LTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140))
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
shmget(0x1, 0x3000, 0x4c731db58d4a8a10, &(0x7f0000ffd000/0x3000)=nil)
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x9, 0x1, 0x5, 0xe1, 0x0, 0xe499, 0x12002, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x500000, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x82, 0x6c, 0x0, 0xa6ebd11c72e53305, 0x1, 0x81, 0x8, 0x0, 0x776, 0x0, 0x8}, 0xffffffffffffffff, 0x5, r3, 0x2)

00:57:10 executing program 2:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = inotify_init1(0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
close(r0)
inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440)

00:57:10 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, 0x0, 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:57:10 executing program 6:
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001680), 0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="86f93e89b0779e5a60d8ced192d1d26eef7834b25f9e391decd179e859137315b13c471889e93c9076065e9308d33d81659c25a3fd65c545cd14c2d42a3e2c4f42f847851f486df0505c62d68bc24d53cd44e9dfadce75cdac82d9f209701e6869f60181e2c1e7648be8904fb47d5f47daec6c8b874ddb2748e1c2b89f02c2494fa69360b933056417094a8434739f1c0167fc3a4386f25e2eb8dbcd945545447598", 0xa2}, {&(0x7f0000000180)="304bdf4c142216c4ce1f964ad4386c6ca56ff36faae910be8247", 0x1a}, {&(0x7f00000001c0)="db87e3936b11d9a600130ead1ef6c3d122d1ec63670a1db1eca2c86166eeec31a2b202f1e11ff71303cf85a70a316a5c0a9a604ec5e53c03b95683d7fe07ca", 0x3f}, {&(0x7f0000000200)="78fdf6bc094c15928da6b5e7740826d5915a9afed74406050cba6855eaca10dcede65d94b90cda78881f6910a34b80aaef6e1320eac956902f6956ed9891fbe46d66ee462f1cf743f40a75ed4bf3d3daf4c0d5bfced5c6177cd964da4fcca88fba712836c486fe6a9a1527ff290ac5d23647b593c417b94f", 0x78}, {&(0x7f0000000280)="9f7bfd91325fed307781491bdaeb3e2f726a2f8c1ec8cf66da40019f425595073333546134d12ed1cca58c87917c4bf548ab651a8a851c49cc73de5653aeaae6be3fd774e941594794b4e6ea1973a5f917dff44a3372aa5b3815718c8e3cd7a595573d5813455b55415531a20d0e625aefc15da072cbeba03113870454fc24719e674b8a5225ef8fb78db9748df710588c32a0f6fde72b1c4034df5b31", 0x9d}], 0x5}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x3a, @private1, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000400)="6bd73e8ebb", 0x5}], 0x1, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10001}}], 0x18}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x790, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="abf040e2eb1b8cb7f61223a2743593d2630c22333f784271e158aff9a2f21d5d631a781ed324fa928f3d637aae4a3d5e8c72f16732fef03d1733e5d66fc1f17c4b49dacecf28e0f5be80d7a02fe77cb903e21b90c8a9439f797f874dc6b17ab74d8a45", 0x63}, {&(0x7f0000001580)="94cdb954727f0170c39f9bda9d0dc9247846be8504ed94ee0c7c67842d3b652c22472d7e908f43739473c94f72e4bd3504b44a7945fc336d1a9f7efa5d51afc4cb9e9e2402f7a9c6802191fd9e9c8d7454181925291505ce19240344d3a7c7051ad8dd6dbdea5d86b9b8f7a59595564bda82bdbf49af135265f59b9bf7296030740578d6f3e42c2f54c42c39406d9543c7497e9e4c2773e11c8bbcc6525373d25094d0e5a31ecade21f50ddebc21b98b3b15c0ac84c21a47a9ec9aafedc70a4cb79cb9b0c5159258a866efc57a15def9ab348d6d09a886d288", 0xd9}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="441b4365efa515a5d91a47b8cae407b2651d0bc71c387c6f61dafe715250e2073f6f28716824ddd6413946822898cc7fd37a3dc6a592a96204b5da7971687728daab035b9247a1e69ad264562b234b93367c8c789ab61f2486a49d0261346b45d44ec39cd8135a2c58ce3ed8817e54311c83d7f2f74354d98f25c20a45663e1a43a80251df9069507ef9f651", 0x8c}], 0x5, &(0x7f0000001800)=[@dstopts={{0x180, 0x29, 0x37, {0x88, 0x2c, '\x00', [@generic={0x1, 0x7, "5b0e256d279607"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x2c, [0x4000000000000, 0xffffffffffffff80, 0x10000, 0x1f]}}, @generic={0x3, 0xb1, "9ff252d1fe18f029971749e4baad6cdeadda316f312d477c550b807981a8a1e8a292269856610898ae939224910aadeb1e5306b2ff587fd0f8481cdc1fe8b39a4653a03dc637f9adcf233e1d131deabeadb103333e0a94858f5a4ab151802061c7d0f49f9d60fa476bf17966097a292041f3a063414d6ad99b761818c2364169b663d8161ead30faf274732b3b0c4f3be606a040a8801ef2fd148874c7422326d90ba6101bc81e5ad42ec5e93d2b647744"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x6, [0x21aa, 0x8, 0x3, 0x6, 0x0, 0x20]}}, @enc_lim={0x4, 0x1, 0x20}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x5, [0x3f, 0x83a, 0x2, 0x100000001, 0x100000001, 0x5]}}, @pad1, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x11, 0xa, 0x2, 0x7, 0x0, [@loopback, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x1a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x220}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)="964aa4f41b675a5e54ddc0a2acd8f45aefceedf85b8fdc12e66b014635f41f785b8e62da0f25649daef47683d2a7137c8a3f0f6ded66df915c7db1dc570e8f7e1fcfe99138ad58917ff35745cbab47e19fb2fad000fa3d84b0e5306601fd1b45ec924461ebd9a7a803afe3be0eda497b77a83204", 0x74}, {&(0x7f0000001ac0)="0d96e5facef7b4bf2bc151", 0xb}, {&(0x7f0000001e00)="24d768ea0ece80f17e643028ca9195b7b8a88b235f48fac6bf9321e5aba4d91b5e8d6c01b3941999b867823ea5c9bb8d89976541972fd8916dae21394f4e77abd445cff7a510a0bd39628bbde557b9b5e28f095ff33880dda824a4a090e68d49cfff8432c8da8632818ec43e9c9756ea605c287dd9aa5bb0fe38f566ab5ff56f63d034319705b52bc5b7f673ae3bce8b32b03f18024a9e50860a648c1c156a4d671055948e0ceae9c81ab8cfbc97fb89a3b8892fb8a161a225adc57be2bee0663582bbb044314c22aaaecd4457c896615beb75a59cdd16f27dae7b1faa4680605b44eed53106912dd2f1bae24d8d8bcddd530db17ed903ff027aacbdc5130b9f969423d0cc2763855a8cd64a6e8187903e9703a3f75d0a66f81fa5d9a9e88492cc411c5265836ed3d266a43daec9fead4a2477a92d180c5d5e569643da4e1debf01b21cdc9edfcfdeacaa882b3cddf189632db03c1776a7d49c329bb1e31ca8cf2425279465fcbbb304ff7c7fb5712fe31fac121080cba5e8ffd294893eb05aba89fa378c601c78bd74037efa298f8ed380f347a373c48c45171c2bf185cc14e6f247ce192f9669150c6316f58418648d3e89648eb2a92ffbaaf067d5e5f0d297cff932b600f76c0a2954034418e912432ce3368b5d004b0471f4417e94be3febbb93f53653f89efe7d89e490ca2a2103c6d2b59d7783b864c4b4c4845289db1327a01012801acaa137e04ebcc3200727e28f1a182a97e7215d9aba53300ba35e8d016f6fb3c29b6aed9bf57d37ae87ecf50f10182cc856bee1752368110b4d755f227268cec27e6a6dace3e75de6e99f6feb107c898e4b0bd168bf90f519703efff1de9d24269e9e27aecf34cb3e982357d66b2c141258b4f5135a26cd573718b9efc75b621a573c5123bcf124f798f430ee13aa79f923439f97a863d1943cc330706da8ad7f98126dd2fa817d212a3dd78846f1912d60fb6f566c155e58a5647571a5f23715d138e7feea215b54a6e85a47d6dd6bbc075f998fbec9437fdf5f46600ca6e6bfcc9683d93f352b7d716aefad2429d049010f94b64bb5f77f00a209201b966c16104a0051a09e040b14169bbaabaa289a4d258d9fae7aaac9936f43ad935d2cecb2920e21d036eca6115205e75b3d3122fa66429f8699d54da44c3bd26230714f9575da8f9a0c40cdd912b62a4a5008fec296153979352817e052d1ace7e2f2c1d3f3d9360f