], 0x90}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003480)=""/176, 0xb0}], 0x1, &(0x7f0000003580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000036c0)=""/34, 0x22}], 0x1}}, {{&(0x7f0000003740), 0x6e, &(0x7f0000003bc0)=[{&(0x7f00000037c0)=""/221, 0xdd}, {&(0x7f00000038c0)=""/38, 0x26}, {&(0x7f0000003900)=""/26, 0x1a}, {&(0x7f0000003940)=""/138, 0x8a}, {&(0x7f0000003a00)=""/240, 0xf0}, {&(0x7f0000003b00)=""/161, 0xa1}], 0x6, &(0x7f0000003c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003d40), 0x6e, &(0x7f0000004040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/41, 0x29}, {&(0x7f0000003ec0)=""/108, 0x6c}, {&(0x7f0000003f40)=""/233, 0xe9}], 0x4, &(0x7f0000004080)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}], 0x8, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000004840)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRESHEX=r9, @ANYBLOB="02000300", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="020004002fd818ab8702e102c8439bbed8599fd9ba312982217b5bec4ed6db73db6d2974d9e0c5132c2de2ea9935093f342d27973621420f16fc01427373b2dd54d78799d7f730ba799b168490f769cd09c9cdc86fe9a1768632cfc1030d217246b4c8d179e6c2f0e5ae509bd6e44b0e0ebdbde10b843587cfcdf18bf152b06e64a0691c8cd5b578b09c3716785b", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="040006000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="10000100000000002000040000000000"], 0xb4, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r10, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

08:49:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000504830008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  904.861110] sg_write: data in/out 101187679/247 bytes for SCSI command 0x21-- guessing data in;
[  904.861110]    program syz-executor.5 not setting count and/or reply_len properly
[  904.864974] sg_write: data in/out 101187679/247 bytes for SCSI command 0x21-- guessing data in;
[  904.864974]    program syz-executor.5 not setting count and/or reply_len properly
08:49:59 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 7)

08:49:59 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:49:59 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:49:59 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480)}, 0x1313, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xff, 0x0, 0x25, 0xf6, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp, 0x14, 0xd7, 0x5, 0xb, 0x6, 0x10000, 0x5, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xd, r1, 0x7)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)

08:49:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000009065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:49:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_setup(0x7814, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf028}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:49:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:49:59 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:49:59 executing program 4:
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x5)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x810, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xcfeb, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r0, 0x1000b58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x101000, 0x2)
pwritev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7fffffe, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5f1)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)=0x2, 0x4)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0, 0x6})

[  920.126616] FAULT_INJECTION: forcing a failure.
[  920.126616] name failslab, interval 1, probability 0, space 0, times 0
[  920.128657] CPU: 0 PID: 6596 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  920.129668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  920.130735] Call Trace:
[  920.131090]  <TASK>
[  920.131412]  dump_stack_lvl+0x8f/0xb7
[  920.131969]  should_fail_ex.cold+0x5/0xa
[  920.132550]  ? mas_alloc_nodes+0x420/0x800
[  920.133122]  should_failslab+0x9/0x20
[  920.133661]  kmem_cache_alloc+0x5a/0x410
[  920.134242]  mas_alloc_nodes+0x420/0x800
[  920.134817]  mas_preallocate+0x1bf/0x370
[  920.135388]  do_mas_align_munmap.constprop.0+0x111/0x1000
[  920.136165]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[  920.136972]  ? mas_walk+0x4b7/0x6b0
[  920.137494]  ? mas_find+0x20d/0xdf0
[  920.138021]  ? __pfx___lock_acquire+0x10/0x10
[  920.138649]  do_mas_munmap+0x1ec/0x2c0
[  920.139187]  mmap_region+0x21f/0x1c20
[  920.139728]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  920.140389]  ? __pfx_mmap_region+0x10/0x10
[  920.140979]  ? security_mmap_addr+0x7d/0xa0
[  920.141568]  ? get_unmapped_area+0x1e9/0x3e0
[  920.142195]  do_mmap+0x82c/0xf50
[  920.142688]  do_shmat+0xe3b/0x10d0
[  920.143339]  ? __pfx_do_shmat+0x10/0x10
[  920.143881]  ? perf_trace_preemptirq_template+0xa6/0x410
[  920.144612]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  920.145428]  __x64_sys_shmat+0xd0/0x170
[  920.146008]  ? __pfx___x64_sys_shmat+0x10/0x10
[  920.146651]  ? syscall_enter_from_user_mode+0x21/0x50
[  920.147374]  ? lockdep_hardirqs_on+0x7d/0x100
[  920.148022]  do_syscall_64+0x3f/0x90
[  920.148550]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  920.149280] RIP: 0033:0x7f269ad14b19
[  920.149792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  920.152106] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  920.153107] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  920.154069] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  920.155044] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  920.156012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  920.156984] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  920.158006]  </TASK>
[  920.174548] sg_write: data in/out 101253084/247 bytes for SCSI command 0x21-- guessing data in;
[  920.174548]    program syz-executor.5 not setting count and/or reply_len properly
[  920.194656] sg_write: data in/out 101253084/247 bytes for SCSI command 0x21-- guessing data in;
[  920.194656]    program syz-executor.5 not setting count and/or reply_len properly
[  934.635126] Bluetooth: hci5: unexpected event 0x31 length: 7 > 6
[  934.635451] sg_write: data in/out 101711836/247 bytes for SCSI command 0x21-- guessing data in;
[  934.635451]    program syz-executor.5 not setting count and/or reply_len properly
08:50:13 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

08:50:13 executing program 0:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x1000, @remote, 0x759}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8)
close(r2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

08:50:13 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:50:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000010065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:50:13 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:50:13 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100fc00"/20, @ANYRES32])
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000))
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000140)=0x6f4)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0431"], 0xa)
eventfd2(0xae, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40091)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

08:50:13 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 8)

08:50:13 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

[  934.640917] sg_write: data in/out 101711836/247 bytes for SCSI command 0x21-- guessing data in;
[  934.640917]    program syz-executor.5 not setting count and/or reply_len properly
08:50:13 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 9)

08:50:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000018065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:50:13 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:50:13 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3)

[  934.800921] Bluetooth: hci5: unexpected event 0x31 length: 7 > 6
[  934.806147] FAULT_INJECTION: forcing a failure.
[  934.806147] name failslab, interval 1, probability 0, space 0, times 0
[  934.807681] sg_write: data in/out 102236124/247 bytes for SCSI command 0x21-- guessing data in;
[  934.807681]    program syz-executor.5 not setting count and/or reply_len properly
[  934.808367] CPU: 0 PID: 6627 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  934.810331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  934.811360] Call Trace:
[  934.811696]  <TASK>
[  934.812000]  dump_stack_lvl+0x8f/0xb7
[  934.812523]  should_fail_ex.cold+0x5/0xa
[  934.813070]  should_failslab+0x9/0x20
[  934.813581]  kmem_cache_alloc_bulk+0x6a/0x780
[  934.814294]  ? kmem_cache_alloc+0x237/0x410
[  934.814863]  mas_alloc_nodes+0x2ff/0x800
[  934.815418]  mas_preallocate+0x1bf/0x370
[  934.815985]  do_mas_align_munmap.constprop.0+0x111/0x1000
[  934.816739]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[  934.817521]  ? mas_walk+0x4b7/0x6b0
[  934.818029]  ? mas_find+0x20d/0xdf0
[  934.818564]  ? __pfx___lock_acquire+0x10/0x10
[  934.819178]  do_mas_munmap+0x1ec/0x2c0
[  934.819712]  mmap_region+0x21f/0x1c20
[  934.820238]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  934.820893]  ? __pfx_mmap_region+0x10/0x10
[  934.821467]  ? security_mmap_addr+0x7d/0xa0
[  934.822052]  ? get_unmapped_area+0x1e9/0x3e0
[  934.822655]  do_mmap+0x82c/0xf50
[  934.823138]  do_shmat+0xe3b/0x10d0
[  934.823656]  ? __pfx_do_shmat+0x10/0x10
[  934.824182]  ? perf_trace_preemptirq_template+0xa6/0x410
[  934.824910]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  934.825729]  __x64_sys_shmat+0xd0/0x170
[  934.826292]  ? __pfx___x64_sys_shmat+0x10/0x10
[  934.826918]  ? syscall_enter_from_user_mode+0x21/0x50
[  934.827617]  ? lockdep_hardirqs_on+0x7d/0x100
[  934.828239]  do_syscall_64+0x3f/0x90
[  934.828750]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  934.829449] RIP: 0033:0x7f269ad14b19
[  934.829952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  934.832272] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  934.833257] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  934.834192] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  934.835110] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  934.836033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  934.836953] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  934.837905]  </TASK>
[  934.851374] sg_write: data in/out 102236124/247 bytes for SCSI command 0x21-- guessing data in;
[  934.851374]    program syz-executor.5 not setting count and/or reply_len properly
08:50:13 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:50:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200050000002f065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:50:14 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x3)

[  934.969055] sg_write: data in/out 103743452/247 bytes for SCSI command 0x21-- guessing data in;
[  934.969055]    program syz-executor.5 not setting count and/or reply_len properly
08:50:14 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 10)

[  934.988073] sg_write: data in/out 103743452/247 bytes for SCSI command 0x21-- guessing data in;
[  934.988073]    program syz-executor.5 not setting count and/or reply_len properly
08:50:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:50:29 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb", 0x63}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:50:29 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:29 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:50:29 executing program 0:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x1000, @remote, 0x759}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8)
close(r2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

08:50:29 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 11)

08:50:29 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:50:29 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = getuid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="e1fff61ad6d11dad3b2a4b00", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xbc, 0x20, 0x6, 0x7f, 0x0, 0x6b63, 0x168, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x100000000}, 0x812, 0x3, 0x4, 0x2, 0x2, 0x6, 0x6, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r1, 0xb)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
openat(r0, &(0x7f0000000200)='./file0\x00', 0x311000, 0xde)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000204"], 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r3, {0x800}}, './file1\x00'})
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c)
setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000100)={0x1}, 0x4)
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240))
sendmmsg$inet6(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x28}}], 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000340)={0x2f, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x400}, @ra={0x5, 0x2, 0x8000}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x20)

08:50:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200057fffffff065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:50:29 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 12)

[  950.144849] sg_write: data in/out 117440475/247 bytes for SCSI command 0x21-- guessing data in;
[  950.144849]    program syz-executor.5 not setting count and/or reply_len properly
08:50:29 executing program 4:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001280))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x1000, @remote, 0x759}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8)
close(r2)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  950.175535] sg_write: data in/out 117440475/247 bytes for SCSI command 0x21-- guessing data in;
[  950.175535]    program syz-executor.5 not setting count and/or reply_len properly
08:50:29 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500240000005a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:50:29 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:50:29 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 13)

08:50:29 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:50:45 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 14)

08:50:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:50:45 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1)

08:50:45 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500020008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:50:45 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:50:45 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x10000, @local, 0x5}, 0x1c)
r1 = dup(r0)
connect$bt_l2cap(r1, &(0x7f0000000040), 0xe)
r2 = accept$inet(r1, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xae, 0x5, 0x7, 0xf7, 0x0, 0xfffffffffffffff7, 0x96513, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x7f, 0x5}, 0x4, 0x3, 0x961, 0x1, 0x80000001, 0x1000, 0xfffd, 0x0, 0xa8, 0x0, 0xe49}, 0x0, 0xe, r1, 0x10)
sendmmsg$inet(r2, &(0x7f0000000080), 0x0, 0x1)

08:50:45 executing program 4:
r0 = syz_io_uring_setup(0x3b2, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008ae000/0x1000)=nil, &(0x7f0000000480), &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)=""/102400, 0x19000}, {&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000100)=""/186, 0xba}], 0x6)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0xea, 0x0, 0x5, 0x10, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x7}, 0x8058, 0x4, 0x0, 0x0, 0x8001, 0x614f85dc, 0xda2, 0x0, 0x1ff}, 0x0, 0x0, r1, 0xe)

08:50:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:50:45 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[  966.017622] sg_write: data in/out 101187550/247 bytes for SCSI command 0x21-- guessing data in;
[  966.017622]    program syz-executor.5 not setting count and/or reply_len properly
08:50:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = getuid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
sendmsg$netlink(r1, &(0x7f00000013c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x124c, 0x31, 0x200, 0x70bd27, 0x25dfdbfd, "", [@generic="1fbc664bf9eb1539be1d8eb0c9ed092f30e1bc76bceccd8054add5da1355b7b1ae3ec1e3d0ad4b09301f4480519e7ce0d937d826f93353834dcd9b55c63e995b3993466d3118e07efac5405dc7e81bf8ce73e3e23291970c9c286a551e70747fabd10bbd180515a4c097429079d0e78f2bc926754919d5f453a1915dff", @typed={0x8, 0x83, 0x0, 0x0, @pid}, @generic="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", @typed={0xc, 0x4e, 0x0, 0x0, @u64=0x7fffffff}, @generic="a2a12b835dac840da38db00979b0f830469b1d388b6488184494dc81ea06a58492996c4fbe5fbb5fc27ee09c340f11c30f5e4ad3d26dbe6e5d57fdabfefaf9cd002ee9f287b4a9f2073ff4a5ee022295285751424ba870c31eb9c20172fc9dbf853f37e789ea89cf496f700beeed054b1a472882e3d8b71bfede711870335501115b5ad373dbbcf898078e42ab5d1aae12b65a906d66f5dee59bd81359a7291f71a06322516bc472ce023cd98be12587", @typed={0xed, 0x8e, 0x0, 0x0, @binary="83fddbd4d533b03dc80fab9f97f0ee91491b09fd4a62f2c54d537d4266da21ae3b8bf55e00ae142ef6a669baa00b38006c5d36fa47ebcc27f2671b6bdeadf12623b8135bbc84e6149dd95a8389b1b76cf8d8d42dec23976126c809f084520f60d5740eba41a910ea3d70e3a1476eae4a74be2b2054dcfb94e20aaac1e1caca538eddb0831c38df98f7ed093cf5c4294084af919ff6a8feafe9a59e9d5a3afe393cc3677d1e2dae3aba17ba052266e5c055385a6bd0f07f56a19c522f3f07b9732bbd65a6bce02f00521e0611ac8050a483ddb81a20904ffcdabee120085e14aa4d872d2b2159761eee"}, @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@loopback}]}, 0x124c}], 0x1, 0x0, 0x0, 0x8004}, 0x4048800)

[  966.029333] sg_write: data in/out 101187550/247 bytes for SCSI command 0x21-- guessing data in;
[  966.029333]    program syz-executor.5 not setting count and/or reply_len properly
08:50:45 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:45 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 15)

08:50:45 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500030008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:50:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[  966.142042] IPv6: Can't replace route, no match found
08:50:45 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:50:45 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 16)

[  966.221594] FAULT_INJECTION: forcing a failure.
[  966.221594] name failslab, interval 1, probability 0, space 0, times 0
[  966.222456] CPU: 1 PID: 6723 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  966.223115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  966.223708] Call Trace:
[  966.223939]  <TASK>
[  966.224107]  dump_stack_lvl+0x8f/0xb7
[  966.224401]  should_fail_ex.cold+0x5/0xa
[  966.224775]  ? vm_area_dup+0x83/0x230
[  966.225085]  should_failslab+0x9/0x20
[  966.225443]  kmem_cache_alloc+0x5a/0x410
[  966.225809]  ? perf_trace_lock+0xf0/0x560
[  966.226121]  vm_area_dup+0x83/0x230
[  966.226392]  ? __pfx_perf_trace_lock+0x10/0x10
[  966.226736]  ? lock_acquire.part.0+0x12e/0x340
[  966.227094]  ? lock_is_held_type+0xdb/0x130
[  966.227414]  ? find_held_lock+0x2c/0x110
[  966.227711]  ? lock_release+0x3b6/0x750
[  966.228001]  ? kmem_cache_alloc_bulk+0x41a/0x780
[  966.228350]  ? mark_held_locks+0x9e/0xe0
[  966.228652]  ? _raw_spin_unlock_irqrestore+0x2c/0x60
[  966.229018]  ? __pfx_vm_area_dup+0x10/0x10
[  966.229341]  ? kmem_cache_alloc_bulk+0x43b/0x780
[  966.229697]  ? mas_alloc_nodes+0x484/0x800
[  966.230016]  __split_vma+0xa6/0x5d0
[  966.230287]  ? mas_preallocate+0x163/0x370
[  966.230618]  do_mas_align_munmap.constprop.0+0x273/0x1000
[  966.231022]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[  966.231452]  ? mas_walk+0x4b7/0x6b0
[  966.231729]  ? mas_find+0x20d/0xdf0
[  966.232009]  ? __pfx___lock_acquire+0x10/0x10
[  966.232345]  do_mas_munmap+0x1ec/0x2c0
[  966.232640]  mmap_region+0x21f/0x1c20
[  966.232927]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  966.233284]  ? __pfx_mmap_region+0x10/0x10
[  966.233598]  ? security_mmap_addr+0x7d/0xa0
[  966.233930]  ? get_unmapped_area+0x1e9/0x3e0
[  966.234253]  do_mmap+0x82c/0xf50
[  966.234583]  do_shmat+0xe3b/0x10d0
[  966.234915]  ? __pfx_do_shmat+0x10/0x10
[  966.235209]  ? perf_trace_preemptirq_template+0xa6/0x410
[  966.235621]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  966.236050]  __x64_sys_shmat+0xd0/0x170
[  966.236352]  ? __pfx___x64_sys_shmat+0x10/0x10
[  966.236688]  ? syscall_enter_from_user_mode+0x21/0x50
[  966.237082]  ? lockdep_hardirqs_on+0x7d/0x100
[  966.237413]  do_syscall_64+0x3f/0x90
[  966.237694]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  966.238068] RIP: 0033:0x7f269ad14b19
[  966.238351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  966.239592] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  966.240145] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  966.240654] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  966.241173] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  966.241688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  966.242207] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  966.242857]  </TASK>
08:50:45 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[  966.258205] sg_write: data in/out 101187551/247 bytes for SCSI command 0x21-- guessing data in;
[  966.258205]    program syz-executor.5 not setting count and/or reply_len properly
[  966.264757] sg_write: data in/out 101187551/247 bytes for SCSI command 0x21-- guessing data in;
[  966.264757]    program syz-executor.5 not setting count and/or reply_len properly
08:50:45 executing program 4:
r0 = syz_io_uring_setup(0x3b2, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00008ae000/0x1000)=nil, &(0x7f0000000480), &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)=""/102400, 0x19000}, {&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000100)=""/186, 0xba}], 0x6)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0xea, 0x0, 0x5, 0x10, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x7}, 0x8058, 0x4, 0x0, 0x0, 0x8001, 0x614f85dc, 0xda2, 0x0, 0x1ff}, 0x0, 0x0, r1, 0xe)

08:51:02 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:51:02 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7ff}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x40000, 0x8, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2})
close(0xffffffffffffffff)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)

08:51:02 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
dup2(r0, r1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @private1, 0x3ff}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x100000001, 0x4, &(0x7f0000000580)=[{&(0x7f0000000300)="c7835a9d8b537cd9c95ebb5cddebcb211d14c871328e13b817fd968d84549d5265c6b4154b89d2b7f876eb48b96ad85c81ff12cb9500cabfb9c46c340bc93dcddeec11f62057397b126c1da6dd9358d53ed826661b6af390716bef56fffda4c6968233393b60e9561bcb3acd9f3e3faa4f2b0c3d598a66624ee194586b9ba3d350b0b12735bb65ea44400905e7968afc5b053a0cf84b49f54a189dfeab517eb35bba471bd651c50b6afc559f00ac75e514cbe4d65b4ba101bb12a434cf15f444365d598bf936e2f906d5d6e0139eab25e9b42a9ab39c8dbd969491ca899f5681410db5c8f969", 0xe6, 0x635e}, {&(0x7f0000000200)="86d35b0cec351a23cb117260a502cd6080c8eaccb8034a5cb61f890daa71bf81350b905f59e23e031158639f5c05819c0d491c3416654ff94278e9f8227a21570d02c66bd73fe56f704f8a4ebf0988f9667b06fa147ab28b337bc7de106f0d7c415412f6bc55897e5fc2ade60e6cb356c517b3cca53e23fa2ea2c02dc1fd", 0x7e}, {&(0x7f0000000400)="815996ab403a5da4ec41eadbdecac32927bcff8f713bb9f2347e2ff6e9e52fe416e73cf1318b98ba026d1907949a1754a0c32d22e87cb31ae1f6de7a7a768e14a22bb84b6e4bb0cd1c15cc9190a1872703372f5b3d3381239775f4d683b2a794c98010ba57b1126955079fdd3604d9391ac377e0a055245f7d0cf5836cfb727f7eb30b61f5351501537b842d888ea31a3f65ea57ef3864e872fab354059a6160d7a8e253c794227edcf203fc9ebe5fddf150192af96d073e7cd7377b5c2ec54286964fb221f0e35fafda788eec0e1a7ae6e2ca93d55f96c8f3fedcfacb1120628a421ec03b2af73691d6dedf6572961fe739bba099b1", 0xf6, 0x10001}, {&(0x7f0000000500)="552091bc2614cb13632c6425880661f36f6c6ca24f161996dfa4fe0c80dba9897cee94f10b58af0998de45754f4d22604250348e19848a61d79229d33471882b88bf8f192d1f8c42499c143019db63cda9dfddf85889adf500f82952261c", 0x5e, 0xba8d}], 0x0, &(0x7f0000000600)={[{@jqfmt_vfsold}, {@noblock_validity}]})
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100))

08:51:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500040008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:02 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 17)

08:51:02 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:51:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[  983.527971] sg_write: data in/out 101187552/247 bytes for SCSI command 0x21-- guessing data in;
[  983.527971]    program syz-executor.5 not setting count and/or reply_len properly
[  983.539468] sg_write: data in/out 101187552/247 bytes for SCSI command 0x21-- guessing data in;
[  983.539468]    program syz-executor.5 not setting count and/or reply_len properly
08:51:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500050008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  983.626179] sg_write: data in/out 101187553/247 bytes for SCSI command 0x21-- guessing data in;
[  983.626179]    program syz-executor.5 not setting count and/or reply_len properly
[  983.632173] sg_write: data in/out 101187553/247 bytes for SCSI command 0x21-- guessing data in;
[  983.632173]    program syz-executor.5 not setting count and/or reply_len properly
08:51:02 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:02 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:51:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500060008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:02 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 18)

[  983.755144] sg_write: data in/out 101187554/247 bytes for SCSI command 0x21-- guessing data in;
[  983.755144]    program syz-executor.5 not setting count and/or reply_len properly
08:51:02 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={&(0x7f0000000480), 0x1}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', <r4=>0x0})
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0)
fcntl$dupfd(r1, 0x0, r2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r5, 0x6, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], 0x4)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000280)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x7ffc}, {0x104}, {0x7}, {0xc, 0x1}, {0x3, 0xa00}, {0xb42e, 0x193c}]})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000180))
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

[  983.771328] sg_write: data in/out 101187554/247 bytes for SCSI command 0x21-- guessing data in;
[  983.771328]    program syz-executor.5 not setting count and/or reply_len properly
08:51:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500070008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  983.830223] FAULT_INJECTION: forcing a failure.
[  983.830223] name failslab, interval 1, probability 0, space 0, times 0
[  983.832295] CPU: 1 PID: 6767 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  983.833553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  983.835052] Call Trace:
[  983.835484]  <TASK>
[  983.835876]  dump_stack_lvl+0x8f/0xb7
[  983.836642]  should_fail_ex.cold+0x5/0xa
[  983.837346]  ? mas_alloc_nodes+0x420/0x800
[  983.838055]  should_failslab+0x9/0x20
[  983.838816]  kmem_cache_alloc+0x5a/0x410
[  983.839533]  mas_alloc_nodes+0x420/0x800
[  983.840178]  ? find_vma+0x110/0x1b0
[  983.840718]  mas_preallocate+0x1bf/0x370
[  983.841283]  __vma_adjust+0x19c/0x1cb0
[  983.841815]  ? __pfx_vm_area_dup+0x10/0x10
[  983.842402]  ? __pfx___vma_adjust+0x10/0x10
[  983.843041]  ? anon_vma_clone+0x3bc/0x570
[  983.843632]  ? mas_alloc_nodes+0x484/0x800
[  983.844215]  __split_vma+0x2a5/0x5d0
[  983.844720]  ? mas_preallocate+0x163/0x370
[  983.845311]  do_mas_align_munmap.constprop.0+0x273/0x1000
[  983.846145]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[  983.847005]  ? mas_walk+0x4b7/0x6b0
[  983.847512]  ? mas_find+0x20d/0xdf0
[  983.848023]  ? __pfx___lock_acquire+0x10/0x10
[  983.848642]  do_mas_munmap+0x1ec/0x2c0
[  983.849174]  mmap_region+0x21f/0x1c20
[  983.849709]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  983.850391]  ? __pfx_mmap_region+0x10/0x10
[  983.851127]  ? security_mmap_addr+0x7d/0xa0
[  983.851714]  ? get_unmapped_area+0x1e9/0x3e0
[  983.852402]  do_mmap+0x82c/0xf50
[  983.852883]  do_shmat+0xe3b/0x10d0
[  983.853392]  ? __pfx_do_shmat+0x10/0x10
[  983.853930]  ? perf_trace_preemptirq_template+0xa6/0x410
[  983.854786]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  983.855575]  __x64_sys_shmat+0xd0/0x170
[  983.856121]  ? __pfx___x64_sys_shmat+0x10/0x10
[  983.856741]  ? syscall_enter_from_user_mode+0x21/0x50
[  983.857406]  ? lockdep_hardirqs_on+0x7d/0x100
[  983.858099]  do_syscall_64+0x3f/0x90
[  983.858686]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  983.859367] RIP: 0033:0x7f269ad14b19
[  983.859874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  983.862251] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  983.863300] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  983.864216] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  983.865132] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  983.866049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  983.866982] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  983.867930]  </TASK>
[  983.914287] sg_write: data in/out 101187555/247 bytes for SCSI command 0x21-- guessing data in;
[  983.914287]    program syz-executor.5 not setting count and/or reply_len properly
08:51:03 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:03 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[  983.939181] sg_write: data in/out 101187555/247 bytes for SCSI command 0x21-- guessing data in;
[  983.939181]    program syz-executor.5 not setting count and/or reply_len properly
08:51:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500480008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:03 executing program 0:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc)
bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x4cdd, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
syz_io_uring_setup(0x5ca5, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f0000000800))
getpid()
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x20}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r1, 0x0)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ftruncate(r2, 0xfffffffffffffff7)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0)
close(r1)
syz_io_uring_setup(0xaaf, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ftruncate(r3, 0x7b5)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x9, 0xe1, 0x6, 0x0, 0x10000, 0x1000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8b, 0x2, @perf_config_ext={0x6, 0x7f}, 0x12100, 0x6, 0x5, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0)

[  984.208453] sg_write: data in/out 101187620/247 bytes for SCSI command 0x21-- guessing data in;
[  984.208453]    program syz-executor.5 not setting count and/or reply_len properly
[  984.229647] sg_write: data in/out 101187620/247 bytes for SCSI command 0x21-- guessing data in;
[  984.229647]    program syz-executor.5 not setting count and/or reply_len properly
08:51:17 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 19)

08:51:17 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:17 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:51:17 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
close(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="19fc5b20feafba6800302571d07a0e5040187bb138c9ea4ddd89b04935d3f19468bb8b361ffc7dc7e3fb41f7a3a5366c3022d4dd14cdc658ebafbf1f77100e56ef54516ce6d5f6e3a0d6b86c56fb34c243ff90bf6b2339059ed7e6bb453c7a930ac423338045acaec920351285205312e8d655"], 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x10000, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x1, 0xe, 0x6, 0x0, 0x200, 0x2010, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x8000000006, 0x3}, 0xc, 0x9, 0x5, 0x2, 0x0, 0xbcd, 0xb7, 0x0, 0x40, 0x0, 0x3ff}, r3, 0xc, 0xffffffffffffffff, 0xa)
io_setup(0x40, &(0x7f0000000240))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2})
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r4 = eventfd2(0x8001, 0x0)
io_setup(0x7, &(0x7f00000001c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0xffff, r4, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, r4}])
fallocate(r4, 0x23, 0x200, 0x6)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x8000000)
fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff)

08:51:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020005004c0008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  998.880002] sg_write: data in/out 101187624/247 bytes for SCSI command 0x21-- guessing data in;
[  998.880002]    program syz-executor.5 not setting count and/or reply_len properly
[  998.882727] sg_write: data in/out 101187624/247 bytes for SCSI command 0x21-- guessing data in;
[  998.882727]    program syz-executor.5 not setting count and/or reply_len properly
08:51:17 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:51:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:51:17 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = getuid()
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="f000000a", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r6 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
statx(r5, &(0x7f0000000000)='./file0\x00', 0x400, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
statx(r5, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
keyctl$chown(0x4, r6, r7, r8)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [{0x2, 0x0, 0xee01}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x7, r4}], {0x4, 0x2}, [{0x8, 0x2, 0xee00}, {0x8, 0x4}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r8}, {0x8, 0x3, 0xee01}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x1, 0xee01}, {0x8, 0x3, 0xee00}]}, 0x8c, 0x3)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')

08:51:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500680008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:18 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 20)

[  998.976965] sg_write: data in/out 101187652/247 bytes for SCSI command 0x21-- guessing data in;
[  998.976965]    program syz-executor.5 not setting count and/or reply_len properly
[  998.985172] sg_write: data in/out 101187652/247 bytes for SCSI command 0x21-- guessing data in;
[  998.985172]    program syz-executor.5 not setting count and/or reply_len properly
[  999.050150] FAULT_INJECTION: forcing a failure.
[  999.050150] name failslab, interval 1, probability 0, space 0, times 0
[  999.051138] CPU: 0 PID: 6814 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[  999.051691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  999.052281] Call Trace:
[  999.052478]  <TASK>
[  999.052651]  dump_stack_lvl+0x8f/0xb7
[  999.052957]  should_fail_ex.cold+0x5/0xa
[  999.053270]  should_failslab+0x9/0x20
[  999.053565]  kmem_cache_alloc_bulk+0x6a/0x780
[  999.053906]  ? kmem_cache_alloc+0x237/0x410
[  999.054236]  mas_alloc_nodes+0x2ff/0x800
[  999.054547]  ? find_vma+0x110/0x1b0
[  999.054828]  mas_preallocate+0x1bf/0x370
[  999.055166]  __vma_adjust+0x19c/0x1cb0
[  999.055462]  ? __pfx_vm_area_dup+0x10/0x10
[  999.055790]  ? __pfx___vma_adjust+0x10/0x10
[  999.056113]  ? anon_vma_clone+0x3bc/0x570
[  999.056426]  ? mas_alloc_nodes+0x484/0x800
[  999.056747]  __split_vma+0x2a5/0x5d0
[  999.057028]  ? mas_preallocate+0x163/0x370
[  999.057352]  do_mas_align_munmap.constprop.0+0x273/0x1000
[  999.057767]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[  999.058207]  ? mas_walk+0x4b7/0x6b0
[  999.058493]  ? mas_find+0x20d/0xdf0
[  999.058779]  ? __pfx___lock_acquire+0x10/0x10
[  999.059118]  do_mas_munmap+0x1ec/0x2c0
[  999.059390]  mmap_region+0x21f/0x1c20
[  999.059655]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  999.059983]  ? __pfx_mmap_region+0x10/0x10
[  999.060270]  ? security_mmap_addr+0x7d/0xa0
[  999.060564]  ? get_unmapped_area+0x1e9/0x3e0
[  999.060860]  do_mmap+0x82c/0xf50
[  999.061102]  do_shmat+0xe3b/0x10d0
[  999.061357]  ? __pfx_do_shmat+0x10/0x10
[  999.061648]  ? perf_trace_preemptirq_template+0xa6/0x410
[  999.062014]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  999.062403]  __x64_sys_shmat+0xd0/0x170
[  999.062672]  ? __pfx___x64_sys_shmat+0x10/0x10
[  999.062989]  ? syscall_enter_from_user_mode+0x21/0x50
[  999.063336]  ? lockdep_hardirqs_on+0x7d/0x100
[  999.063640]  do_syscall_64+0x3f/0x90
[  999.063888]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  999.064235] RIP: 0033:0x7f269ad14b19
[  999.064480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  999.065681] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[  999.066166] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[  999.066613] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[  999.067067] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[  999.067513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  999.067958] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[  999.068433]  </TASK>
08:51:18 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020005006c0008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:18 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[  999.180530] sg_write: data in/out 101187656/247 bytes for SCSI command 0x21-- guessing data in;
[  999.180530]    program syz-executor.5 not setting count and/or reply_len properly
[  999.187249] sg_write: data in/out 101187656/247 bytes for SCSI command 0x21-- guessing data in;
[  999.187249]    program syz-executor.5 not setting count and/or reply_len properly
08:51:18 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
close(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="19fc5b20feafba6800302571d07a0e5040187bb138c9ea4ddd89b04935d3f19468bb8b361ffc7dc7e3fb41f7a3a5366c3022d4dd14cdc658ebafbf1f77100e56ef54516ce6d5f6e3a0d6b86c56fb34c243ff90bf6b2339059ed7e6bb453c7a930ac423338045acaec920351285205312e8d655"], 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x10000, 0x0)
r3 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x1, 0xe, 0x6, 0x0, 0x200, 0x2010, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0x8000000006, 0x3}, 0xc, 0x9, 0x5, 0x2, 0x0, 0xbcd, 0xb7, 0x0, 0x40, 0x0, 0x3ff}, r3, 0xc, 0xffffffffffffffff, 0xa)
io_setup(0x40, &(0x7f0000000240))
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2})
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r4 = eventfd2(0x8001, 0x0)
io_setup(0x7, &(0x7f00000001c0)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0xffff, r4, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, r4}])
fallocate(r4, 0x23, 0x200, 0x6)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x8000000)
fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff)