97b97e2d69af2a31447dca96109875395dcd046b6c451d0cc353014f7f1f38ee46b6a83bd950247298dc37e04c95b55161d2f3a6aaa64dbaa28a49c7dfee17b2d541d31dafe0e0bc852f555434550984ddae15f04e62ff1cbcfe5ce065eadbd621868e3bc500979226cdecfec11b8c7828e1a60f20d281c436e9d4697b630879e848c25350529e03706b72f4d3a2bfdab501405463a2bdb643b0395e0d72abbbcfce6bfc3f2b7dbede4f8c11cb4a7827969ed692d40fde70aca194a4667980e3c763cd1cc0527a38f06d77e124865f9064e52c81ccf60b1dbf35d01167e0372050c406417b2ee17fd9b439b46a2aaf13ec861bd100c2c63cca7ad39ffa8663f63c652f3fc2d1ebb5127ae9e3218e83994fa35cccaa6b1e89e517093573ac8de270fc54f1507b5525398bb9c020f442a10f42042d8afbc29d316b4a925de979acbf58bc931685c6ca3420c555a9389db8b7fec2020d91bf7dd0bbbdf37bd3143e401c46494824de1b30cf4711d58944f29378cda6f5a4c7e2f44115195fe4d87dad108aaa300ef63c4e201d17f9030b6c5b7c758583d0b046b0e0039562a69d3147d62b8e2bfbe9af57712124cd53dec11a2873c071b0c17ff5f410c4f9ba24a972eb35befd2bd6abdc58a8f43de6384a2747332c63205f211fa02a0e750db594cbe26687717a2a24fdf836efb62e3bed27cfd4a85aab4a77dbffd483c4bbcb4d17e79a227cbb6e606564b7f92d8a24ee9105f89e83707548e1ff3d7bf1435eca85e5c4aed291c65bcb18017f78133317c7bea0912d32dd95a689213faab08e5ee1dd2b26d3a54622a6203de0b78762aec4c7390f64b37db9cd0604b92eef383562361c2bb137c303ebab51ce8bf10c71fb5477a28e5521917e420ec6311e778bb93ba496f72a1760cf2c3161af05463a50a0c725408dc998b697f7ed0610c5e0be2e9a2576648d4566164437fa6c3b7adf6dc679e12b18969db461971f992a0057a86448c10942f83dd2f2e1e076324d8b28fa56917ee01d95b0c2245736601092f99a937ef133cf8c9294fda124e87aa60c36ca2a2f306de52756445261d9fbbb83cc03c3d86a18c758019fce3ce361dbee8a7e324b3c0b120a191e62ae7dfc426e12c8e10da965b659e0520240e3c3afa27781a4edbf7581ab39796faf4383ebce002bb00ea2b759e03d9b5a49c47ad4fdae2be9a9e2109d79c028671b7daf03f406fbe150788034b6e92647b27877e8cf02c696cfc1b81af4d0d57b09d37d7e4045c81de38a6b2d28023fca73bf76cdcd592f92c9b758cc09ce8f5b28b1f5831d33edbb17580dc98bfd9115a3c98def7020a7b725e26e011409b00b0e9a7b8715b70eaecf364965e4c64710549bcd79154f59fd88ec474952ec42d6b8f3df6e05c32a6587bb3e4db2d8cb3762a2cb8d187f2e743f37e4bf802807a44e563050d18a62c613de97ef065c13983122f4142f543dc49548501cd82d0b49f2d6664d01ad779a18f71863bafe47049af89543858a75f9302ec905d058556fc7e5bfa60629e90bcf12ad6dc88aef979b9c6b53b0665ad6fa867eb72e63f2572586ec527f202ae7580a57754572edb29bfa1ea50c829a7c66995a7f6222da79a67cfe6dad7dd5685d1b9cc01c7458e8ae21ab3c1ee1630afb8930e45e57bce048c29143e8e43cd4d8ec6d88f9fa7616cdd776cccc2ca89128d11503ce451c805de93bb3fbabd1df8a39de1952e285a1178095dffec84553c060b49b64baf75597d054f91dac467414f9ab737ab49b581cf34480252b13a82f2071d6359fdedbfd4350ea173df592f184adfaf3b81263dfb9359e174b7b9ddeba6c4c409d7bbcc2317a9c78681547179d76230fca0d718c30519f47683ef68a269cc935df558d74ab9b8ede28f9772d0fbb5baade097a48328bbbecd054084c3cf7d4c40cdd41719747ff1fc43a3331134dd6b8ce222f3a9762dadced526623632c518e63d59c20884c7cc7d563a815cc4fa46fc4352b6d6a2ca0d53f12c317c2ad37f995d4082c320d793c4a9171adb2e31121e9b1f6a4b3a79ef214ddd6c6f989d759225181846ceb6ad3c81df919b915cbecf48cdef8d5c1fab6c232a1a13244c2ea285d8f8494fee615c6d638ee3b8ddc9d94757b150eae12524d4f003b6dc5b531fa1fc40a128661c402e63b002ce9fdc3d6b572a58b22c11acee52b756f85b204b3c3210e5b305b5525ea3ad42810511297bdc0588faa9febd255ae335ed6c90f5290b6656bae676261cdc6a1c8744fa1f106b8203038a40e0c9d28bf11cf3b83a28247d078835d465fa677d6d41c0e30e7951e7475ab67435d88cf7b81202603c4181505a0d4747854777b6d3bc6d75fd5787094c5dbc1f74dcea3c6ded2200cb523fd011d1022dabe3ad1d5c53065b2e93d7f949785bddf97119bf82c6a11851430e78d911616bf1cfc25e11e6edf5a46e4ed8b9311e7fd6e347482643877feb76e234bf7436f689c2a9fcd3e02614743110ba13fc11dc788c1d1b21f1fdc345a84ce4da65287068f2227fc98e6bfbfb800dd9b80df428e6ca40f1c1520b842d057136bd13f2e7cfc9e6f555378e8a48a64eab1942b3f139a89ba9b88b3851c19ed45a0bd88c84c22466a97dec2418daababdb9b9ebc3828619fce7239ea9df70dd040b711a5fd1f39f9ead5d1cb2f3a61651f11616aaa8c1ed753243206cabaca4674fff1223df6894905cf1a43fe00135945567401bdca74b01a1fa050cb6a552ed1c2054a9eae0b4eba3723a8d0e063f7c2f9cd90d032ec6870edd9a0462903abf06dc86957219ca42af460322dfb7437b7ee06bf2f411831f890d6ffd432fd31575d81fd9bd61164a40d218983c23d2db9d689818ae8b6f32627a660bf71b4b4d3daea90d6868fa7f84952041b5f6413981e54554abd455e91186703fe20149954a76fba30aac55bdc821e10daccfbf5fe92ddbf5e0af9e3fa19a2663110209f97fb08a40f5f9d367e629655129818502544edfdb158b3281d85d94043bad6ec4c0302bafc678c11a19d121528094f3728f3e42251ec71f04fe331f1176c6d714bd31616bc0930cb1ad52a432f4597d0cf6fa8efdf63506c7ff23cab39280c7aafff3cea28daa7dfcca1639a6fdbd6d832d54c462a68819740d72bdce3f805e0fe4b2fa1f5ca9a6ad5b2adbcaec07beaf24b243d9f30ad945d3df6c06e6f7dc491c5354d4477b8cf05b5fd4cfc2bb9077eb519a07178c04dd292302254d6010e3e8bd9b62d6e95d34f7a2d028e5348aefd4b36c88a479f4f2abeeb6a555f6dddeca97fbf47197fa47078055ca86d6fed5385c6ee9113f10e8220099efc51af2fb472c9d44920b4f6b7da40b6da6220dbb2940de51d9c7db8577060599abae4fd2b8b6d5d66a47b33f2acf1d43cc4c8afa459f72ba0c6a77dd3f3a896432e7a85f53ce5cbf21bd367458771bb39bdba198b8e86085065a5da83a60d7b04ce1af1dba7fc2cb204cafaea6c175486e4d3e8164ebc751389797551068c01927cac1790437a4a6664616c6c11a35b17445e24f260b6da2e14a2ed8f07b877767806efe9e36d6233287ab3637880f5c181c8c21b05c7f318b827d3efa505c8b7525a8bc983ffb84f7dc67b85f63a0002b7cdc4080c1baae91ad606c0291a742c91fe391cc6b58ee927ecc9438bf11866ca9624ccf269af01604b77344677da8fa59ec74ad48362c4a277951ba4a98d603a7e69063ef454bcff14db1d5e3aff278f16f4b69c25e36bad447502aa747bb9ffcd7d1b7fe0b71aab030c4b59b0f0f5505d1c57131427d566228400f20483633e247918d3fb43d6ecfecd80e7eda3cb5a5d521493339667ed9b243c1afc1f141d1e3f36c8a5ae84652ce880c4ac5a0f5cd120eb1809b8dc9f9b1b12641cb40be1b4d50a7466cb36d854b04f9d02bac784b6a9f8087772e35edfbdc3b94be8bd0e48d65f92d34dc68395f9a69f24ba1ecefc78c257f0efcebf97f474534075a48d2a8c6016ca2a21d1140652b1d21ef90898cc1038ae11758384acb86ee5c834a77cf184410355bf97bb4a063a4c5f87e38f27ea0240ad26ba2f502d3293740548ad1d7c6474f5da84f04a274cc6fe646248bdf5e0f421c251d364554b60c953703d1440ed65af2b0afc6f34ee15cadb26ddb9269b3f28d19950738451b6585d653db0a21d02a63ac674a4a40a9000d4136ed9ebe2a745648be2b5a8c09dc705eb360fe621785033e4a6f3949c7497daf91a49caa4260b5200991e947299e81fd70c757ae243aa7f841d6f0fbbfa5fe38567aa11ef4058e60a3f9a38c1583c78829d41387f10c8d789386363d0354fb7d7ff247d5cbe8552917e7f65bdf4aa9ff1b612c77fcc03794834e9fa0054d2f251a5bad0db60308e823d8118f50ce962572c8b2cc612dc25187114b371e55c413b9766d4f2a3367d394b1fc2872f0ee150a6aa2db1f658664e8d1ff532fb4ac660d476a07c1dc473a1007640624cc9b6312751c9108bdd3c9957938d6fbf8d5a51a959daf67b4ed618d43ffa25067b94714ba9ac8f4a40881c1184", 0x1000}, {&(0x7f0000001b00)="45fefc2c87852580c649b25c90494e97f13a537c7517e036634479660014e3c0c5571ce0ecac0c04e4fd785a", 0x2c}, {&(0x7f0000001b40)="182d97a77636c9ab5c", 0x9}], 0x5}}], 0x4, 0x40008)
sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0)