08:51:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500740008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:34 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 21)

08:51:34 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
write$cgroup_int(r0, &(0x7f0000000140), 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)="93b60344125487f376f9d96bf16669001846db17e78e1b7a474fe587", 0x1c}], 0x2, 0x401, 0x10000)
sendfile(r1, r2, 0x0, 0xffff)

08:51:34 executing program 1:
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:51:34 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:51:34 executing program 4:
perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000680)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x5, 0x5, 0x0, 0x1224, 0x34, 0x8}, {0x7, 0x8832, 0x4, 0xffffffff, 0x20, 0x401}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
syz_read_part_table(0xfffffffffffffffe, 0x5, &(0x7f0000000480)=[{&(0x7f0000000000)="4299af2e527bb56f82cad083d914db9cea04d157a44ca7ba88cbf3bdce13d95afd6f9e583a7846a8b2e37c759c2d448f3f903ec2f330899a4d96cc886cf62269eb3e6322e7cbbb001e923f119f22416da8719c6b93f768cde300b7e60d9654690c404563ed952f2954f94bcf97ef0afd67d3a3dacce9f004dd157cf5", 0x7c, 0x6}, {&(0x7f0000000180)="0d54507ee9094579eb94cf0c2b07386c78961cbe8b47b442225dca1928eefc18fc5aa30baa508c8f96ea3259f56db8cb73adc4103cf033bc0cb7f010e69328dc2ccdaf7cbf686eab9b259fbea34f27fabf8923d88dc8e2984ded36d1b0bacaaf603081903eb27f903f6e285633c15c2574990c33e83e1dbbab6c28bfb96a3ef8fdd126bc172f0d730a0a70a7cb3e4730f61c0c1094bba6c888f63e27a62f88ced2b8969608739ff83272348fc18c7e599b0bad4cf6bd0eb244cf11c11245856a67a5204c5bc1a2177504efa4b1d771cff4ad76920e80fc26bbd5e3597dd9d870f4a03698d6437146ae4e", 0xffffffffffffff44, 0x1ff}, {&(0x7f0000000580)="edbd048ba11361b2a3202bb7e05d2c98a4842f5e88949e6cffc0135f3d4ed37cac2e6a7d83f830b5e6f1c1deca97db7d332f5a302b365d4e87489daa6d809470e476f122e0a29655c4d723c27824a61cdde4fca667faac6b84c993cdc40ab7632baa011befa0d137465683a0bcb2a4fd2c9e577d29300e3cb8e774472535c43d9532c6573e87f6bdebf1ddf8ccd7cb15ca69fe6ea39891fdef57bb22039bbb1475ec320b352e2693607ef8b42b6e5c3a30afca4ed362557e038b0b9867d752de0ee58c72550779f67d55686434afa9effad75b1bf46f9e1593fb81874c1bda6e0e085c4c3d64b15f6ce74b869f226f63e615d950", 0xf4, 0x2}, {&(0x7f0000000380)="ab2f154047f120a1372f15c127e45e437c62322c4e9c9fa081013d41a541e3b16a79d37fb532f21bfce6f48bc1d6ebff7f8225198e7dcac1a98f667a71238e625e495e8f434a1630121738cdb1b89388e20d5b16c499386f3d002a91a0532babc79d450e9720bbfa789b98fd4c6ef99d7eda195a354d34f07a06846fdd634d8ff019", 0x82, 0x4cf6}, {&(0x7f0000000500)="65a6e48d537fd8cfe7e5bf5529edfcba50b359a9a96b7adcdc51ba9dd04a5ecffe397a851e4297863e16d05748d5592aaa2e36cbaeac80f8a1bca1d9763ef758afcc507ee7abd65065c09a69a14a51e971dc9c186ddf78455aae53c5d14f02b887681bd11ff4db10f4943272eae42f", 0x6f, 0x7443d881}])
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0)

08:51:34 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2", 0x32}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:51:34 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1015.523587] sg_write: data in/out 101187664/247 bytes for SCSI command 0x21-- guessing data in;
[ 1015.523587]    program syz-executor.5 not setting count and/or reply_len properly
[ 1015.537525] sg_write: data in/out 101187664/247 bytes for SCSI command 0x21-- guessing data in;
[ 1015.537525]    program syz-executor.5 not setting count and/or reply_len properly
08:51:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="020005007a0008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:34 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 22)

08:51:34 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:51:34 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:34 executing program 1:
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

[ 1015.731346] perf: interrupt took too long (5060 > 5055), lowering kernel.perf_event_max_sample_rate to 39000
08:51:34 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 23)

08:51:34 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='virt_wifi0\x00', 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'vlan0\x00', {'bridge0\x00'}, 0x5})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='caif0\x00', 0x10)
perf_event_open(&(0x7f0000000b40)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x28000)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='gre0\x00', 0x10)
r4 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000003640)={<r5=>0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f00000034c0)=[{{&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/48, 0x30}], 0x2, &(0x7f0000000280)=""/41, 0x29}, 0x32f}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/223, 0xdf}, {&(0x7f00000037c0)=""/203, 0xcb}], 0x6}, 0x5}, {{&(0x7f00000006c0)=@can, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000740)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000840)=""/55, 0x37}, {&(0x7f0000000440)=""/7, 0x7}, {&(0x7f00000008c0)=""/182, 0xb6}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/2, 0x2}, {&(0x7f0000002c80)=""/195, 0xc3}], 0xa}, 0x2}, {{&(0x7f0000002e40)=@pppol2tpin6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000b00)=""/18, 0x12}], 0x1, &(0x7f0000002f00)=""/78, 0x4e}, 0x7}, {{&(0x7f0000002f80)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003180)=[{&(0x7f0000003000)=""/178, 0xb2}, {&(0x7f00000030c0)=""/130, 0x82}], 0x2, &(0x7f00000031c0)=""/96, 0x60}, 0xc62}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003240)=""/87, 0x57}, {&(0x7f00000032c0)=""/168, 0xa8}], 0x2, &(0x7f00000033c0)=""/246, 0xf6}, 0x5}], 0x6, 0x40010140, &(0x7f0000003680)={r5, r6+10000000})
setsockopt$inet6_tcp_int(r7, 0x6, 0x9, &(0x7f0000000140)=0x3, 0x4)

[ 1015.795917] sg_write: data in/out 101187670/247 bytes for SCSI command 0x21-- guessing data in;
[ 1015.795917]    program syz-executor.5 not setting count and/or reply_len properly
[ 1015.807802] sg_write: data in/out 101187670/247 bytes for SCSI command 0x21-- guessing data in;
[ 1015.807802]    program syz-executor.5 not setting count and/or reply_len properly
08:51:34 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 24)

08:51:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000308065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1015.969358] sg_write: data in/out 101188316/247 bytes for SCSI command 0x21-- guessing data in;
[ 1015.969358]    program syz-executor.5 not setting count and/or reply_len properly
[ 1015.977393] sg_write: data in/out 101188316/247 bytes for SCSI command 0x21-- guessing data in;
[ 1015.977393]    program syz-executor.5 not setting count and/or reply_len properly
08:51:49 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500830408065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:49 executing program 1:
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:51:49 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:51:49 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 25)

08:51:49 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62)
readv(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'})
syncfs(r0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001280)=ANY=[@ANYBLOB="010001000000000018000000", @ANYRES32=r1, @ANYBLOB])
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001)

08:51:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:51:49 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRES16, @ANYRES32=r3], 0x220)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
sendfile(r5, r4, 0x0, 0x9)

[ 1030.509057] sg_write: data in/out 101188703/247 bytes for SCSI command 0x21-- guessing data in;
[ 1030.509057]    program syz-executor.5 not setting count and/or reply_len properly
[ 1030.522961] sg_write: data in/out 101188703/247 bytes for SCSI command 0x21-- guessing data in;
[ 1030.522961]    program syz-executor.5 not setting count and/or reply_len properly
08:51:49 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 26)

08:51:49 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:51:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:51:49 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000508065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:49 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x7fff, 0x220000)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4)
r2 = dup(r0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="d090cef5fb35d4ec983cd1be54a6001affd7a282b401ec0919f65b6dd9a87a92d83746192b64db2c85ba2879ccc7450147d00830f6a53efb5668b8c6c4e4a7449e04522eeff8fbb761e50657fdf53036aa3e809ca657f93e2be02f82efa262d8502d03996292c9fd40a82e4eee9445d99efca61f68cadf674c803ad16c214ed5e9e1032e0b8409d07c69813d4929ed392266d10aeca1a91df3850929f1cbb5d37fcec585b0a4284c930757debc7f9957d8787f1fbd920dad26560bfa", 0xbc}], 0x1, &(0x7f0000000080)=[@tclass={{0x14, 0x29, 0x43, 0x6}}], 0x18}}], 0x1, 0x1000)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)

08:51:49 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:51:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000080)='./file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r3}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x88800)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x1})

[ 1030.814527] sg_write: data in/out 101188828/247 bytes for SCSI command 0x21-- guessing data in;
[ 1030.814527]    program syz-executor.5 not setting count and/or reply_len properly
[ 1030.829192] sg_write: data in/out 101188828/247 bytes for SCSI command 0x21-- guessing data in;
[ 1030.829192]    program syz-executor.5 not setting count and/or reply_len properly
08:51:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000608065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:51:50 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 27)

[ 1031.113985] FAULT_INJECTION: forcing a failure.
[ 1031.113985] name failslab, interval 1, probability 0, space 0, times 0
[ 1031.115562] CPU: 0 PID: 6922 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[ 1031.116597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1031.117663] Call Trace:
[ 1031.118021]  <TASK>
[ 1031.118342]  dump_stack_lvl+0x8f/0xb7
[ 1031.119043]  should_fail_ex.cold+0x5/0xa
[ 1031.119630]  ? vm_area_dup+0x83/0x230
[ 1031.120184]  should_failslab+0x9/0x20
[ 1031.120310] sg_write: data in/out 101189084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1031.120310]    program syz-executor.5 not setting count and/or reply_len properly
[ 1031.120715]  kmem_cache_alloc+0x5a/0x410
[ 1031.123388]  ? mas_destroy+0x395/0x560
[ 1031.123985]  vm_area_dup+0x83/0x230
[ 1031.124563]  ? __pfx_mas_store_prealloc+0x10/0x10
[ 1031.125328]  ? mas_destroy+0x395/0x560
[ 1031.125962]  ? lock_is_held_type+0xdb/0x130
[ 1031.126067] sg_write: data in/out 101189084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1031.126067]    program syz-executor.5 not setting count and/or reply_len properly
[ 1031.126588]  ? __pfx_vm_area_dup+0x10/0x10
[ 1031.129411]  ? mas_next_nentry+0x5dc/0xa00
[ 1031.130077]  ? mas_find+0x20d/0xdf0
[ 1031.130648]  __split_vma+0xa6/0x5d0
[ 1031.131215]  ? mas_walk+0x4b7/0x6b0
[ 1031.131818]  do_mas_align_munmap.constprop.0+0x62d/0x1000
[ 1031.132659]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[ 1031.133556]  ? mas_walk+0x4b7/0x6b0
[ 1031.134137]  ? mas_find+0x20d/0xdf0
[ 1031.134717]  ? __pfx___lock_acquire+0x10/0x10
[ 1031.135433]  do_mas_munmap+0x1ec/0x2c0
[ 1031.136038]  mmap_region+0x21f/0x1c20
[ 1031.136641]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1031.137403]  ? __pfx_mmap_region+0x10/0x10
[ 1031.138070]  ? security_mmap_addr+0x7d/0xa0
[ 1031.138728]  ? get_unmapped_area+0x1e9/0x3e0
[ 1031.139414]  do_mmap+0x82c/0xf50
[ 1031.139973]  do_shmat+0xe3b/0x10d0
[ 1031.140560]  ? __pfx_do_shmat+0x10/0x10
[ 1031.141176]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1031.142026]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1031.142921]  __x64_sys_shmat+0xd0/0x170
[ 1031.143561]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1031.144266]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1031.145060]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1031.145753]  do_syscall_64+0x3f/0x90
[ 1031.146333]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1031.147133] RIP: 0033:0x7f269ad14b19
[ 1031.147721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1031.150376] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1031.151523] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[ 1031.152578] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[ 1031.153636] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1031.154684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1031.155756] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[ 1031.156845]  </TASK>
08:52:04 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:52:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0xfffffead)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@llc={0x1a, 0x3, 0xfe, 0x3, 0x0, 0x80, @broadcast}}, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000000)="f6ae8543fa813a72179a659d8443edb4db3de5daf2ca83c396fe3e361d0b8d57dbf0c08094706564a6de110ba22fe351ade30eb04d7c4095d142e3c1673ef0d9e2bf84de9f4542c7fc71c610d7ccd4cdae809e", 0x53, 0xc03)
write(r2, &(0x7f0000000080)="01", 0x41030)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r4, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:52:04 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0x6f, ""/111})
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0))
fchdir(r0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000100)={0x2, 0x2, {0x81, @usage=0x6, 0x0, 0x7f, 0x3ff, 0x9, 0x8, 0x100000000, 0x0, @struct={0x6, 0x8}, 0x988, 0x8, [0x7ff, 0x8, 0x4, 0x7, 0xffff, 0x1f]}, {0x5de, @usage=0x8, 0x0, 0x2ac, 0x20, 0x3, 0x0, 0x7, 0x2, @struct={0x8, 0x2}, 0x6, 0xffffb504, [0x200, 0x8, 0x9, 0x1ff, 0x1, 0x1]}, {0x8000, @usage=0x6, <r1=>0x0, 0xfff, 0x9, 0xffffffffffffffff, 0x9, 0x8, 0x80, @struct={0x100, 0xfffffffe}, 0x7fffffff, 0x2, [0x8001, 0x6, 0x5, 0x9, 0x5, 0x1]}, {0x8, 0x1, 0x3}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000500)={r1, "92b00117ac36a10ce173cdaf438fbc4f"})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001500)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
fcntl$setlease(r2, 0x400, 0x1)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000001540)=0x3)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/module/rcutree', 0x404000, 0x10)
sendfile(r3, r2, &(0x7f00000015c0)=0x1a54a997, 0xec6d)
ioctl$CDROMSTOP(r2, 0x5307)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000001600)={0x8, 0x0, 0x1})
recvmsg$unix(r3, &(0x7f0000001840)={&(0x7f0000001680)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001700)=""/185, 0xb9}], 0x1, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}], 0x20}, 0x10001)
getgroups(0x5, &(0x7f0000001880)=[0xee01, <r5=>0x0, 0xffffffffffffffff, 0xee01, 0x0])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000018c0)={{0x1, 0x1, 0x18, <r6=>r2, {0xee01, <r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001900)={{0x1, 0x1, 0x18, <r8=>r2, {0xee00, <r9=>0xee00}}, './file0\x00'})
fsetxattr$system_posix_acl(r3, &(0x7f0000001640)='system.posix_acl_access\x00', &(0x7f0000001940)={{}, {0x1, 0x5}, [{0x2, 0x1, r4}], {0x4, 0x5}, [{0x8, 0x3, r5}, {0x8, 0x2}, {0x8, 0x2, r7}, {0x8, 0x4, r9}], {0x10, 0x3}, {0x20, 0x4}}, 0x4c, 0x2)
ioctl$SG_GET_RESERVED_SIZE(r6, 0x2272, &(0x7f00000019c0))
ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000001a00))

08:52:04 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:52:04 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000708065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:52:04 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 28)

08:52:04 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1045.827050] sg_write: data in/out 101189340/247 bytes for SCSI command 0x21-- guessing data in;
[ 1045.827050]    program syz-executor.5 not setting count and/or reply_len properly
[ 1045.832826] sg_write: data in/out 101189340/247 bytes for SCSI command 0x21-- guessing data in;
[ 1045.832826]    program syz-executor.5 not setting count and/or reply_len properly
08:52:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500004808065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1045.929452] sg_write: data in/out 101205980/247 bytes for SCSI command 0x21-- guessing data in;
[ 1045.929452]    program syz-executor.5 not setting count and/or reply_len properly
[ 1045.942185] sg_write: data in/out 101205980/247 bytes for SCSI command 0x21-- guessing data in;
[ 1045.942185]    program syz-executor.5 not setting count and/or reply_len properly
08:52:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000140), 0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180))
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000100)={@local, @empty}, &(0x7f0000000140)=0xc)
socket$packet(0x11, 0x3, 0x300)
accept$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10)

08:52:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500004c08065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:52:05 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 29)

08:52:05 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:52:05 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 1046.127660] FAULT_INJECTION: forcing a failure.
[ 1046.127660] name failslab, interval 1, probability 0, space 0, times 0
[ 1046.129465] CPU: 0 PID: 6961 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[ 1046.130445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1046.131463] Call Trace:
[ 1046.131817]  <TASK>
[ 1046.132126]  dump_stack_lvl+0x8f/0xb7
[ 1046.132660]  should_fail_ex.cold+0x5/0xa
[ 1046.133215]  ? mas_alloc_nodes+0x420/0x800
[ 1046.133768]  should_failslab+0x9/0x20
[ 1046.134283]  kmem_cache_alloc+0x5a/0x410
[ 1046.134932]  mas_alloc_nodes+0x420/0x800
[ 1046.135484]  ? find_vma+0x110/0x1b0
[ 1046.136001]  mas_preallocate+0x1bf/0x370
[ 1046.136560]  __vma_adjust+0x19c/0x1cb0
[ 1046.137090]  ? __pfx_vm_area_dup+0x10/0x10
[ 1046.137671]  ? __pfx___vma_adjust+0x10/0x10
[ 1046.138252]  ? anon_vma_clone+0x3bc/0x570
[ 1046.138799]  ? mas_find+0x20d/0xdf0
[ 1046.139312]  __split_vma+0x4c7/0x5d0
[ 1046.139848]  do_mas_align_munmap.constprop.0+0x62d/0x1000
[ 1046.140619]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[ 1046.141448]  ? mas_walk+0x4b7/0x6b0
[ 1046.141959]  ? mas_find+0x20d/0xdf0
[ 1046.142478]  ? __pfx___lock_acquire+0x10/0x10
[ 1046.143115]  do_mas_munmap+0x1ec/0x2c0
[ 1046.143665]  mmap_region+0x21f/0x1c20
[ 1046.144206]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1046.144874]  ? __pfx_mmap_region+0x10/0x10
[ 1046.145483]  ? security_mmap_addr+0x7d/0xa0
[ 1046.146080]  ? get_unmapped_area+0x1e9/0x3e0
[ 1046.146687]  do_mmap+0x82c/0xf50
[ 1046.147177]  do_shmat+0xe3b/0x10d0
[ 1046.147713]  ? __pfx_do_shmat+0x10/0x10
[ 1046.148258]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1046.148997]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1046.149796]  __x64_sys_shmat+0xd0/0x170
[ 1046.150362]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1046.150990]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1046.151709]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1046.152341]  do_syscall_64+0x3f/0x90
[ 1046.152845]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1046.153601] RIP: 0033:0x7f269ad14b19
[ 1046.154103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1046.156464] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1046.157442] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[ 1046.158395] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[ 1046.159319] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1046.160258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1046.161197] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[ 1046.162167]  </TASK>
08:52:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1046.176683] sg_write: data in/out 101207004/247 bytes for SCSI command 0x21-- guessing data in;
[ 1046.176683]    program syz-executor.5 not setting count and/or reply_len properly
[ 1046.191111] sg_write: data in/out 101207004/247 bytes for SCSI command 0x21-- guessing data in;
[ 1046.191111]    program syz-executor.5 not setting count and/or reply_len properly
08:52:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, 0x0)
ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000000)={0x2, 0x7, 0x0, 0x20, 0x7, 0x7})

08:52:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:23 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:52:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500006808065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:52:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000003c0)={0x9020000, &(0x7f0000000140), &(0x7f0000000180)=<r0=>0x0, &(0x7f00000001c0), {0x3c}, &(0x7f0000000200)=""/70, 0x46, &(0x7f0000000300)=""/91, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = getuid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x5, 0x8, 0x20, 0x0, 0x9, 0x66, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x9, 0x8}, 0x80, 0xf73, 0xa7, 0x2, 0x7, 0x6, 0x7, 0x0, 0x7fffffff, 0x0, 0xe340}, r0, 0x9, r1, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x1000, @remote, 0x759}, 0x1c)
getpgid(0x0)
clone3(&(0x7f0000004c00)={0x38820100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x79)

08:52:23 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 30)

08:52:23 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:52:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1064.065892] sg_write: data in/out 101214172/247 bytes for SCSI command 0x21-- guessing data in;
[ 1064.065892]    program syz-executor.5 not setting count and/or reply_len properly
08:52:23 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x400042, 0xd3)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x301c03, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
fcntl$dupfd(r3, 0x0, r4)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0x8, 0x1, 0x7fffffff, 0x6273, 0x7ba2f9cb, 0x6})
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000003c0)={0x5, 0x7ff})

[ 1064.082948] sg_write: data in/out 101214172/247 bytes for SCSI command 0x21-- guessing data in;
[ 1064.082948]    program syz-executor.5 not setting count and/or reply_len properly
08:52:23 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:52:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500006c08065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:52:23 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 31)

[ 1064.266678] sg_write: data in/out 101215196/247 bytes for SCSI command 0x21-- guessing data in;
[ 1064.266678]    program syz-executor.5 not setting count and/or reply_len properly
08:52:23 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1064.286598] sg_write: data in/out 101215196/247 bytes for SCSI command 0x21-- guessing data in;
[ 1064.286598]    program syz-executor.5 not setting count and/or reply_len properly
[ 1064.304938] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 8 (only 16 groups)
[ 1064.318429] FAULT_INJECTION: forcing a failure.
[ 1064.318429] name failslab, interval 1, probability 0, space 0, times 0
[ 1064.320182] CPU: 1 PID: 7003 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[ 1064.321285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1064.322542] Call Trace:
[ 1064.322928]  <TASK>
[ 1064.323295]  dump_stack_lvl+0x8f/0xb7
08:52:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1064.323930]  should_fail_ex.cold+0x5/0xa
[ 1064.324723]  should_failslab+0x9/0x20
[ 1064.325344]  kmem_cache_alloc_bulk+0x6a/0x780
[ 1064.326075]  ? kmem_cache_alloc+0x237/0x410
[ 1064.326773]  mas_alloc_nodes+0x2ff/0x800
[ 1064.327423]  ? find_vma+0x110/0x1b0
[ 1064.328007]  mas_preallocate+0x1bf/0x370
[ 1064.328669]  __vma_adjust+0x19c/0x1cb0
[ 1064.329286]  ? __pfx_vm_area_dup+0x10/0x10
[ 1064.329993]  ? __pfx___vma_adjust+0x10/0x10
[ 1064.330689]  ? anon_vma_clone+0x3bc/0x570
[ 1064.331308]  ? mas_find+0x20d/0xdf0
[ 1064.331927]  __split_vma+0x4c7/0x5d0
[ 1064.332623]  do_mas_align_munmap.constprop.0+0x62d/0x1000
[ 1064.333513]  ? __pfx_do_mas_align_munmap.constprop.0+0x10/0x10
[ 1064.334457]  ? mas_walk+0x4b7/0x6b0
[ 1064.335145]  ? mas_find+0x20d/0xdf0
[ 1064.335751]  ? __pfx___lock_acquire+0x10/0x10
[ 1064.336575]  do_mas_munmap+0x1ec/0x2c0
[ 1064.337264]  mmap_region+0x21f/0x1c20
[ 1064.337932]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1064.338725]  ? __pfx_mmap_region+0x10/0x10
[ 1064.339496]  ? security_mmap_addr+0x7d/0xa0
[ 1064.340297]  ? get_unmapped_area+0x1e9/0x3e0
[ 1064.341029]  do_mmap+0x82c/0xf50
[ 1064.341651]  do_shmat+0xe3b/0x10d0
[ 1064.342308]  ? __pfx_do_shmat+0x10/0x10
[ 1064.343027]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1064.344005]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1064.344980]  __x64_sys_shmat+0xd0/0x170
[ 1064.345619]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1064.346345]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1064.347193]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1064.347944]  do_syscall_64+0x3f/0x90
[ 1064.348585]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1064.349509] RIP: 0033:0x7f269ad14b19
[ 1064.350182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1064.353158] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1064.354421] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[ 1064.355578] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[ 1064.356713] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1064.357865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1064.358969] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[ 1064.360108]  </TASK>
[ 1064.421131] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 8 (only 16 groups)
08:52:23 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 32)

08:52:40 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:40 executing program 0:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500))
memfd_create(&(0x7f0000000000)='\\{:\x00', 0x3)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0))
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140))

08:52:40 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:40 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 33)

08:52:40 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:52:40 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500006808065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:52:40 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500007408065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:52:40 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1081.871847] sg_write: data in/out 101214172/247 bytes for SCSI command 0x21-- guessing data in;
[ 1081.871847]    program syz-executor.4 not setting count and/or reply_len properly
08:52:40 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 34)

[ 1081.909170] sg_write: data in/out 101217244/247 bytes for SCSI command 0x21-- guessing data in;
[ 1081.909170]    program syz-executor.5 not setting count and/or reply_len properly
08:52:40 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 1081.926487] sg_write: data in/out 101217244/247 bytes for SCSI command 0x21-- guessing data in;
[ 1081.926487]    program syz-executor.5 not setting count and/or reply_len properly
08:52:41 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = eventfd(0x849e)
r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="6ad5ccdb56a48e5be1156529016aa19630e8bfa4d1c42ab768c841c4b313ab87376d542cb4bd94422e1531e1f3307e20222426f5f1e7e192bfed91cdb03ded5aa611b45fdecf126c0eefd172f3bbe9e517520637cbe0adbb18f34894ec6439bd98a62a1247ee4e9b4794491d8f5c8ac1c10b6a56d51ddc3909fe270b9a01f1196b7293f9a4a718dbc7d5a39fe7b1de9be992ddde261c38860abaab648453462b66b0592883837810630fbdddea48e1c2cf7f06", 0xb3}], 0x1)
dup2(r2, r3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, <r4=>0x0})
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a9900, 0x0)
fcntl$setown(r1, 0x8, r4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {<r6=>r0}}, './file1\x00'})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0)
read$hiddev(0xffffffffffffffff, 0x0, 0x0)

08:52:41 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:52:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500007a08065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1082.230989] sg_write: data in/out 101218780/247 bytes for SCSI command 0x21-- guessing data in;
[ 1082.230989]    program syz-executor.5 not setting count and/or reply_len properly
[ 1082.253836] sg_write: data in/out 101218780/247 bytes for SCSI command 0x21-- guessing data in;
[ 1082.253836]    program syz-executor.5 not setting count and/or reply_len properly
08:52:55 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 35)

08:52:55 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}, {&(0x7f00000003c0)="c5fd775511cc64caf76d9f05d8057313829eb540bf7222", 0x17}], 0x3, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:55 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

08:52:55 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="04a5ee68", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r3}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
r4 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000002240), 0x12029, &(0x7f0000000240)={[{@huge_within_size}], [{@uid_eq={'uid', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@smackfsroot={'smackfsroot', 0x3d, '-+\xaf\xbf\x83\xda\xf5\xa3\xb1\xd0\"\xcb\xcd\xabhDXr\xcb\xebz\xa4\x16\xcd\xc3c'}}, {@smackfsdef={'smackfsdef', 0x3d, '&{-*'}}, {@appraise_type}, {@euid_gt={'euid>', r1}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]})
symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
r6 = openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0)
openat(r6, &(0x7f0000000340)='./file1\x00', 0x88000, 0x2)
renameat(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00')
linkat(r4, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x0)

08:52:55 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:52:55 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500048308065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:52:55 executing program 0:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))
sendfile(r0, r0, &(0x7f0000000080)=0x8, 0x3)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x4, 0x7}}, './file0\x00'})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/usbmon', 0x82040, 0x40)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000001c0)={{r2}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000140)={0x1, 0x5, 0x1, 0x6, {0x14, 0x81, 0x1, 0x1, 0xfff}, [0x7, 0x2, 0x0, 0xfff, 0x4]}}, @name="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"})
pipe(&(0x7f00000011c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000001240)={0x1e4, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000055}, 0x20044080)
r5 = syz_io_uring_setup(0x37b7, &(0x7f00000014c0)={0x0, 0x62d1, 0x4, 0x0, 0x162}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001540), &(0x7f0000001580))
syz_io_uring_setup(0x2b6, &(0x7f00000015c0)={0x0, 0x8, 0xc2f70e880b007d8d, 0x1, 0x254, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001640)=<r6=>0x0, &(0x7f0000001680)=<r7=>0x0)
r8 = syz_open_dev$sg(&(0x7f00000016c0), 0x0, 0x2b40)
close_range(r8, r5, 0x2)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000019c0)={0x53, 0xfffffffffffffffc, 0xe4, 0xc5, @scatter={0x1, 0x0, &(0x7f0000001740)=[{&(0x7f0000001700)=""/1, 0x1}]}, &(0x7f0000001780)="8eb1626cfb0b72008f1ed0cc85327b7645d12e8007e70b5b7e8eda92a7d45a6bb9c644b6ae09f9e26847b0f0f8669b3646c683d00ce1d82b8edfb6c205419bee167ed3d38b0cefd71f4ca6f50116ec69b75ea575187a33d61250d5be545fa2ff3dc009040fada9ac3f242dad45335ab317923b26f6bd4fabdba23163cf5fac955336247297e9e4ab55460849c3d67e30ef9d59b0bd6bbe6f41a82d448b72cdb2d2edda3169e46f3f99b2347ceea59acd97668adb8863026be976dba547157260e4d27f7276442e93baf25677365025e437ab550e07806bcc6ed4f978f0e5b8002c440240", &(0x7f0000001880)=""/239, 0x7, 0x20, 0x2, &(0x7f0000001980)})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)={{0x1, 0x1, 0x18, <r9=>r3, {0x1f}}, './file0\x00'})
fcntl$lock(r9, 0x25, &(0x7f0000001a80)={0x1, 0x1, 0x5, 0x5d0, 0xffffffffffffffff})
ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000001ac0)={'macvtap0\x00'})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001b00)={0x5, 0x650, 0x6})
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
syz_io_uring_submit(r6, r7, &(0x7f0000001b80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000001b40)={0x77359400}, 0x1, 0x0, 0x1}, 0x33)
write$P9_RREMOVE(r4, &(0x7f0000001bc0)={0x7, 0x7b, 0x1}, 0x7)

08:52:55 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:52:55 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 1096.534995] sg_write: data in/out 101221088/247 bytes for SCSI command 0x21-- guessing data in;
[ 1096.534995]    program syz-executor.5 not setting count and/or reply_len properly
[ 1096.551203] sg_write: data in/out 101221088/247 bytes for SCSI command 0x21-- guessing data in;
[ 1096.551203]    program syz-executor.5 not setting count and/or reply_len properly
08:52:55 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 36)

08:52:55 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:52:55 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
acct(&(0x7f0000000180)='./file1\x00')
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000001c0)={0x0, 0x0, "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", "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"})

08:52:55 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000208065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1096.731830] Process accounting resumed
08:52:55 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 1096.765124] sg_write: data in/out 101188060/247 bytes for SCSI command 0x21-- guessing data in;
[ 1096.765124]    program syz-executor.5 not setting count and/or reply_len properly
[ 1096.784741] sg_write: data in/out 101188060/247 bytes for SCSI command 0x21-- guessing data in;
[ 1096.784741]    program syz-executor.5 not setting count and/or reply_len properly
[ 1096.832789] Process accounting resumed
08:53:11 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:53:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0)
read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
io_uring_setup(0x0, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0)
faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1})

08:53:11 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 37)

08:53:11 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

08:53:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000308065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:53:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, 0x0, 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:11 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:11 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='/d\xb5>\xbb\xb3~\xa9\xa4O{\xc3\xad \xeb\xee\xeed\xf4\xaf\xf8\x81\xea|f\x1c\xe0\xc1\xd1\x19cr\xa1\x01\xc3g\x10#\xa1\xfa\xb2\xe7\xa4+\x9e\xd7\xa2\x04y\xc1\xcf-V\xc0\x18L\xce\xe2I\x19:\xe7\xc6F\x1a\x16!\x00\x9c*\x03\x1f\x94#\xf1\xcb\xc9\xf1\x16I\x85\xc8x\xe0\xc7\xc7z\xfa\t\x85\t\xfcM\b\x81\xd9d\xe25i\xe7\xb4M\xd1\xa4\xef\x0eW\x7f\x13\xa9>\xcf;+-\xf1gT\xd0\xcck\xb1Nq\xe2\x06\xdf\xc2\x01\x00\x00\x00\x00\x00\x00\x00\xe4\x9b\xab\xf7E\x1c\xb2,\xe4[|\xcc\x85{\xb3\x98\x139\xc4F\x9fE\xa7*\xed\x9b@\x8bH\xe5\xb5\xa7\xae\x11\xa7N\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3Ef\x88fM\xc3\xd7\xb2\aa\xe5?{\x18}\x9b\x87\x83^\xd5 a& \xd9\xa5\xa2\x85P\xdc\x8bO\xcbi\x1d-\x0e\xd9\xd5\xb1\x8d\x81da\xf89\xc4\xaa\x81\xad\xda\xef\x860\x19\xc4\xb3\vW\x19\xae:\a\x89\xb2\x87\xf0\x8ch\xc7r\xf6K\x96\x7f\x15?\xdb\x95\x82\xe8\x10\xa7qX\x8b\xc2 \xb0\xe5(\x87\xfd_\\\x17Y\xf6\vc\xa1JG\xc2\x88\xbc\xb1\xf3\"\x1a~t\xed\xed?\xad&\x11\x06\xc6!n\xb4\xf8\"W&\xf9|\xc9\xed\xde\xd6\xac\xd9\xea\xe6\xff\xf9\xeb\xa8\xd1\xb5\xf6N\xac\v\x88\xfcH\xd2\xe5UL\xfd\xd1gD\x99\x89M\xfbpe]A\x90\x81\xcb\x136;;\x9e\x0f\xa7\x92\xe3\x19O\n\xae{\x17\xa2\xec\x00\x9b/\xff\x02)z\x04\xb5\xf7\xafU\xa2D\"@j\x19\xa0D\x87Dc\n\x92', 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)
finit_module(0xffffffffffffffff, 0x0, 0x2)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r2, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r1, 0x12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0)
pwrite64(r4, &(0x7f0000000340)="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", 0xfd, 0xfffffffffffffff9)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
perf_event_open(&(0x7f00000002c0)={0xf, 0x80, 0xd9, 0xe, 0x3, 0x8, 0x0, 0x6, 0x30180, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x10, 0x7, 0x7, 0x3, 0x3, 0x887a, 0x6, 0x0, 0x0, 0x0, 0x10000}, r1, 0x7, r3, 0x0)

08:53:11 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1112.175823] sg_write: data in/out 101188316/247 bytes for SCSI command 0x21-- guessing data in;
[ 1112.175823]    program syz-executor.5 not setting count and/or reply_len properly
[ 1112.188323] sg_write: data in/out 101188316/247 bytes for SCSI command 0x21-- guessing data in;
[ 1112.188323]    program syz-executor.5 not setting count and/or reply_len properly
08:53:11 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 38)

08:53:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000408065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:53:11 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x15e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:53:11 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

[ 1112.301744] sg_write: data in/out 101188572/247 bytes for SCSI command 0x21-- guessing data in;
[ 1112.301744]    program syz-executor.5 not setting count and/or reply_len properly
[ 1112.307721] sg_write: data in/out 101188572/247 bytes for SCSI command 0x21-- guessing data in;
[ 1112.307721]    program syz-executor.5 not setting count and/or reply_len properly
08:53:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000508065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:53:11 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1112.412404] sg_write: data in/out 101188828/247 bytes for SCSI command 0x21-- guessing data in;
[ 1112.412404]    program syz-executor.5 not setting count and/or reply_len properly
[ 1112.423528] sg_write: data in/out 101188828/247 bytes for SCSI command 0x21-- guessing data in;
[ 1112.423528]    program syz-executor.5 not setting count and/or reply_len properly
08:53:27 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

08:53:27 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='/d\xb5>\xbb\xb3~\xa9\xa4O{\xc3\xad \xeb\xee\xeed\xf4\xaf\xf8\x81\xea|f\x1c\xe0\xc1\xd1\x19cr\xa1\x01\xc3g\x10#\xa1\xfa\xb2\xe7\xa4+\x9e\xd7\xa2\x04y\xc1\xcf-V\xc0\x18L\xce\xe2I\x19:\xe7\xc6F\x1a\x16!\x00\x9c*\x03\x1f\x94#\xf1\xcb\xc9\xf1\x16I\x85\xc8x\xe0\xc7\xc7z\xfa\t\x85\t\xfcM\b\x81\xd9d\xe25i\xe7\xb4M\xd1\xa4\xef\x0eW\x7f\x13\xa9>\xcf;+-\xf1gT\xd0\xcck\xb1Nq\xe2\x06\xdf\xc2\x01\x00\x00\x00\x00\x00\x00\x00\xe4\x9b\xab\xf7E\x1c\xb2,\xe4[|\xcc\x85{\xb3\x98\x139\xc4F\x9fE\xa7*\xed\x9b@\x8bH\xe5\xb5\xa7\xae\x11\xa7N\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3Ef\x88fM\xc3\xd7\xb2\aa\xe5?{\x18}\x9b\x87\x83^\xd5 a& \xd9\xa5\xa2\x85P\xdc\x8bO\xcbi\x1d-\x0e\xd9\xd5\xb1\x8d\x81da\xf89\xc4\xaa\x81\xad\xda\xef\x860\x19\xc4\xb3\vW\x19\xae:\a\x89\xb2\x87\xf0\x8ch\xc7r\xf6K\x96\x7f\x15?\xdb\x95\x82\xe8\x10\xa7qX\x8b\xc2 \xb0\xe5(\x87\xfd_\\\x17Y\xf6\vc\xa1JG\xc2\x88\xbc\xb1\xf3\"\x1a~t\xed\xed?\xad&\x11\x06\xc6!n\xb4\xf8\"W&\xf9|\xc9\xed\xde\xd6\xac\xd9\xea\xe6\xff\xf9\xeb\xa8\xd1\xb5\xf6N\xac\v\x88\xfcH\xd2\xe5UL\xfd\xd1gD\x99\x89M\xfbpe]A\x90\x81\xcb\x136;;\x9e\x0f\xa7\x92\xe3\x19O\n\xae{\x17\xa2\xec\x00\x9b/\xff\x02)z\x04\xb5\xf7\xafU\xa2D\"@j\x19\xa0D\x87Dc\n\x92', 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)
finit_module(0xffffffffffffffff, 0x0, 0x2)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r2, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r1, 0x12)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0)
pwrite64(r4, &(0x7f0000000340)="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", 0xfd, 0xfffffffffffffff9)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
perf_event_open(&(0x7f00000002c0)={0xf, 0x80, 0xd9, 0xe, 0x3, 0x8, 0x0, 0x6, 0x30180, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x10, 0x7, 0x7, 0x3, 0x3, 0x887a, 0x6, 0x0, 0x0, 0x0, 0x10000}, r1, 0x7, r3, 0x0)

08:53:27 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 39)

08:53:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, 0x0, 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:27 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0)
read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
io_uring_setup(0x0, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0)
faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1})

08:53:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000608065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:53:27 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:53:27 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1128.468130] sg_write: data in/out 101189084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1128.468130]    program syz-executor.5 not setting count and/or reply_len properly
[ 1128.489216] sg_write: data in/out 101189084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1128.489216]    program syz-executor.5 not setting count and/or reply_len properly
08:53:27 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 40)

08:53:27 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:27 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:53:27 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, 0x0, 0x0)

08:53:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000708065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1128.705431] FAULT_INJECTION: forcing a failure.
[ 1128.705431] name failslab, interval 1, probability 0, space 0, times 0
[ 1128.707168] CPU: 1 PID: 7157 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[ 1128.708382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1128.709480] Call Trace:
[ 1128.709844]  <TASK>
[ 1128.710173]  dump_stack_lvl+0x8f/0xb7
[ 1128.710738]  should_fail_ex.cold+0x5/0xa
[ 1128.711332]  ? vm_area_alloc+0x20/0x100
[ 1128.711912]  should_failslab+0x9/0x20
[ 1128.712452]  kmem_cache_alloc+0x5a/0x410
[ 1128.713062]  vm_area_alloc+0x20/0x100
[ 1128.713615]  mmap_region+0x44e/0x1c20
[ 1128.714190]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1128.714884]  ? __pfx_mmap_region+0x10/0x10
[ 1128.715510]  ? security_mmap_addr+0x7d/0xa0
[ 1128.716143]  ? get_unmapped_area+0x1e9/0x3e0
[ 1128.716822]  do_mmap+0x82c/0xf50
[ 1128.717352]  do_shmat+0xe3b/0x10d0
[ 1128.717904]  ? __pfx_do_shmat+0x10/0x10
[ 1128.718461]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1128.719246]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1128.720100]  __x64_sys_shmat+0xd0/0x170
[ 1128.720694]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1128.721364]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1128.722114]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1128.722784]  do_syscall_64+0x3f/0x90
[ 1128.723333]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1128.724097] RIP: 0033:0x7f269ad14b19
[ 1128.724652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1128.727128] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1128.728146] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[ 1128.729097] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[ 1128.730036] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1128.730975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1128.731917] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[ 1128.732923]  </TASK>
[ 1128.744418] sg_write: data in/out 101189340/247 bytes for SCSI command 0x21-- guessing data in;
[ 1128.744418]    program syz-executor.5 not setting count and/or reply_len properly
[ 1128.755817] sg_write: data in/out 101189340/247 bytes for SCSI command 0x21-- guessing data in;
[ 1128.755817]    program syz-executor.5 not setting count and/or reply_len properly
08:53:27 executing program 4:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x881)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r0=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0})
r3 = signalfd(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

08:53:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500004808065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:53:27 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:53:27 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:27 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300), 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x4a80, 0x0)
read$snapshot(r0, &(0x7f00000001c0)=""/252, 0xfc)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
io_uring_setup(0x0, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0)
faccessat(r0, &(0x7f0000000040)='./file1\x00', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x6)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1})

[ 1128.922528] sg_write: data in/out 101205980/247 bytes for SCSI command 0x21-- guessing data in;
[ 1128.922528]    program syz-executor.5 not setting count and/or reply_len properly
08:53:28 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 41)

08:53:45 executing program 4:
socket$inet6(0xa, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r1 = socket$inet6(0xa, 0x3, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0))
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc4001, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd(r3, &(0x7f0000000440)={[0x4]}, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2)

08:53:45 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, 0x0, 0x0)

08:53:45 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500004c08065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:53:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, 0x0, 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:45 executing program 0:
perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
syz_read_part_table(0x0, 0x1, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb63", 0x24, 0x100000000}])

08:53:45 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 42)

08:53:45 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1146.217011] sg_write: data in/out 101207004/247 bytes for SCSI command 0x21-- guessing data in;
[ 1146.217011]    program syz-executor.5 not setting count and/or reply_len properly
[ 1146.239917] sg_write: data in/out 101207004/247 bytes for SCSI command 0x21-- guessing data in;
[ 1146.239917]    program syz-executor.5 not setting count and/or reply_len properly
08:53:45 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x5e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1146.286125] FAULT_INJECTION: forcing a failure.
[ 1146.286125] name failslab, interval 1, probability 0, space 0, times 0
[ 1146.288230] CPU: 1 PID: 7199 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[ 1146.289326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1146.290467] Call Trace:
[ 1146.290852]  <TASK>
[ 1146.291195]  dump_stack_lvl+0x8f/0xb7
[ 1146.291782]  should_fail_ex.cold+0x5/0xa
[ 1146.292388]  should_failslab+0x9/0x20
[ 1146.293026]  __kmem_cache_alloc_node+0x5b/0x400
[ 1146.293700]  ? hugetlb_vma_lock_alloc.part.0+0x3f/0x130
[ 1146.294456]  ? hugetlbfs_file_mmap+0x450/0x550
[ 1146.295138]  kmalloc_trace+0x26/0x60
[ 1146.295693]  hugetlb_vma_lock_alloc.part.0+0x3f/0x130
[ 1146.296409]  hugetlb_reserve_pages+0x9cf/0xdf0
[ 1146.297082]  ? touch_atime+0xf0/0x700
[ 1146.297613]  ? __pfx_hugetlb_reserve_pages+0x10/0x10
[ 1146.298311]  ? __pfx_touch_atime+0x10/0x10
[ 1146.298925]  hugetlbfs_file_mmap+0x38d/0x550
[ 1146.299544]  ? __shm_open+0x346/0x650
[ 1146.300084]  shm_mmap+0xda/0x200
[ 1146.300570]  mmap_region+0x6be/0x1c20
[ 1146.301146]  ? __pfx_mmap_region+0x10/0x10
[ 1146.301807]  ? security_mmap_addr+0x7d/0xa0
[ 1146.302480]  ? get_unmapped_area+0x1e9/0x3e0
[ 1146.303093]  do_mmap+0x82c/0xf50
[ 1146.303595]  do_shmat+0xe3b/0x10d0
[ 1146.304125]  ? __pfx_do_shmat+0x10/0x10
[ 1146.304677]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1146.305462]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1146.306308]  __x64_sys_shmat+0xd0/0x170
[ 1146.306894]  ? __pfx___x64_sys_shmat+0x10/0x10
[ 1146.307556]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1146.308294]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1146.308972]  do_syscall_64+0x3f/0x90
[ 1146.309510]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1146.310259] RIP: 0033:0x7f269ad14b19
[ 1146.310798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1146.313282] RSP: 002b:00007f269828a188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e
[ 1146.314408] RAX: ffffffffffffffda RBX: 00007f269ae27f60 RCX: 00007f269ad14b19
[ 1146.315401] RDX: 0000000000007000 RSI: 0000000020400000 RDI: 0000000000000000
[ 1146.316390] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1146.317390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1146.318362] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[ 1146.319368]  </TASK>
[ 1146.321793] HugeTLB: unable to allocate vma specific lock
08:53:45 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, 0x0, 0x0)

08:53:45 executing program 0:
perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
syz_read_part_table(0x0, 0x1, &(0x7f0000001f00)=[{&(0x7f0000000000)="c9fa09343bb8fd97cd3b2abd40e23eb8b76915848124e29981a1bd8d3fe8b681f3fabb63", 0x24, 0x100000000}])

08:53:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:45 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500006808065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:53:45 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:53:45 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 43)

[ 1146.565437] sg_write: data in/out 101214172/247 bytes for SCSI command 0x21-- guessing data in;
[ 1146.565437]    program syz-executor.5 not setting count and/or reply_len properly
08:53:45 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080), 0x0)

[ 1146.599440] sg_write: data in/out 101214172/247 bytes for SCSI command 0x21-- guessing data in;
[ 1146.599440]    program syz-executor.5 not setting count and/or reply_len properly
08:53:59 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}, {&(0x7f0000000300)="b5d9c1e44f6133d56efea2a31187491c10abbde692f1a0392bd72ac9fc2d17ae1151bbb8093e90ce0ca4d51e305ef3ff07a37972d1402088c9bc161e82bcb2ee99efe4fe52412a631e839f65f110bc1c5849121b2a58fd4125ba5b99bd2a50fbfa15932041545119a82e0fc2efc4a6a4a32785161d8f2a6da3a5ef25b2b8de8d8682b0e84bc12017b671f7ad0ebd441f3ab40acba8e76fcb3b70bddec060274b", 0xa0}], 0x2, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:59 executing program 4:
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0xfc, 0x0, 0x0, 0x0, 0x200000000200, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x42800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x9, 0x0, 0x78, 0x0, 0x7fff, 0x800, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x6000, 0x7, 0x33, 0x4, 0x4, 0x1, 0x1ff, 0x0, 0x1}, 0x0, 0xa, r0, 0x10)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3, 0x1}, 0x49000, 0x0, 0x13b, 0x0, 0x4, 0x4, 0x7, 0x0, 0x1ff, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x6, r1, 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x1f, 0x3, 0x0, 0x8, 0x0, 0x0, 0x26220, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x7f, 0x1}, 0x400, 0x9, 0x80, 0x4, 0x3, 0x924, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x9, r2, 0x3)
r3 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7f, 0x48, 0xc2, 0x9, 0x0, 0x1, 0x29430, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x1ff, 0x1}, 0x46406, 0x4, 0xfcd, 0x9, 0x1, 0x6, 0x5, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x3, r1, 0x9)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = getpid()
fcntl$setown(r4, 0x8, r5)
ptrace$peek(0x2, r5, &(0x7f0000000200))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r7 = getuid()
fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r7}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',fscache,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c7065726d69745f645f72656374696f2c646566636f6e746578010ae21923ed1374250172743d73", @ANYRESDEC=0x0, @ANYBLOB=',measure,subj_role=hugetlbfs\x00,smackfsdef=hugetlbfs\x00,fscontext=user_u,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x6, 0x3f, 0x4, 0x0, 0xd835, 0x84080, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x10000, 0xf2ee}, 0x4000, 0x5, 0xc8f2, 0x4, 0x2, 0x101, 0x3, 0x0, 0x7f, 0x0, 0x2}, r5, 0x2, r6, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080))
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c)

08:53:59 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:53:59 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xb58a, 0x100000001, 0x2})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001540)={0x0, 0x2, 0xffffffffffffffff, 0x6})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000)=0x5e, 0x4)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r5 = getuid()
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000b7672e2ca30a4eb758bcc4e543f620e1a8c613a7e575900a5b6ae386b56dadea6152030cb26b82e75042e3ca3d00b3d64c2ef340120b6ab69ae9c4ef3f263fe472f157f22d2e311a6710e80a2ee94b06cf84d2824aadae1e0f1a081ef4fdbcf5cf926f7a9b0b1cd5569a2f4d", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
accept4$unix(r4, &(0x7f0000000180), &(0x7f0000000240)=0x6e, 0xc00)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff1f}, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)

08:53:59 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080), 0x0)

08:53:59 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000) (fail_nth: 44)

08:53:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500006c08065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1160.774153] sg_write: data in/out 101215196/247 bytes for SCSI command 0x21-- guessing data in;
[ 1160.774153]    program syz-executor.5 not setting count and/or reply_len properly
[ 1160.781335] sg_write: data in/out 101215196/247 bytes for SCSI command 0x21-- guessing data in;
[ 1160.781335]    program syz-executor.5 not setting count and/or reply_len properly
[ 1160.787291] FAULT_INJECTION: forcing a failure.
[ 1160.787291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1160.788100] CPU: 0 PID: 7242 Comm: syz-executor.3 Not tainted 6.1.0-next-20221214 #1
[ 1160.788630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1160.789182] Call Trace:
[ 1160.789373]  <TASK>
[ 1160.789544]  dump_stack_lvl+0x8f/0xb7
[ 1160.789834]  should_fail_ex.cold+0x5/0xa
[ 1160.790133]  _copy_to_user+0x30/0x1c0
[ 1160.790408]  simple_read_from_buffer+0xd0/0x170
[ 1160.790756]  proc_fail_nth_read+0x19c/0x230
[ 1160.791090]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1160.791516]  ? security_file_permission+0xb5/0xe0
[ 1160.791873]  vfs_read+0x2e1/0x9f0
[ 1160.792134]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1160.792477]  ? __pfx_vfs_read+0x10/0x10
[ 1160.792784]  ? __fget_files+0x270/0x450
[ 1160.793104]  ksys_read+0x12b/0x260
[ 1160.793371]  ? __pfx_ksys_read+0x10/0x10
[ 1160.793666]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1160.794031]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1160.794407]  do_syscall_64+0x3f/0x90
[ 1160.794671]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1160.795036] RIP: 0033:0x7f269acc769c
[ 1160.795296] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1160.796498] RSP: 002b:00007f269828a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1160.797012] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f269acc769c
[ 1160.797513] RDX: 000000000000000f RSI: 00007f269828a1e0 RDI: 0000000000000003
[ 1160.798008] RBP: 00007f269828a1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1160.798497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1160.798990] R13: 00007fff4a070daf R14: 00007f269828a300 R15: 0000000000022000
[ 1160.799503]  </TASK>
08:53:59 executing program 4:
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x12881, 0x0, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
readahead(0xffffffffffffffff, 0x60, 0x9)
ioctl$SNAPSHOT_FREE(r4, 0x3305)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
shmctl$IPC_RMID(0x0, 0x0)

08:53:59 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:53:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500007408065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:54:00 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

[ 1160.982714] sg_write: data in/out 101217244/247 bytes for SCSI command 0x21-- guessing data in;
[ 1160.982714]    program syz-executor.5 not setting count and/or reply_len properly
08:54:00 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:54:00 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080), 0x0)

[ 1161.027587] sg_write: data in/out 101217244/247 bytes for SCSI command 0x21-- guessing data in;
[ 1161.027587]    program syz-executor.5 not setting count and/or reply_len properly
08:54:00 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:54:00 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1161.164149] random: crng reseeded on system resumption
[ 1161.197294] Restarting kernel threads ... done.
[ 1161.403039] random: crng reseeded on system resumption
[ 1161.411428] Restarting kernel threads ... done.
08:54:13 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:54:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500007a08065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:54:13 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:13 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7002)

08:54:13 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 1)

08:54:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getpeername(0xffffffffffffffff, &(0x7f0000000180)=@l2, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
splice(r0, 0x0, r1, 0x0, 0x9, 0x4)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000240)='./file1\x00', 0x119)

08:54:13 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb8e1cc098df418c425764d3e45f1f8957cb51b49ecc5fa1568b2e59df40f67ac913828726034a0462a385198c1cc665ebb5d3e5c81e858f7f0fd72bfb1b03420f9c726a81a1e96507fc1846dd038cb0976cfa25e114fd6c0084e5e20874477d17a6a856", 0xc6}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:13 executing program 0:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x0, 0x89})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000013c0)={0x2, 0x6, 0x7, 0x19, 0x139, &(0x7f0000001640)="cad7d4952c269ec5008f898fa13ef276e0938de937e683a783744d3968de242f065403fe01b72f90089b92ab6f9d7af9458755ccf9fbf22a23d39ac54e81d77faca2c82b5c0fa3c1e1e5f228328328d8678eaf44f9d930420bd4e1f3681bf5cc112184ba45e9222b0ea7c2d54dd33bc631b0a560f7f8c44e7bd3ef15de5ea413b62e5db6f24b7fd1816090e811945dc0104b25d2bae682888bdaf514029d4ca51e03f2262131f19ccbdfc05482224c5ee4496f852bb3c03d8de27a96f21eab3a93ce6059869cf03708cde096bdc03c4c8575ce33e2f3cc67898d166af2cefee816e48dbaa655fddbf303bb6171c4184955dd5a211a01dbf5c791c606b1e20641305d81e777fcb051751f38f530897bd2b44a65a5b6576a791575efde7117b7e6bcffe752982b55478dcc19777a9c7ec3569bfdeed2cf39292e7880145b4d249fcef6795732f28b72adfa97de4ba3fa6fd8477d8eb9d473acc7b8ad7f3b3c34bb019522c14816c2cd7816c546a108b2da0317dc3a47a7b52d9922a779b796dea1cffae75fb34c0f07a22fbf84800a6ec0ca0457fd71a3a68ae6732fb156ae2f8be7abc9c7da3f76b826df61776776ede42e26562ba9374cfc9911ef8ca8a90fc92bf8b75f6bc660cd4b4bd96107a86358ae80f3082cd59df8ccf17484fe120ea8b65e52c5c7d886810a4a91edc139ee4d7a0042f31e45985d4dc7fae056ca6c9de98301951a01cd00dabfc9e1439de164971da1976d93883e6aebc7a363c8a4477c2d7ccb095399dad2e92352ad0968842f9c4e1c412426e28e9992b40b0bd9483b637e2d4ecf58d9485b328b49cc4611e3b20c13b62760ab101cf83053cd5bc446acdda9b45799743b51474fbd2db3144f8f7e59a7ccbe4641c54f2e25c638b92f0716ddf17638bdc92bcd1716318f232924c6e05ba67633da3cf40e05588a1b63932fb40d1565886fd99b62347f86961a96f0c2a10b81828c08d3ca935d43fe05b2e19b15cb635aa35be73c60e36f4179d159ae583014dca03b60b7c0abbb19870c36e654aba61f585dd986185cd31ef4db310dab4a61125c005e938a0dde0c516d2764250fe2633d0e1c7c02a22951e659082c49da3f5ae35456bbffefd87433f77628345ecb910b4b8185649f1429bd4b615ebfd5ba2267e9531621acf17e68bc56f5723f001ae649fa047923542f269585992e2ac41f6b0f61e46d4f0e766f659a830f6779d6ca481228bacf9f0f0fab5293001fd1aeea2b30b86675136f1337e21685fd134b125a3dc9caa4898e542df5e8ad2aa06636493f28643ad05e1aa37cf9d3e618242d721b40b100c76263e022e98881c12c401c58d69f683a882c3c5738d963d8fa98524f74d245384616e1ec2843caf9fc7c4bd59ed23f853f3b61310cfa6737b70b60bfe1c22f6c861ddf0aa88afb368d92870e303448e8ba"})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0))
r1 = syz_open_procfs$userns(0x0, &(0x7f0000000180))
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)=<r2=>0x0)
r3 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001280)=[{&(0x7f0000000400)="262797243a1ddb877f576f32535e196da18c2476d1b563364fdfadca33fe75f48d2b04fe54b4b144f521f74feeafdca64ed9ed62328959a0b374798e53220dbdfd44dd4431bada701b6c582163f2520b027f698304e207cc0f64a0e526b3144498e85adca7b6f2e4b75e937076256f32aa39bad89fe70ea8a0460c5a622f007488a1290a9ed947524f7cfebd8f7cd39cee25c7d7a9218e943446b6fc3852d2fa413e2458b59d660c7a9b796d68db4840f89eb56d34d3d945064dd97ae518", 0xbe, 0x10001}, {&(0x7f0000000700)="47215122dc80af9fad7fffe8141058e5aefaa9ecb9457263f3298c84b6d4d981b9293bbb6ea9d1e66429c5597db0d9927c172a7d83390279b5db52549b30e029dd071e82277df76950082ad8e54e867529ba1e248e4a27b2c11b661e0f64a65c8d758f1feb27d430fa6251407bfa51600f4d9c8683b8d9b2df6d2f0064baa3d4808b9ad7162e767977", 0x89, 0xffffffffffff0001}, {&(0x7f0000000100)="9024966fe598b03a204c03c2409fd50c90451061ec6c539c8611dc336fe70f87dadd366362b93ccb6088a97c3628bd7b9e43a0e199a159c189fbb2f1b0", 0x3d, 0x9}, {&(0x7f0000000140)="07e79f4432d84c8807deb3cec6e157e777335d7182e9c9cca3ac828158fbff6af0f46bc2debbf9dcefef91f9245253fec7f55ffeb45f3bc3cb8dfe887f", 0x3d, 0x8}, {&(0x7f0000000200)="c4ce580778c657c1bd949ebb036e4f93700a6c42866b1b7b3fc8201554ceb46ba923bab18c68c9461ebd96456c3050c51744da57200e4ff8767554ab", 0x3c, 0xfff}], 0x1000000, &(0x7f0000001440)=ANY=[@ANYBLOB="646f74732c6d61736b3d5c4d41595fe366cae5d0e4e95a6a5f7f7970653d51275e27232f5d2733252c657569643d126c55499eb974f2a9a88aa5bdb65d63624887f427ffa3fed256988280cf80987248cb88101029374557c56cf9d6144f10fa6b7faab0743a0a9c4de2e12951cfe5c13eb2272a9f9a1798a5e3c100"/135, @ANYRESDEC=r2, @ANYBLOB="2c736d61636b6673666c6f6f723d2f6465762f7474795333002c6d6561737587f1bd72652c666f776e", @ANYRESDEC=r2, @ANYBLOB=',fsuuid=049a\x00639-c\x0055-cd18-44ce-af\x0068e38,dont_hash,\x00'])
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x3, &(0x7f0000000240)=[{0x1, 0x5, 0x22, 0x7f}, {0x4f, 0x82, 0x81, 0x80}, {0xb5b4, 0xf7, 0x1, 0xff}]})
dup3(r3, r4, 0x80000)
epoll_create(0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x521a01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_open(0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

08:54:13 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 1174.432461] sg_write: data in/out 101218780/247 bytes for SCSI command 0x21-- guessing data in;
[ 1174.432461]    program syz-executor.5 not setting count and/or reply_len properly
[ 1174.461133] sg_write: data in/out 101218780/247 bytes for SCSI command 0x21-- guessing data in;
[ 1174.461133]    program syz-executor.5 not setting count and/or reply_len properly
08:54:13 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:54:13 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7003)

08:54:13 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000009065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:54:13 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7002)

08:54:13 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1174.745124] sg_write: data in/out 101253084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1174.745124]    program syz-executor.5 not setting count and/or reply_len properly
[ 1174.755549] sg_write: data in/out 101253084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1174.755549]    program syz-executor.5 not setting count and/or reply_len properly
08:54:13 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="02", 0x292e9)

08:54:30 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7004)

08:54:30 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x7e)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
dup(r0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r0, &(0x7f0000000000), 0x0, 0x1ff, 0x2)
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

08:54:30 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r1, 0x4, 0x70bd29, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="890fa4764159"}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}], @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x0, 0x3, 0x5, 0x200}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000505a1e7a010d75f7304ba92e279c8d269704c79b79bc32b59357bee15379bf3efeccdb3d6ee9e2a3df04e6b1e28520eac9c84eefa0e1f274f54893a05a35461237fac7296f924857c24eec5a0e571be75463d67cb51f9209000000000000001cfa6c1b6d2c14907727030c234d09dc12fe6660bf6adc16d1af4c958d345e307e097e9b", @ANYRES16=r1, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x3f5, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0xd0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r4)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', &(0x7f0000000480)={0x101000, 0x0, 0x3}, 0x18)
openat(r7, &(0x7f00000004c0)='./file1/file0\x00', 0x200, 0x8)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat(r8, &(0x7f0000000000)='./file1\x00', 0x40640, 0x168)
name_to_handle_at(r8, &(0x7f0000000500)='./file1/file1\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="9000000024000000ff07000006000000050000008000f96ec2405f1edc7b51b819724467effed5b8388af21ee71862f4c95c5ebf1b099203374d05ff76a3c186293621be4f82105b84dd6b9f87905486ebeab6424997a3f897ca690231a4079d6059715994ae5529bc7b4b5f4a5ab833810bfb8c031d09d77d8f1c903565bbfa583ca51d3d05035768ca866b42a9f38f081aa40efa440000"], &(0x7f0000000600), 0x1800)
sendmsg$FOU_CMD_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x40004)

08:54:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000018065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:54:30 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:54:30 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="03", 0x292e9)

08:54:30 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1191.113799] sg_write: data in/out 102236124/247 bytes for SCSI command 0x21-- guessing data in;
[ 1191.113799]    program syz-executor.5 not setting count and/or reply_len properly
[ 1191.124000] sg_write: data in/out 102236124/247 bytes for SCSI command 0x21-- guessing data in;
[ 1191.124000]    program syz-executor.5 not setting count and/or reply_len properly
08:54:30 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200050000002f065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:54:30 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:54:30 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="04", 0x292e9)

08:54:30 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7009)

[ 1191.277953] sg_write: data in/out 103743452/247 bytes for SCSI command 0x21-- guessing data in;
[ 1191.277953]    program syz-executor.5 not setting count and/or reply_len properly
[ 1191.300998] sg_write: data in/out 103743452/247 bytes for SCSI command 0x21-- guessing data in;
[ 1191.300998]    program syz-executor.5 not setting count and/or reply_len properly
08:54:30 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:30 executing program 4:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7004)

08:54:30 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x700a)

08:54:30 executing program 0:
syz_io_uring_setup(0x659e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
poll(0xfffffffffffffffe, 0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000003980), &(0x7f00000039c0)='./file0\x00', 0x0, 0x1, &(0x7f0000003a80)=[{&(0x7f0000003a00)='P', 0x1}], 0x1006021, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])

08:54:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000009065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1191.501638] sg_write: data in/out 101253084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1191.501638]    program syz-executor.5 not setting count and/or reply_len properly
[ 1191.518127] sg_write: data in/out 101253084/247 bytes for SCSI command 0x21-- guessing data in;
[ 1191.518127]    program syz-executor.5 not setting count and/or reply_len properly
08:54:46 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x48010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:54:46 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:46 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="05", 0x292e9)

08:54:46 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x700b)

08:54:46 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={<r1=>r0, 0x8, 0x0, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r2 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r2)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000003c0))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, r6)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r6, &(0x7f0000000080)="01", 0x292e9)

08:54:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000010065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:54:46 executing program 0:
r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x0, 0x103, 0x1cb}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r2, r3], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x3}, 0x1200, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000480))
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
r5 = creat(0x0, 0x27)
r6 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0, 0x80)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e21, 0xab, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, {0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x0, [0x1, 0x6, 0x4b2e, 0x0, 0x4, 0x3, 0x5, 0x41]}, 0x5c)
io_uring_enter(r5, 0x3b5d, 0x91b1, 0x3, &(0x7f0000000180)={[0x3]}, 0x8)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), 0x0)

08:54:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:54:47 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1207.986051] sg_write: data in/out 101711836/247 bytes for SCSI command 0x21-- guessing data in;
[ 1207.986051]    program syz-executor.5 not setting count and/or reply_len properly
[ 1208.005199] sg_write: data in/out 101711836/247 bytes for SCSI command 0x21-- guessing data in;
[ 1208.005199]    program syz-executor.5 not setting count and/or reply_len properly
08:54:47 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\'%\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:54:47 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="06", 0x292e9)

08:54:47 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x5e010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:04 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x8, 0x3, 0x8, 0x6, 0x3, 0x39})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:55:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0), 0x0, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbe46d38c08fdb806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4d44c0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x1, 0x7, 0xff, 0x0, 0x7, 0x84403, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x3, 0x6}, 0x6470, 0x4, 0x3, 0xa67441bb6abf0d97, 0xe3, 0xd, 0xb46d, 0x0, 0x8, 0x0, 0x81}, 0x0, 0x4, r1, 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x41030)

08:55:04 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:04 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\b', 0x292e9)

08:55:04 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={<r1=>r0, 0x8, 0x0, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
r2 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
dup2(r4, r2)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000003c0))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup2(0xffffffffffffffff, r6)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r6, &(0x7f0000000080)="01", 0x292e9)

08:55:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000018065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:04 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1225.296524] sg_write: data in/out 102236124/247 bytes for SCSI command 0x21-- guessing data in;
[ 1225.296524]    program syz-executor.5 not setting count and/or reply_len properly
[ 1225.311825] sg_write: data in/out 102236124/247 bytes for SCSI command 0x21-- guessing data in;
[ 1225.311825]    program syz-executor.5 not setting count and/or reply_len properly
08:55:04 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000907000/0x1000)=nil)

08:55:04 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:04 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:04 executing program 3:
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x0, '\x00', [{0xbd, 0x6dc, 0x17962000, 0x7fff, 0x0, 0x2}, {0x0, 0x770, 0x7c, 0x6, 0xfffffffffffffffa, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:55:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200050000002f065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:04 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\t', 0x292e9)

08:55:04 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:04 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x8, r1)
ptrace$peek(0x2, r1, &(0x7f0000000200))
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0xbc, 0x0, 0xe3, 0x0, 0x100, 0x40004, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe6, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x81, 0x1ff, 0xfffff122, 0x2, 0xffff, 0x4, 0x4, 0x0, 0x3, 0x0, 0x3}, r1, 0x9, 0xffffffffffffffff, 0x9)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}})

[ 1225.576717] sg_write: data in/out 103743452/247 bytes for SCSI command 0x21-- guessing data in;
[ 1225.576717]    program syz-executor.5 not setting count and/or reply_len properly
08:55:04 executing program 3:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000)