00:57:10 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="031dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:57:10 executing program 3:
ftruncate(0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(r0, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xffffffffffffff3d)
recvmmsg$unix(r0, &(0x7f00000007c0)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/29, 0x1d}], 0x1, &(0x7f0000000740)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x1, 0x40000100, &(0x7f0000000800)={0x0, 0x3938700})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000940)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x0, r1}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1, r2}], {0x10, 0x5}}, 0x44, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004dc80)={<r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004de80)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "38028f37227086"})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000d40)={r8})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000c000400ea000000f50f0002005a8777bfb6b71cd302cdd7251e94159a0e7a95332293dc6e4e147938e8773536874988ae8fa8cd7ebfe568a8fa51aff7aec20b00f090f076477ce0e99e6ac1a9b4eb6ef0e31581318b35f8168b5cf748136d77605fe2a869641e7fa6f6f7d5333292901f3704b814c6f2962e342e79f4cc3c970526841d75fabd580b44dae200baf7ba5b4506989431"], 0x1c}}, 0x0)

00:57:10 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x410c01, 0x0)

00:57:10 executing program 1:
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1f, 0x3, 0x2, 0x20, 0x2, 0x3, 0x9, 0x1a7, 0x40, 0x1d0, 0x2, 0x2, 0x38, 0x1, 0x5, 0x7, 0x3}, [{0x3, 0x2, 0x101, 0x0, 0x3, 0x1, 0x101, 0x100000001}], "29dcad3b78334f26cdfe7b110c52e39cf517d537724085f4b980866fada8018ea09e079692df3986e44d162c28e372a83976fef1b4c15cd1e9ae26befcb531a9125aaa3113b785c345b2d1887eabaf766bc4e95b5adcd11d85912eabc181c1b2813f4bbb787b01efca1f0bc121c7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7e6)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x4}})

[ 1658.223710] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1658.223710]    program syz-executor.7 not setting count and/or reply_len properly
00:57:10 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x0, 0x7, 0x0, 0x0, 0x5d8, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x80, 0x3, 0x80000000, 0x9, 0xb6, 0x7, 0x9, 0x0, 0x0, 0x0, 0x4e57}, 0xffffffffffffffff, 0x10, r1, 0x1)
syz_open_procfs(0x0, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

[ 1658.274360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1660.097510] wlan1: Trigger new scan to find an IBSS to join
[ 1663.104475] wlan1: Trigger new scan to find an IBSS to join
[ 1666.112443] wlan1: Trigger new scan to find an IBSS to join
[ 1666.984901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.986430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
00:57:24 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x490, 0x4)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x109800, 0x0)
lseek(r1, 0x20, 0x3)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f00000000c0))
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0xeb, [0x7, 0x4, 0x1, 0x31af, 0x4, 0x8], 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000140)=""/235}, &(0x7f00000002c0)=0x78)
getsockname$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x10)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000380)={{r0}, "fb8f0f6dc4baa75f8c988a4acf818b0c82f434d98b9e89a03ad66d74931ac0298e4817b3efc33285af8db750d33b18de274488e3771d710bd788c639e4a6839cadc2171cc1ce6a5ba4e84a874b72fb0a9324d2b281ad1c82f5bce395280aceed1ae4188685bdb4ad5ed1faf8f923d9b907e3f3795075222d30dea5de8dccbcccc89c8b54864cb717f0d06b52eb0fe509782be7e2c0eab111d29208e6fd0d33c21cd31ff10408ecd54a78a93c4dfc9dd069cea70afb9da44c39690d0bf3e36de09a805a159e73d4647df8c5773e4c1da7e725ec318f86647f8b054ae9adefd79bbabd0aedda4ac06491af8716fa37891aaeeb5c6af8ca8f76285b64a661dee26fc31da7f5452b92a9fe1ad8812d13c73fc546c1a4ac4006a4655ac3bd3ef7f1fc6fba8ed50074b6b10296a5a9f57581993d8650a19f1c141882dd0097207ad7eda4563fcc867209ee0713c68c5ae71c0ac07739a7bb362a1f29765cce054763dfca9429e0129caea66b1e53daec2cf02e4aab77b106fdc06aa537b33a1b5adec94215ac872080a469c9c5b6e90aa3b52b1ebe3c677325dd4f9c0138c59904cf83393cf9566c0f9baab647caa35519974970cdcb166c5fc1d7083fd8ecc10f96b238aa6901b53b5ce76dce298ba4a077dcda628d57906207666db358fc122a5f4e3ead2b441d9144e51931bc71973106dad0e06d7c6482150cd537bc4588a270b436b9c4a4d27034218df7700f2a5a8d52032620826ff5b03e312938a49aed06fbf131668583b37847bc3b7b69566cd627635cb8a9fa4fc2cce8d35c89451495b6d53ddfdc458a6e239b9d7f405e12b0a6311b83756d45fc718826a47f4e86941799d0e4fd626396b6b8b3c02c509153e5d4ff6eb57f9c3ce87dd892e7f5ac557f77615f677538836ff75d8786753339060dcbf923a5918b7bf28fff9a908d3f63ee36dafd35dd808238e7888437950f63a80cef7b03889191679adcf2ad2407b22d895451d3210d20a80338d10f9ac89e962c24ba77d7698cc612adb657616d3f7866b614a34879f736d905430bf833d7792690eb2ecfa216772218ba7ecbf422adf0d2728550575f847f7409422572d983dec3bf4276bd6d8b9a0264f3973b28d25e3cbef643592d37f7a176f1b895ed20dd63f50be732044d072528592e0891e56d4993f4bbb4537b6fea57c0cf2e44a132a7d8a6d400967fff43e01e418273c3d911c8a000eefb8c60a7d19315c65a5e5b75913e6807fc117c70fe23418dc39f62d56e29364e3f7e2381885d77469305c703fe848a50054cf8f4a8014d21de5d4d987f95ae80938fb91c5982ac9800da27de96345ffda9f995b68ecc9a74daf7d2ed0117b12ffcafba74c81f9e52515ea53a5a4f938bb3575c3d532cee630bb442b3443a1b4132527cfcb7590d8c8cfdb5cd2939819716f96f9e9f48da7b6d14737cfcfbca79595e42c66ed4161464f079073ed24728609f5d6b3519d8d8ab84eddf78fb9f5e2a3cb425a7046b74158a60b5cc21fda9c7e190f3b4a05006d49b4c22818650cd4c350a78bc5a5f08d97252eaae1609c8898b37b572f9308365fd65d77948dbf58e8ef00f6d3aac938599e35b81be503f2025c40442bf9a10b78cc4e0f944b7b0c4378ce5c76bfa69f01f580ccfbeec023613dbacc69cf32d1cd1e5a34888f2aeeca3cb3853bab1f352fae0c205c4912008b933396bdf17c331d1be2540f9cb15b65dbac1061f208048d966876c9e549aacd442a26a75751dc9b3be0cb092d2028310dfe2b38766f571d7ad6658d6c69733c251178d4599707bc2d8b30207ba03d0fe82f4d534573d247903ee7f858c5be0f33a347492dbc941ed44cada60df67d164d72e7ad0e1776ed7a8a75750642c243de96b7d0871aaec7b417458149bf5e0a1e7d4feacd42880fa2b3850502967446f4ec4f7874e81b6c944c470ff6e694c08ff41f7976c090743c1251af0064981299154030576d566e4d5a251c5187e7617c63bf5fa55883195efbaece077bbfdcc5cb53ef5738c4e5e69ec008a72407da6fd336c96cb37cf4e78bd4a1c89892dece6ac57943c25b62c0ba96205b28dac696005cd80a671228c474f64a901c72632ceb8e548ace31fabaed5b1a2ec9319cf56caffe1bc082390b7bc913ae3d84f7b0487e400a94452be6f2cfc06565926eddfaa9a3add9a4aa2a16ee8620464fd65b411c070a93235f666050631b4890b9b68025412e42d28e7289e1a6eec92bf2da12b5b6933ed2bb08bede17291967ea13aa1c58a95fda8a2496aaed9acb1ee503f861cd928413cf37627331bc983c58636bc980d9cb27130d08396b727ce08aa73345bd06f178ef5233a20b94e3186364f38586f7a8b5fc699a2c34e6ee05f060a7bdc460129237db770403caec4f10744190f9dfe4cfea04917020952fccbb55b702d9d1930353525f206261218171dfc54e70427c2be99878c68b244d2b2706da3c467915dfde66d40941b59c5ffb3179524e0b29d0378b77d939ea422a7f47c1d67f20fd8d90934ff4583e8cf7b1bb4574295f4fb3f328075f08e265f1259264a8ab1fe0f6b09c8e268b378bbc2b726bb30e0f0f20b9c7ed3a35acc615e4e3ed377c930ade1e6f4d831ec716fa29f1055b3c25ea5c4d817e4c3a709c559cfb9c7e65ffb10c081554c7169dd7cb0714414bb74174cba3fe2f6acc077aa77ffbbaa4e74d7dea0b6fbabe4751ff833e0d8ee053c47ddef369c7a8a85e5736e6fa1cc41ca196707a03bf1b75e434f8146db0927b06e82244eb608c06aa3f3343fcb3ca15e1fb4164365b91670739f04cbf7530799a72174f65b3fe20d6f9341a871005a5dd98ea6943cd9518030bbea78ac639e19efc3f3eda05a210cd756915c68568a986c00fc6c65b70806de22c9a528e9b3332ade2652c77e1cce0c15bc62c70cec7fbaaa284adbe27aa31bd3c8735ff4cb3023209bb3592c8b697a9fed906f0c04ddc4109db97130758feee531b4193db433d1543e98a2851214c5c0eba727f4565c06b163340413eb1a012fb238795302c3f945b362ef3dae76cddae16582048564a64d422144e82761498245e0020fbc33a1ffc5c8541519d007de26d40c3458392a728e7a247eec1b1c6315a9106757d7c8c209500beacb6310329fc0cdf7e250f1aa759a76e9238aee697a6afc644a3d1091e4e7c6fb703d3f7c497700522377b1351697307cf9313ef5c990e1ca6fd4e838553f37ff27c06190c2f4f488a99f431341aa5de196cfd1c85dd67578f389e46aa1458467c15b02aad724155586cd635f144b45cda52fe72432b8b7ae1014417943afd74495bf76cd433616245b5c8e210609f3ee48e42f7952052594ecb67bc889543705ce1ab295daadd28030c30cab5d7298e708fbe440dba0ff698a4a5845e4e4a9f5a111791389d982030500d2654f7b4457f026318f910821b3e57656b2e9c0f4e843f3c2a7d184b379d9ece083e5b9a186018a3faa7e362abff6b7deef4aa55ee826f6e07532ce71f7c752e789445e9c7c53a8e0c0a4e3d5896cfa9cacea579122a99a34656835144ad8211bb147e092aa718f36725c2266058f6a54a06cb311bb01dea5ad656b5d2394893bf0d99031ee5e6b10e2d79dfd1b3818216761f7b31e4c3ac20508291317d6133dfbad06fe9ad834fa0675ce771cee2eefd8566f8b28db15c328cca4b8120be9a2e80e7f8829c4c57b6145ef9ab43e4b20810ea76314fa1f3bc1d5bb5bb02c58b77734ee0b400bad3c7b3a029686b45ba232fe24f1b4b61510a0a3a3adebe844f48090c0c62499bce54287e9cd4d3429216e18a8a8cfc16bc51f2001142591a986f36c5af16a7731d9f35ceac167adab401f1b873fb49bc74b2b51a52b811bfd6842234fb84903272693adac2273bbc1989beb339c4bf32183c12626e85bee1347dfcd2f40b883f31d7a456a45d07d7920e17a9cf5ab7a796e5c476857be3eb9dde31b9131fed61d42bb5676d3b5fa5c4c4440e47afc526f9eb0a3a595e06c2ac29702d7e1d6a93aa33c6f048d5d55e7a522e274026fd718b0447e76219b939f63056f87eb845a190a8db9ae6e27e6f422f728457fb0ea25563d553a784354815e612b6c88fae4cce899974b344f3911c258bcb856cc9b0d5714a04f571d5417bbb67e44f296e49e3943595b51bd002abe382f68045be3108929789d0d29aac24b27780c97f0b4f0e51824469500dc0c711048a45fbf842ac7b3a02e6af22bb9579e92b36f47af7f0827cb510fb5cb73434c26cc455a5b7d3bb06d30b028748e26e717308b8c7125b114ca47d9cdd145c530a0c21783ac469aeefef8e41ebd5efd059b1b23f736ba23ec9372284d751ca82889797958f5b792758ac76d9a08e1e690a3dd61cea532304293792e02da08d7adef93fa8b71de9f0c72834f657e7198ed02741f74fe0e8b0d67e57bb006e840d0b98142ed63ffc670f816d102b122e4fc885933de1bfb082ddb5355b15c76e9c058de8bd434a6d1f0c2aa630a63770c705fbb532f019614cde3186c464b43ef1226096ccdaba7c606e7126d5da7a213ccb8b891c8215f71cf1912524b74ca4359cfdb209110efb1bbd380f7c2599384a6fe53e46b6cc1a601b637b41e4eceec55c38368265cc020abca783cf7fac0f3d40cecf0de1641bfc2993a7ee45195fd3f90bf004df83744d115de6c6a765839328b912c8fb58639f6d8c06092c9fe7e188ddacfbebe81e57592bef3434bde5ecc7841c37c7f1b4b4021ac3b295ba07dd1c43f2855ef28f356687bd41c1521e8a5dc2f4c7e7e8f58e476b754cddf9e52138af8209aed6d6bd276bea3b969e3cc5b61eb80190aa5bb1de7cccccb5ffd6725e10256864dbaababd37033c1db1e0deb983ab5340fd8e340f55008b9f2089aeee4612a2b47b1db934304b300e6af495f99128dc6e7b6347fb4553a5351c99a3b1238687cee789cc6099156a6cdd32c6fc658d5055ef888490707d030d31beb415f54208079c4d546510e54083609856a99b61a4dc495047a061c363d22b8f9233c1048d4ee9f6a3760a66428a79cbd754c27b0b43ddd4f6917abdf4977e86881d6eb51b1b97c3ada2443b38b4c209d10ccfd227f3ec6a8b1c6a174bfb68e2a8498bd9c1ff9bbcbb871d2d5afb7828894014fcc9a7aa13dbe9d4249a562db528867f3b3f9c4187e57dd5bd6122cdca4ee2eadef5654105afe449e0c19d6120c55d5da4375d19d1a45e55466d4ad458d0a0342d1fcb87dfc3e2401720ecab3ccfd7e92c52712aee455c445b6862a8bf69d6203d52939d2be4278beb4bae9267f02e1dcfff0c6ad272d968658eb7636c5229545168477f7a6781a5f42b21db693854d522d0aab2fe94bf46a1233a8df8b4afcb28321178e91b95fbd549f4c261cab730684c6f48b9cec8c7479dddf3585b1dbced96a33606f834ab2f2d8f3eaf68c516cb9c0a4ef9823ea0e6d38dcfb8e66d4bb56bd725f7ef011d96201593876609435247f405e72732903996e7faa633771899bb260b97d65f2efb62744b4c21954019dc4d2be72539c0aadc0fd9b0ddd1a9483687ffd0e56183deda011abf532c8fe6badd83a86ecbd38e157f735de84979857c3911cde3cf2207ec2752b17514a2c97c125acd365baf91e8830b358a82ccb1143b66b935b0d191396257d9e8095839dc296a4a535011c781e9eb581e0ed61f60a9681cb0ef96252b7e8dd5ca625eccc633e22a279e84e211ed12ba12bbf03863ce38e70df9bfc23043c43ce70ac26ddcbd2f221d4bd"})
fstat(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001400), 0x800, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000001480)={0x17c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0xf8, 0x2a, [@perr={0x84, 0xe7, {0x20, 0xd, [@ext={{}, @broadcast, 0x9, @broadcast, 0x1c}, @ext={{}, @broadcast, 0xdeb, @device_a, 0x4}, @ext={{}, @device_b, 0x5, @device_a, 0x42}, @not_ext={{}, @device_a, 0x3, "", 0x6}, @ext={{}, @broadcast, 0x8, @device_b, 0x25}, @ext={{}, @broadcast, 0x3ff, @device_b, 0x3c}, @ext={{}, @device_a, 0x1ff, @device_b, 0x6}, @ext={{}, @broadcast, 0x12b, @broadcast, 0x3c}, @not_ext={{}, @broadcast, 0x7fffffff, "", 0x2c}, @not_ext={{}, @device_a, 0x101, "", 0x25}, @ext={{}, @device_a, 0x7, @device_b, 0x1c}, @ext={{}, @broadcast, 0x7, @device_a, 0x11}, @ext={{}, @device_a, 0x3ff, @device_a, 0x2d}]}}, @channel_switch={0x25, 0x3, {0x1, 0x28, 0x6}}, @dsss={0x3, 0x1, 0x68}, @dsss={0x3, 0x1, 0xa5}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x56, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @link_id={0x65, 0x12, {@from_mac, @device_b, @broadcast}}, @sec_chan_ofs={0x3e, 0x1}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0x12, @random="fac55ac9394512996cb52f2037ccf19f1f29"}, @mesh_chsw={0x76, 0x6, {0x3, 0x7, 0x35, 0xfe0}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x880}, 0x40)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x5)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000017c0)='net/tcp6\x00')
openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x40000, 0x0)
r5 = perf_event_open$cgroup(&(0x7f0000001880)={0x4, 0x80, 0x5, 0x40, 0xf9, 0x1, 0x0, 0x8, 0x20000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4e52, 0x0, @perf_bp={&(0x7f0000001840), 0x9}, 0x410, 0x6, 0x7, 0x1, 0xfffffffffffffffd, 0x5, 0xf89, 0x0, 0x5, 0x0, 0xc2}, r3, 0x8, r0, 0xa)
ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000001900)={0x5, 0x430a, 0x80})
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000001940), &(0x7f0000001980)=0x4)
syz_mount_image$ext4(&(0x7f00000019c0)='ext4\x00', &(0x7f0000001a00)='./file0\x00', 0x0, 0x5, &(0x7f0000002c40)=[{&(0x7f0000001a40)="c0fc551f57018c2d5ec176f1b23035464d8cb2b1d57419bb57c309f153fa31366bcc4e636c6ea68f9051dd2be2b6010bf92039fe9ca4ce29f647ec52f990a895ad23769a527cfbf8", 0x48, 0x2b27e0cb}, {&(0x7f0000001ac0)="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", 0x1000, 0x8}, {&(0x7f0000002ac0)="4f82d0dfcd23b7423b6c248fe79289ff84b983b0ee71126ee7644a8edca648da5d16a85080187b51630d445534a57707678cb0caeb374cffe9d5f11d81384f5c19ee12f68ee3fc43c197f7184de3f00697434a6416a5461e079fbddf1479c9323149b9faa897fee312be45c8e80809382b9b937917c3b0eee781e6e573c9be", 0x7f, 0x3f}, {&(0x7f0000002b40)="55112da55f6c0af97c51c81346d478ccf3666e09507a50e1e20a6fd68ebbf027ef2edb8c21e7a8b8e6ca0ed5f9392a5e136bba3b5b54d080e0b82fada586c99acefd9b301478c40cada06cb7b84127ea08d427edc3fd56c651b90372eb8cc343a4d75820b80e4974a1f6d13b628aaf2dc1b2dd97b106b1d319ecc175730c7f1b3f183acf564b510472bd6804853cd38cc911ea6a8036e026c0d167d20f80cb09bff799ad378e228daf91caf46857c9b0fdd7553e73748b0d8897aa5ec9bf34", 0xbf}, {&(0x7f0000002c00)="0ec4ae35efd45341b2856a69f4140a6d2c8aec76c32e7301a1b2d3b16e328f31e6b55aad2333c8c48e", 0x29, 0x6e077829}], 0x40, &(0x7f0000002cc0)={[{@dioread_lock}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x11}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/urandom\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000002dc0)={0x8001, 0x8, 0x4})