[ 1225.592946] sg_write: data in/out 103743452/247 bytes for SCSI command 0x21-- guessing data in;
[ 1225.592946]    program syz-executor.5 not setting count and/or reply_len properly
08:55:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008055a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>r0}, './file1\x00'})
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3, 0x1, 0x0, 0x4, 0x0, 0x401, 0x20014, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x212d, 0x0, 0x8000, 0x4, 0x9, 0xffff, 0x8, 0x0, 0x4, 0x0, 0x401}, 0xffffffffffffffff, 0x6, r1, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x36)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r3, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000140)=0x1)
pwrite64(r4, &(0x7f00000000c0), 0x0, 0x8040000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='/dev/sr0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0xffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
fsopen(&(0x7f0000000200)='devpts\x00', 0x0)

08:55:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:19 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="4d000000000000000005ff047f060904000200007c000000060000000000c0ff0800000006000000ff000000008000007f00000049c39f2840afba7a815f4a57e5a9271310038d959eb19d7121290ee53c7040a4c859094da3427a71f95c9d1892cca681907e28013bc8cf00"/117]})
openat(r5, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r3, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setresuid(0x0, r6, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r7, 0x6, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x10000, 0x0, &(0x7f0000000140)=[r7]}, 0x1)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r8, &(0x7f0000000080)="01", 0x292e9)

08:55:19 executing program 3:
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d000}, 0x30)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x20080)
mmap$perf(&(0x7f0000fc0000/0x3000)=nil, 0x3000, 0x8, 0x810, r0, 0x3)

08:55:19 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\n', 0x292e9)

08:55:19 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1240.299463] sg_write: data in/out 84410332/247 bytes for SCSI command 0x21-- guessing data in;
[ 1240.299463]    program syz-executor.5 not setting count and/or reply_len properly
[ 1240.312446] sg_write: data in/out 84410332/247 bytes for SCSI command 0x21-- guessing data in;
[ 1240.312446]    program syz-executor.5 not setting count and/or reply_len properly
[ 1240.334136] syz_tun: refused to change device tx_queue_len
08:55:19 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000000)=""/4096)

08:55:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008095a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:19 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:19 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\f', 0x292e9)

[ 1240.504435] sg_write: data in/out 151519196/247 bytes for SCSI command 0x21-- guessing data in;
[ 1240.504435]    program syz-executor.5 not setting count and/or reply_len properly
[ 1240.516819] sg_write: data in/out 151519196/247 bytes for SCSI command 0x21-- guessing data in;
[ 1240.516819]    program syz-executor.5 not setting count and/or reply_len properly
08:55:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000001000200000000002000020000000000"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',fscache,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',permit_directio,defcontext=staff_u,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c6d6561737572652c7375626a5f726f6c657d6875676573646566fa5ed23b492097386673002c6673636f6e746578743d757365725f752c666f776e65723e1bdb35d4cc475bcc02187cd6b243c9ebe610bd78ea1d5fbeb9de546b907007ec85765e490fb8bf334eda64bd2c1cc2c0c8c8604ed77ea69760d4369551f9220808fd69b709853c72932aac68f5a6f0f3634845c1c5b9b328f0011332cd17ff90e09cabf49e1f004bfeeecca1a55eff82fbd7bc9d78dc43785976259e1b8106aece76aee36f", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x551c}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x1})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:55:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008105a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1240.651490] syz_tun: refused to change device tx_queue_len
08:55:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1240.756127] sg_write: data in/out 268959708/247 bytes for SCSI command 0x21-- guessing data in;
[ 1240.756127]    program syz-executor.5 not setting count and/or reply_len properly
[ 1240.767418] sg_write: data in/out 268959708/247 bytes for SCSI command 0x21-- guessing data in;
[ 1240.767418]    program syz-executor.5 not setting count and/or reply_len properly
08:55:35 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:35 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {0x0, 0x0, 0x9}, {0x0}, {0x0, 0x0, 0x1c}], 0x10080, &(0x7f0000000680)={[{@uni_xlateno}], [{@fsname={'fsname', 0x3d, '\x00'}}]})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = getpid()
fcntl$setown(r1, 0x8, r2)
ptrace$peek(0x2, r2, &(0x7f0000000200))
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x40, 0x80, 0x2, 0xf, 0x0, 0x1, 0x80, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x713b, 0x2}, 0x20a, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x3)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x81, 0x80, 0x9, 0x0, 0x100, 0x4000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x8000, 0xffffffff, 0x9, 0x0, 0xffffffffffff9fd4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x4}, r2, 0x4, r3, 0xb)

08:55:35 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\r', 0x292e9)

08:55:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008635a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:36 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001940)=ANY=[@ANYBLOB="01000703fd6d000018090000000000", @ANYRES32=<r1=>r0, @ANYBLOB="fb040000000000002e2f66696c653000"])
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000080))
r2 = inotify_init1(0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x4}}, './file0\x00'})
r4 = syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3f, 0x5, &(0x7f0000001400)=[{&(0x7f0000000180)="db6609e394d75c9da2bac52be7c631dee0ad0a2416f231b1cec3cfc836489c28a4db0b5daef846b1cebd394902fbfad6ee234df4407a5282c9a2f5d742f6deff12930474a10c1049a5c2c5bc5bbb55417249e8ab5ff4395a3d25d61fd8725ee7e87cc253b50a1753cd0af0a2305b65b435f3da79e3d1c58478fca6d0109ac144aa465d4b3d8b75a090f78c75c739a7606c76926096956680902239209b252c47d47058bc4d82ad7751adf375ca1f76fd6a612c7e06c69b96be5ff7b8e9280d262dad5559c7348dcb89da8dcea6f0d4f907807f7357ca3571f9e16ab7e26366b1e69cbf36fb629933ee3c826461", 0xed, 0x10001}, {&(0x7f0000000280)="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", 0x1000, 0x26b}, {&(0x7f0000001280)="d191d6a1a66f9390993ee2a76a1eef919e7b5c4e9dfcaa98db447dc0f6d5cb2d", 0x20, 0x9}, {&(0x7f00000012c0)="910d28e7e655205777b2534fec676d89a7c3dd67801c60b4a7cfccdb562ca24b3e56739528bd8acba9bd179c25fa65463ea452ab78506dff06a3241c5befc401c0f178a8a703310ef598dd3675fc6b1c0b3082b968bb925a7ced921f6882dfb3df7ef2e662f2de805e1e4cb451be2a2748a67ed5e1b86c519d4de456d5654af7b1a2fc5f4615c1843bf3734e56557eeb331e60e2bd77c719ce9f1c061fa354e5b2eeeb43d06e7668fe2bb9b293d4b82ba92eea8988c1541cfbb2d58eaf64428f17a776dad214e6de840daf832f573eb1ebc6f328f2b99fc295e582163bb46a9df5807d5e8647d1eb1cbc1d9a832046f50d4fdc655c81", 0xf6, 0xffffffffffffffc1}, {&(0x7f00000013c0), 0x0, 0x100}], 0x80, &(0x7f0000001480)={[{@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@nfs}], [{@appraise_type}, {@euid_lt={'euid<', 0xee00}}, {@audit}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '#'}}]})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001540)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
r6 = openat2(r5, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x408100, 0x171, 0x1f}, 0x18)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0)
dup(r7)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000013c0)={{r4}, {@val, @actul_num={@void, 0x0, 0x70}}})
r8 = syz_open_dev$hidraw(&(0x7f0000001640), 0x2, 0x40240)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001680)={0x0, 0x4, r8, 0x3, 0x80000})
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000016c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat$vcsu(0xffffffffffffff9c, &(0x7f0000001900), 0x800, 0x0)

08:55:36 executing program 3:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r0=>0x0})
sendto(0xffffffffffffffff, &(0x7f0000000000)="103250cfeaeb205d03aaecf1d1fd", 0x5ee, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r0}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendto(r1, &(0x7f0000000000)="103250cfeaeb205d03aaecf1d1fd", 0x5ee, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r3}, 0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendto(r5, &(0x7f0000000000)="103250cfeaeb205d03aaecf1d1fd", 0x5ee, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r7}, 0x80)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r10=>0x0})
sendto(r8, &(0x7f0000000000)="103250cfeaeb205d03aaecf1d1fd", 0x5ee, 0x0, &(0x7f0000000040)=@xdp={0x2c, 0x0, r10}, 0x80)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="898f78d7", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff00000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffffff7f40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB], 0x3d0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x5, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x310)
shmat(0x0, &(0x7f0000df7000/0x1000)=nil, 0x7000)
r11 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r11, 0x6628)

08:55:36 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1256.956107] sg_write: data in/out 1661468636/247 bytes for SCSI command 0x21-- guessing data in;
[ 1256.956107]    program syz-executor.5 not setting count and/or reply_len properly
[ 1256.958412] sg_write: data in/out 1661468636/247 bytes for SCSI command 0x21-- guessing data in;
[ 1256.958412]    program syz-executor.5 not setting count and/or reply_len properly
08:55:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d00ab2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1256.999781] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1256.999781]    program syz-executor.5 not setting count and/or reply_len properly
[ 1257.003014] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1257.003014]    program syz-executor.5 not setting count and/or reply_len properly
08:55:36 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r1, 0xb588, 0x0, 0x2})
r2 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0x8, 0x8})
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000000c0))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)

08:55:36 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@random="dda978731a96", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @broadcast}, @source_quench={0xd, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000080), 0x7ff, 0x9)
syz_emit_ethernet(0x113, &(0x7f0000000100)={@random="a74906fc1629", @multicast, @void, {@mpls_mc={0x8848, {[{0x40}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4, 0x0, 0x1}], @ipv6=@icmpv6={0xe, 0x6, "6afda9", 0xc9, 0x3a, 0xfe, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x21, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x98c}, @jumbo={0xc2, 0x4, 0x68}, @jumbo={0xc2, 0x4, 0x8}]}], @echo_reply={0x81, 0x0, 0x0, 0x5, 0x2, "17ee3a1e08ff74ccd35dee02adc4ec5d4aa2fa98fc12e47c9d550b8db0b775028fba5f9c27850b8328f0dd5d7a08aea4d85d579e704b05a2bef3bc9757195fab1f97fe4547b2ea4d306e9f843c6b90996348f4dd253676353fe274082f2f2341c97ac4be97058e9cf1b42254144bfda2f4fe1d5bba4b07ff61335661902a9514a50a92fa8cb7d1ba39c8d3e4da58bd3900"}}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xba5, 0x59e, 0x84b, 0xa59]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r0=>0x0})
recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0x1000, 0x40, &(0x7f0000001240)=@xdp={0x2c, 0x4, r0, 0x21}, 0x80)

08:55:36 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2029d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:36 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="0f", 0x292e9)

08:55:36 executing program 3:
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x3)

08:55:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x101042, 0x120)
r1 = syz_open_procfs(0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x100, &(0x7f0000000240)={0x100008, 0x1000f3, 0x100000, {r1}}, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/210, 0xd2}, {&(0x7f0000001480)=""/79, 0x4f}, {&(0x7f0000001500)=""/104, 0x68}, {&(0x7f0000001580)=""/222, 0xde}, {&(0x7f0000001680)=""/110, 0x6e}], 0x6, 0x1000, 0x5)
fchmod(0xffffffffffffffff, 0x82)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(0xffffffffffffffff, &(0x7f0000001780)='./file0/file0/file0\x00', 0x400080, 0x140)
sendfile(r2, r0, 0x0, 0xfffffdef)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x400040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1257.260091] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1257.260091]    program syz-executor.5 not setting count and/or reply_len properly
08:55:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1257.272766] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1257.272766]    program syz-executor.5 not setting count and/or reply_len properly
08:55:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2039d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1257.399541] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1257.399541]    program syz-executor.5 not setting count and/or reply_len properly
08:55:36 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x9, 0x9, &(0x7f00000019c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f00000001c0)="e403fd61ffe16c4a0b4a192bcd36df4ee81c16ef731730261e1e5cef179bb00e8ba7cff2ad8b507cdc8518f3d8ab853b40296cb13aca46bfed6c0edad7f0d190bf31ff1a1f6cd3dd3b531b95a740268810358b55a4cbcb2dba", 0x59, 0x9}, {&(0x7f0000001300)="86cc5348e5df3ddb42b08603584ce2b1faeff461d27cb21d44967c4aebe4251ec97c8172e2cc43c48480c3abf21c35233c594c1a93646310aa9a79d137fde8c9d56aa794ff5fecdedaba96376163b80213609b8e4f3fc98f571fd81fe70acb7f1d5b1091508f76c5af90f11cf205909c70f3353b50ea0d0196aa44d41c8a080b0f048bb4937bc0559be569b2a55c29f27a", 0x91, 0x3f}, {&(0x7f0000000240)="3ee5ed5c5a33", 0x6, 0x20}, {&(0x7f00000013c0)="898938fc0024ef2347baf00c327bac8e8334b0b50c67d2eb6d0a7ce74adae7feade3aac356499e41332ff83b0ca0824a96a5f6511cda10cedd481ecdc3a26ab2fac196318e558bfe03402b9d0a731c883797812b06914e218a312663b3c480693616ef696906b64582614dd78f9361fa11add084ebebb270", 0x78, 0x1}, {&(0x7f0000001440)="0532ea85c0d9c26bc4c7b0442a9cf5a0d27f2f329d4d1d3f8f19ddba82453536b03912689bed71af63e761a93ae243899c00b355e8015a9718b464de62c08abe28e36d3136a0a7dd6d59c3733ed23531ad63f59f4500cfe4a0afac756bda1f170f70f12182b980ae5d707de31470cf0bd6c4230d251915f773e65069eda632c1c074fbe0ed904fbc1f31a88046e6904cc9b708b9311c5ee1e94ce00b76f63bdf74d3beaf9198badb8f2062be48f05d5cbc5112151b20597b9733cb89ccf5827c763af9ca9e0f084b8e87e0d394214717fb633e189484e839", 0xd8, 0x1}, {&(0x7f0000001540)="7f67a26264b80b557a6b387aa43d93d9e39ec5262e8b1a77925e15740fd8270c6fe71304857c0a272bdcdd25fba8d3789545130dc276916a829dc4e1cfb1fe7930f4ee14d672c4d52e751b6e81864d73f02204763f", 0x55, 0x81}, {&(0x7f00000015c0)="77be863a23030ca2cab354860d15375b15dece54a52d58155cbf7159efcca5408196b9b2710ee7bc7a230b3eecca3fdaceeacab28941291f6b83551904047d43014ea9c66dfc8470dd1c28580e759fa8b63689e09894e3ebb90f6c172fc3f80fbdac40ddbad4fbbfc2b9ced51f8730f683f7d189b9a7db3a9aa3cadf1bd5f53a0845f8412504b77145", 0x89, 0x4}, {&(0x7f0000001680)="7a3ddf82b41fe726f842258cfcd6a8b894f9bfa0859b3b18b9730c8049ec717288b7e3029c5317711fdd40e776b461ef187ad8918270ea84d5b9b9c58d0eb01b79aa57068c0a55a2561bf60924fbf3be4a3e2b9006a93e50cb1c6886deef7fda241b02678b6f40dd0413f7b8a642d2354bcedd2638f4e0a9c56fc57add0407d61cd8b997e8f488f88d7d23c947eba2f003ede3003e2aed32d8c784380a33f74235226939e1a3ac34d9bab3251ba74d850f059b04c4f1dd17901ae73c7aae3e5f878aebaa7ac3e486ca7435", 0xcb, 0x9}], 0xc00, &(0x7f0000001940)=ANY=[@ANYBLOB="07f4b7010647410f733d78d2303232343d742c687567653d6e65db7665722c75c2ee3d", @ANYRESHEX=0xee01, @ANYBLOB=',dont_appraise,subj_type=@,\x00'])
ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001900)=ANY=[@ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=':-0\x00000000002147483649G'])
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect(0xffffffffffffffff, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r5 = getuid()
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r5}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001800)={'syztnl0\x00', &(0x7f0000001780)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0xf8, 0x25, 0x0, 0x4, @loopback, @loopback, 0x1, 0x8000, 0x774, 0x65}})
setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000001840)={@local, @rand_addr=0x64010100, r6}, 0xc)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'})
r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
signalfd4(r8, &(0x7f0000001880)={[0xe31a]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'})

[ 1257.538941] device lo entered promiscuous mode
08:55:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x53, &(0x7f0000000240)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x383a00, 0x30)
openat(r1, &(0x7f0000000300)='./file1\x00', 0xaf03, 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1/file0\x00'})
chroot(&(0x7f0000000000)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

08:55:50 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:50 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:50 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="10", 0x292e9)

08:55:50 executing program 3:
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x2)
r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:55:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2059d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:50 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:55:50 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8915, &(0x7f0000000080)={'dummy0\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8915, &(0x7f0000000000)={'lo\x00'})

[ 1271.919716] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1271.919716]    program syz-executor.5 not setting count and/or reply_len properly
[ 1271.926058] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1271.926058]    program syz-executor.5 not setting count and/or reply_len properly
08:55:51 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x15e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:55:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2069d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1272.033403] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1272.033403]    program syz-executor.5 not setting count and/or reply_len properly
[ 1272.040521] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1272.040521]    program syz-executor.5 not setting count and/or reply_len properly
08:55:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2079d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:55:51 executing program 3:
shmat(0x0, &(0x7f0000ff7000/0x7000)=nil, 0x1000)
r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000e7d000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x1000)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x0)
r1 = shmget$private(0x0, 0x6000, 0x2, &(0x7f00008ad000/0x6000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r1, &(0x7f000055d000/0x1000)=nil, 0x1000)
r2 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000a10000/0x1000)=nil)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000040)=""/138)
r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000540000/0x4000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000000)=""/24)

[ 1272.133575] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1272.133575]    program syz-executor.5 not setting count and/or reply_len properly
[ 1272.163028] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1272.163028]    program syz-executor.5 not setting count and/or reply_len properly
08:55:51 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="11", 0x292e9)

08:56:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2109d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:06 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:06 executing program 4:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000880)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000580)=""/222, 0xde}], 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x40000020)

08:56:06 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="18", 0x292e9)

08:56:06 executing program 3:
r0 = shmget(0x1, 0x1000, 0x4, &(0x7f0000920000/0x1000)=nil)
r1 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000fff000/0x1000)=nil)
shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x4000)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000)

08:56:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:56:06 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:56:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000100000079987cc354ce484b37733ac67e383e13e8876d1eb6b3f0de8c9a30b5c21c9f4a1bea8135272c709cb44568d679eee2598bf88cf1f5025ce8d89b24c4af0e102a1285a600000000", @ANYBLOB="00000000000000000dee0674144f038209a33951dc5b0dbdbeac4b57ebcef03e5c08d4c3bbc5c7faafdcd68b4f93355abaefd8bdf093ae4065324dee877784f10609aaef5715678138eec14ce0f5abc0728303c2471013b0f1000000000000000032bc364b906cda09ef645ccbbb0bc762fe320680ccfb7d3f5071b5a182d67671ca7e3dcc37f60c21d4ad44d847945f8b0b7568a095f5d544c06963c25da9a10e61a1c655f8160805ed144bbc16065194435de29a3f1ee29c3c867c390d68ca07766d575f6456750dcf203bb69d96643671450698936782254e0b18af5a6a1efa8b973c7186"])
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3, 0x1, 0x0, 0x7, 0x0, 0x401, 0x20014, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x212d, 0x0, 0x8000, 0x4, 0x0, 0xffff, 0x8, 0x0, 0x4, 0x0, 0x401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x36)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000140)=0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x121001, 0x80)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x8040000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700))
ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f00000003c0))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmstat\x00', 0x0, 0x0)
fsopen(&(0x7f0000000200)='devpts\x00', 0x0)

[ 1287.052771] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1287.052771]    program syz-executor.5 not setting count and/or reply_len properly
[ 1287.066045] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1287.066045]    program syz-executor.5 not setting count and/or reply_len properly
08:56:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2129d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:06 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000006180), &(0x7f00000061c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4408, &(0x7f0000000000)={[{@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x30, 0x37, 0x74, 0x25, 0x6b]}}, {@huge_never}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x11)
recvmsg$unix(r0, &(0x7f0000001940)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r2=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x2063)
syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f00000001c0)='./file0/file0\x00', 0xcbe6, 0x4, &(0x7f0000000640)=[{&(0x7f0000000340)="8b2db3ecfe6009b75de8ece37a4152b4024a0488062e80d27d1fa30e08dfde87882e8289a3e888ad6c03db59f3fe56cc5095eb920185d7e0070c98b1d7b76d68154e1e74eb57ae52a374e3fcf7dce131c2b8cdfadb89d5bafb5538d406478d3c3bf95a960816ed66a7cbaf7d4bd6c4988f8450fa051ca2526b0845141707905481a9970cda34883b515a3fc303858c5336716bfeb3af84399afed89d2f976a66edca5bbf730cdcb567f3d93ec4a429d778223cb9", 0xb4, 0xb67}, {&(0x7f0000000400)="c60229446d38963201cc7d736323b5ff9dd5e4ea7e32de7b8c", 0x19, 0x400}, {&(0x7f0000000580)="c8863490b97fe2a343c8dc81a60131668b31de16a303928ff704ea9f4f578054cf5b7419d2eb96b83f3747cd3a853237e52bd427a03e5b583f2b352b0b690eee033c2de8536d601438090dc434bb5e8ce7fdd93e86ddb79e8f2464b05538d3cf1a0938073b0adc2b8a383c7fa64e14fd432de8e493a130c2712f2a21913dffa9c014b3282694f6f242631332f9fdfb3a06d7c2e789f68f483fbfdbf53b39e2743a28dfb67c8f233c535038cc74d1f36816450488a3a887a7d04171e7078f7816", 0xc0, 0xddd}, {&(0x7f0000000440)="54a6cd56c568d2bf91492cca023ae077259941e0007a779645de28cc969eedf58e7a07b9f9215e78f2584e3c527c8720f9fecadb28358c8954c12d62", 0x3c}], 0x0, &(0x7f0000001980)={[{'measure'}, {'${,-'}, {'system.posix_acl_access\x00'}], [{@measure}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, ':^'}}, {@fowner_gt}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x34}}, {@obj_role={'obj_role', 0x3d, 'nr_inodes'}}, {@dont_measure}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = getuid()
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r4}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
statx(r3, &(0x7f0000000080)='./file1\x00', 0xc00, 0x8, &(0x7f0000000240))

[ 1287.199983] tmpfs: Bad value for 'nr_inodes'
[ 1287.207651] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1287.207651]    program syz-executor.5 not setting count and/or reply_len properly
08:56:06 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:56:06 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:06 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000e3e000/0x2000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/173)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x1000)
r1 = shmget$private(0x0, 0x9000, 0x8, &(0x7f0000579000/0x9000)=nil)
shmat(r1, &(0x7f0000af7000/0x3000)=nil, 0x6000)

[ 1287.227451] tmpfs: Bad value for 'nr_inodes'
[ 1287.255114] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1287.255114]    program syz-executor.5 not setting count and/or reply_len properly
08:56:06 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000004500)=ANY=[@ANYBLOB="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"], 0x0)
recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f0000000000)=""/3, 0x3}], 0x2, &(0x7f0000000400)=""/217, 0xd9}, 0x4}, {{&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/102, 0x66}, {&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/118, 0x76}], 0x6, &(0x7f0000000940)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001940)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/232, 0xe8}, {&(0x7f0000001ac0)=""/32, 0x20}, {&(0x7f0000001b00)=""/73, 0x49}, {&(0x7f0000001b80)=""/133, 0x85}, {&(0x7f0000001c40)=""/97, 0x61}, {&(0x7f0000001cc0)=""/108, 0x6c}], 0x6, &(0x7f0000001dc0)=""/101, 0x65}, 0x80}, {{&(0x7f0000001e40)=@un=@abs, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/208, 0xd0}], 0x1, &(0x7f0000002000)=""/84, 0x54}, 0x8}, {{&(0x7f0000002080)=@caif=@util, 0x80, &(0x7f0000003400)=[{&(0x7f0000002100)=""/25, 0x19}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/14, 0xe}, {&(0x7f0000003180)=""/182, 0xb6}, {&(0x7f0000003240)=""/67, 0x43}, {&(0x7f00000032c0)=""/115, 0x73}, {&(0x7f0000003340)=""/152, 0x98}], 0x7, &(0x7f0000003480)=""/216, 0xd8}, 0x3}, {{&(0x7f0000003580)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003600)=""/202, 0xca}, {&(0x7f0000003700)=""/251, 0xfb}, {&(0x7f0000003800)=""/139, 0x8b}, {&(0x7f00000038c0)=""/43, 0x2b}, {&(0x7f0000003900)=""/242, 0xf2}, {&(0x7f0000003a00)=""/196, 0xc4}], 0x6, &(0x7f0000003b80)=""/221, 0xdd}, 0xfffffffc}, {{&(0x7f0000003c80)=@qipcrtr, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d00)=""/149, 0x95}, {&(0x7f0000003dc0)=""/111, 0x6f}, {&(0x7f0000003e40)=""/216, 0xd8}, {&(0x7f0000003f40)=""/15, 0xf}], 0x4, &(0x7f0000003fc0)=""/34, 0x22}, 0x8}, {{&(0x7f0000004000)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004080)=""/167, 0xa7}], 0x1, &(0x7f0000004180)=""/64, 0x40}, 0x4}], 0x8, 0x1, 0x0)
recvfrom(r1, &(0x7f00000043c0)=""/33, 0x21, 0x2120, &(0x7f0000004400)=@l2tp6={0xa, 0x0, 0x1, @mcast1, 0x8, 0x4}, 0x80)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendto(r2, &(0x7f0000000180)="103250fd000000001d9262c1e465c0626757dcd9000000000000", 0x1a, 0x20000004, &(0x7f0000000040)=@xdp={0x2c, 0x0, r4}, 0x80)
recvfrom(r0, &(0x7f0000000080)=""/242, 0xf2, 0x10102, &(0x7f0000000280)=@xdp={0x2c, 0x0, r4, 0x2c}, 0x80)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
clock_gettime(0x0, &(0x7f0000004480)={<r6=>0x0, <r7=>0x0})
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000044c0)={r6, r7/1000+60000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x61, 0x0, 0x0)

08:56:06 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='#', 0x292e9)

08:56:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a204189525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:06 executing program 3:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="01002bbd7000fedbdf25010000000000000007410000001400180000f3416574683a7665746831000000"], 0x30}, 0x1, 0x0, 0x0, 0x8011}, 0x1)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:56:06 executing program 0:
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x301200, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
read$snapshot(r0, &(0x7f0000000300)=""/198, 0xc6)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000240))
write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file1', [{}, {0x20, '\\.{)'}, {}, {0x20, '/dev/snapshot\x00'}, {0x20, '{%(('}, {0x20, ':'}], 0xa, "fb0eb2d3196fb93d9c55531aa72310df5c9bc00d0dac14c0b1b35481ab8a1c65b06d8c273252262648e40af73a49186d32e028aa0c8d631d871a8d1a5bf7218777c448b6ef674492070df3c6039de52782cba38ae0f89d06c8d22163c363fbc06d5dfd12de09809892650c3a7700cdda74d62c04734f029299f2b35d61a0bfc22206b77018d720f6bc018c609eb1dbef737d4ccd8a1e78eb4d5101c8ba0b038ec6af5d05efaf8709d7bb58593914bb056efe97ad56"}, 0xdd)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x7, 0x20, 0x73, 0x0, 0x80000001, 0x2080, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xffffffffffffff01, 0x8}, 0x44b20, 0x5, 0x0, 0x8, 0x401, 0x6, 0x6, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f00000000c0))
signalfd(r3, &(0x7f0000000400)={[0xa9c6]}, 0x8)

08:56:06 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)=')', 0x292e9)

[ 1287.482048] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1287.482048]    program syz-executor.5 not setting count and/or reply_len properly
[ 1287.490578] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1287.490578]    program syz-executor.5 not setting count and/or reply_len properly
08:56:22 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:22 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x739c, 0x1, 0xffffffffffff486b, 0xee})
sendfile(r2, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ftruncate(r4, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040))
fadvise64(r3, 0xffffffff80008001, 0x2, 0x4)

08:56:22 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3caeebdcd7a7b27525d93a2e3e6d4bf58b6ab8122baa5ee3f4794f5f31fadc3a9c0000004a79e823ec03b1981c38e4e82c9e4c8be9fdb121b5b64d278e25c067d97d89abc5ab1283d40c05d8d5e791682f399601feed9c6116b36c2d478a63d7f3dd48af751a907074c2a155bea630baca7c1cfb0580e877c60690f2007e4038ba6aa2bc5510754639263d34da0974ab17e23f36fad606d7f553987b914d602aa11d3c2ceaeeccaeb72f33b5a4128fceca7064d35c9efe2f5cbd48b0d870c0b6934b9540c656120dd7ec00a3b0d1e7f09911f58476f25e872ea343ad3485df2521224143d7289e6a252d11ed7e168a61fc8e19804d291b2d6da38eef06716c52032e2551a90f6fdf3d43603f842e5d871c60046cda5c8876f7eca3f97a15112d455d0000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fedbdf25010000000000000007410000001400180000f3416574683a7665746831000000"], 0x30}, 0x1, 0x0, 0x0, 0x8011}, 0x1)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:56:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:56:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:56:22 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='*', 0x292e9)

08:56:22 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r0 = shmget(0x1, 0x2000, 0x40, &(0x7f0000b91000/0x2000)=nil)
shmat(r0, &(0x7f000041e000/0x4000)=nil, 0x2000)

08:56:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049c9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:22 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="81", 0x292e9)

[ 1303.219566] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1303.219566]    program syz-executor.5 not setting count and/or reply_len properly
[ 1303.245173] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1303.245173]    program syz-executor.5 not setting count and/or reply_len properly
08:56:22 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:22 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x100)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6)
syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
r4 = signalfd4(r3, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'})
r5 = accept4$packet(r4, 0x0, &(0x7f00000003c0), 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000400)={0x0, r2, 0x4, 0x1ff, 0x4, 0x1823})
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0)
dup3(r6, r7, 0x80000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x10}})

08:56:22 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000630000/0x3000)=nil)

08:56:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525100269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

[ 1303.551234] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1303.551234]    program syz-executor.5 not setting count and/or reply_len properly
[ 1303.569891] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1303.569891]    program syz-executor.5 not setting count and/or reply_len properly
08:56:43 executing program 4:
syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_origin(&(0x7f00000019c0)='./file1\x00', &(0x7f0000001a00), &(0x7f0000001a40), 0x2, 0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x4, 0x28590, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x9, 0x4}, 0x80, 0x1, 0xc7, 0x5, 0x81, 0x7, 0x1, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa)
chroot(&(0x7f0000000340)='./file0\x00')
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x1000, 0x9, &(0x7f0000001800)=[{&(0x7f0000000380)="7bece61bf5f0c8b04b3b6929caab9c56ddc31885cdf089f1deb795c9bcd7657d5b1e01ff40274d513c35a715f722ffa6a7bdf030e47689aebc7e0a4ddf62cdc7648859e64afa14d825471728de7c99b78374d2662d69c04b508f09e1e7552a442677d2e7ebb6f8f69a59645c9fed6d3b0b12da0f11d8a3bee00efcc4c52af525c1a81ffda7fa9ad7bb5ed53ffcee236138bc00debe9266649947fd12fbc989c2aca4f4ff6341a4a1f0059a67902e7c733c6372d1b031c74988e9d0891467a43da62e6249f5705f9ebc2980abfb669fe9c2a87996ca1f7f78b69fd39a4b2830df18c2be810fbfe4d2c06c1e", 0xeb, 0xb6}, {&(0x7f0000000480)="0b5e236a09520593f40e93d8a1af1221e86fc03b785c42a1de43f62ad683c653e35a1432c1f5508e8c4c8cbe875e67fc4df058d7f552938945ae9a4a1c64bea61cdcc1705939a36651c6aeded1e3081be074d3a3092b94fe74b38b60b7ad5dffccfa1da0fac3c98015e2432cdbd24640fdc76a2a3bef5d1245f96c0d37ee612c8e45ea829d90411b9012039f0865f2a9ecbebb67b328b19483a2f700b8736461710c4f81636b21da9a8922314ff572989493810e9215fb944c6751818c50f1ba5890f3039f2cef8b", 0xc8, 0x5}, {&(0x7f0000000200)="1372028a08d9e89740b6b747b57ccbec7611c5", 0x13, 0x6}, {&(0x7f0000000580)="d7577fbdf8411584a65b8d21a6a64d0a01611a8981171868fa218c2989b5d969fe0f35088eb03b1a2f636102e92262dcdddcf7f52ca9646dfbc62290304ab653e941cb424771e5bbb3fe17824edfc88c5b42b80013fde3a546a0d9e756cc060a950a4418446438a57f71ae91b886ddc8aa279c7ee08515a9f85c", 0x7a, 0x3}, {&(0x7f0000000600)="9e074d9dc952f095aa68db63ec942bb13820eff457133087b948e1d0b81ae9aa76c82b39eda153db9727b745a5383d90b8aa5cf995d61f756d78e5be7690f7516a5b891159af5c85e575c97a93ff573340a6a5215b9f0255dfd19e9bf7e3ea76ab77f85f37dc7050868d5d04898f78fab1981b0cc024eb16c06a16d6ac5c", 0x7e, 0x7}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000240)="8cf3a825210ab3653c9890f82136e304b87354731d96675891dd4e3c8719ad32ffda4c58a8287c932f1f80ffc1e01e5ea4bb2891cf0b2fad69a6361489395e8a", 0x40, 0x4744ebee}, {&(0x7f0000001680)="567f8717eb1d9343c5a11ea87752b53a9c4fc0b0c6246e289a3b8288a734d121b117e38ca21469927ff010bf0e5b09c7b6d1b283c57605621cf5fd110576e510b7b290537dcb9f529e", 0x49, 0xa1b}, {&(0x7f0000001700)="ecc51069aee88937df993b3e9d84bef46ba81b42ff86695c60fffa072c952760f315a3fe8f079f5b8c7090eba00bd3235ab271029b13b54c998eedc37e1ecdf31682d80c7f96e88a5eb1aa6316099037d6a70a09f26ac951829569eada8430f562944f36202be1f8fd8f36f96feb712c746bc0d4d2298187400d9fa732c45ecbd62fbbc0c05f65a21d366fe95298cb4adcfe88de321079f2ee2f663fd9d04c3743993bc8be602bc7936d8b29f8cc1802f1342204db267b9c523c1dc5e3e732200d687ef51f8090306713d85389bc1016", 0xd0, 0x5}], 0x40000, &(0x7f0000001900)={[{@huge_within_size}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '(\xa6{$(\\%\x03]@'}}, {@obj_type}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_gt}]})
openat(r0, &(0x7f0000000300)='./file0\x00', 0x169001, 0x22)