00:57:24 executing program 6:
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001680), 0x5}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="86f93e89b0779e5a60d8ced192d1d26eef7834b25f9e391decd179e859137315b13c471889e93c9076065e9308d33d81659c25a3fd65c545cd14c2d42a3e2c4f42f847851f486df0505c62d68bc24d53cd44e9dfadce75cdac82d9f209701e6869f60181e2c1e7648be8904fb47d5f47daec6c8b874ddb2748e1c2b89f02c2494fa69360b933056417094a8434739f1c0167fc3a4386f25e2eb8dbcd945545447598", 0xa2}, {&(0x7f0000000180)="304bdf4c142216c4ce1f964ad4386c6ca56ff36faae910be8247", 0x1a}, {&(0x7f00000001c0)="db87e3936b11d9a600130ead1ef6c3d122d1ec63670a1db1eca2c86166eeec31a2b202f1e11ff71303cf85a70a316a5c0a9a604ec5e53c03b95683d7fe07ca", 0x3f}, {&(0x7f0000000200)="78fdf6bc094c15928da6b5e7740826d5915a9afed74406050cba6855eaca10dcede65d94b90cda78881f6910a34b80aaef6e1320eac956902f6956ed9891fbe46d66ee462f1cf743f40a75ed4bf3d3daf4c0d5bfced5c6177cd964da4fcca88fba712836c486fe6a9a1527ff290ac5d23647b593c417b94f", 0x78}, {&(0x7f0000000280)="9f7bfd91325fed307781491bdaeb3e2f726a2f8c1ec8cf66da40019f425595073333546134d12ed1cca58c87917c4bf548ab651a8a851c49cc73de5653aeaae6be3fd774e941594794b4e6ea1973a5f917dff44a3372aa5b3815718c8e3cd7a595573d5813455b55415531a20d0e625aefc15da072cbeba03113870454fc24719e674b8a5225ef8fb78db9748df710588c32a0f6fde72b1c4034df5b31", 0x9d}], 0x5}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x3a, @private1, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000400)="6bd73e8ebb", 0x5}], 0x1, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10001}}], 0x18}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x790, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000500)="931a36989ca659e84f475453837f082ef38e15083d6f587d0e2bd93b71224fbb72d82b9922abc2230d64033ba0a18e972433fd8c441e4618178e726bb2b4ab6636c0b736a2d82a04a3e8d4781c330e0346fb7e4f7e7f91029bb45e3fade6fc4b6c80d4b4032d0bd00ef1c0aaac63fc361c819075769f891c36ef49bd72540467780e734260f6c102dcf3a7fd53779c9a38ba84f930ff376253a6d0882dfabba216caec46369ec9231bbbbc73a0b7f6f894e3fe6177ca32103ed13ecb0d27d991523df6e735f36adf9beae153643124e6a1b52ba0d3e9466f6f88945480fbfc44736204390689d1ac7609a9eac5192cfb87ba226816f58a12dee12dbf3e6a9b081e33246298c6d1d9674221050d5e0ddeec91f27a9fa1b21351a4321e635f6cee8c884821e2b5f777e71fcf24bb1b11bece93c3f5efb2da2b79fbfd9537840ff4856b6219838713508d05d9653e8da96c3bf58e8dfcb95504697e37a021acee7f2b7cbf044de919a7299ade68057f1c43000044ec6e53feef6ead6dbe3cdec3e9679402da91508ac84ca95a784a901dd4cd524e75e2a24c56090f26fb5e8848ca6b055f1181c27b83579c5235a2b880d7ebe23ecb9c894c7309dafb94e789f950402997e54b913ed70a55b13316419a83ed8b536873c330418431411eac7877803be30a5d43e0f7a8ca5f49f1f5f2c7e7e4a5768b3e5b85f61e1470f575183f1b8a3f48dcdca4ec9b6a6a14cdb63b52c7255e6804bdca44c6f7e985813c9098b8ecdb7739f8adaa4cbb73837c18b6f2affbb28b026de721cfb675da4eef68dee6a434ef62fc2a92b58ed780efb742ac86109bee975eb6396efd8aeb63e1c3df3c87728e2b3355a2a44bbdd1bb2029dae20e4185fc74a56728d302d54f8b553b8f1c2c99679731760c5371e90d60ca75e81c642046f9d769a256bf140d2df5f653948589f04d0da7ef3fdd88422e6d8b8fc6ea54de9012c51638b6db001c9e04ed58c09742f9a85a5b65ca85a7f8e3c016d1d09e0d84d5ae74c7531323871aa8139260ceb35e34c50c352b2e95954812af3bc0dd3b5c7a424b4f9ae777ecb095deb2d1ebac2a087ea1b1da8710ad6b10d4fe88a0c0a60fb52b6da83522f58fcda4041b459df728a9dfb0d93de9b360763a6d177c4b233e1d19d44fc8037714fa651200ec918b3f9497d86060a0681b6466a0c79d0557873c7096bb97be5a524acaba34fd865e3090a0b11f8ff8c2efa2cbce79ec2dcce669f3497edc351a8c18666a576267b26b1d4e47a226916b9c130a22df218819725def08510621926fbffb537f7ea4ce0c28f7a73024539ad6613249231286aaa211106d777ea9ee1decb70b85eea2c8aab9efb1161fe18038e205ed9dad0695f898c808d289c185bbcc27aad4aa305e0e9efb1d21cc5db4a5ef7666e0d5b056ab8bce1b5b278d1dde127eb59ad15efed8fe9ae7a1d0892f6c8880c0f09c8835767b877cac6e6f9aa6bc50fd966dec51e4e7bf801edb4c639013ba2f5884b86127692d11f2f7e9622ae1b21e7875bf2b1be6e8791e40bdf63ffcde0a888b2aec1136b2ac4855d5b8a737eea5e9a379aa4422a6daab884dfaac196f292238bb51a2f6878936a1cb895ba88ea746b3e5db76322567ccfaf4eb0c3c1319f559d04fd33ad4c422f116f94983b83e12411eb2ac27ebc78940be633ef5cf974116dd5a077a2681929406167912e9a4d74e45db4d475dce3e329ed3c9fffbf8908263472fd28df18666aa36bbc8fe31860444370c05ec3af2e0e98cfba3e98ccb1ba307c8b0f5ba322efa53abf883fbefd122befd9acaaca49e55faa96dd8680a796171c3ef3651c3a2ec28335ae041583296318fd1e152015466525abc8d219ca4f2c20059ae13944163670ca3a51bfd0ce2ed27349e5940878d3174da1c72fbb3d13a6e66368260952d6e8b1daeaff634b6336ab3e78c34590241c87b357746a94a885f6f8f4f10ce7eddc8511e8b6ec030e3fa82a761c620542cff9616a62491d623f990067430d07209e5724e130586e510e46b123424c259315daf247fdb1898a5ef1cbea65e479b10ad09b00494c8750eeaa72b45108b56f6b845e06291041a2b454190dbab744c2aeb2f69525bf835ce647d1a2f1817d14749c5eadd530f1eb794fc0d3d401472584bf7f6680a6fe9af30bf5725de86c9d0b5dd41a60d757cc5d00e08412a4d8d73e760795e57ac410c2bb2a04d70a422250a38477dee5fc88fc958dab4dbc3d9211f826762cbcd020061fb77d0e0f2f60856820986f0ae628e79f64ffa80cea46b44f390b7435ab1aa39084dd853eac499f60cde9e4c7f6a2caff22f94fba3f4a8fd1979cce532fa2f701ff0ae2b5c320ff08381770f2721584c28949a58af827f0eb1b48e1be4bcf10ae10924b5eec6b105c47dd79f3073f74696175b8afa7a01684c550d2355c2ddc795f7692fab42482a1d32d23d50191805723162e6dc14b19e47ec271677e0915e6aa95dd6a05f5966ff485fab2b48090938413c212e111bca0103fd1e72c2cade80c3967eff77b14e1b8e377fe8caf02a5640eabae59c43e39e8219f55351c90c2ddd4673c9205672e2590ae1baf370dfb8a427b31adbdded096ace823396d494b592cd95c450d5c5080e327d6fd4cbb056b5a9ffdb45a101da7ef957136d602844a2f498d6c84dd81c5b9a30a5cb7599705a117a3f12f8f4d64d36d1e3b0fafe904531e862f54f658b3a1670d7f5fb881e3384f08fc43eb2969e7f83f215488ceb81d421e6e1f7592a23af41ed1f2a5840646abae25c51ceb374740c5563deaa2e234cb58c3b437c9ec49bb66dde224c57e50737ae880b9a49a8a0936d34139aacd3f7823b081448b5ed10b8ed9bd92265dfd92d48aa44ccb5134ee6913c2c741c6d66ff7a606fcbee81de15b717b1e79c2621de191025bafe1f23fff4f6b498569c507610db5588c401141e0f7f960b9d0988bbc0f30c86dc34b502168858eef9e8bc3e856224a2d8e7bedea0ea2bd0a1f2d3e1071d9cccbb7119a2661f058a087c942fc8acfb7e43818c6ed3d93d6f3085cd412649b0ae527bb24672b1f7273abdcab69c641d313b543b9599727952d94520f5c28415d1cced06e373d756f6ffee1476e6971bc1bc1d8f2ee6808e3edce501a2c65225eae9e16709f3975833a518b7547e7c535dad52c1f3778212d1d9c21fefa935395cf66aa9ceb19c4e413c05106469bd798e1bc1b8c8b5c6803b2f462ca704ba17c5fc4308f474dea5ba2c8a95c8f3f9af09498db27e598882c38c77f760797bc9bb20fca434d895df47de0656cd21623a42edd15d73190cfb27c9b8832d8bc27a9c75eb178bfea1de01b5fbdf281a1a5a0bcf3be0e14a1f9290303609eb50a02c26a6d50630a06bc8ab933870d259b86cb75bf3f1016c574a5bcaf3367acc0b8f99015c76e0bf9de66a4c77f996627dbb92085c5c6c39e390afcc6170e5917a51269b0ad66e2c6e062fe4a7dae54598491de0ff6b75b83e88adaca9edefbc8799f640b574a29b47a9d2e1d07ed86b142b414584120cd56831c88db793f766777129abe323a4a37181a3160bab81e5f99bc4970cdb81c3ac256c75c1f59f29a86f102c9b45aaddfd526cbd03681388fb1441e9ac84f6139f36e61e9644772445c8637dbe9a08e23732b0e6d82d849cbdf86880bbb21212fae1362ce63d04562cfc84eb8d64caa72ca7a8fac13abe359f0a2f8a85a40426d7c343e08e2827d25fe7101e1d21711d7794aefe9635834cbf6c1ba785eabd47525364d2b5178ae27f736bd77ff3e5f720efa0f81b6947562294549b167a865f56a98474d532ba8a6f0498c7bd5e72f591d18a9788a0f647b61d2a0d59e87759583ea821b789e202e165048ffaa1d195bdc8912941d9b69bb705dc77cc24487cd8b6d958ae12a5211cc27dbdf8ca85bdcc906c86586d2f5b83a8ad7ee779bc161dc45be937006e05facb68b29def4e581aa3245b8938db3744692c2dbbc92b2a6b3c2f51bfa62e65ade5fd2350b5788d6cd2dcffd6eac3f477a375b63eb1118bf4090c7306c8d7bad51aeed3298963af603b1e3c3d4aa7c1cfbb1845a35619902868d6ee27693e784c650773937a18e3cc91efcd75571c218268319ed19c7bf99f3a2025f5f7afff157b8c174cb9c3522699316b288238ed1dc2603c34f30cf2f347b9597b48f409d1bf0940b2a178273d575e7f53fe4dd5e47ad3d3a79ea992872202c0a174f19674dcc3ff138989e22104d2e0928ae39b6f99c0f880fb0d28df1993845fbba6c22b500739eeace4e66243025152447522ddaecad9196404684e7c5ccef73efeaaadaa44b75456a62a1d4ca802c31c46064f18ab671d13a78de1c750ce4978f462d03aa9e2a25e6472d43e1e00d097124290ef2b81355d8be1bf35609492cd513a65a14e59d9e354820c981f171f87add0559ab1faaeaa4d10d4cdb0df32dd744f31e0e8b38a4e3317e39525da573af13a8c8e4eb3f8898eb81ab3b08611ed7b61e9e6e6ef38da7eb32b5021f9527a946cf87dfb48ca5fccbd345dc618a82dd865e9a1adeea1ff9b399a9b427b93397e941401498fe4b7c84feb8138eda87bd1acbdf599f1f519bb2126352199f524c0b003908448ead1d1dc3586d687f81d6c620eda7040eb66f32d188011afeea712c8567feb1db3740c3a8fe6b8d7840dcee426757688388c5a963ad814e56fed85b4c7d7b89ea0cbafff69c56e608ba61f276c54a7a608efa9645572f192a70013ab68adb27607ebda3d29ae96cc1275b82e050dac234cbb1a58712cbbb901c229d5e3121f35d396f97147688157188d8da89bbd4d4feafd0368b4f92839170e14b8b95e0ea37cb6789f5413e6e581869f9f208ab19f697017fb8bf7b28671d4e2f3045f9c24a0496573bc38c327c22a346a86e65025d22e0e2cf8529a036350eea82002e75144bb90c4a1718a6ae4d2b2cbf91b74dc0afd9b95e1db4eae44c49d5315ee936a8d70125b5b475b1691a424d52c8fa8d002ad24f87667f1ff0a300a89246f17a533f758e675d2d98cf8e3b1e3885fc09ebf2c9c4a92ed660cd5d1e3b35ffa481e27e21ee1b93d98b55a6084fa918ad7cb2729aed1033ca600ea6e418fc02c4c28a11518887de9f7514e4ec23efc70e6a023ebd13d812bffe911889796ddd0e6c688502369d4cefab2f7006cd68027ca748b79c117bef06a45745e94ddc047246b62918ae53004c872b20c71e5f26341b102e1294ddd7313b77c93c82f8f4b0ce7fcf451d630eb8b4554c20f489553b87607f4cc720bdc50e3af70fa8a0438e1ffd01f3ee3faa932cce0d7a0208908b5729f78d37459c74be1a4d60c3f5a48ce6c6699b5b64892615f9cc0268639fbddcb440c233eab7c41ae9125111c5328d8722fce6a58553c7f9a2de396f42bd15db8a4ce31f282b84e6dc67677c5e4d2efa556887b88cbcada0e87a67da0a9f8ec3e37e2034417dad68eda1a11878b15d3c19df905e457dac49e1e57d14f69316d388e954331098e98e5f8601619bee88e99142f256024390383f6e06dbe0b53581f52e2e65e41e8b3699f7db534ae38c56a403b782bdd2c51f6eb9386003168ed2d5a0bf6df5721966f72c5b7d992a4d9489cdd1e52fb743f262c35c1ce3d3c6f58a2174dc303eba58d077d98f25bb5898b0c016613da8d3368713d1895485287cbfcd488f2dd23e34adaf58f597e98ac32281817288740accd6744762dc90be737dd7d9440adfb19d2347eb32be6d61f7e15aa7fe0766fa403d8c68f9803a44daaa0", 0x1000}, {&(0x7f0000001500)="abf040e2eb1b8cb7f61223a2743593d2630c22333f784271e158aff9a2f21d5d631a781ed324fa928f3d637aae4a3d5e8c72f16732fef03d1733e5d66fc1f17c4b49dacecf28e0f5be80d7a02fe77cb903e21b90c8a9439f797f874dc6b17ab74d8a45", 0x63}, {&(0x7f0000001580)="94cdb954727f0170c39f9bda9d0dc9247846be8504ed94ee0c7c67842d3b652c22472d7e908f43739473c94f72e4bd3504b44a7945fc336d1a9f7efa5d51afc4cb9e9e2402f7a9c6802191fd9e9c8d7454181925291505ce19240344d3a7c7051ad8dd6dbdea5d86b9b8f7a59595564bda82bdbf49af135265f59b9bf7296030740578d6f3e42c2f54c42c39406d9543c7497e9e4c2773e11c8bbcc6525373d25094d0e5a31ecade21f50ddebc21b98b3b15c0ac84c21a47a9ec9aafedc70a4cb79cb9b0c5159258a866efc57a15def9ab348d6d09a886d288", 0xd9}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="441b4365efa515a5d91a47b8cae407b2651d0bc71c387c6f61dafe715250e2073f6f28716824ddd6413946822898cc7fd37a3dc6a592a96204b5da7971687728daab035b9247a1e69ad264562b234b93367c8c789ab61f2486a49d0261346b45d44ec39cd8135a2c58ce3ed8817e54311c83d7f2f74354d98f25c20a45663e1a43a80251df9069507ef9f651", 0x8c}], 0x5, &(0x7f0000001800)=[@dstopts={{0x180, 0x29, 0x37, {0x88, 0x2c, '\x00', [@generic={0x1, 0x7, "5b0e256d279607"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0x2c, [0x4000000000000, 0xffffffffffffff80, 0x10000, 0x1f]}}, @generic={0x3, 0xb1, "9ff252d1fe18f029971749e4baad6cdeadda316f312d477c550b807981a8a1e8a292269856610898ae939224910aadeb1e5306b2ff587fd0f8481cdc1fe8b39a4653a03dc637f9adcf233e1d131deabeadb103333e0a94858f5a4ab151802061c7d0f49f9d60fa476bf17966097a292041f3a063414d6ad99b761818c2364169b663d8161ead30faf274732b3b0c4f3be606a040a8801ef2fd148874c7422326d90ba6101bc81e5ad42ec5e93d2b647744"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x6, [0x21aa, 0x8, 0x3, 0x6, 0x0, 0x20]}}, @enc_lim={0x4, 0x1, 0x20}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x5, [0x3f, 0x83a, 0x2, 0x100000001, 0x100000001, 0x5]}}, @pad1, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x11, 0xa, 0x2, 0x7, 0x0, [@loopback, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x1a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x220}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)="964aa4f41b675a5e54ddc0a2acd8f45aefceedf85b8fdc12e66b014635f41f785b8e62da0f25649daef47683d2a7137c8a3f0f6ded66df915c7db1dc570e8f7e1fcfe99138ad58917ff35745cbab47e19fb2fad000fa3d84b0e5306601fd1b45ec924461ebd9a7a803afe3be0eda497b77a83204", 0x74}, {&(0x7f0000001ac0)="0d96e5facef7b4bf2bc151", 0xb}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000001b00)="45fefc2c87852580c649b25c90494e97f13a537c7517e036634479660014e3c0c5571ce0ecac0c04e4fd785a", 0x2c}, {&(0x7f0000001b40)="182d97a77636c9ab5c", 0x9}], 0x5}}], 0x4, 0x40008)
sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0)