08:56:43 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 1324.453632] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1324.453632]    program syz-executor.5 not setting count and/or reply_len properly
08:56:43 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210369c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:43 executing program 3:
ustat(0x3, &(0x7f0000000000))
shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x4000)=nil, 0x7000)

08:56:43 executing program 0:
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x5, 0x4)
r0 = epoll_create(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
socket$inet6(0xa, 0x3, 0x3)
r2 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x26c2, 0x101)
setsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20044013}, 0x0)
recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)={0x3, 'wlan1\x00', {0x3}, 0x1})

08:56:43 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:56:43 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1324.461495] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1324.461495]    program syz-executor.5 not setting count and/or reply_len properly
08:56:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210469c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:43 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f0000564000/0x3000)=nil, 0x2000)
shmget(0x1, 0x3000, 0x80, &(0x7f0000af3000/0x3000)=nil)

08:56:43 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:43 executing program 4:
ioperm(0x4, 0x6, 0x800)
ioperm(0x3, 0x7, 0xebd)
ioperm(0x6, 0x9, 0x0)
ioperm(0x1, 0x7, 0x3)
ioperm(0x4d3f, 0x5, 0xffff)
r0 = syz_io_uring_setup(0x42c5, &(0x7f0000000000)={0x0, 0xe995, 0x8, 0x2, 0x345}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
ioperm(0x1, 0xaf0e, 0x3b)
ioperm(0xfffffffffffffff9, 0x1f, 0x7198)
ioperm(0xb258, 0x8001, 0x0)
syz_io_uring_setup(0x4, &(0x7f0000000100)={0x0, 0x8dc0, 0x4, 0x1, 0x30a, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioperm(0xffffffffffffff57, 0x101, 0x9)
ioperm(0xffffffffffffff1c, 0x3, 0xfffffffffffffd12)
ioperm(0x0, 0x9, 0xfffffffffffffffd)
syz_io_uring_setup(0x5da0, &(0x7f0000000480)={0x0, 0x5663, 0x2, 0x0, 0x37}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000500), &(0x7f0000000540))

[ 1324.598525] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1324.598525]    program syz-executor.5 not setting count and/or reply_len properly
[ 1324.601947] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1324.601947]    program syz-executor.5 not setting count and/or reply_len properly
08:56:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210969c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1324.740555] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1324.740555]    program syz-executor.5 not setting count and/or reply_len properly
[ 1324.746072] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1324.746072]    program syz-executor.5 not setting count and/or reply_len properly
08:56:58 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:58 executing program 0:
r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r4], 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000840)="48896913cf013d4841ef6bd14bad7a1ef5fa89345ea411569e4eaf84b8a00d198b2076417c28fbe24620551513f8def24459fabab7ccebc57e475330793cc850fde8f6291d79a28b11ebc15c87f626cd0236120652566bf3c5fdedf7015636e78bee2846e55020cdb943d3759ae4bcf110eb601878d4323e7d363100b0408ab930c87cec5602c395c1c80ef0f70e9b859631", 0x6, 0x0, 0x1}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)

08:56:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2a8adf0797a6851c97322fb6f7a074b44e4155f9db87942bd809423ed7ee0fd0a03dc7112e350302edc15f8535beb0aeebb", 0x63}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:56:58 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:56:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f00007b0000/0x1000)=nil)

08:56:58 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:56:58 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80540, 0x0)
mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
syz_io_uring_setup(0x400281d, &(0x7f0000000740)={0x0, 0x9aae, 0x2, 0xfffffffe, 0xce, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="9b", 0x1}], 0x1, 0x7fffffc, 0x0)
memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, 0x0, 0x100000)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r2, 0x542, 0x1, 0x3ff, 0x4})

08:56:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525211069c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1339.582583] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1339.582583]    program syz-executor.5 not setting count and/or reply_len properly
[ 1339.588512] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1339.588512]    program syz-executor.5 not setting count and/or reply_len properly
08:56:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525216369c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:58 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:58 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000015c0))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x7f7, 0x10000, 0xfffffffb, 0x3, 0x1, 0x200})
r2 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, <r3=>0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000500)={{}, r4, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001680)={0x0, ""/256, <r5=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002380)={r3, r5, "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", "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"})
[ 1339.772535] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1339.772535]    program syz-executor.5 not setting count and/or reply_len properly
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000200)={{r1}, r4, 0x18, @unused=[0x3ff, 0xcd0, 0x0, 0x4], @name="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"})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000080)={{r0}, r4, 0x1e, @inherit={0x50, &(0x7f0000001500)=ANY=[@ANYBLOB="00000000000000000100000000000000ff0100000000000af79c5cfaf9dc09eb64216e830000100000000000000c000000000000000500000062d8fa7505c199918bbbd91dea691be8a509000007000000000000000011000000000000"]}, @devid})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:56:58 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\b', 0x292e9)

[ 1339.794273] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1339.794273]    program syz-executor.5 not setting count and/or reply_len properly
08:56:58 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:56:58 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r0 = shmget(0x1, 0x4000, 0x20, &(0x7f0000836000/0x4000)=nil)
shmat(r0, &(0x7f0000cfa000/0x4000)=nil, 0x5000)
shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000aa3000/0x4000)=nil)
r1 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f00005b0000/0x4000)=nil)
shmat(r1, &(0x7f0000f0a000/0x2000)=nil, 0x2000)
mincore(&(0x7f000068b000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/226)

08:56:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d952521020ac37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:56:58 executing program 0:
r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r4], 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000840)="48896913cf013d4841ef6bd14bad7a1ef5fa89345ea411569e4eaf84b8a00d198b2076417c28fbe24620551513f8def24459fabab7ccebc57e475330793cc850fde8f6291d79a28b11ebc15c87f626cd0236120652566bf3c5fdedf7015636e78bee2846e55020cdb943d3759ae4bcf110eb601878d4323e7d363100b0408ab930c87cec5602c395c1c80ef0f70e9b859631", 0x6, 0x0, 0x1}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)

08:56:59 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:56:59 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x80, 0x5, 0x80, 0x0, 0x1842000000000000, 0x800, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x2, 0x9, 0x4b, 0x9, 0xe8dfae2, 0x45, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x20, 0x81, 0x9, 0x7f, 0x0, 0x1f, 0x20000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1000, 0x80, 0x1ff, 0x6, 0x5, 0x7, 0x8001, 0x0, 0x80000000, 0x0, 0x5}, 0xffffffffffffffff, 0x7, r0, 0x2)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
readv(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)=""/30, 0x2b}], 0x24)

[ 1339.928608] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1339.928608]    program syz-executor.5 not setting count and/or reply_len properly
[ 1339.937755] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1339.937755]    program syz-executor.5 not setting count and/or reply_len properly
[ 1357.080683] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1357.080683]    program syz-executor.5 not setting count and/or reply_len properly
[ 1357.084288] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1357.084288]    program syz-executor.5 not setting count and/or reply_len properly
08:57:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:57:16 executing program 3:
r0 = shmget(0x2, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f00006d5000/0x4000)=nil, 0x2000)

08:57:16 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:57:16 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000400))
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
r2 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0xaa, 0x5, 0x5, 0x81, 0x0, 0x20, 0xa620, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440), 0x1}, 0xc104c70d77f15d40, 0x3, 0x6, 0x0, 0x40, 0xc0000000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80001)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
name_to_handle_at(r3, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=@OVL_FILEID_V0={0x10c, 0xfb, {0x0, 0xfb, 0x10c, 0x3, 0x5, "3600cb3b0dc594e0e2e2df8d8f7d88c5", "ae69a9faa9368f572a9429a05b50eaf313ba038b6ebf8dae7b35430d09490e298b487e08adf4024bc8b008ae677245d9250d2bbcc7f825511d77f79c9e2322a40e71991dfe4e44305d91c8e8077c6cf1a597804b7483341bce4186be05db62947f3c58ae79fde7ed86fc82a0426b2778266e6177fb9aea655bdfb0f3e1e7a3e1fa63946b28e81bedd1067c5e7cdeb84c8385208b67c69e8cb5e705932cf8dcc013efbe755a0161eef9ffc88f4970bdc6eabe8e674a4e425ae9eabc7c608d2b1b3af13c5345615ef57e669e8030307eb1e3fb61f3603eb6c46febad7dd58b16e1119f59a0b63c85056cdaf86d9c3bbd5dfa5527ce609e24"}}, &(0x7f0000000040), 0x400)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0)
poll(&(0x7f00000004c0)=[{r1, 0x1000}, {r3, 0x400}, {r4, 0x41}, {r0, 0x8000}, {r2, 0xa}, {r5, 0x200}, {0xffffffffffffffff, 0x1}, {r1, 0x4000}], 0x8, 0x0)

08:57:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210225c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:57:16 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:57:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:57:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000180)=[0x0])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7f, 0x4, &(0x7f0000000480)=[{&(0x7f0000000300)="a82a1860bc32f52d57ef0aea26db2801c9d5e32cd258772a8c821dc391bd4bfe7b74c4a95172adc9cbd30c57cc226199c316f5f5c194a7bed1eebdd9d65bdc145571b409a8a6b1fc2d87409024fe6a5195a9aeb0c1305fc1f768192f99416516750f9c8bb16a683bacdc564c30ba2c0f1f4d621e41713a629318ecc44deaa3fbb62993ee9a11b048150ac525f414db131155ff748f0bfbb72360a2b0277adf52e544f8359c19140bcad30e3c1ace760f08eb17554804a9a75e7e5ac4d4fae103c929", 0xc2, 0xde7}, {&(0x7f00000001c0)="2e263ffff8c7a67269741cb46517e4d43331f94b5a6560d392cdab6496fb71ccfa45bd2bbc1ac30b954b8454d0ff1bd0a82521b9f46ac47aa11b5f9214983c111800bca76532e650fd1f99d85fe39ca08f5c20e6ba5a25e36b1782466f8a4f4e6e496847e3d287124c04e5d14927cdb27732a43063883faa21556290ddf856c2f50cc2a5ae58ae74c2c0a1b7ac64b8a58057cf84749767f67e90be60bb7db1ac4e23e0a3c80b31", 0xa7, 0x100000001}, {&(0x7f0000000400)="6c73441199667b05ac8570552c0bc41fcb91f80f9281de2082a9aa55da85b29525c780665795e1894391e3866d152b9b88162a14fd4b3922616f2b846e78bd4c6a50fc8dc3c2159957865b5939841eabcf4e91ad255343362dafbbbc96ae2e5fb1a6b8332cdd51af7b2e69", 0x6b}, {&(0x7f0000000140)="d819cb3a67fb60de669d76011380148c33cdd152bb", 0x15, 0x10001}], 0x10000, &(0x7f0000000500)={[{@nonumtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@shortname_mixed}, {@shortname_winnt}], [{@permit_directio}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '\']-\'@]#:'}}]})
move_mount(r1, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x30)
fcntl$setlease(r0, 0x400, 0x1)
close(r0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)

08:57:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed0a46aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1357.195720] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1357.195720]    program syz-executor.5 not setting count and/or reply_len properly
[ 1357.204015] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1357.204015]    program syz-executor.5 not setting count and/or reply_len properly
08:57:16 executing program 3:
shmget$private(0x0, 0x1000, 0x4, &(0x7f000098d000/0x1000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f0000d05000/0x1000)=nil, 0x1000)

08:57:16 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:57:16 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b0, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x29}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "38089bebcc8d3e52def26cdac6f87a973d4d24f14b8740cd898b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "16448ae6831bf66f5fe91af50bd73ed8a7ca5afd8402d7f4"}}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8617fadb4e608a2299b22741cebf5c39ccf3d2781cb1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xabd}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "5d94ffd21398c9940013989d43d5aab73d7a5354cc2a456011ac2d571d398b8e2b"}}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "cabb09ebce7c25105265db41bf9c2818ecd5dc6b9a"}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x90}, 0x4044841)
syz_mount_image$tmpfs(&(0x7f0000003200), &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d62696e643a30e42212ce6bcfc7b86b2c00"])

08:57:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r2, 0x0, 0x0)

08:57:16 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:57:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed2546aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1357.328687] tmpfs: Bad value for 'mpol'
[ 1357.338247] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1357.338247]    program syz-executor.5 not setting count and/or reply_len properly
[ 1357.350219] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1357.350219]    program syz-executor.5 not setting count and/or reply_len properly
08:57:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea10"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1357.480669] sg_write: data in/out 101187548/251 bytes for SCSI command 0x10-- guessing data in;
[ 1357.480669]    program syz-executor.5 not setting count and/or reply_len properly
[ 1357.501481] sg_write: data in/out 101187548/251 bytes for SCSI command 0x10-- guessing data in;
[ 1357.501481]    program syz-executor.5 not setting count and/or reply_len properly
08:57:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceeabf"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:57:33 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x4, 0x10000, 0x81, 0xfffffffc, 0xc, "c555d34203b8e023d7c45539b3e90bc5adabeb"})
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x0, 0xd65})

08:57:33 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:57:33 executing program 3:
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x8001, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x1010)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:57:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0), 0x4)
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x1010, 0xffffffffffffffff, 0x10000000)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x40, 0x0, 0x0, {0x0, r1}}, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file1\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000300)="b1", 0x1, 0x1f}], 0xaa0080, &(0x7f0000000540)=ANY=[@ANYBLOB="2f6465762f735d6db50a5e5b7b2c2c2f6465762f736465722f7367811cb97d8e89dec7779dc2bb233c892f6465d6a4ff112022a87f21e0762f730500002c2f64e5762f736723002c2f6465762f7367236673636f6e746578743d757365725f752c73b551fbffffff4f78079665636c616232ef0c656c2c7375626a5f726f6c653d2496e67aa7968b80120f037fb1287764b4cbb2bfcf5a82d7a0ac2edd894d"])

08:57:33 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:57:33 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:57:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1373.972557] sg_write: data in/out 101187548/245 bytes for SCSI command 0xbf-- guessing data in;
[ 1373.972557]    program syz-executor.5 not setting count and/or reply_len properly
[ 1373.979777] sg_write: data in/out 101187548/245 bytes for SCSI command 0xbf-- guessing data in;
[ 1373.979777]    program syz-executor.5 not setting count and/or reply_len properly
08:57:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x23)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:57:33 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:57:33 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:57:33 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:57:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x29)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:57:33 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x154, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x63}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x81)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x2, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x814}, 0x80)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:57:33 executing program 4:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2b000000140001000000000000000000"], 0x10}], 0x1}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write(r1, &(0x7f0000000040)="732ae3764bf3f891aafc018700f0a1ef14dbe04560b5141594e46ccde539f734d7733c193333379e48488a5af08b9a48cd1fdc51d1c7b4926ceaf0d67c022ce8a95b2cc69f070b7f7786bf4e0da0de1e33110d089dffdc47344d872f5e5f94", 0x5f)

08:57:33 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x68, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x7fff, @loopback, 0x7}}, 0x0, 0x0, 0x36, 0x0, "00e995ce9fa6274f2b9db8c6fd595860dbc1704f4cadb6a56e8b7327bcce7ebc79c4aae6cb0671aa326cbd594f833a94b328d83f959ff0ba48a4ea3b93619e277e733e01791a39c5f0d244cc4e6412a0"}, 0xd8)

08:57:33 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:57:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x7ffffffff000)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:57:33 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:57:33 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40000, &(0x7f00000001c0)={'trans=virtio,', {[{@mmap}, {@aname}, {@fscache}, {@loose}, {@version_u}, {@version_L}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}})
fchmod(r0, 0x0)

08:57:33 executing program 4:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x0, 0x10})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x21, @private=0xa010101, 0x4e20, 0x1, 'dh\x00', 0x39, 0x1, 0x60}, 0x2c)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x0, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x2000}, 0x4)
pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000000200)='T', 0x1}], 0x1, 0xffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, 0x0, 0x100000)

08:57:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:57:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:57:49 executing program 4:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340)=0x1)

08:57:49 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1cff010000d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:57:49 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(0xffffffffffffffff, &(0x7f000079e000/0x1000)=nil, 0x0)

08:57:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:57:49 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:57:49 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x44a7, &(0x7f0000000100)={0x0, 0x0, 0x14f7}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)

[ 1390.315022] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1390.315022]    program syz-executor.5 not setting count and/or reply_len properly
08:57:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1390.345761] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1390.345761]    program syz-executor.5 not setting count and/or reply_len properly
08:58:05 executing program 0:
perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97000000, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xfffffffffffffffe, 0x5, &(0x7f0000000480)=[{&(0x7f0000000000)="4299af2e527bb56f82cad083d914db9cea04d157a44ca7ba88cbf3bdce13d95afd6f9e583a7846a8b2e37c759c2d448f3f903ec2f330899a4d96cc886cf62269eb3e6322e7cbbb001e923f119f22416da8719c6b93f768cde300b7e60d9654690c404563ed952f2954f94bcf97ef0afd67d3a3dacce9f004dd157cf5", 0x7c, 0x6}, {&(0x7f0000000180)="0d54507ee9094579eb94cf0c2b07386c78961cbe8b47b442225dca1928eefc18fc5aa30baa508c8f96ea3259f56db8cb73adc4103cf033bc0cb7f010e69328dc2ccdaf7cbf686eab9b259fbea34f27fabf8923d88dc8e2984ded36d1b0bacaaf603081903eb27f903f6e285633c15c2574990c33e83e1dbbab6c28bfb96a3ef8fdd126bc172f0d730a0a70a7cb3e4730f61c0c1094bba6c888f63e27a62f88ced2b8969608739ff83272348fc18c7e599b0bad4cf6bd0eb244cf11c11245856a67a5204c5bc1a2177504efa4b1d771cff4ad76920e80fc26bbd5e3597dd9d870f4a03698d6437146ae4e", 0xea, 0x1ff}, {&(0x7f0000000580)="edbd048ba11361b2a3202bb7e05d2c98a4842f5e88949e6cffc0135f3d4ed37cac2e6a7d83f830b5e6f1c1deca97db7d332f5a302b365d4e87489daa6d809470e476f122e0a29655c4d723c27824a61cdde4fca667faac6b84c993cdc40ab7632baa011befa0d137465683a0bcb2a4fd2c9e577d29300e3cb8e774472535c43d9532c6573e87f6bdebf1ddf8ccd7cb15ca69fe6ea39891fdef57bb22039bbb1475ec320b352e2693607ef8b42b6e5c3a30afca4ed362557e038b0b9867d752de0ee58c72550779f67d55686434afa9effad75b1bf46f9e1593fb81874c1bda6e0e085c4c3d64b15f6ce74b869f226f63e615d950", 0xf4, 0x2}, {&(0x7f0000000380)="ab2f154047f120a1372f15c127e45e437c62322c4e9c9fa081013d41a541e3b16a79d37fb532f21bfce6f48bc1d6ebff7f8225198e7dcac1a98f667a71238e625e495e8f434a1630121738cdb1b89388e20d5b16c499386f3d002a91a0532babc79d450e9720bbfa789b98fd4c6ef99d7eda", 0x72, 0x4cf6}, {&(0x7f0000000500)="65a6e48d537fd8cfe7e5bf5529edfcba50b359a9a96b7adcdc51ba9dd04a5ecffe397a851e4297863e16d05748d5592aaa2e36cbaeac80f8", 0x38, 0x7443d881}])

08:58:05 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:58:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000000)=""/204, 0xcc, 0x8000, 0x7})
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0xf0, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xd4, 0x0, 0x0, 0x1, [@typed={0xd0, 0x41, 0x0, 0x0, @binary="589b4430256f4411a5a5df8b8bc1f628f1bf76099c2e2f51a62f9ab90df8b833e59394b208a112405809a27f1820cd2a1005f2eaf359a3a48f5f795b2a9b5e31a041dcaa6ef75e218f2c3f1dac0e7eb8d3c8f8086a028315ffe23f721b501ef0ee8fd27c3a77904ee21b702b57d263a776dcb48c3bf3c9c22b1469f5a679203dc02c03df5c0d8b8b2016fc9f5611680c41bb4196447c567735876fab30e7ca74114b76c3ace76cfe02f10922f1a2adad40e9510b30530148503917b81e08f48f57f68283fbadea2166938e83"}]}]}, 0xf0}], 0x1}, 0x0)

08:58:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:58:05 executing program 3:
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:58:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e646aa436105fea558971bcef7754bc1a7baaf8d9e529128ed1adbbe099ea3cab3c8c4be58f9fdbcdfff83b37db6ddca1fe2", 0x32}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1406.229049] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.4'.
08:58:05 executing program 3:
fcntl$getown(0xffffffffffffffff, 0x9)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(0x0, &(0x7f0000e4b000/0x1000)=nil, 0x0)
shmget(0x3, 0x2000, 0x2, &(0x7f0000f79000/0x2000)=nil)

[ 1406.293645] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1406.293645]    program syz-executor.5 not setting count and/or reply_len properly
[ 1406.330324] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1406.330324]    program syz-executor.5 not setting count and/or reply_len properly
08:58:05 executing program 4:
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000040)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
r3 = getuid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r3}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r6 = getuid()
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r6}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/vt', 0x424002, 0x0)
io_submit(0x0, 0x6, &(0x7f0000000880)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="8b1a9c0d0b76d659fe2a89d65744167b5c73b19b295cd13917b9b3fc50fe856e744a726a67a2bd588604de4477b8db7285ffb3189f5321b2a546b5267e3272f01db60a1dad39260bda08f8e4ee61906c1400c408550f486d155b6638fe8ef620898da662d0dfd69827a8f068d408db85e2364c93948aa0972b706bb40d8e93eea98385d4df0c3116e8641379c6f340ce487644f57090c44e9361ac9ec22f704c1f9f4419987ab4", 0xa7, 0x4, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000280)="7646f877043e622823dda84661bc2e64b7a8a69691f6da4ec61228c4572d6b7e94f61f2a26a299e1ac93da798f531509310bc68e2f6125262913182ffaa6794baa92b57f057f2414722579aafc35", 0x4e, 0x7f, 0x0, 0x2, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0xff, 0xffffffffffffffff, &(0x7f0000000600)="1e3b22972d85f12142a957f2b1156349cbd6e2a446ccdd53ed7fc59f27547d87b598df0e39bedfd789bcce10b50c4aa496ecf4931694acb4f28a99966792cfd173bf30e5b04e7e24cf8f64a8ef00c7e404c658a2130f1edabd18bce58acb85feebfdb82fece74783a7aaf46941cf9be161ab25a6c46bf1e2d4987252f47ad49167a3df2a42b2c6d71279e8374f945959afc828687ce93e62bfee5d56ca725335c4c00bfc99c9b2950213d0402f3c0cd7ac3f9e6f5f5a862674a45fc8a290078053ffd3464842f756016a43fcebc0b5214753eaaaaccb93401e090d52e2e87d35d3584ebc3f7c500e71af", 0xea, 0x6, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x40, r4, &(0x7f00000004c0)="734ecaa962ece1d551d8d09e055daba397fe98d28a91ade5db2182027704d401fc0868ce701fe4dc7b4a129861f6b8322d3e18849f08129127a961f71c784b3275529adfffa7698072e46a3fea0cef16d49f6156a693bdb0cec4b2f96b4eb301c2b2bc7dbbf6e39c6ef71e067d046a242e25ceb8d472ee17538515d1", 0x7c, 0xe4bcf43, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x382, r1, &(0x7f0000000700)="079eb49b33e740b25bec3d6400d4ae57e518e901ab202ebc09b03fecca4d3126e3055832a0e34ce1eb911923559542c1e953aa79ae5b3e78d6b35beee47c36716891b87c4416fe7d9c76b0d436bcde20933cdeac21224e4e596c51ce9f13", 0x5e, 0x7f, 0x0, 0x3, r5}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x8001, r0, &(0x7f00000007c0)="c9f27a89fb3ddd995792ddfc9a15dd99916c4faaaf1559fd8813f39c442daafdcc656a3cb620209e5618838f1d123c907c41", 0x32, 0x5, 0x0, 0x1, r7}])
syz_io_uring_setup(0x407668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000480))
openat(0xffffffffffffffff, 0x0, 0x315801, 0x1)

08:58:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x48010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:05 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = getpid()
fcntl$setown(r0, 0x8, r1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x20, 0x9, 0x7, 0x0, 0xdf1, 0x8100, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x13, 0x1, 0x9, 0x1, 0x9, 0x1, 0x5, 0x0, 0xd3}, r1, 0x8, r2, 0x3)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = getpid()
fcntl$setown(r3, 0x8, r4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x20, 0x9, 0x7, 0x0, 0xdf1, 0x8100, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x13, 0x1, 0x9, 0x1, 0x9, 0x1, 0x5, 0x0, 0xd3}, r4, 0x8, r5, 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r7 = getuid()
fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r7}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
clone3(&(0x7f0000000280)={0x4010000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x10}, &(0x7f0000000100)=""/244, 0xf4, &(0x7f0000000200)=""/39, &(0x7f0000000240)=[0x0, r1, 0x0, r4], 0x4, {r6}}, 0x58)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

08:58:05 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1098093, &(0x7f0000000100)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_mmap}, {@fscache}, {@noextend}, {@aname}, {@cache_mmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0x32}}]}})
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:05 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 1406.458809] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1406.459533] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1406.460305] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1406.460788] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1406.461350] blk_print_req_error: 17 callbacks suppressed
[ 1406.461359] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2
[ 1406.468397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.468817] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.469509] buffer_io_error: 22 callbacks suppressed
[ 1406.469518] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1406.470446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.470868] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2
[ 1406.471449] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1406.471970] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1406.472472] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1406.472990] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1406.473486] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1406.474004] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1406.474498] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1406.476224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.476636] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.477304] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1406.479393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.479797] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.480428] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1406.487679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.488128] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.489433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.489904] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.498500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.498968] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.510582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.511437] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.525395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.526351] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1406.530704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.548968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.565650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.568549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.591190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.593591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.601378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.605724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1406.607714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
08:58:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:05 executing program 3:
shmctl$IPC_RMID(0x0, 0x0)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget$private(0x0, 0x1000, 0x400, &(0x7f00008f4000/0x1000)=nil)
shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)