00:57:24 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, 0x0, 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:57:24 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="041dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:57:24 executing program 4:
r0 = syz_io_uring_setup(0x3a79, &(0x7f0000000380), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = fcntl$dupfd(r7, 0x0, r8)
ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000000)=0x1)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r9)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)

00:57:24 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=<r0=>0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000200))
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x7, 0x1, 0xfe, 0x0, 0x3, 0xa5, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x300, 0x6, 0x1, 0x5, 0x1, 0x8000, 0x7, 0x0, 0x4, 0x0, 0x9}, r0, 0xa, r3, 0x2)
symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00')
readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=""/15, 0xf)

00:57:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"])

00:57:24 executing program 0:
ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0xdcca, 0x4, 0x4, 0x3f})
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x37, 0x1f, 0x9, 0x0, 0x9, 0x10000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x43012, 0x4, 0x6, 0x5, 0x5, 0x2, 0x9, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xf, r0, 0x1)
io_setup(0x3ff, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
sendmsg$nl_generic(r4, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000001c0)={0x664, 0x24, 0x100, 0x70bd25, 0x25dfdbff, {0x1d}, [@generic="58ac13bba4c11539c9a0a71d1a9628b3fb9686063635992a901df0c7b3c77830f7d263cf87f72187015c7a503419c786c55db85208938bc3de1a18fea779f4b5986a3840c3781806c8b286b11dc71b8a32db3f37a8a2e3d39c6c2be7c228b0f61368cd49f3ae7623e41888e57e165837f64f91aa06112828eb4cc056c6aef7ca5dfe12fabf96748a788933aff98e12c0c3d59ea74f35eac3d8471b544d19d6c7931266136094390ac7971ccec50559dc2866e1ba716b09fcbe90a005c063384a2cac5de71f11d0b8f41e669e1e587aca6364dd687578eeb0dd82636658e944e501402aff019779a15dd314feedf65806da6a940d05a36479c1", @nested={0x1a5, 0x63, 0x0, 0x1, [@generic="3d4a421a7b8daaa342ed2e31e049c921c7391aa3dd5b861e132c96dab6d1ee517a972a2eaa21ed88432f7a6d0c381bdd67d86b0c5112df2087c9461f9ec2da1d70cfc0dc4e9d25993bb8f32abfa9c404c73edb3ceb42a22895c76c252740c8277b8519406d85f042ae9a78863b5129b8f02e51cd603c75bee3ff7efb5a15ca28cb06ced5e003773c73cf2128a025af4a3b025138244c75fc02de7f0ebe8a24defe", @typed={0x100, 0x46, 0x0, 0x0, @binary="2fa5850a235aca20e9c8764a7c471d599859fe757e6c5080e9f1064aa6a3d7519531ee92107e661bc1a3d76cd374e522d29dce304141ecea79f7ffdad451ffbef0ac8e10aae853ec7b5f6b51f6cd98fdd820efef8ecd0722eb598f1fcfaa6da447ec707931e77aad7b0776eba0d928c9fed5bc9d25fc33c0dfc732d24c29ebfc8bb18bb20370ceb1b4151ba80b25779d33c2043d81f79815ea897af1d3af6a0870135f80407e53e7d20467967d454f7498ebd4e38da46e5cf5d213f69dbe1bcda35ac06b59456c4ccc08e5b6e7151269ff7d5cd92a156a7f86e628c23b1b9b52868ee5d8a943e405754ed5b80fa7ab10e5a0b92c77fdc2b46e0040d6"}]}, @generic="4a2a392fc59267d7877757f0dd1ca8ef3ce3af9eff20ad40ccd8c85faa822760ca2ca64797e8d1a7a5b5d1112ba6780a9ab2151550b6972fa9128d7107889109895c413792cdc66ee6b8131f85e698d8410422b180b8477a5cae536e442aecad1e6d0ce24e91da4b7c0754c459bd286d504d18cbd482414e05b6903f77c46c7ba75f9918c80b18d38d53ebfe222a2d10d784cc9fab6d218275ba84a3d7267efec5a769c07b375564e55593d723c801bd8ac16e6260af0ad96a738154e2b4f6aa", @nested={0x231, 0x1d, 0x0, 0x1, [@typed={0xc, 0x28, 0x0, 0x0, @u64=0x1}, @generic="40038077d099c6494a0461bbf0496802497903c05313736ef4c89bd5cf8f64bdf3b6d8fea0b1a2686c6e43673d6879cad945646ba6b5b5d41671", @typed={0xb4, 0x37, 0x0, 0x0, @binary="10da75df90404bd3227475abf3679901874b0e254477c7de7236dbf0b30debeb3a61c5b29a0d28204cfc2b66905af7f822a956eb707de3e7b8a49009f2a261edea27ca358f98b647ad6db9a858fd9f56fee998387d22ce9d86b2eccea7d46c0fbca34055b53428882e0da806ad6891d99017a3df6ad24b44978c33d41564c3ff2b0afd63ee1b7393a493c6b44b05e792c2509a07ffd2899d80479cfae937383d75d94b50e401347257107fdaf2de879f"}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="31d8196b004b8a99f8b50dd2ce4fc9a8819c60d5c5bba9f1b343", @typed={0x8, 0x22, 0x0, 0x0, @u32=0x11}, @generic="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"]}, @generic="21744d1f29e7b20a7c7dc05b0b10bbc380e0892069fb65b37aa85037142a5c346b7b6dae5d82e8b55ce7821bca0a9698f198c022c4cbf7e667c6573ce4e95509c674630c8de4a5dbcd4460b94bb8343216273add7389279e73e66816cbaae69cd48663db63ea654b4c3b828a67db88810d872c32fd0cffb7a5126615a41cde05544425e32425d57c27e90d96bc1d300b8702cb73c2494e8fa90a9e0f5a8717ae7807719c4a1ae01076e41c4f9177d872721011b4798ca908"]}, 0x664}, 0x1, 0x0, 0x0, 0x4}, 0x4008084)
io_destroy(r1)

[ 1672.143464] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.143464]    program syz-executor.1 not setting count and/or reply_len properly
[ 1672.149433] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.149433]    program syz-executor.7 not setting count and/or reply_len properly
[ 1672.169914] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[ 1672.184709] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.184709]    program syz-executor.0 not setting count and/or reply_len properly
[ 1672.191130] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.191130]    program syz-executor.7 not setting count and/or reply_len properly
[ 1672.204812] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.204812]    program syz-executor.4 not setting count and/or reply_len properly
[ 1672.207540] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.207540]    program syz-executor.1 not setting count and/or reply_len properly
[ 1672.230010] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.230010]    program syz-executor.0 not setting count and/or reply_len properly
[ 1672.231717] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.231717]    program syz-executor.4 not setting count and/or reply_len properly
[ 1672.282590] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1672.282590]    program syz-executor.4 not setting count and/or reply_len properly
00:57:38 executing program 6:
rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100))
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x1000003)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffeff, 0xffffffffffffff38, 0x9d, 0x5, 0x5, 0x8}, &(0x7f0000001400)={0x0, 0x9, 0x4ffb, 0x7, 0x0, 0x3f, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x4, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8})
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, 0x0, 0x0)
quotactl(0x2, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001380))
fchmod(0xffffffffffffffff, 0x30)
close_range(r2, r0, 0x0)
mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffff, 0x0, 0x1000})
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x90841, 0x40)
socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}})
unshare(0x48020200)