08:58:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x410880, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800}, 0x3)
io_uring_enter(0xffffffffffffffff, 0x4420, 0x69d7, 0x3, &(0x7f0000000440)={[0x6b7]}, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x140000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
syz_io_uring_setup(0xa7b, &(0x7f0000000540)={0x0, 0xb480, 0x8, 0x2, 0x1ec}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000005c0)=<r3=>0x0, &(0x7f0000000600))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000680)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000640), 0x1, 0x1}, 0xd1)
vmsplice(r1, &(0x7f0000002780)=[{&(0x7f00000006c0)="620072b90b5098ce178a679b827a24fa5f8ba9a45ddc9ee99711c98eeff81038b9c644d716852c93321e72daa9bf60c5aa7d5d4a76af1a995bb8c93eb9cbc034cde112859c7137a0c04ed0263ecd1cf04500acd0f559c9922c4383f5cde59c4a168ab897fa7fcfc02869988d0d3ec1cc6ce2626bb82cee89057e47e817b8aeb87286903c75fdcf93941ddad0c44bdc78c0d7a23acbddddcbc5b1d3c296b5b494f09d02e51c3438f7a06e", 0xaa}, {&(0x7f0000000780)="2f9a79631a67046934e83e4fe5acf71321f61cea833b0df04b696abeb7d47b07d6ab6ad2393d998f8da5e702b07be35ff636d23f7cd87e8867699c329cf918c27ca2e590a02e7f0356f16dd6b29b59d914a557319ee09e67eeb8d304620e34a66a3d40ebaefc7ea01fb2d5e4dc89a44b06f74d60956d904677e7270a898e630495173c04678abab4558907f22db34bb0e9b88b7cf243d2997c888cd0fd34ecf8209bb01f60e7977dbe8a035961f83b07d4feb3a09e4f31cd769c9997ecb98066c17938651f48496217d0c2b58976d6bd1b5166f195fedddfeb3114ae45d5f32c6949dc7ee2f9da7f9f4529163bd318ac20349666b027f1d95ecc00324e64c36c43a6f2be72f602c20d795e7a342c8c0cdd3a92537c34adf785ac0f1523691842a93e4ca5b93153cbc809527bbcde55d6079e45c4b546cea36d74f435a7401b9d1d6eb65747c1d5c25e446d9497839ca89f7e28dd0f0e8fa49a5fd40445c9647120c3734abb5a6fc069db6d316686d194968eeabe19828ae4fb844a7be9d99eaced86053567949817bc05094e9a544df88668ea75fc3482cbc3e7593f0e659d4dac4dda9ca106500ce10beb7d743883574dcbfeb09119f2e8168da28dc1fc7ab52ccf5e3e4a43ac0d6c5f33aa617aa97976f933feaaf65ecf8eab02e127631f961ee1fbe44edf758cfa848ccd77838fbfec9d16bd9067964cb73f0578e66212e6c910799612811c4aa3f0f943b54331a8088dbc7c7609f18291cea2c713c239cbcda9a675b6e7ecdae50fb18d5d0c80d1f162b0d336f6a7509a5b9e70558ca3a0b37f5f1d67f011ac81393aa6096ad6d151b15e545a2dde09fa55e4dce8ca14cc4318e243451478c38dd9aeb9b03ddd85683daef685c84bbb29d3992406e18da73f006023fcb212188ae286fbf6cd3895e3bfc6810ee61c00805938a647b217ca9b6bf98ba47c37d8bc30bd0bda683eb1f3037e797c3f6d3fc5b50f4e8ca9dfed958eb6acac10ba129beb717e16654781ad792ff3acda8924f49469bd39c47f3e90b3fe9a8965aab459959e30957314084ea95eee272179f21586558a01647bb05b9cbd77a527e554d6ba996671216ae6e57db118e5434f92e63c88e5fd35a9f32240f3dcc4c06b095354832b3eea7f551c349a3b7394c7d70bf9bdf6635038ea1bcde092cd10754796c471da436e38c4d449e6104459ca7078816b880accd61977446fd04b5cefeb8258d0190975d6f107d66c5e77f20bfd709ceed222c98086c3b5e26728d89314c47c4e55035bb8944685c51569ca567f8d7f182e3c126a55039a170e43e3a87b44eeedcf2ae45bb648c34908993421d238913403d53fda5f75664d39d4ec00d61a32e775d45d3d757b7f4cd02f37f4b596e5665a57b5123408b2af978845f2462afee2041286bc06a77b29fbcf0b316d9cb2d5ad9532c0c0562946fff4782d5bfd0104c9c284bcc97b594c4e90970ffbe278475a63ecd796b643bbfc5b9251bbf21ae7e960a6ae20ed563f9ed2238ffab55636ab8e5e809d361818e91be921c15c98c6357af3102488328b70fa635c2c869c3c583d565502d54ee0f89261a46d6171c521cb3c75dea734c0e5da3ddf81ba2520e3db4240a49bae4b224664ccf00c222a4cdea39b72e87488195dd0292e6f62eca4e2a6fc6b14a5a22d067b77d8b9c725219812e3bc0762ef713b21eca2d029cbd6993eb19ecf2a068e1d12f7aeabe74ae541b2c4429c245dd3021fa72aaab357ed5661047d76dba24882414f7f971de15c27904bf5f4cf33bd7da545739f62a52ab629515772a007cd7707e4ee9d59beb015d4e4b4c3d4a2c33f62b8f2100c4f9072a27251573206f95e4aaaaae653f75ebfaa6e8410e63768d7e5b7464f5cd820ade0e43fd3ebf1c9037cd8e8905386cc1ea267ce4794073f0a95db3648b122c799f5a36bc145a93098dfb833e62002ae7aa73c3a7f8666c63ce1f48ba9e957c357752f981f9a1085a5464732d63d505ecd5a975dd836eabeb60e3cd8eaca198d9c168db640c8065629d317bff2e13d30131a6ad1b4fab6e787d0ecef59245030ed6e2c5b0076323ace2b0d6ffba042d44c7030b8743b897e81280f684b9ab96daec13988f87f8b86ac96346ca6f9095a490ef54b023bf10c13d9c1dcfeb04b1d6e92e64e900bdd77a025208a628d31cf0e11df9a1bbba8a10198d91d7fd25d94efef335a1a110e76af3f39d224f88223eeb017eed0a4023530530040904cae4e14d1df7637bf7dc0adc92be1443260eaa76ae68bbbfce6c0d535ea749b65011cfedf63bdf88d94fbb837f0d8374d7ae54c55bf1fc40d9339c8a8db9aac2e7a669a523df27e3b82c2598d9de6a690d3b86a06961dee5f38e3a93540fc880de8dfbd4ef7ce76f11f05a8d8cf9871b0ff9381ad3b15e8cb3901b986009e5c2e3a7a86681d3f1f95f348492b3e4d611f461c6d634dd490c15b0d78adadc7941b841d178d15cb67bf5ed0e24e191c8a75e698114a3421fd8198e956d6c4a3ce939deb01457a0af0a569f8888ab17aa424d1e330524eedb07f7d18988cc8f1b42d64ca0ec0b0aec5224ac5b3f9478504cab79e46b432d07f78e510965769e3867be5d985f32d8dca73ed857780d3985e72a9d6df5fc7d4456b7cfa65f33ccb43ea5c1713f8c2582bc2c95ec7b92388ce591516f0e39327929a50d35d702a01e586dded87bfa61751ca07f2847253c1eea38c391108d64dd9b6a359a710d3ed437eb081984f466908df283c60821ed0500fd90782241d3e637d312a9b830e1849947899882418fc5a91fbd1e172bae7be5eddb521c3a39cc6865b2f293db6e737b9e39e929cfb6c6fa1470153bfe08305e47a5278aeebee02517e15de1e2703e7a30383af9e0074ea04d7c2bc6d96b6850cc4b0066b162e04a68df0c9747a0b9ff555bf525dae4f63e3ba4b43a6fbc391f702b03b3e7925ea4ea0cceec2619220be3866607f3d2b500afe91a7cac310dc90d62fe87b3e30c9bc7f015e385dd148aa901868c5ae57df22e21c1f857e9f5874ba6b29f392dd14d463cbf7a1d7a35b2bed0406243eae39a010001396434ff968aacc9d9fad77bb5400374685b3e40e9cf1a00bf07f0e0c56765123d3f1181fa46858ec7fdb0165efa0fd714af6b936512bd8e6e5e215ccf779e9628b5c4665c47ac5ef4844dd0aeecbc37abc0d661538c577075eb621d74949b4bcc7245d780b714da428b9e9cba884f13794bb6990eec337a16f7d61df225626edaeb698b4e6368431eab4e83f23059149bc0bf2e5c0864a1923ab36c3f7efd71b07c1dc2be511c2229f313e10bff032f9f16d90df1614193e500ae0e5481f821a07dfec08075749b094a13aace9f454676b6e92a37a7bd77462852ed532b4078b10b202f6198dc16bb6b25fd75c3b7aa9e87732ccbd3fc82bd9a157ff5e9a16c53e27dc6d12c934b839f4bd261eb1a7577d7acacadf412fbfcb2d78eaa9d977b8191d1156b872d100d3c4c5798950db44609e34027bbb7c50aed707c42f4d67b795d3c4134b681cbb790c74af1dcbd75a8c8d41cd43b10284965f96a711e15035ce7efb09a272d680deac8fd77aa2f1c48fb468db298c099cea91c2c9f4e4e47355640c7869f5455cbeaee0df104cf2aafcc6002d2c80bfa949e60f7a3bf5e70303a3ca51c275a70ebcbf72bd1f271914d2eff8950e83a35f1d0ca0df58c144f2d975737459698dc8293e0c31645efda1420bc68f0c8b06e7b1088b3e84acb1c2fd21f49e672a82438b918ad563227e7b061c51f74bd9df1e1906164291a87f20a5ab0829cf6e7a06a4fe8ca69f2a88d926d1479aa5792ab4f56445c824af58711a8d565aa10e29aafdfbf7346aaa38af15eb66bbe7d0da96ae2aa4e85ba67061c2fff7a9bce6e46fe38bebdb28fb44098e382ef0014f6e40fa274514c01dde6e9ddb87a9770f4fa1320d1beaa84928d5e9b28d97fb437dc600ecb8e54dcbc6c4b5a7d30c4481788877ecf7b169f1562f6a0f9a5da441db2b3ed37bd858f9af7d06422cc4a7f16f08ed26f1fd45fe70a4106ab902163a7c06c4de96bb06d3e3e0392f6703065b28cb1907d7486349f8d8ae42056138910afd458b1d2e888a4bab57dabfadc691bcf09b9948af4315f56ecdef07b424b244a5eec15582c53a3e853de24737080efb7f505716d533c4a1708e358b1f3ee8accb1084e4d5c5224590b813da4ff1ee2abf562f102ebc7817c3e0ac30d0d678838b302cd129e97136496217e28049a83b91480d010123d64f58d8f5ccb4e98411be113b8a4a753ec083306aa541ba3608a735b84d63c668745be868a667eba7cf1acfaaf8c4c41f0141f3fb09450acc43508bc565423629102663eaaa4ec8c0d226607eb127fed1a8eb022f22e6c6c1fd5437b38398a330533b0b48106f76aa76066783ce02df95343e220c745b75ecbb5ab254b6115ef7987394a20b909010f8135ddbd0cb2d48bd4e3dbaba6f567eeec8ac256b2d7b7a3548725708ec2d863a05d7ab1383a52b19f9129740c929cbc00165607f74a9de4f1175367755baab6d198bf1376f9778b67ae501aae589cbb0d6091db64833c3c3879b7fa2e6daf8d6dbc8e16e95da6e3b14e5d44a97fb58bb0e1dba02344c67ed3c65b30e2d5929c654975f5093aaa3f7f504e11e9b22648bb6bd9de22a74fe18e75578054bbbe4eafe0c7b8172131ed98fe83fc247761452cd15c6df626efccf162d59b7f015e563f27b30aec1e8a78bd3255b946635ad30b5b24c5ad92343da3623311f24363502f87c7dc844b5829ef11792f1887fc54ca913836e764c076b1df0afa46f9ef3b2bb466b3a04dd24bc4e1a67ae4f1109996fff548d39bd8477275dd8185fb131a92c9c27fec4272af83b8a9f1cb0de9d8e282cc8a9598215cf2a64cb9a5604a5d285dffc1c85488cbe8941dc3a7eb1e277862063399bb88f5064bdeb62e37793c8f662264c3ed37f6f1b625b2c697796e872751091b1aad0dc0804ec886f4a40feaad0723cc76e8bed2b1facea163b55a817acae3484574b13862b90015c84cf2f9c3ba172a84cb98ed1fa2fc7f739e5a3402d1ca93eeb2ae2b93b191098c0f9a082f9e6f0c8d4a545312e0fd900985176acff7d31d197380063c8f2107deb466b41f13d96d017e3c60ba1c972d95a3edc37b1cae18eac29dd8659bef9dd2f4fe01b530b4732964d495f19f9f4ae3ce2433e81acad702ded4a1f38c4b67710e330f9eeb07c8c0b656f7a5680bede20af86e1e01fbfa1f47a6603839a0f925a54a3f6acfbcb88efb653f136d8260f43bfff84d9950d7a7de000532b4c6ccb8ea9f5d462f02f67e375dd8e1f785bb961655c741ccd54c7b908c7e1736a475af0b29cbf1d899436ddc4c9eea045b6b13b0b41630b4fe6e5a6be9c62619602a5c2a96e3408e31dccfc0ec6f987d5758a2835a538b9f1e9a66b10412a509d16a2ef10c16b229bb284ac263fc88d86b10cf07b08bd3dfc1b3d30c1e1abe43c3d332a5fa60e0b5011dc758f2d0545e68d33e176fd28dfd3670ace30cb1b83a6152dbe453ce8b2323cf5ad85b9c6c51c066ff1821cf6e1336eb62e656476b8d0ea0a939fd4bf6e2f6d9518b9c0707bcc2beb244099e24548899fcfe69c93ab75a4f41322a8035fa8637423926c7d9575228e58a6fdb7791a72178f5ad444a1da48c502f67b46f0149aea9e392e1abbda9b7ed42818f529ef2aeceb5b9d3b6637d70cea0a92f89c1a917bf1b14452808f1b25f77edac988c6e2164cacee2eb93b9cbb560d90215f27d5", 0x1000}, {&(0x7f0000000180)="47dd3f9c15b3883a2f8e97427ed65b4d7383e5eab8ec1df02b085f0530bc25da2ba3857c078e39d782377cb44d5c54882f43b516f6fb4cee26d92f79c48ac81eed0057cf537988d37653bd40d469278915589546431102101238ca527bb4c45d01c54b4b9e", 0x65}, {&(0x7f0000000480)="866a055c70281f8f3ff4e0d6b4c669920516ddd1fb425b7496928692d0835c0a4bd43da00105ce181c89628b4a16328f828a1fdb18a18396f13d5d1d4fff33f05a59cd40360f9e0118c53c8f5352de39c151c3c04c0865d9baed3e968984a84634fd", 0x62}, {&(0x7f0000001780)="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", 0x1000}], 0x5, 0x1)
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

08:58:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(r1)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:05 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44080, 0x82)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000080))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000008b344b23bf7bca442ef3b41f191a65e224debe", @ANYRES32=r0, @ANYBLOB="66696c6531147ffa7319e387aa000000"])
pwrite64(r2, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r2}, './file1\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {r4, 0xee01}}, './file1\x00'})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
fallocate(r5, 0x3, 0xff7f, 0x4000)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200, 0x8, &(0x7f00000018c0)=[{&(0x7f0000000380)="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", 0x1000, 0x80000001}, {&(0x7f0000001380)="77eaaa74cb855417eacc4c114f0aebad457b22c69aa30c60002306146e8006627e332c3efe84e42fd88455e4befdc38cb70d0d4e6222d3c841088b6089", 0x3d, 0x6}, {&(0x7f00000013c0)="8eaa89e8ace8d1ca1b3b111247565f1d54d0e85d42092dc2fbed662c72f5b1135c59c641d50b187962ed7ea19ec8545d556d1c97bf80ecfc8d71f2f211a20abd9ce928a3242856d18a9827029f3d3d3e983455dc0009ac9ab6519fed05f91c176dd2c2323eb892e9f654bcd2cf98c92cc94b40c0955e9e18168dc0946c024d4858f3e9321db99e555c2701eb0986fc73529bbafff4e11de7d3ce618bbfa7ba0df83ed8526b8d89f2acf607b3932ca757580092e7dad0f428c112dfb8cdc594460fd4e818cb4ae67cd2a4bbeb98fd2af31e27e6bdd0804aa33a82080f34ec7ceb236455776b1ce7df4ec951f87744bbac2596cdd78c5f", 0xf6, 0x2}, {&(0x7f00000014c0)="2cf37b64903f7d60a5c1c4e72b88d112a5e63d0ac71e0bc282bed8f16e6178d48734e6c9043b3519e4b9af7558d9584eb5ae42d6260e972d819497b5dac1d6380a", 0x41, 0x3}, {&(0x7f0000001540)="c6e7f3425feaff4d842d29e28829d3665d76eb7e8bb75abe4907c5a1798ed679a311b23452a2e12b9c11a3f1a9ecf056f3b508ee7f244c1e60cbcc111db9e1f2499d5323a0ba135125a823c626f47f5e014576311e07bf21ed962f5ccfa776de05cccc913157e9e446b0e2c645b769707950b0b207cd2937cf71762b58b7f29d952af52f855cdc6cca0f6c42ef94b74089cdda07447f62898735c9897c7613a474256bd662f929328241cfe51d3844efd82486ed0d7aa0861e362b1692e88e0c83197885bd089f847dc97132959b8d35473707353d69ffbcbc1ab1c35edf09d80f940ee2dc1ca7f3f64dcf8ad5643c", 0xef, 0x3}, {&(0x7f0000001640)="588c7af3adc6ba55e71c82665294786679e44559312e7a6e8fed7a26703c72fa4af5fb7abbd46b71d5bb37279126909efeb11d665c968ad6d1dfa6650c9f9b7e14d7dcb06efcb8eac2fb6f6c17f66d21c31472be20392eb57961de452bc51693ccb65ce3450ceec919a8b5d3cf0e5920a7fd5e2c2f63b2aba87f8aa0831e301f5ce2005d1db48978f521036247056fd99cc100fb3bc16b194d503cae4182ef1ac8deb913685f2b22b271dedf2a01092f89e986fb8864437c6bf4", 0xba, 0x9}, {&(0x7f0000001700)="d0ec8f3a0dbd6fa3d178cad07cf4c10dcd2e768e2ba87ac25f01acda8a6475d56518c4d8461bad66d71bc409acf12802fce7b039d9a91baf8a23b3ce91eaec519470e17133e04dcf59400047f18173329d472718439492e147a658f0c908eaa7a5d8c1bdc26ef8cf35af3f0d9cc4440cefdb398483f37734587a10180088097285e6042f61d2bff0b59955da6479f4ccc9861e87940b501744900622f1b74459cde37f66c58712a43f48d1888aaf16e050e386c5ce35c13077", 0xb9, 0xfffffffffffffff9}, {&(0x7f00000017c0)="0423cda8f288244b903dd5d5c0124af9f4a34fc6a079cee8d70b51c629bcf8fd8ccc0d587b4d0b96ee90d2e23d036bed87dcd98e54aa81b3b654104809c850777fb558570cb95b70c18eec2b9022d1ff81ce5680c527e01d22297dd74a1df8dd3fa4a1e7e39b18578af6db5fe641e1a0758506c7dad2edf0a5f6cb4d2c53b28932b039b550bdbf24af8e89308b131ed4d53fc78e6b243ca77dc7ed556c22fa50d3733eab2c229e65601fddaed2a86f256e4af4525efb2d176cb6744b06c301c9098dfce362fd4f43ed89f2f51c2ffd68d3b58e05c50f1810aec185561fd28047bd33e542e9f36c9aaae29b9b5730289f", 0xf0, 0x2eaaa224}], 0x2010, &(0x7f0000001980)={[{@mode={'mode', 0x3d, 0x54ccc1b8}}, {@nojoliet}, {@map_acorn}, {@check_relaxed}, {@block={'block', 0x3d, 0x800}}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x6}}, {@map_acorn}, {@hide}, {@check_relaxed}], [{@smackfstransmute}, {@smackfsroot}, {@audit}, {@appraise_type}]})

[ 1406.876820] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1406.876820]    program syz-executor.5 not setting count and/or reply_len properly
[ 1406.902984] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1406.902984]    program syz-executor.5 not setting count and/or reply_len properly
08:58:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES64], 0x125)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r3}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
accept4$unix(r2, 0x0, 0x0, 0x80800)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:19 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget$private(0x0, 0x2000, 0x4, &(0x7f0000b21000/0x2000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/77)

08:58:19 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:58:19 executing program 4:
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0)
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0x42, 0x200000007fffffff)
syz_io_uring_setup(0x6427, &(0x7f0000000240)={0x0, 0x0, 0x8}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000140)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340), 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={<r6=>r2, 0xb58a, 0x100000001, 0x2})
r7 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r8, 0x6, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r7, 0x1, {0x0, r8}, 0x8001, 0x1, 0x0, {0x0, r0, r6}}, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000b00)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r2, 0x0, 0x0, 0x80000000, 0x8}, 0x9c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r6, 0x1, 0x1, 0x4e1})

08:58:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:19 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30343636343439353900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000c8b70d3c99374a58baa2fffdfaacb391010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3000}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000011600)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f0000011e00)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000012a00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000d8f4655fd8f4655fd8f4655f00"/64, 0x40, 0x10fe0}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000d8f4655fd8f4655fd8f4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="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"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000013c00))
open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40)

08:58:19 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:58:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:58:20 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1, 0x3})
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:20 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:58:20 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:20 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={0x0, 0x1, 0xffffffffffffffff, 0x6})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x9, 0x4, 0x81, 0x3ff, 0x2, 0x3ff}, {0x8, 0x9, 0x1, 0x6, 0x8}], ['\x00', '\x00', '\x00', '\x00']})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000140)=[{&(0x7f00000002c0)="19", 0x1}, {&(0x7f0000000040)="90eefb77afe262dc1703ce2816a5108d0c736078be8383a631b6da20ea729323e554ed793ebe7de7976c91b68fb3f403064e5b915d2012938c95", 0x3a}], 0x2, 0x8000000, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0))
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=<r4=>0x0)
fcntl$setown(r3, 0x8, r4)
ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:20 executing program 3:
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0)

[ 1421.127299] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1421.127299]    program syz-executor.5 not setting count and/or reply_len properly
[ 1421.164468] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1421.164468]    program syz-executor.5 not setting count and/or reply_len properly
08:58:35 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)

08:58:35 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:58:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:58:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r2], 0x105403)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)
r4 = openat(r3, &(0x7f0000000200)='./file1/file0\x00', 0xc842, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
fallocate(r2, 0x1e, 0x31, 0xffffffffffff43d0)
finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000))
signalfd4(r3, &(0x7f0000000140)={[0x101]}, 0x8, 0x800)

08:58:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x10042)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:35 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:35 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = dup3(r0, r0, 0x80000)
openat(r2, &(0x7f0000000040)='./file1\x00', 0x400, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = getuid()
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r4}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
openat(r3, &(0x7f0000000000)='./file0\x00', 0x600201, 0x182)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
syz_open_procfs(0x0, 0x0)

08:58:35 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x1})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
mmap$perf(&(0x7f00006ed000/0xd000)=nil, 0xd000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x3ff)

08:58:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 1436.468493] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1436.468493]    program syz-executor.5 not setting count and/or reply_len properly
[ 1436.494320] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1436.494320]    program syz-executor.5 not setting count and/or reply_len properly
08:58:35 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d0ceea210000000000000000000000000000000000c940fc8513deffcdb53b9f5447a24e56ea62723c9341ea5d920ef187ffb56d6cfd18a48c31659824a1a9d09d032237976e10a15bfa38a10f68b1790e5d1992c046cd82ab4308eeded19adf769dc6923d1ad5b44caff4"], 0x125)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8)
ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:35 executing program 3:
r0 = shmget(0x1, 0x4000, 0x2, &(0x7f0000b69000/0x4000)=nil)
shmat(r0, &(0x7f0000b6a000/0x4000)=nil, 0x7000)

08:58:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r2], 0x105403)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)
r4 = openat(r3, &(0x7f0000000200)='./file1/file0\x00', 0xc842, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
fallocate(r2, 0x1e, 0x31, 0xffffffffffff43d0)
finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000))
signalfd4(r3, &(0x7f0000000140)={[0x101]}, 0x8, 0x800)

08:58:35 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 1436.667025] sg_write: data in/out 101187548/251 bytes for SCSI command 0x0-- guessing data in;
[ 1436.667025]    program syz-executor.5 not setting count and/or reply_len properly
[ 1436.690639] sg_write: data in/out 101187548/251 bytes for SCSI command 0x0-- guessing data in;
[ 1436.690639]    program syz-executor.5 not setting count and/or reply_len properly
08:58:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r3}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={<r5=>r0, 0x5, 0x1, 0x1})
fremovexattr(r5, &(0x7f0000000040)=@random={'trusted.', '/dev/sg#\x00'})

08:58:35 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(0x0, &(0x7f0000534000/0x2000)=nil, 0x2000)

[ 1436.810049] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1436.810049]    program syz-executor.5 not setting count and/or reply_len properly
[ 1436.830537] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1436.830537]    program syz-executor.5 not setting count and/or reply_len properly
[ 1437.308276] syz-executor.0 (8039) used greatest stack depth: 23272 bytes left
08:58:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02150500000008065a952521ea68c37f7fed7046aaceea2100"/37], 0x125)
r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0xa1)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:50 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r2], 0x105403)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)
r4 = openat(r3, &(0x7f0000000200)='./file1/file0\x00', 0xc842, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
fallocate(r2, 0x1e, 0x31, 0xffffffffffff43d0)
finit_module(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000))
signalfd4(r3, &(0x7f0000000140)={[0x101]}, 0x8, 0x800)

08:58:50 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:58:50 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x347, 0x2280)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7fffffff}}, './file0\x00'})
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
mremap(&(0x7f0000d3c000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f00005fa000/0x1000)=nil)
shmat(0x0, &(0x7f00008b0000/0x4000)=nil, 0x7000)

08:58:50 executing program 0:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81000)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x28, 0x0, "704f5992eebeaa2888e479ca552ee155f638582a91ca97213ff4064a2e4c350cdc3f9f62a4c21970c8149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth1_to_bond\x00'})
r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x401)
fallocate(r4, 0x52, 0x80000001, 0x8)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r5, 0x0, 0x0, 0x87ffffc)
syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x7b49, 0x6, &(0x7f0000001540)=[{&(0x7f0000000340)="e63abcddc9cc0de1e044675694ce838928ca57fc596b7c3d32caa327c633ad965de4223168e7cddca8ab955896a05279fe27508d5933be09f4b72f2de2a5daf6c2b65724a02d8897f4ec9dd8998bcc9f465cbb21eea140ae47848768a9909f905fe287e0eec71276b3e3c82e96bd1379bde67cb0dd87b2baed16b002aa98eb62a31cf8cc068f36811e14efc3b0c165c711a44e715c3e5d6e413e028383c599062e203e42b27db28f733a6dee6a138a0a78f308e23a7eadd65cdf7fc3119b9f90237e8d7fa17f10c6afd79ed9432052b9c7d4537b75015872f081268e4904d16fd93a0ac322d6c8c4c6d01df3b6ad6d61c6c7aab52c158bcd86bf84f45352e9f5b3955cbdcc93d8643d8fc3f1b6f7dd0460c28be1e41a580f4dfccc2a4601b7679f7fa99635d5c6197f82c10f5b121e8681f114ab47a914bf0df1ae079dcfe7c95fc8367f8256c273d2b5bd0674c8370add5fca51eccb4fbee2234bd5e2bc6908df689d29f9d503839de5626c8d66b15a33df821b6d09836eb336f55ed585c9eb4e94e3a3bb9acb7f4857f0d8b5f3c882bc380110f8558102d8cf3aa0ae47c1dd3401b403c994b19c5b9849c7ac5475992805c6ac23a8b008ce555690badf8d60e825282307f34ca2678aadcc85b7ce76305ec55783b56ec507a928c6faf23072ac2aa8ffa00f32873203c57bb3a9d5d9f6829f37c46cac88f012186541a6031c6d949f0f0c01b86b2f33bc54fe07b93b5f81a87b993ef7cd0f7fdc63289062ab20f11601a1503796c5c45e013baf4b02f8cec04fb83b8d8f3a21e46f9918e9b975aa42f815bdd01984d8e4797f71cf78914b3c60d5970f8c19eb9207ca7e2a1d44993d931efaad30034a7ae0a4664591d33765f7957613354e400c289f3bfc0e3e5611eb023ae62b19488f8cff28fec8139f223cd77aa3bf377785d37d8fe98a38135da13d80ed76ef76a8d32b7ae70739f022a3a40a42f821e201f3574be5d57bafe6b474351e63ec9683ed4dce594a4665d605abbaae3ab8188c5864711a7293282bcbe6ba368ddaf76cd98860ba4116fa9b053dfd7e73c6348648414daf03f934c551b476fc1fc35d018279cbb07c0f7676da8ebad8154baff7cdf09e98ddb9ed0149faa905a7a4ad5820847a49297f746c8b03f9c32718ec52a7060c1f253c0392e3268000535f58149b1c077aaf8120606e0ea08b57d809cc37cc6967830eed0908f4adfc4d1cdddc49fea8828ae0cf7b21ae7709fa2dd074c0e25ccde5107ccd9acd5b9092b80f50673bbec27e005301589416faf41dc8502c5ce7f15e914a1ea59399ed7675f47ef99bb599c7ea0365496d8d3fcf993a4c8a909483c66fd71a1c79a78de0de834f8e5908a618b5fecb53bef7a4d299e2f4597317b9a7df2908919f773af692a9f0414b2df3d7aa9438232168bd0f5c14971b21493dee42cbfe6599ef9ada0b0ffb339db6e6d809c0e0e8f9647fca741aeebc62072b99a137997ecedb5c409ff97c7c85bf15c83c7e4485fe696f0d50cd745212b4ecf65428730d9b3581f52bdd670651dbe515a7dc3a564fd209f06678bd56422023e844212f6d70c70cbb8b945dcb3e86a4c605b669a347ec7a0bcdf94004da6053a37cf6d11c72e50ecebf8bd1af702d5ec6b4d1cc86d55aeacab49d7ee98024773729424c161665307ecc0141cf9d2c5f83aacdaaf33ca326076108fc4977c5d2dd60279784441abe4219131af0f1d62657fed5cfaf928cdcdc21eaaceec95617e46ec6e9cd8ea422be1b296ff48172e0cc470166df0b4337716d177c6ed134b72ceb083676a30edeac8504e8c296085177df656fa26fdce8bcbd0c03527f838c6288f075551e18c86b60f8073b8abb5272fe783d45387c1515582c51e0ed9f31a8f1674a2b3f35f64a04bda7fcb2cdf603f1f02db00b1aa84729b126a95400dedf4a6d2eefcd4cf2cc4e67fb3721f29c325ebbfbbd2748dc576a82624e6ad6635eb40700634c4c931fb82519c57f248ad317e882d415360d26bb1233d7bc90529bca47b4f206d6ae4a22c8389bf0fbd3f95889b05ab6a2bc088898380d3804b06e71b3d59fa139f142e43d52faf1fa50b3addb4945fc4d15ec128ed4fd4dbfbb36d4cc6f9c0a221f95eb7152e7ac8bd41737701e7ee3889940866b55cbdb73d0711765a6f979f9b9ac65ec1118236bfba2305151a304e3de78e7d18f785719cfc14ff981e84afdbcc6400d9b5c5b259c41605343334cc2eb614e55517b534363319c0709ddbc7273a8bf496e9c0de177dc3d2a8a6b94fd44525e9bd8c846f0bc39cfef55c7a0a5f5b45725e5c4603ad9e89f2b5528544c1666e63c245d3e4d8b3e6af839ca9984897c50e6fee70d7f9f9fddf88cffcdbc5ae4ec2c782c7a6c1adefc8af61e0a972b3803221984b3a2a6fa77059e04c50fc614c3e01e7bbc13e4171a87f72121c35d489de6647794ddcbb525da561d8b1c44be3c25422c5b459dccaa7ff8bc2a0a1cd477e43d452aab867008a05245f6f5edd3326a5bd30b24c3fd59838635e313076541c83bf3f73bf67a3ec159e39da0001bb5613588ddf6485cc9c7d595bec225f78b02c2814f7d71cd961ea9147427d9ddb1ecfb64b3720a0b074a20d1d86f80068bbd49d3ed3310aa3302e61521f3e3e1c03bb83fd1c50e62e473a02e7a72aaca57475e6fd197689b9e3e92c5a38962b3c15a786447ec9c61d8148074401cb8775fee77ae1990c08ab6a83d7246ae9ae1a8a1c7ec873e2890062823cc34c3065ea293292bf9706f0cce2a3b0139b3df55ea2acb6d859182f067a5f56b50b7dc147cbe17406d584642d215451e6afe1ac8cbff34ce4ef73c7fbd253ea36a1e3bfde355ebc250e519b4b52c540ef23730d7e6aabcfad57c4750b7bc93591ca540109b6b064ccfdf1d1b870ade3dd8a01c8ffd7ad674f8a7a9672e1460fb1c8ee3e559075c27832eaaf638130cd1e3d3ae388660ff0f400ab4459a06bab43793bcc54e04d3a8f0878a427b26c8045a71af0772e1892446bda42710dafc600fdba049cdd153dcaacd683eb33616a41158eb919ce7c0b688a059b7952026dcc35f50a2c05cb7d38ae32dfdb51b48cc372c7e07cdb069caf27dc25c91c085fae5b957592b163ed5cdff1a65ba9193b8ca781665fa7b5c6f1bb5a93efc24f1dca72e67367acfee2ca75e7a211bbdce49b8661ec350a01c568ef997b13b0cdfdea3f37a6bafc9e7414ded961a7849240b60c40328295c81652e6bc4153fab4b5ea51e7034fa002f6f9d7b77bf5655c15869e2b904f0bae6c25fb3f637a37e2c000036e8b97561f16a52c45dcf418531ec17614c1f0b9b34b76d20fb547530cf37dbffa8261cc3a529bbc67bbce5ec4cb1aa2567ef30aad8dfccb485e3c5025bab1861d6f1cfadd5805f3c38e2e96abe9a0010f655ab025a31d3f329320689ccd567375077945e680f33f96eefd53e349b039d3d028ebcc16a4694ee3447d6ed213bb83209c4178357fe0328f65f78d6a7eec99a1795e3560f9bdc61ffd95bbf0e2a74426eac59ea2d068451487d8eea956509e22891f234361844c052369c310e6570de7db1c84f36e74e844d59797e268d3dd5220d77b66f7f767e9d429c1659ce6722a5bc53877bd69e77933f7aad841185735a5ec66db4011f6bde654bc1110f45f736c208fa541aa6f6c94de89d96fe1bffb3b9a93040618e441af480299b0b525e3074f65d859d86d5b081c93fc26f0cd78fd1d9be7ba60217327978466856ea35025a36f6a7beead00ceea440344c34f1d46ba621cd2809a466f74a65da28e3f54f5d082add607dea6245125aafa9166fd6d7936ea91ae83f08f690f26c2fc0628c076264b1f2d0d66a5a0fda4892ebbfa4ea4d3cca15a32b38d05cd9e5828e1368e9e9c000dc031a1535f000d1671605de556c0f73ce5f3be668a36badf4b6aba28448c5be194542756e7f68683be477ac2e1b9342b3aaab150edf7364e0e49700394b4d846e9adc392ed654e0d1e5cc1d2118c2a33080dd74b7315654b379bced294cf214127b41879b339479782e0847d7df5f894eb25831d52dc741897887ae7da1eb7d2df8a8bc64198b89600e7a888cf65c8cf1619b145ccc28e5e0df40d18f00495bf61dc16d883ad1af4b0fef26bc40f9565bb522738b1aa4406a35ee66365d10739286d8e6eb28377c3b750300eb92c097fe5bd15f93154a36af513d8c9a7dbd2a6f95a524f542419d9196af9336df42316677b49c6cb6bbf3aa69dc8f52bfce9c064d8514a38ef6d9f578e4be6a431a93f40635219e02c56808b88d9a3dbe7b436c3c4f11249d3f6f4a32b83a5e45b30b52087a894b5ca0a4206ded3cc3b2739145dba00b8ee486612d7afc2ce48f5be860d09ab595eee47f54145379760b46c92781c95a02a1c6bb5d95a14ddf5e820a59d2ce7823cd42faea57abba10261546d7d2ffb1ab5353547f5e9b942634116bf3ac96ea597b725af082b436db1471322a69f4db8e09513a6a53399e98fcb44a7a62fc26b8494ce0f54246b12fb79514fc517e6f5c28b1a35c69e8a810669d7202d7a1cd6615c442cf9aa577f749175d1dd30c5329d2d7b94387e10e6559f8642d87c71f9d3cab9787c69909ca2c87001b3784a240acea07289b3d4835738df7a5abb37d5f08691fbdebc842c795207b10de697a34f9b16e7e778e642eac68962bab4546a2170a6e2fadbebf9dc3f7a5db2873d59926a43290e012d88a007c88347014716867ca08f040e2e515a48f37ec7be5cfa695bf4b955af3a9e6857e1429636732fe6d4fbb7109382696a51c9c509b483cf78c367dde6203dad6a368c9f083e80d911eb73339165fd4e073b88005d0e6c5c0ad5b443fbda0d54f9db7a2b307ddac0ce55e04b3264063ea8a11c7c6bcea98594dc2c40ffe8a1d918e40e3c65483539c23693b1be3186649fbe4cb6aaa9405e7f19e24514a23326e53d509bfb9e8681f51b7b7998359710faeb4ee82eef4505a6eebf6a776ed564ac382e3b53eaa0fbde5ed553c160274a645e7207e7e919fa59685a594c0ebb3d4872c1fd6e23efc907e2f61c0bc0329e1ebd6d72bd0d03b89e3b49b05df40f49fdff55e1c90c5df8b541a4e9c6c6f6498589c83d5ba85b8005e41bf81d5ff4d283037843e219c83d16cfdc80322f4306862c8eb5178748ccf3ddc9aed2a43976c49b06fa5ca259498973157eacc9ec78c4935aea5918f76f21780e5ae364243643b5b19509f857bb3a52cb058933616e19566de237c61df4ed3a1bb9a557320c16d956b9a94340e659c47ac1bbbb99a43a7d418b5c5062ea7f078e89ab7773e9b5a67d8780195ed81594c8fa70580fe46df860072b4947672718c210bd221f16dc4f92f517e15ad99a64fe139ed281c0ddfd77f3433ad07376f884abe25be13da44b8e9f71f4bf7b46ad954403a38e3fdece44af2e23567cf673872e8a2ca6982d950035ff3f06e77347b3c629ee80b2126df1195a032058c765c42e9dab5a5d82550422e8937e5c16a7efeab4a17c6e249ab4862a79cd07d83da7c3f928722dcd0f8f49796be16a4daac0c48abeae05b64ee8c98189fbfbb3dcac137fca428c709d16a1fba02f7ddbc207126911b58e7f4734895366f2b1073f1c20a4b3d1c9b5faa90418bae604d9e8e12c5d37c0ac5de09e507e2d12b9a9b19260f1e958f3eac70c59c9ed3984d5f24b1fff98c57b154db6ca85ec6559adc9e8b4c47dbd09cfe8139074f60a15bd0763f484c360c7c7f8bc0ec3b166ffa5c6a5ee0c40abaaa4ec39dd4b8864a", 0x1000, 0x9}, {&(0x7f0000001900)="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", 0x1000, 0x4}, {&(0x7f0000001340)="bb1648fbc3c1a12a", 0x8, 0x6}, {&(0x7f0000001380)="1ef8562c31147b11b2", 0x9, 0xd088}, {&(0x7f00000013c0)="7c30bbb477f5bc4e4790fd743ed52663fd19e8c3871ef9e49bc6ed4fd6ba6a00253c2b218bc402113f2189a4ec550418465d4997be1fd8cbdfcd31d660afc6515de97424a7a4aec52dfadd89f7b1cebbcc09b428894a46edd2511c98b72e2cb0c2e63d9f1e88b7fc729f74b9af6ac5332f37042d8ed3bb1d8b8e264dc4200e61cbe3d388154b925085", 0x89, 0x4}, {&(0x7f0000001480)="f86b1c4209914fdbc52c12b2f8e374b85793aac55f357da2d8412941d758d933edcae73b8609451c1f849431b0adaf766d2edeab70ef9e0280885c194301d8741d0af41ec8710ce0d22db32053467f101a9b2195cfdebb4aa015d1684685d608c1da2e99f341fedd13efad373230cd6e0dd1e653e8f3593218bf836ae30a793a4728aa9501d1aecd825b6f26fb5627629900b9404097305acceeda8140283cf8431704a3e09d2ce41425115ec4c3c8", 0xaf, 0x400}], 0x1226001, &(0x7f0000001600)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303031312c6769443d2f72aad8f9fecf6564fa1e6be0b595f57c55a8a9389bb6f1201607cd27982bc393516ac9c1101c85ba3414a1c29f5beeaefce37d927167952ae553bc4d758962d200320598ca2f26e11bcdb02376d4758031e2a0a64e09bb622a80926b616b3967295821ab2c289e1b2a4e1ac50d641242f9c7414ffffda8a79d87e979ecade6a6a235f122", @ANYRESHEX=0xee01, @ANYBLOB="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"])

08:58:50 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)

08:58:50 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:58:50 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1451.018901] sg_write: data in/out 101187548/251 bytes for SCSI command 0x0-- guessing data in;
[ 1451.018901]    program syz-executor.5 not setting count and/or reply_len properly
[ 1451.043885] sg_write: data in/out 101187548/251 bytes for SCSI command 0x0-- guessing data in;
[ 1451.043885]    program syz-executor.5 not setting count and/or reply_len properly
08:58:50 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:50 executing program 3:
shmget$private(0x0, 0x1000, 0x200, &(0x7f0000b33000/0x1000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r1 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r1, &(0x7f0000f9a000/0x4000)=nil, 0x7000)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000041a000/0x4000)=nil)

08:58:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c1f2c7f05d6403511d828dfa48d82198da5e39525210269c37f7f"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:58:50 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000010000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:58:50 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:58:50 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000}, 0x140}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r5 = getuid()
fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b8ac3873c209156498b3b86c584c48f73bcd27a7ef321e5d433a8b0c3a0b929c58d7ca4b0a3f77cf2b447efc7c806e970fe6ded8757931990bdedd", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
r6 = getegid()
r7 = getegid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x5, r5}], {0x4, 0x1}, [{0x8, 0x4, r6}, {0x8, 0x4, r1}, {0x8, 0x2, r7}, {0x8, 0x0, r1}], {}, {0x20, 0x5}}, 0x4c, 0x1)
openat(r4, &(0x7f0000000140)='./file0\x00', 0x40200, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@noextend}]}})

08:58:50 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1451.321907] sg_write: data in/out 101187548/245 bytes for SCSI command 0x7f-- guessing data in;
[ 1451.321907]    program syz-executor.5 not setting count and/or reply_len properly
[ 1451.340704] sg_write: data in/out 101187548/245 bytes for SCSI command 0x7f-- guessing data in;
[ 1451.340704]    program syz-executor.5 not setting count and/or reply_len properly
08:59:05 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:59:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:59:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfff, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="e18eeefab760c141c408a626fcfd6cd1d2cd0e7ede150ec492a45ebbbe23b4acc8276fcf844a6b26dfdaaa801bbfd97fd418e153d5f15461ad433c71fc7bd9be51b338d7f5ae8d07222aca0788d6a1b211cbe6e309faef6ecba0a9424e470fa3ee9be0d1ecc9cef6df1feb1660799a0b61f4a76385ab0447b2c56733aab5e2df721d2c798469ac038b8a1652b6c31357eb5d45dc2a33f03508e6ce7806ca011afef0d05b346e3df778f62b951b040fa5c777322e1a905994302018e3938977802cd43a38dc85d2f1d7", 0xc9, 0x7}, {&(0x7f0000000180)="6bffe63d9d946c6a5b4d3bd4ff36bfed188cd25fddd3f65e603c9933edda1d319de1b4baa9ed91bfc29d5e62197703003cf13d0ee03e18c049d44e49", 0x3c, 0x6}, {&(0x7f0000000280)="05d358b7306a3903964b3a8a3832b5bfd4fd7d05ace0fe3035fca1803e88f1e5359f6cbc49f1c60236219b2e2747146a36c0763ae5cc57f33db41d4355353ef2f9ddfc2f17131fcf8a46ea7de93da5fb03f4f058b0187709a86e09b1eed94d87af2bca93390d9b265ad4da81936c6d702d8191db63a525251df649b5c670e3113fb99a2d17e7eaabc5818b72c33a0f67ffd86611d9d200ad", 0x98, 0x3}], 0x0, &(0x7f0000000340)={[{@fat=@check_normal}, {@fat=@dos1xfloppy}, {@fat=@check_normal}], [{@fowner_gt={'fowner>', 0xee00}}, {@uid_eq}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
renameat2(r2, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000440)='./file0\x00', 0x4)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:59:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(0xffffffffffffffff, 0x0, 0x0)

08:59:05 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x0)
shmget(0x2, 0x1000, 0x800, &(0x7f0000e38000/0x1000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(0x0, &(0x7f0000afd000/0x1000)=nil, 0x4000)

08:59:05 executing program 4:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil)
shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x2000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000540)=""/138)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000700)=""/4096)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x24, 0x4, 0x6a, 0x0, 0x0, 0x18000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x1908, 0x3, 0x6b45, 0x3, 0x7, 0x40, 0x3, 0x0, 0x1000, 0x0, 0x4}, 0x0, 0x1, r1, 0x4561500d9a795265)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
r4 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil)
shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x2000)
shmat(r4, &(0x7f0000ff2000/0x3000)=nil, 0x2000)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

08:59:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:05 executing program 0:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xc0042, 0x84)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
ioctl$CDROMREADTOCENTRY(r3, 0x125d, &(0x7f0000000000))
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x2, 0x7, 0x9, 0x3f, 0x0, 0x4, 0x80001, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x80}, 0x800, 0x0, 0x1, 0x0, 0x0, 0x2, 0x400, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
openat(r4, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102)
openat(r2, &(0x7f0000000300)='./file1\x00', 0x181c00, 0x0)

[ 1466.897046] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1466.897046]    program syz-executor.5 not setting count and/or reply_len properly
[ 1466.909800] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1466.909800]    program syz-executor.5 not setting count and/or reply_len properly
08:59:06 executing program 3:
shmat(0x0, &(0x7f0000835000/0x3000)=nil, 0x7b8f87c3052cee56)

08:59:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:59:06 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1467.087584] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1467.087584]    program syz-executor.5 not setting count and/or reply_len properly
[ 1467.106723] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1467.106723]    program syz-executor.5 not setting count and/or reply_len properly
08:59:06 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:59:06 executing program 3:
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x48851)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:59:06 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:06 executing program 5:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:59:06 executing program 4:
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = getpid()
fcntl$setown(r2, 0x8, r3)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/schedstat\x00', 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x20, 0x9, 0x7, 0x0, 0xdf1, 0x8100, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0xb}, 0x13, 0x1, 0x9, 0x1, 0x9, 0x1, 0x5, 0x0, 0xd3}, r3, 0x8, r4, 0x3)
r6 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x6, 0x7, 0x0, 0x0, 0xbd, 0xd00, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x81, 0x4}, 0x10400, 0xffffffff, 0x8, 0x4, 0x2, 0x7, 0x3f, 0x0, 0x6, 0x0, 0x200}, r3, 0xb, r0, 0x9)
r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r8 = dup3(r5, r6, 0x0)
clone3(&(0x7f0000001380)={0x72a851f552d230dd, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240), {0x10}, &(0x7f0000000280)=""/4096, 0x1000, &(0x7f0000001280)=""/186, &(0x7f0000001340)=[r3], 0x1, {r8}}, 0x58)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r7)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:59:06 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x6, 0x1, 0x0, 0xfffffffffffffbff, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xffffffff, 0x616}, 0x2086, 0x2, 0x7, 0x6, 0x1ff, 0x1, 0x9, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x2, r0, 0xa)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, <r2=>0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x24, 0x0, 0x91, 0x3f, 0x0, 0x2, 0xc, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x7, @perf_bp={&(0x7f0000000000), 0x2}, 0x4002, 0x0, 0x0, 0x8, 0x5, 0x6, 0x2, 0x0, 0x10001, 0x0, 0x2000}, r2, 0x0, r1, 0x8)
r3 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x40, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2b, 0x5, 0x6, 0x8, 0x0, 0xb9b, 0x5000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x33e, 0x1, @perf_config_ext={0x7ff, 0x1}, 0x4, 0x7fffffff, 0x81, 0x1, 0x3, 0x0, 0xfffe, 0x0, 0x1, 0x0, 0x1ff}, r3, 0xa, r4, 0x9)

08:59:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:19 executing program 3:
r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x80, 0x10}, 0x18)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'user.', '#\x00'}, &(0x7f0000000140)=""/89, 0x59)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = getuid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
write$selinux_attr(r1, &(0x7f0000000280)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r3 = openat2(r0, &(0x7f00000001c0)='\x00', &(0x7f0000000200)={0x101400, 0x41}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'})

08:59:19 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/86)
r1 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000)

08:59:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:59:19 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:59:19 executing program 0:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5f000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000be000000000000be000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c0000000000001c00080000000008007809140b2a3a08020000010000010100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202073797a6b616c6c65722020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202047454e49534f494d4147452049534f20393636302f4846532046494c4553595354454d2043524541544f5220284329203139393320452e594f554e4744414c452028432920313939372d32303036204a2e50454152534f4e2f4a2e534348494c4c494e472028432920323030362d32303037204344524b4954205445414d202066696c6533202020202020202020202020202020202020202020202020202020202020202066696c6531202020202020202020202020202020202020202020202020202020202020202066696c6532202020202020202020202020202020202020202020202020202020202020202032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e0000000000001e00080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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"/288, 0x120, 0xe000}, {&(0x7f0000011300)="22001d0000000000001d00080000000008007809140b2a3a0802000001000001010022001c0000000000001c00080000000008007809140b2a3a080200000100000101012a0027000000000000271a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xe800}, {&(0x7f0000011400)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0021000000000000210a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00220000000000002228230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011600)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0027000000000000271a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0xf800}, {&(0x7f0000011700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10000}, {&(0x7f0000011800)='syzkallers\x00'/32, 0x20, 0x10800}, {&(0x7f0000011900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x13800}], 0x0, &(0x7f0000011e00)=ANY=[@ANYBLOB="e6"])

08:59:19 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 1)

08:59:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1480.762181] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1480.762181]    program syz-executor.5 not setting count and/or reply_len properly
[ 1480.794336] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1480.794336]    program syz-executor.5 not setting count and/or reply_len properly
08:59:19 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)}], 0x1, 0x4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:59:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:19 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:59:19 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000))

08:59:20 executing program 5:
write(0xffffffffffffffff, &(0x7f0000000000)="1ffc88b83c4a1400dfb82cdf56da986f43b0e1bcf520212fe19f27d89511eb7aa151abee9c312ce5d4706a6a35bf9e6e0a60764f898dab40cf25ef8383c4cdf49651e33fb36f", 0x46)
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:59:20 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000040)={{r0}, 0x1, 0x3f, 0x1})
close_range(r2, 0xffffffffffffffff, 0x0)

08:59:20 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:34 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:59:34 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:59:34 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:59:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
r1 = signalfd4(r0, &(0x7f0000000000)={[0x4b78]}, 0x8, 0x80800)
ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

08:59:34 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:34 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}, 0x22}]})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@broadcast}}}, &(0x7f0000000240)=0xe8)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000280)={0x0, 0x8000, 0x8001}, 0xc)
mount$cgroup(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x84000, &(0x7f0000000340)=ANY=[@ANYBLOB="616c6c2c616c6c2c78617474722c6370757365742c636c6f6e655f6368696c6472656e2c6e6f7072656669782c6e6f6e652c72656c656173655f6167656e743d2e2f66696c65302c657569643eddce5fbbc8f21eacba5c090fa8256e1e3dcc137aa17fbf097a316b06ea1dda981fbc0c95c32d78269f9d3293c19d145fbf16d905a796cea30000", @ANYRESDEC=r0, @ANYBLOB=',hash,\x00'])

08:59:34 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 2)

08:59:34 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008891}, 0x20000884)
shmat(0x0, &(0x7f0000891000/0x4000)=nil, 0x7000)

[ 1495.847510] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1495.847510]    program syz-executor.5 not setting count and/or reply_len properly
[ 1495.854316] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1495.854316]    program syz-executor.5 not setting count and/or reply_len properly
[ 1495.910670] tmpfs: Bad value for 'mpol'
08:59:34 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:35 executing program 3:
shmat(0xffffffffffffffff, &(0x7f0000400000/0xc00000)=nil, 0x7000)

08:59:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200050000002406d033b2a2049c9525210269c37f7fed7046aacef289"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x7fff, 0x2, 0x8001, 0x1, 0x0, 0x2}}, 0x410000)

[ 1495.937585] tmpfs: Bad value for 'mpol'
08:59:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:59:35 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:59:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x935}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a, 0x8000}, 0x0, 0x8001, 0x31e8ba38, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x511000, 0x0)
finit_module(r2, &(0x7f0000001240)='@\x00', 0x2)
readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/124, 0x7c}], 0x1000000000000300)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg(r3, &(0x7f0000001780)=[{{&(0x7f0000000200)=@sco={0x1f, @none}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000300)="26cf682e782c412c91324555c2e4bb1c8027f45167804d3f435a622054d313f4bf62556b4b8da3e6be894223eb32819e29a13c2db19fe858ff67af6e2372436a970f5a33094dd1599ad4f19b940c3124c9acd44032035c2e010022db4ac5264cb3749d57d237efd715fb25b9c9e8c1902b299f02217a658f16fb96542e63b2d3c807d89d26466c3326dc0e2c6ea619410eae0534f4c8ae26", 0x98}, {&(0x7f0000000100)}, {&(0x7f0000000540)="27ac4ec1d59b3d03bdf5e22f7a1abebd2838f9f7ff82e547e08a1e77b16d5d4908f891dbb8269fb89c5ad3ab6e9532ae216c6072ff2635cc1579aa7e6aae3bbb9d5c9fef2d336227c4d84586d2306bdcc433cee151c804a5e9b2162fa26325ec052335e5a91d3b183963aefede9ca0d3483d9c61b07128110cec678fcb68f1ede13ebad32066a9282c5134bbb8af322664b83f8b9a4987fbd0e6a90831dfa270f11aacc54a5629b3a01366119309868dfd8f929781e4a671b0a36ad94ff8f2b16dcec52e72d49dae5655a7a1c125", 0xce}, {&(0x7f0000000640)="956a5bd008b67517da58c3aeac379ce277d7b8890a1c927e7b5eeb7aab7033e3737927ee4a92b6c04f569c17f9bcda0e0ffbe367bd44f029e49a7f57f853d04e7127123dee6e1f8f458733c3439926441d9794522e680146eed0c5e2d1aefab1c6fa9e142f046e185823c5ca1b508fb8311586e11d6302df8f1b293db3504535cfc8a5da4a0dfa4681e4db4900a9927c616661a3eedd6465008b1cd73932c8227b0493171bf47c17df0f08b521ddef5cb232287f0d78a2e26b55c3de3ce7f7794e16836dcbefea3d9d7a1d398cabe14def3bcb868310e6da0529", 0xda}, {&(0x7f0000000740)="ed1d4fcf67d9e24b42c2cc0baac57404c35626245ffac6f911e79d41d5af2f11dcadceeef6ba80d954eaee99af09c115f917ce9af8c0c71c965a5bd6649be799deb93a0b1814e63aa904ea7de30d599d1eb49e7a83d45af89764105b234738ac06edfed8bccf2499c1a11e2ae4bc5aa2be791c01e6c46910255ef7a540aced8d2b5ab76f46379774a8cd905cea661a113461cd7acdd23b3a7671a13e3531f238c26ad1c7df1bbad5e612298d954ec0528177f284909e40174ecaf028b05ff507bdd1cb7658", 0xc5}, {&(0x7f0000000840)="36bdee83773d8a34823bc1b457bdbab7d391d7ea8b7e9de8cfff5bbd25314fb5d98d1b8ce9bf711af78454193d43b7cff2b3c282234d4da5696f141bd08c938a29fa99f134ccfda1b2f34085b411f61e637b267b0a896114d70c94c2850f6bee0b1ed304d1a11820ffbeec88c116202902813c235567b8f43c5dcf0e2592094e17674105df967a8a", 0x88}, {&(0x7f0000000900)="e6d0636b10ed4a18518f7616e02a1c43301204b8006948077b3573402a5e74bcc3062ea3c14818f6c5cca6e25e7c980f875db6cd20853d384f69ee59242a0dd28f28cf41b4062748ee4764128b4518d547a1bc1ccef137c1f8db4d2baf12d17acdaa47d8ffc60ff7c30ded461323cfe91996ce8cae36dd0f785b73a38f2e01ee620aab944c8a7cabbe495a0e392f3402bb526bedbe25eceafbaf5599ee7888307143064fb3b7b91c36b52773c25f2d531cbe178ec5ca3934a75e6c4ef737e6d17a7d737b70ee8ffb240d0b05306ad56f4518cc2c", 0xd4}], 0x7}}, {{&(0x7f0000000a80)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)="deff18790c020c2ee20f13401eb7408ff464d5894c0bd9ab161a35f16c6a9e5b5b68a7599f3bc0b3aeadd2ba55c316037bda365041a22bd9fdcae70789dd2a64851cd82c62b27d8608f8ac37b2a6ce8dbbdb754b33074725d2647ae0139deb508838dd6419eaa30f09eab8f1a52bfca102313fe393581cfcb5b4320292e54013fa329c10a9369dcfe09aa1e43adb80688f048d40d1cfdeffdeb10d2e8250244901ceeae5713599a21f3d191ad89625", 0xaf}, {&(0x7f0000000bc0)="9afdaed08e8ea56330c62a202ca28d5b584a4f108cfedc36c6e047b285757af43a52b1e4baff2fdc90ba61e50653740bc8025c2ae061fcb22edd1372629840886c2b89", 0x43}, {&(0x7f0000000c40)="83007d7365e6b320a87a3f5ff1e4f83bbaf771ac7973e83acad5836c924a46c4fed4c3d6c242058e345ed4eaa51d986d364015cee3a0379cfc0d5ce8de544cb7d21228f835604c771752e7ca13c6b297c709e8bb0b5a7f428585dbc4b524c99eb00a7ae95a070e8781f739455a589a5174e9cbbce5f23365db9208b24be94d0e1ff734d14234a213812c4d8314a55cd4fc1efc3a7dc758803e58a658d4b064419129b298aa068163c60c9d9cc72f86ac1f63ee467eeb3f7e6d2bdcbc749a04db562564620920fa37efb15b6f45508caa5d97", 0xd2}], 0x3, &(0x7f0000000d80)=[{0x68, 0x10b, 0x3, "65fda245bda4549fcb899ec3236b47b246ae66b9a032bd59a9e3a20db76567d574ae862eda9b5dcc70d170bc6ee7dc31f091a8ec686e143b4d0f210370d035eb47ee72b08ee32f9b5bfc2a02d7895162d489c90df87d21"}, {0x28, 0x116, 0x9, "de25cf10f3f1ac3dcd66e2cb2df72179a26d8d"}, {0x110, 0xff, 0xfa, "cccf7b59f672e4d40a5d429dfee8c7c253abaec44a99a09b9602ec578186503404b06baadb3727844d8fce82eca8ed0b9dfbbcf2b28a9458371dedb87d8e26407f5a9fe4268617a72cde9c1685080b52366d393d61643e79943d3f3c58d1a40f5459109a4401e3693cc7b64b90f6a618a90ec50e17098d06c1fc682e95eec7614c415f90992ed7fe19678aeeb0d609b4c938ff9e87809924bd2fd016de94f34a4791f8bb943cf057065a78cd887eecff09f4b2c7a10770c0c138b46b6d6b3f756bd754c16f16889bb7c8a8676b52805c33c77db553f74168a51650377cb3bb435091b019836fdd8475235e4e6fa1d045848ec60c02e2835689edc539926c"}, {0x108, 0x0, 0x9ef6, "7b788b893987c7ed0670e5cd0ed532c60a91320d865180719a0ddba52acb61c04126a4e8a23bf18079bed85e21499c2a6acbfc3ac26f0ee5eae7ebe1cf4e70d4829155d8d7476387a032e196eab16378db3a2cd4f1e778b426bc6c4c0116357882b3293e60c942dc562af416cf175abffddce0f327c905fae0593d30194229b6b1aa94243649605bca16f62f7e58c0304685866ef55b61b23632871b87843b6eb3a6c37af667f4e70113272fd674865589fd19f1da5f1a1629ab276bf8b0ea10dbb2bbcc20c86eefb32d1cf6f40868d63a824dd7c1306ac373f74ce0342fb4135be8fb6e8afef76ab9b62d372d58c56c05d408a5ba"}], 0x2a8}}, {{&(0x7f0000001040)=@caif=@util={0x25, "c75a5d82a87949c3215a4d65884f07a5"}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000010c0)="4cad76d128f9777ce99f81290bff349d93e295e10f1a8d69182e8af8af37a566a74935fc8060c0916daf859beeb07ff598c21db465dd9b6918a00bd98669f77b138f21a853a05af98406ecf32c4e6260a3fc807f9fabc24dc757024fed6db6fed2e72eefcc", 0x65}, {&(0x7f0000001140)="7daf41a59d994667ebe77defe4bbb88574b2754d", 0x14}, {&(0x7f0000001180)="45d7ea147ed52d87e2e1be220e1b6f453951d8bddb2f99c31774ac1b59c6c1933f57b518d3070139e9e47c64f78dc0164b2f15c3ffa06e3120b7b1e86860de7fffa214080e7f58081d8a2c365d7ef619ac44371610c1cef1440d1b0a0f054593a84e3242ff83ba8ca6aa0e3491a5254debf2d411996cfab6fc565e01887bc6caede7efb49a751cbc7c11ebbe6ed75055c8e6a8e03e4ede4c6fbd52459879427be859d732269229", 0xa7}, {&(0x7f0000001240)}, {&(0x7f0000001280)="57fea64637edcdc3c28c62a314c33972612743eb86c88bc22d86be8dd3f97ad44b7ce570069dc9a96f41a6cadf5214c126f259f393b082d1ff1046d0286d82cdb0aeafdda2bb8969e04cedddeddbd08b42c704116326aaedfdc9a6a0705681c3bedc7d389ab0c25be25dcdb9c378a9d371944b7f6626c9a453e3bf7f83c1ad328e3f4346699515e216e35863ddfb4c7b514cbdf22b233d8d059b4e8b5ee7cb2b9116902a94c74a516edb221f14", 0xad}, {&(0x7f0000001340)="1eaf3d9f32b22d7272740523cb28a38e4b73f9396bc829aaf46abb9fced9e5a818fbae4a04e3af70b483246123c256b1738ba17da8b30f7c0965d0ea9807dfc7d7ad8bd815bd6a11a8125144bb9e86744c8d9d64e3c761311efce2552a7ec9fc73c3037b4edca800d8b77200e3648a93cfe3d0bd354aeae60f930f0e94792763bec1e1311d7d6ef1a2e7bd8f6a61", 0x8e}, {&(0x7f00000018c0)="5b90ecd5289292ec8d795effb265310556155726d8b80ac9a0de5a8d7277be3cc2bd9cd381da10ca9832be407c2f082db55791c8bc5816fb3c5752bfaf6bd522d3f4ee7ce6a66850163087d786109b9f443d152e9784e15534f8d5121fa1ea1598b3a9daa9122148bd21c33dd335d326395b6815a845207ff5be04de36c8c6fd63e88f77ef8d5d0b358b7acfe781694fdfb350ee849c30ab2e54a01c32d172682e46de60c7e24fdee5a4db130c2ab790f38b4491b1c18fd512825b17ce655ebe", 0xc0}, {&(0x7f00000014c0)="0f2cce2cdf9a575e5fc5ae8bbadf35ec9626c6e5ebaba38d645e106f21c0aef64f607614fa8fb3c95fe4ed06599ad1b7ace9e45f03cc0f20fa53e8feb41389c7dafebcbdcfef567ae2aff9f5623c43e9c3074f24bb8b8ac1faa360bd30ab9c4c44f49c7b962c44f21dc6e4d9e67fae44655f430797892606b7bb517a8412265e2e9165c857a10636a5d47191c87bc6879effb8a67896e659f45954c0494f22e0d1b801652e4211e5b1e3abe4b21aaa17cf85960feaef5d9219bf97f3afa472f618d803277d4dae817c870a3a5b48e3", 0xcf}, {&(0x7f00000015c0)="94e140cbb40f3b7d1a10a893261ce60466b2140392319b69ae23be262071019d54e8eb2d7003c3de38bcce211d1f0bdc02306bf8319615c25d830dfc908c823d", 0x40}, {&(0x7f0000001600)="e5be23870354f9ffb318a1b5bfd0bb50a64b71664907286bd00bb2d9ffd02a981ef0d78bb6966092fb177a6bbb66eec4d3b7a827d91ac0ac3feb9f85440f64cf213312196823468200a127b025386d209ee1b43fc49fd3803427eb29ecf47532092d2756a859b4bdb63ce38e4f45539ba698bb80df1e0f3c664343dc9c8208af1531709821f432ec58689cb03091a533f2f4e60c5a8b59175fa648b989c2ca05", 0xa0}], 0xa}}], 0x3, 0x4000810)
r4 = signalfd(r0, &(0x7f0000000a00)={[0x400]}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000001480)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1264824}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0)

[ 1496.052037] sg_write: data in/out 103022556/251 bytes for SCSI command 0x0-- guessing data in;
[ 1496.052037]    program syz-executor.5 not setting count and/or reply_len properly
[ 1496.079377] sg_write: data in/out 103022556/251 bytes for SCSI command 0x0-- guessing data in;
[ 1496.079377]    program syz-executor.5 not setting count and/or reply_len properly
08:59:35 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget(0x0, 0x4000, 0x8, &(0x7f0000bfe000/0x4000)=nil)
shmget(0x3, 0x4000, 0x78000000, &(0x7f0000f09000/0x4000)=nil)
r0 = shmget(0x1, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000657000/0x3000)=nil, 0x1000)

08:59:35 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:59:49 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

08:59:49 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200050000000843e7c8b3a6a5065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)

08:59:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2})
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
signalfd4(r1, &(0x7f0000000100)={[0x6]}, 0x8, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x10000, 0x7})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

08:59:49 executing program 3:
ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000))
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget$private(0x0, 0x1000, 0x40, &(0x7f000062d000/0x1000)=nil)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040))
ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x6, 0x8001, 0xffffffffffff4533, 0x5})
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x19)

08:59:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 3)

08:59:49 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x63, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x5462, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r3, r2, 0x0, 0xfffffdef)
r4 = getuid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r4}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x100, 0x4)
sendfile(r1, r0, 0x0, 0xdc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x0)
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
sendfile(r5, r5, 0x0, 0x100000)

[ 1510.505628] sg_write: data in/out 1124597724/247 bytes for SCSI command 0xed-- guessing data in;
[ 1510.505628]    program syz-executor.5 not setting count and/or reply_len properly
08:59:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1510.522199] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
08:59:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1510.559505] sg_write: data in/out 1124597724/247 bytes for SCSI command 0xed-- guessing data in;
[ 1510.559505]    program syz-executor.5 not setting count and/or reply_len properly
[ 1510.565155] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
08:59:49 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0xffffffffffffffff, 0x109400)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = getuid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache,dfltgid=', @ANYRES64=r1, @ANYBLOB="2c7065728935fa0c18c6c108a9ab36ecdd6fe66d69705f646972656374696f2c646566636f2e49e77e1f1d23dd3107f503746578740f1b", @ANYRESDEC=0x0, @ANYBLOB=',measure,subj_role=hugetlbfs\x00,smackfsdef=hugetlbfs\x00,fscontext=user_u,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000000540)=[{{&(0x7f0000000080)=@isdn={0x22, 0x5, 0x1, 0x9, 0x6}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="a792aeac676f408014beffb82c4ddea1a0553a7e2a50ac076a5c04cde94ef1172e44b2680190cb35368ad4aab7394ad7a626a070c47f6a98ebd9c077569085f4798a10c503d24fa94a6d809cc278d366217b36ec6a96907360853529ecd6620456fb2626f1e592", 0x67}, {&(0x7f0000000400)="016ddbd46c11495505dccb276244c4aaafe356e0ef38e1d4c7762dd878c59eaec347e74df3cfd1f2d9dc7c97bf87faa5565b234ae68bf8820f043f599eb86a84a905b0ee22", 0x45}], 0x2, &(0x7f0000000480)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x90}}], 0x1, 0x40000800)

08:59:49 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="f5", 0x292e9)

08:59:49 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/95)

08:59:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

08:59:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

08:59:49 executing program 4:
pipe2(&(0x7f0000000300), 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x428, 0x1, 0x0, 0x0, 0x6, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac6053f295d4ffc20d65892ef07d227fdbe18dbfb1af3e0dd6a380e71c4fcaceb384300007d26af18e26c51db155af69e0000000000000000000000000000df63a36fd4"], 0x28}}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
dup3(r0, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="7ae9ec44", @ANYRES16, @ANYRES64], 0x50}}, 0x885)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = eventfd2(0x5, 0x80000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
fsetxattr$security_ima(r2, &(0x7f0000000340), &(0x7f00000003c0)=@v2={0x5, 0x3, 0xa, 0x8, 0x1000, "92cdf6949c3b3cab00cf6cf54f41e7de5d5588a6465c5e782ef23a22ab23a57d24a4f3ae3501fcee50a509c64c9f0834379316b2ccc57a206de947ab0293e1161869d8247e615ae9e22e4357fadfc7ffeb45f194debd3da493b4d3b48593ca0ddae91e86421ea33f324f7583da9b21a59defde778b7e20f88a8a31dd2c7a75f334870c704009e2e24ea63ef400abd41d026b7abea8d228b0e1bbaa9f55eb6a59d76c9e456a11d4365f1e57c0058541b7b7965a940f01492ca16448916ae39426574bc8acb2bdbcb01eba4fffab4816e704824105579cbc21b41dc1b59b70f436b1549f9a3921997aee97ac88ac267d6601894e8b97afec303ef821af9e228512c2f950d95e9152fe7a9dff332330a315df7c759e0b6a189fe0819334605cd2fd996157c004f74c26988f2b93d89b2d77570a0b9de95f80739beba16be1dce56073f3ea8130a03b3db0e030ed446dbd94043774494571b03cf3f73f91d7db7293d74258e105859b8e68c9d4d918df93507352e4506919bdbb32322e22379e1f91260222a4d4744baf0c543923fbcefc20e9798453965d92042eeca6d17cde5b14284fe3be30f6f6f3a9dec60c36f5283ba455de8af7056e9e2303ded2bb2178e728cd2be2e5eda76ad635e79df05ad68a976a573dddc14cc1f98aa15b2fcf7f56f34e59f04c0efcf85d706cbf32a4d3d0962c9316e05d7e311281502a16a7cb71d55024cc62b2ce0cf3842bbd3e4ed9d82e5c6b5f34adaa11a8021f312873da75d4383abe434378fd67bbabb9254bc462fa518486f53830e96ce896f8dceeb1652e5ebadeb42338f6c512963de546e4447fd401f2dbffdcfef4e8d2691752c65061facc1085821cb10c5fed8fd3bfbad0e95fe99e3e64feca81a2eb80fcbe5cb7f466011a5165070d603bf87ac13fd256243cb4ee694f94b99854003cb7dce4148ac29e03b5f04774337243a0b143dd46591ae4c27b6e9a89a87d924ba000030324c3db21a89a44a0ed9986b86dddc716d60744b66106e632f507131417654e0a12a4db9746bfa49b68387ea20703ec81c26d0c01c274bfdeb4070fc2ab9cfeab3d3572fe27b593dd4f694156b0575e82082fe434ceabde70713c1595a1d3743023f6091e1cf15dc8ccf801cb7a3f5adff7163e915aff652c1a2971472a1a8275b69aecbda88fb21e801971431e5a55b3ef7dea518ea05476efe7c2355f6a59a63ecfad5f832efe569bf31bf69aba67a6ccd799d77b9d21fc33a0944deba5bd53314120ed968a8a965aad36c41b2935b4c20004ea79d1d9a2f902a7da57a7a046490fbee58fa48d4499c94144a97471e94bff0be374662d3b6c72041b7c23d7b588b2fbe94817fd03537c56ab2b335176550914453a665576d31cbcbe568c6fed18f8ab192aacb5f3872f2a0fe21385388497f871f5d9c3d3880e09fb81621815d0a62b3cf8b86869bd7a1445b8d3d8a2001bc069039653b7e12e3bfd77283e874f3312ca217615b5a558d905f0785d0c9b7b33e6e069b257536e54319af9964d2d51068aa057f8c29d87e9a4ebfdeb18a249b0cc1b27c0c4a0d04388eaeacb2a03144a4c035cad47fa1aa5008339438703aa2fe20c2e3fa658bb25446975303bdf0695dc1bf39a89b8de59ba99b008b8a5b5c71525c673f77ff1a512b2cd8f63137cdeb80eb1c89fb590408c203bec1f1a4b019ae56ba3812d6c32589670c4d3e41710906691173a9b5901d7da36f3c0147251394d46e27ea63ffc526987eb45dd572365ab4173b6b2cc967efd29e3932acde71568bf654e47876be2ebc72710fb229bad623d4df745ccafbb3e5fa8722fb469a7ab924210e74fc6b446bbd6fc66dc3c68044836415168e6a9db3f3e158f94e973d108a80bbcb96cf06a3f8370b176137aa584051a8fd1105b35877a58bb3a52c9ff5f36adcaac499440eaa8284e1548d882ae04102de226f3df486cd45ae84818f8e1cd1e8410b047d3f86a667d0cc84cd36af70c9e5a869f83c45427511d98f0dc8020b5b2292583d41b25be52917370a4d8e5f310f034c46c07807ee1fdce6c586328b78678c59ff77ae22aefc8ab84c8e3c13e744863cd13fd1791aa7eef8c2e878d4bda2fa7ed7d988a25013560e7c3d8dc3c2bdc03187c9e3cad46e1429c3784e46db95aa7ed259d702da2e9b376baf504ff1788cb15565db1731006050f138f78ba6a4ae72bde161431242a9eb1bfa896958d3dfaf1e897322c067a2177ce5abe0a5d0d263d354a2c570e3aad141f87fb303ae7c84f03f0770707a9e8085369578d2899cc92bd4d9c4bffe7774b8168c8f327def10168198da9440e7f4b6ed566e63e69df9e1c1ed0bb076cb26a8e0d9673775d16a1bf310505e2b1f2a8b585c14a7af28c21991912827858a83847d443bd3c9cce1181bf33c808035e8e98659c85c454781eae383283932b4ad1c906aa22d22b7849d93a01e6d41faab8b3088a1afa9a8dcc434339f6983f5b0a80c810452a34ea409d85502fdbc94a86ae37d05b2ed1eeb6e50b024f2a249a504e00249afdf9e7c82911bd8a78a48498e15d77316b4ae061851b30968b20976ca02bc913136b21c262d2d729a37664ecf7a1273cd589906379d3dc108429e0ccb8421071d7f48c236719de5724f55016d385d542b7a6c9b4172b017229a2564a46a1619d59d8540bf165c0cb00688e22ddc478af43ee9338bd3f16f38581778393a516b74e2412bbdd5a345f4ff1df84723719532ce34d81e042a2b67cf52b982cbaa0511b8a4ec1a81472cdbdcb21a7987e810d6a86300ffb2ae882dd50dce13d9d75ca67ea4758661a0c8c6cdb4342b396242e3383724c4143a17ff29d6b7d22aa142975803a1091986b8b14302f378aa07ec36f50b8bf5bc344a3c14e3aef5e942ae14c62955bbe668ae34df991f2b376b8aa12c399de420c3cad5224294c7ca39bec7ace18f45f9dacda147aacc6f32e76a443bb599f5aecf7d95e045e28c5d4de5318d8a20d02b68123f1c6c618519db0c9cc7ee2b1c1d7468040d76b0a0cd784edca82bb2011c89e11792fb26ad9be5bcbe7410333220697e5f69f1a4dcb745a05ed3de07bcfef6c1c6da7f845dd52b073c5746248050ab2429afd05ff0b6e67533bf5335172574aa96065fe7f028448c8eae81d0b0f455f72b43416a30f6071a9ec5c88992888d32c905d9c4bb6a483b4334789637737d614f81e46d2504a099b8c4a24317e46488330e5452003e4f48e1c01a1d32aa31be4e3bd69770ccd5eba5f3d61397f8f8c4ca720ddd255fb1aee35c5804394f0ea1d0e97ca5bf85e998bd58b0c721943f210ccfddcdc5506be9586079b5b379994451970842c8f0473a0d82dfbf624ab1bd3a3a98a0c5f95300c24078e87180405ac478b1714187537adc2b3470cc37f61bf25c4704d678309ef37abe4413c425f2a32119b5395a3d26f3609036506f92f3a5b5a8b12eff2b02f8f7ea15a4eacfff0454e73b188edc488685197c961e362d637ea13d984e1b01ff905a94a7d73ca744cb6af44206322a1a13ff40f71cf1060da4356f4678810b4987f9445d93e7c59ad07e02ff0cc5cd1d9460366beab962505d8a3b80a699e367fdacb057421fdc5795c7e72dba33510196ac34ae79d71d8af046501f58edbc841904c5d6467116a9c83011b6fcbc582d97d1de75ea17c56f852d97ef21d8dcd0e48d84db5bbc3e5ad377bfe866a2f3416c0182cf3a224a87549a70fcd0dc7e2f091ed57ba684edc22dd99e9a089767c6eb9634ceda2e753a5d97eca8bd1204a715c918918ff2db4e34e11ecf1036f83be4f9f44dee81c74a4ded78f810b47162a90a85e51fdd28e3fb98350e6cd45c907318ba310d0cff1b60b66c54e38b790074a0359a0a764a2aea3f41fb008ce7ba1b526bb131c8543a3ff2189037b2e09e3a472161508b407fff4912168c18efef278fb6335455aea00a54dbe82a14022453b8e097171ed30230ad7ae2671bcda2bb22b3e5dbeca5d2a77db81f7236c20f93775d28f470f250cc6a775626637c725ca2a74e63893a2c739ceb7bff37ff9ca62e1941e34b575753e242ac9fcb81917337a5794fe3ff3cbf3587ee27bf94b36b89443d00e860766dfc0b4dd2cc7272052ca6ce646b5f5fcffb0eee4bb78ac41effdf83dd7bff5ea70347729255cf6d57dceabcd0b0ff9b1c02a67f3af99f58b59aad7dd732d36e4290b6693f5ac20442586cd096cd17537c9c6e2e616da6ad196b9a4a8167c177dcd207e3b86e67a434e56c6d9016789671ef15ba3b9f8062786f762fd7246b7543f52b62dd5eb6513e60a7810454310628b07801419f11e7c93d3490f34359f387457d6ac4629a873dd04efecd347251b36e35c90d791b6dfd5fda9b127321714d9bbfce419c50d5fed46e7a2a0a8ea6963bb0ffd721bd046b90f03b3629141aaa768bf841cc4583fcdc9a03fb55aba4d18f72e93673238f4e239ef7891c3b85049663422188c13b6f9027ce041e6360bcbe0b542b8f509b76caf2fd3f8b05279fd1b20b9a93d52295fd65b99b92eb848c4ee2695b7f26b3eadcb846690f1bd312cbeb1d223e3afb6a3869e79011ca37f8c39d9735bd79cb1317d40365849f353d0b3676c5d93492434e2a7468f6921f0fc98ac505bd057d6d5d76ec506b64bd8790be25f123db655c6cbd54b19e6ea952cced4c174eb15f5bc455c76e2d382cae5dced4e5ae2f8500837e319df26ecab9e39a50e63d630f27736a5975176f6c80f5694655e53336c059010c5366ad6163563be781323a9b2d2045bef57a7a8dffa8424d18c710d49421c45480d4d91e6f765eb60c43e0994cdd63a112de67dc524c61ea050415eea1f2196ae43efed2f2cca5d588f38864a2bcc92c4ef67f2fdb340421b7a801ad3e1e19667679a778b47b5db1339a207b50af3f5904f2ea3f76ceeb7224dd1099fb8045f82a584bcb08aaba12dcb6f19684be656ac000982823f4017053b82f7ee7c9d6387eb4e46f304bf9722e509d438212d1f7f068554912573c2d1ac51a5d4a580a57ad500670b02e1fe91f808c810009ea8497950cb14a19262c96e95303b7c8a4fc947580b4c90c7c20429c4b48e09acdff996f6a3bacc1d752cf4de1a7f493d0fa6ffdbde15b96bf94e5d647ab963688e830beebf1669eb90946379368fbd4b14a033680934e67b993dc2aaeda11c8b2c7a7ead85053dcd12318a6db2e798bdc30e585201b4a98057f631072133e8c9d2bde15a03c7eb28af761e9d987390126f326cd9d055b8c33db5364ac7d3e3e595f8f8a8451ff40739f7d892e2d47eaa33aaea0a7cbbef9a821f5586c5ecd8a77cf1455dd40616becdbab9de25136bc7c6989337154d63f482d0fa453a649eab715c373ec7430e2579415f3733330f7dc6d9adbfcd18804c0879c4188f53a029e7356c933293cab4b32275a8be6b979f17aa651ccf574d7a06bda10a4661b8bdc0a7123bacdbfff734209772e9e871b1f36f63b7e79f52786dd0fc4cb4ef57b803165c4ab358209cca0c8b14ba418539b3a869f683ebe53dad0580796ff3d519c2f774b632ee10d3caf320bbfaf6d9ffa50ba06a59243fe3dc7508bb60291e3d5414844f1b110b3de5b549647327c4f88e0928b771392aaaa1c39ac7506b78eb02c6da15b8cbdadc94ca26449309f0282da245898f3d84df67fe35e226afaab9bc609068cfa0820e3bd261b371e50d6f56bfe1328d01d174175df23f2951e0fd8cb6008534c98da610fd5015181c463412d8f7aec90ff9ea39b2e467ec3e27040d160850b6"}, 0x1009, 0x2)
creat(&(0x7f0000000240)='./file1\x00', 0x119)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001480), 0x208000, 0x0)
perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0xff, 0x6, 0x8, 0x3, 0x0, 0x1, 0x9010, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x1f}, 0xad4, 0x6, 0x9, 0x7, 0x3, 0x1e, 0xa, 0x0, 0x71, 0x0, 0xfffffffffffffffc}, 0x0, 0xb, r4, 0xa)

[ 1510.858669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8309 comm=syz-executor.4
[ 1510.919980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8310 comm=syz-executor.4
[ 1511.357214] syz-executor.0 (8284) used greatest stack depth: 22968 bytes left
09:00:04 executing program 3:
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2100, 0x4)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

09:00:04 executing program 0:
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000100))
close(0xffffffffffffffff)
syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480))
accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, 0x0, 0x0, 0xffffffffffffffff)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, 0x0, 0x0, 0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, 0x0, 0xffffffffffffffff)

09:00:04 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 4)

09:00:04 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:04 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="fe", 0x292e9)

09:00:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r3}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
recvmmsg$unix(r1, &(0x7f0000004c80)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000000880)=""/135, 0x87}], 0x2, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/127, 0x7f}, {&(0x7f0000000b00)=""/127, 0x7f}, {&(0x7f0000000b80)=""/146, 0x92}, {&(0x7f0000000c40)=""/168, 0xa8}, {&(0x7f0000000d00)=""/96, 0x60}, {&(0x7f0000000d80)=""/67, 0x43}, {&(0x7f0000000e00)=""/23, 0x17}, {&(0x7f0000000e40)=""/13, 0xd}, {&(0x7f0000000e80)=""/28, 0x1c}], 0x9, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000004380)=[{&(0x7f00000020c0)=""/20, 0x14}, {&(0x7f0000002100)=""/109, 0x6d}, {&(0x7f0000002180)=""/28, 0x1c}, {&(0x7f00000021c0)=""/173, 0xad}, {&(0x7f0000002280)=""/5, 0x5}, {&(0x7f00000022c0)=""/10, 0xa}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/72, 0x48}], 0x9, &(0x7f0000004440)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000004480)=@abs, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004500)=""/212, 0xd4}, {&(0x7f0000004600)=""/247, 0xf7}, {&(0x7f0000004700)=""/71, 0x47}, {&(0x7f0000004780)=""/176, 0xb0}, {&(0x7f0000004840)=""/75, 0x4b}, {&(0x7f00000048c0)=""/26, 0x1a}, {&(0x7f0000004900)=""/20, 0x14}, {&(0x7f0000004940)=""/219, 0xdb}, {&(0x7f0000004a40)=""/35, 0x23}], 0x9, &(0x7f0000004b40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x4, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3001020, &(0x7f0000004d80)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0xd3}}, {@access_client}, {@cache_none}, {@version_9p2000}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@fowner_gt={'fowner>', r4}}]}})
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:04 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, &(0x7f00000001c0))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000040)=""/2, &(0x7f0000000180)=0x2)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r3, 0x0, &(0x7f0000000380)=""/83, 0x53, 0x3, 0x1}, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, 0x0, 0x100000)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14)

[ 1525.650203] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1525.650203]    program syz-executor.5 not setting count and/or reply_len properly
[ 1525.661577] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1525.661577]    program syz-executor.5 not setting count and/or reply_len properly
09:00:04 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020001f482c1b3c738a06cbd0000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000020000000000"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',fscache,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',permit_directio,defcontext=staff_u,uid>', @ANYRESDEC=0x0, @ANYBLOB=',measure,subj_role=hugetlbfs\x00,smackfsdef=hugetlbfs\x00,uid<', @ANYRESDEC=r3, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0xffffffffffffffff)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:04 executing program 3:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
shmat(0x0, &(0x7f00009f9000/0x3000)=nil, 0x4000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00009f9000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x35, 0x0, &(0x7f0000000040)=""/110, 0x72}, &(0x7f0000000100)=0xc)
shmat(0x0, &(0x7f0000faa000/0x1000)=nil, 0x1000)
shmctl$IPC_RMID(0x0, 0x0)

09:00:05 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="a0", 0x292e9)

[ 1525.992188] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1525.992188]    program syz-executor.5 not setting count and/or reply_len properly
[ 1526.021725] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1526.021725]    program syz-executor.5 not setting count and/or reply_len properly
09:00:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x76, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext, 0x10820, 0xfffffffffffffffd, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x400, 0x101000)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x70, 0x0, 0x1, 0x0, 0x5, 0x40801, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x1, 0x81}, 0x11d0f, 0x9, 0x5, 0x3, 0x602a, 0x2e0, 0x5, 0x0, 0x401, 0x0, 0x7}, 0x0, 0x10, r1, 0x8)
ioctl$FITRIM(r0, 0x80086601, &(0x7f00000002c0))

09:00:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x125)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008881}, 0x800)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:05 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f00006b1000/0x3000)=nil, 0x3000, 0x5, 0x100010, r0, 0xa8dab000)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x4000)
shmctl$IPC_RMID(0x0, 0x0)

09:00:18 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x29000)

09:00:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080), 0x0, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:18 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 5)

09:00:18 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)

09:00:18 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3)
r3 = socket$inet6(0xa, 0x3, 0x3)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0xd9, 0xfffffeff})
setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000180)={{0x1, 0x7}, 0x100, './file1/file0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

09:00:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="027c08065a1f1c11d828f2d1d02bb2bd69c37f7fed7046aaceea21000000000000"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r2 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
statx(r1, &(0x7f0000000000)='./file1\x00', 0x400, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
statx(r1, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
keyctl$chown(0x4, r2, r3, r4)
lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r4)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:18 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
mremap(&(0x7f0000ae7000/0x4000)=nil, 0x4000, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil)
mremap(&(0x7f000065a000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

[ 1539.494920] sg_write: data in/out 287055670/251 bytes for SCSI command 0x0-- guessing data in;
[ 1539.494920]    program syz-executor.5 not setting count and/or reply_len properly
[ 1539.530734] sg_write: data in/out 287055670/251 bytes for SCSI command 0x0-- guessing data in;
[ 1539.530734]    program syz-executor.5 not setting count and/or reply_len properly
09:00:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x70b802)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x600800, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:18 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:18 executing program 4:
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x1000000d})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x8, 0x0)
dup2(r4, r3)
dup2(r3, r0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x20, 0x8, 0xfffe0000000})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
pread64(r5, &(0x7f0000000180)=""/234, 0xea, 0x5)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000000))

09:00:18 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r0, 0x0)

09:00:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:18 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0xfffffdef)

09:00:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

[ 1539.832272] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1539.832272]    program syz-executor.5 not setting count and/or reply_len properly
[ 1539.836416] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1539.836416]    program syz-executor.5 not setting count and/or reply_len properly
09:00:18 executing program 5:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x125)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffc, 0x1000, 0x80, @buffer={0x0, 0xed, &(0x7f0000000540)=""/237}, &(0x7f0000001040)="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", &(0x7f0000000440)=""/55, 0x10001, 0x0, 0x1, &(0x7f0000000480)})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x0, 0x6, 0x6, 0xbd8, 0x8c8})
r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x10)

09:00:19 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

09:00:33 executing program 3:
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000000)
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

09:00:33 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x7ffffffff000)

09:00:33 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 6)

09:00:33 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = getpid()
fcntl$setown(r2, 0x8, r3)
ptrace$peek(0x2, r3, &(0x7f0000000200))
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x400, 0x3ff, 0x10001, 0x80, 0x7, r3})
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:33 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

09:00:33 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmget(0x3, 0x1000, 0x8, &(0x7f0000473000/0x1000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r0, 0x0)

09:00:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1554.677870] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1554.677870]    program syz-executor.5 not setting count and/or reply_len properly
09:00:33 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0xfffffffffffffdef)

09:00:33 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed704689ceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x6, 0x7, 0x81, 0xd5c, 0x8001})

09:00:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

[ 1554.829607] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1554.829607]    program syz-executor.5 not setting count and/or reply_len properly
[ 1554.852445] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1554.852445]    program syz-executor.5 not setting count and/or reply_len properly
[ 1554.854389] blktrace: Concurrent blktraces are not allowed on sg0
09:00:48 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 7)

09:00:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

09:00:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:48 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:48 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
signalfd4(r1, &(0x7f0000000000)={[0x48f6]}, 0x8, 0x800)

09:00:48 executing program 5:
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:48 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

09:00:48 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3)
r1 = socket$inet6(0xa, 0x5, 0xfffff5a5)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r2=>0x0, 0x2f, 0x81, 0x1, 0x2, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x20, 0x2, 0x39405a7b}})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000380)={@local, r2}, 0x14)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000100)={0x6b9e, {0x5, 0x1ff, 0x3da6, 0x44, 0x10000000000dc}})
r3 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00'})
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x4000)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180), 0x4)
sendto(r0, &(0x7f00000001c0)="4bec3ca93f0783c93960c5557f6dcc9a7039853bb03ff9a703ee5d4ec9f5403bd1e46f633988", 0x26, 0x8040, &(0x7f0000000200)=@ieee802154={0x24, @long={0x3, 0x0, {0xffffffffffff0103}}}, 0x80)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/231)

09:00:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:00:48 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x1, 0x8, &(0x7f0000001640)=[{&(0x7f0000000140)="fe7ab25bf9f572f2d8fabddbe64d7d0f41873dd945d18d37889daf71a81cfac048f2565eca1118597fef67c85abea93b128184fcb05f1b9615f80ccb9e6cd3b9fceaedf44f9d44a2d0a7de5eeaa8b18256be0877396d25f9cb1fb1419e24b4608e6d111c", 0x64, 0x2}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f00000001c0)="e3b4e063526f5cf502c02edfa0b4724bb1c2ee943092f8a236547a7a36fabde0056ab9f78c75d51902a154868820eac36900574621c23038a7c73b4049cc3cdf7043c245949522c47f3a0140e5ef2f1e7ce31a22f443e9", 0x57, 0x6}, {&(0x7f0000001300)="398499ee18423ce37ce1850a1ea15bb11ea2ebe7207faa8c29ab11cf1288ea462b6fe36765209e9b42cd41534b153a922ce1aa17663639864203ae774059acfd6cfd35e48cb7e1e2bedd4417ee625c2fc5d99611b47d37f614d3ce4a2a75023d477d0179f1c0f4542806a10adf89d1671f1ecf74accd4e7d437af89a5a3ffaeca5c4ef150f2bb7975948fc7d1a4b234f774441ebed06444112a7461259fd47df143f22c64062e025fe0e514239f6df5cb243b547d5e4c3a7b9336641b3d95325e4cbab5157724ff3cc1d36c536d597bb67f6d75c7b9f6c9660c625daa96323bafb5f420d49704ff4e3986dc89064d8c9db9ee7", 0xf3, 0x2}, {&(0x7f0000001400)="e9d3f4a6ba215264a0dfec8bdc8dda68fe2319197a44a85011eb36225111752c56b42fc34404757a12b9af5f7bed6f9fbdd302cc6e9236b971e75b5ecedba4dd3d3ed7957219ebf6d342db82144363cf18cad6b2a0fbc48884dd78d9084a0f0318ccc44f6f8daec2ca18c3f587da4e927f8de039a12e", 0x76, 0x8}, {&(0x7f0000001480)="d3d3464f3f6837d7d06d452a9441e54ddab407dbb51b779886d6b16e982253939e904d87f428c5f60c3e5ded0f93254ea0829e454857ca0cb0f21f8989948dff6d1b82d473e1995e38acce5af792d9c3e1292a46adaeaa63b9ccd91ff7d27b95f3cc0391f112c6615e4bbf38bac6f883a5a267eebdbce5830aa6f4e244505b9563b0c3b1ec0a4d337720bf52c74731a01c8f783617b2945b2d6d03268f731d1ed42f10bd799d50143725aebbcae2c397262b78ceab3ab8e32fc7de7a6900d122ab251766f9144c98", 0xc8, 0xf9bc}, {&(0x7f0000000240)="173e7fbc84a23767d9ed65cfc6fe4888a0421cf7a6da7f5d769c20b4bd852b950d366d20", 0x24, 0xfff}, {&(0x7f0000001580)="b08560619115ca7fcd9eb7c3fbfa539f0ba1149a9a55a2ca03b1185d90ca7b6b8fde637e1c0fc77504840c96fb500435517cd565755785f4bbe5d56ea28cca1c637351e870bd5a07532df3987b4988e22873bd8cb3fcb3007e567c4206c5e057075b21c5a1eda897097dbcef2e238913ef3bc981ab3c3615d8a28dab26c00b3996", 0x81, 0x1}], 0x100000, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000017c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file1\x00'})
open_by_handle_at(r1, &(0x7f0000001800)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x80000000, 0x3c}, 0x2, 0x20}}, 0x240)
write(r0, &(0x7f0000000080)="01", 0x292e9)

09:00:48 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0xffffffffffffffff, 0x1831c2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:00:49 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:00:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37fb71936e7d1aa79097fed7046aaceea21"], 0x125)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x2, 0x4, 0xbe, 0x7dc, 0x3, 0xffffffffffffffff})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:01:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:05 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(0x0, &(0x7f000095e000/0x4000)=nil, 0x7000)
shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/4096)

09:01:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

09:01:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

09:01:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 8)

09:01:05 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x82}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="00000000000200002e2f66696c653100"])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xdf, 0x9, 0x9, 0xab, 0x0, 0x401, 0x80812, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7f, 0x1bfe}, 0x40000, 0x3, 0xe8d0, 0x6, 0x8000000000000000, 0x3, 0x2, 0x0, 0x3, 0x0, 0xffff}, 0xffffffffffffffff, 0xd, r1, 0x2)

[ 1586.758473] sg_write: data in/out 101187548/251 bytes for SCSI command 0x9-- guessing data in;
[ 1586.758473]    program syz-executor.5 not setting count and/or reply_len properly
[ 1586.768105] blktrace: Concurrent blktraces are not allowed on sg0
[ 1586.775418] sg_write: data in/out 101187548/251 bytes for SCSI command 0x9-- guessing data in;
[ 1586.775418]    program syz-executor.5 not setting count and/or reply_len properly
[ 1586.792652] blktrace: Concurrent blktraces are not allowed on sg0
09:01:05 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:05 executing program 3:
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
r0 = shmget$private(0x0, 0x3000, 0x54000001, &(0x7f0000b9e000/0x3000)=nil)
shmat(r0, &(0x7f00005c6000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000d4c000/0x3000)=nil, 0x2000)

09:01:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:06 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:06 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = getpid()
fcntl$setown(r1, 0x8, r2)
ptrace$peek(0x2, r2, &(0x7f0000000200))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = getuid()
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r4}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
perf_event_open(&(0x7f0000000140)={0x6, 0x80, 0x1f, 0xff, 0x7, 0x6, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x409fcd3f, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0xffffffffffffff00, 0x4, 0x5, 0x8, 0x2, 0x2, 0x0, 0x80000000, 0x0, 0x80000000}, r2, 0x8, r3, 0x2)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

09:01:06 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:06 executing program 3:
r0 = semget(0x3, 0x3, 0x201)
semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000000)=""/163)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

09:01:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$IPC_RMID(r5, 0x0)

09:01:06 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)

09:01:22 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
r5 = shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x5000)

09:01:22 executing program 7:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffff, 0x6000)
openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000200)={0x202000, 0x2, 0x13}, 0x18)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000140)=""/185, 0xb9}], 0x1)
write(r1, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0, {0x3}}, './file1\x00'})
readlinkat(r3, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)=""/231, 0xe7)

09:01:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)

09:01:22 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:22 executing program 3:
prctl$PR_SET_UNALIGN(0x6, 0x2)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x7000)

09:01:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 9)

09:01:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0xfffffffffffffff9, 0x40)
r2 = dup2(0xffffffffffffffff, r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r3, 0x1, r1, 0x2})
signalfd4(r1, 0x0, 0xc, 0x80800)

[ 1603.556760] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1603.556760]    program syz-executor.5 not setting count and/or reply_len properly
[ 1603.565061] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1603.565061]    program syz-executor.5 not setting count and/or reply_len properly
09:01:22 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8e16}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x0)

09:01:22 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:22 executing program 5:
syz_open_dev$sg(&(0x7f0000000000), 0x3, 0xa0000)
r0 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x162)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x92, &(0x7f0000000100)={'trans=xen,', {[{@msize}, {@cache_none}, {@nodevmap}, {@version_9p2000}, {@privport}], [{@subj_role}, {@dont_appraise}]}})

09:01:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x4042, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:22 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

09:01:22 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:41 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0) (fail_nth: 10)

09:01:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000500000008065a1f1c11d828f2d1d033b2a2049d9525210269c37f7fed7046aaceea21"], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$setsig(r1, 0xa, 0x19)
r2 = dup(0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = getpid()
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x7ff, @private0, 0x4}, 0x1c)
fcntl$setown(r3, 0x8, r4)
ptrace$peek(0x2, r4, &(0x7f0000000200))
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3f, 0x7, 0x1ff, 0x401, 0x6c0, r4})
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:01:41 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))
shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)

09:01:41 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x20, 0x6, 0x40, 0x0, 0x0, 0xfc9b, 0x0, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_bp, 0xaf0, 0x7, 0x7ff, 0xf, 0xa66, 0x101, 0xffff, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r0, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

09:01:41 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:41 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))

09:01:41 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x0)
madvise(&(0x7f000078e000/0x1000)=nil, 0x1000, 0x15)

[ 1622.364065] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1622.364065]    program syz-executor.5 not setting count and/or reply_len properly
[ 1622.384316] sg_write: data in/out 101187548/247 bytes for SCSI command 0x21-- guessing data in;
[ 1622.384316]    program syz-executor.5 not setting count and/or reply_len properly
09:01:41 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:01:41 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
readahead(r3, 0x0, 0x0)

09:01:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2)
r1 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES32], 0x125)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:01:41 executing program 3:
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x198, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x40, 0x2}, {0xbff9, 0x3, 0x2, 0x7fff}, {0x3ff, 0x0, 0x1, 0xc000000}, {0x3f, 0x65, 0x1, 0x9b}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
shmat(0xffffffffffffffff, &(0x7f0000400000/0xc00000)=nil, 0x5000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = getuid()
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{}, {0x2, 0x0, r1}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2)

09:01:41 executing program 7:
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x8, 0x7fff, 0x7, 0xa545, 0x5, 0x5, 0xfffffff9, 0x7f, 0xee8d, 0x0, 0xff, 0x81, 0x1000, 0x200}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 1622.512741] sg_write: data in/out 65499/251 bytes for SCSI command 0x0-- guessing data in;
[ 1622.512741]    program syz-executor.5 not setting count and/or reply_len properly
[ 1622.529108] ------------[ cut here ]------------
[ 1622.529522] WARNING: CPU: 1 PID: 8663 at lib/iov_iter.c:629 _copy_from_iter+0x2f1/0x1130
[ 1622.530167] Modules linked in:
[ 1622.530414] CPU: 1 PID: 8663 Comm: syz-executor.5 Not tainted 6.1.0-next-20221214 #1
[ 1622.530990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1622.531580] RIP: 0010:_copy_from_iter+0x2f1/0x1130
[ 1622.531965] Code: 37 ff 44 89 f3 e9 2f ff ff ff e8 ea 3a 37 ff be 79 02 00 00 48 c7 c7 80 c5 9e 84 e8 19 b7 5a ff e9 13 fe ff ff e8 cf 3a 37 ff <0f> 0b 45 31 f6 e9 77 ff ff ff e8 c0 3a 37 ff 31 ff 89 ee e8 87 36
[ 1622.533239] RSP: 0018:ffff888048a5f5e8 EFLAGS: 00010216
[ 1622.533627] RAX: 0000000000001088 RBX: 0000000000000000 RCX: ffffc900035fa000
[ 1622.534163] RDX: 0000000000040000 RSI: ffffffff8211ef01 RDI: 0000000000000001
[ 1622.534682] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1622.535231] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000
[ 1622.535742] R13: ffffea000121bc00 R14: 0000000000001000 R15: ffff888048a5f818
[ 1622.536292] FS:  00007f2a6f95c700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 1622.536891] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1622.537323] CR2: 0000001b2bf22000 CR3: 0000000021950000 CR4: 0000000000350ee0
[ 1622.537876] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1622.538402] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1622.542086] Call Trace:
[ 1622.542287]  <TASK>
[ 1622.542460]  ? __kmem_cache_alloc_node+0x25b/0x400
[ 1622.542864]  ? __pfx__copy_from_iter+0x10/0x10
[ 1622.543232]  ? bio_add_pc_page+0xbc/0x100
[ 1622.543546]  ? page_copy_sane+0xd3/0x390
[ 1622.543881]  copy_page_from_iter+0xe3/0x180
[ 1622.544211]  blk_rq_map_user_iov+0xb0c/0x1650
[ 1622.544555]  ? lock_is_held_type+0xdb/0x130
[ 1622.544908]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[ 1622.545282]  ? __pfx_lock_release+0x10/0x10
[ 1622.545611]  ? __pfx___alloc_pages+0x10/0x10
[ 1622.545987]  ? mark_held_locks+0x9e/0xe0
[ 1622.546300]  ? import_single_range+0x333/0x400
[ 1622.546664]  blk_rq_map_user_io+0x1ee/0x220
[ 1622.547030]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[ 1622.547398]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1622.547910]  ? sg_build_indirect.isra.0+0x3b2/0x640
[ 1622.548496]  sg_common_write.constprop.0+0xd84/0x15e0
[ 1622.549140]  ? __pfx_sg_common_write.constprop.0+0x10/0x10
[ 1622.549773]  ? _raw_spin_unlock_irqrestore+0x37/0x60
[ 1622.550382]  sg_write.part.0+0x706/0xb20
[ 1622.550881]  ? __pfx_sg_write.part.0+0x10/0x10
[ 1622.551430]  ? __lock_acquire+0xbad/0x5e70
[ 1622.551963]  ? lock_is_held_type+0xdb/0x130
[ 1622.552489]  ? inode_security+0x105/0x140
[ 1622.553015]  ? avc_policy_seqno+0xd/0x70
[ 1622.553491]  ? selinux_file_permission+0x3a/0x510
[ 1622.554068]  sg_write+0x88/0xe0
[ 1622.554457]  vfs_write+0x358/0xe40
[ 1622.554930]  ? __pfx_sg_write+0x10/0x10
[ 1622.555406]  ? __pfx_vfs_write+0x10/0x10
[ 1622.555853]  ? __fget_files+0x270/0x450
[ 1622.556168]  ? __fget_light+0xe5/0x280
[ 1622.556474]  ksys_write+0x12b/0x260
[ 1622.556766]  ? __pfx_ksys_write+0x10/0x10
[ 1622.557106]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1622.557499]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1622.557920]  do_syscall_64+0x3f/0x90
[ 1622.558205]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1622.558594] RIP: 0033:0x7f2a723e6b19
[ 1622.558926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1622.560237] RSP: 002b:00007f2a6f95c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1622.560782] RAX: ffffffffffffffda RBX: 00007f2a724f9f60 RCX: 00007f2a723e6b19
[ 1622.561315] RDX: 0000000000000125 RSI: 0000000020000000 RDI: 0000000000000003
[ 1622.561845] RBP: 00007f2a72440f6d R08: 0000000000000000 R09: 0000000000000000
[ 1622.562366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1622.562925] R13: 00007ffdb6679e9f R14: 00007f2a6f95c300 R15: 0000000000022000
[ 1622.563457]  </TASK>
[ 1622.563638] irq event stamp: 1159
[ 1622.563915] hardirqs last  enabled at (1171): [<ffffffff812e05a8>] __up_console_sem+0x78/0x80
[ 1622.564541] hardirqs last disabled at (1180): [<ffffffff812e058d>] __up_console_sem+0x5d/0x80
[ 1622.565182] softirqs last  enabled at (394): [<ffffffff81182e7b>] __irq_exit_rcu+0x11b/0x180
[ 1622.565797] softirqs last disabled at (329): [<ffffffff81182e7b>] __irq_exit_rcu+0x11b/0x180
[ 1622.566470] ---[ end trace 0000000000000000 ]---
09:01:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)

09:01:41 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1002}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x305)
fork()
r0 = fork()
shmctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8)
r1 = getgid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x0, 0xff, 0x0, 0x8, 0x48002, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10280, 0x6, 0x0, 0x6, 0xf35, 0x100, 0x8000, 0x0, 0x8, 0x0, 0x1ff}, r0, 0xe, r2, 0x3)
r3 = shmget$private(0x0, 0x2000, 0x54001b05, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000400000/0xc00000)=nil, 0x7000)
shmctl$IPC_RMID(r3, 0x0)
fork()
r4 = getgid()
setresgid(0x0, r1, r4)
fstat(0xffffffffffffffff, &(0x7f0000000100))

09:01:41 executing program 6:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1622.617463] sg_write: data in/out 65499/251 bytes for SCSI command 0x0-- guessing data in;
[ 1622.617463]    program syz-executor.5 not setting count and/or reply_len properly
[ 1622.719921] cgroup: fork rejected by pids controller in /syz0

VM DIAGNOSIS:
09:01:41  Registers:
info registers vcpu 0
RAX=1ffff1100909ec02 RBX=ffff8880484f6010 RCX=ffffffff8117e6ae RDX=ffff888047a15040
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff888047a15040 RSP=ffff8880484f7e10
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=ffff8880484f0000 R14=dffffc0000000000 R15=dffffc0000000000
RIP=ffffffff81492638 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe00e7dc3000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00e7dc1000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f66316ab550 CR3=0000000047c1c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82485e65 RDI=ffffffff87fbc5e0 RBP=ffffffff87fbc5a0 RSP=ffff888048a5ef20
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001
R12=0000000000000030 R13=ffffffff87fbc5a0 R14=0000000000000010 R15=ffffffff82485e50
RIP=ffffffff82485ebd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f2a6f95c700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe024d25f000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe024d25d000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2bf22000 CR3=0000000021950000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000