00:57:38 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB='\x00'/16])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]})
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="04000000000000003e2f66696c653000"])
r4 = getpid()
r5 = pidfd_open(r4, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
pidfd_getfd(r5, r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'})
fsmount(r1, 0x1, 0x71)
r7 = fsmount(0xffffffffffffffff, 0x1, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052c00)={<r8=>0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000052e00)={0x0, ""/256, 0x0, <r11=>0x0})
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053000)={0x376, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r11}], 0x6, "5c83c9bf8af498"})
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00))
syz_open_dev$mouse(&(0x7f00000004c0), 0x1, 0x432000)

00:57:38 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0)
r1 = syz_io_uring_complete(0x0)
io_uring_enter(r0, 0x630a, 0xce52, 0x2, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000140)=0xc)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r2})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, r2, 0x0, 0xffffffffffffffff, 0x0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r5 = syz_io_uring_setup(0x3, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000540)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
io_uring_enter(r5, 0x5c33, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r4, 0x0)

[ 1686.765708] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1686.765708]    program syz-executor.7 not setting count and/or reply_len properly
00:57:38 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="051dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:57:38 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0)
rmdir(&(0x7f0000000280)='./file0\x00')
faccessat(r1, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200))
creat(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x200000, 0x8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup2(r2, r3)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

00:57:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x308, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xf, 0xffffffffffffffff, 0x8)
r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount$9p_rdma(&(0x7f0000000200), &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280), 0x4010444, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d307830303030306d656f75743d3078303030303030303030303030cefb91feb50bd1597d92257b303030302c616e616d653d212c66736d61676930e8753048caf4c15330303030302c736d61636b66736869743d76666174002c00"/127])
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file1\x00'})
removexattr(&(0x7f0000000480)='./mnt\x00', &(0x7f0000000500)=@random={'system.', '\x00'})
futimesat(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00')
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={<r3=>r1, 0xfff, 0x800, 0xd6b5})
pivot_root(&(0x7f0000000380)='./file2\x00', &(0x7f0000000440)='mnt/encrypted_dir\x00')
connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @broadcast}, 0x10)
preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10001, 0x0)
stat(&(0x7f0000000400)='./file1\x00', 0x0)
rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00')

00:57:38 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, 0x0, 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:57:38 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file1\x00'})
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x4, 0x2)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000002900000000000029000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x20008000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000290000000000002925", 0x59, 0x8800}], 0x0, &(0x7f0000012200))

[ 1686.801773] 9pnet: Could not find request transport: rdma
[ 1686.857550] ISOFS: Unable to identify CD-ROM format.
00:57:38 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="061dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1686.949231] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1686.949231]    program syz-executor.7 not setting count and/or reply_len properly
00:57:38 executing program 1:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB], 0xfdef)
io_destroy(0x0)
r2 = dup(0xffffffffffffffff)
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001e00)=@updsa={0x228, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @algo_auth_trunc={0xeb, 0x14, {{'wp512-generic\x00'}, 0x4f8, 0x200, "f1c47a7c0ffee2018b7717c91e7ce0171e69e2e723a523a67ab4957d4c778b1e35a3de3eae8a9fadc05448cc18bed3a8043c691af81cc63e83cf616288a1c7cee2eb701005af0a5516324d64da21751c4855730284011fb93eaf9e8ebcec1082d1fb16e2c3e66c9570c4f105523884aff5ca87150778c5576beb813a78d188a72a0f69a8f8d5ec2653e2bd7618433be1d77cb090ebffbe89f18109f0069ebf"}}]}, 0x228}}, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x2, 0x7, 0x4, 0x0, 0x48, 0x100c0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x5, 0x6}, 0x8b0, 0x40000004, 0x9, 0x8, 0xffffffffffffffff, 0x44c, 0x4, 0x0, 0x9, 0x0, 0xb7}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc94, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x3, 0x0, 0x8000008000)
r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x6628, &(0x7f0000000040))
faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x1200)

[ 1686.992852] ISOFS: Unable to identify CD-ROM format.
00:57:38 executing program 3:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0x9, 0x2, 0x80})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000000880)=""/230, 0xe6}], 0x3}, 0x400}, {{&(0x7f0000000a00)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/251, 0xfb}], 0x1, &(0x7f0000000cc0)=""/44, 0x2c}, 0x6b7a}, {{&(0x7f0000000d00)=@can, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/31, 0x1f}, {&(0x7f0000000dc0)=""/43, 0x2b}], 0x2, &(0x7f0000000e40)=""/134, 0x86}, 0x80000001}, {{&(0x7f0000000f00)=@generic, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/81, 0x51}, {0x0}], 0x3, &(0x7f0000001080)}, 0x8}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001640)=""/195, 0xc3}, {&(0x7f0000001740)=""/110, 0x6e}], 0x2, &(0x7f0000001800)=""/51, 0x33}, 0x3}], 0x5, 0x10000, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c38800000", @ANYRES16=r2, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800c300000000000800c40000000000"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2041100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x44, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x84ce5ead936bace4}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b80), 0x121040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0xcdd})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff5}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]})

00:57:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[])
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd)
chdir(&(0x7f0000000040)='./file0\x00')
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0)
fstatfs(r1, &(0x7f0000000300)=""/196)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}, 0x0, 0x0, 0xffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x84000, &(0x7f00000002c0)=ANY=[])
move_mount(r3, &(0x7f0000000c80)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000cc0)='./file0/../file0\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, @out_args}, './file1/file0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r4, 0x0, 0x100000001)
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r5, 0x0, r6)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000200)={r0, 0x7b31, 0x8, 0x3})
openat(r0, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x80)

00:57:38 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:57:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x1c, 0x3d, 0xc21, 0x70bd2d, 0x0, {0xa}, [@typed={0x8, 0x1602, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1687.069771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12637 comm=syz-executor.0
[ 1687.086112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12642 comm=syz-executor.0
00:57:39 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000001580)={0x200, 0x1e, 0x800, 0x70bd27, 0x25dfdbfd, {0xf}, [@generic="99ce62dba1f82a4a31a57a300242190033bd635dbcb87b7fc31acc4c936cf5f2d0567c8702f9ff2e50c3c80d918fa1112fce9f581ee538b0f171607f1779f47233ff228cd8c3918acf208f35f8fb46d674b521f4fbaef7082c31a1956eb1f32694eae67f3c60657bb6a23fca6d2f9e9d110f2f48914d546204bac4bde642e3bf34224374f2b8aa8e425b3d72ee7c36903c0b67661e1b7aa4bec505028c82571c04b69fd7be2e766c624fd609741257524407bedec69d5f2bdf4f5d4189c1df9a5648ec9daa027068963bcdf5fbd1c7c37af29a4243052c1a3c37d0a100f80ef088c7", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@loopback}, @nested={0x5c, 0x45, 0x0, 0x1, [@generic="c1916f02ea403abd5abff92ec767141fd56337e002ac8dc5311742570c39720dab7eb87e765390d296e0fcadf111e89c12dec787633f29240eb5e8cfdfa656bbb7d98a5b50dabad0651b4adcf0c8bfb3", @typed={0x8, 0x4, 0x0, 0x0, @uid}]}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x48}, @nested={0x93, 0x9, 0x0, 0x1, [@typed={0xa, 0x1c, 0x0, 0x0, @str='}.*\xf3:\x00'}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r4}, @generic="c02f984427045fbc033b9f7c8ce071e69c86ab23c5013a67a756fc083762d182d0340c11daa30233c7db4eebacec48c93630108e2ef81f482b67965023a01d3121580cda852844db768e0d6caac228265e13da772a018c0790c18b9ab780a2d08ee6b0232403cf005a402caf39800df9d0a5e374e67d1721eabd3f"]}, @typed={0x4, 0x7b}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r3, 0x0, r5)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000140)=@dstopts={0x5c, 0x15, '\x00', [@generic={0x4, 0x97, "8d1afa2ad74c33457e550d336d5fa2e5986b6424bcbf8adb6524e9827a7cc258212c45b5777f449bc9758dd2a8a5b5e683dd2f384e67b5f6f015a74ac323b2f4b6d1c7ebd262ad90c0f3b7f173e03a611735cef1e09031938f400012332dccadea7632f4f00a82d335f0e25d9c179a2b4d75c4aa228c80ee1e7f84b05ad1e81d9aa3b6e28b3074fc0d6ddb73fde1e7a9c3a7a0c253cc55"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x80, 0x401, [0x0]}}]}, 0xb8)
r7 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x80000)
ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000000580)={{r2}, "38fbcf8147121eb25eaad262a93170383b6ebb8658af844fdf02abb9a1077970cf34d51f5e03a0fbf40980e83e04232640f98c0aafb87ab5e68b6a39ce08d946e3736b31336e5dfda91d6fe4edccd80a0f194aa5349d34899d7d85e10febde5f73f9319763054cbbbd9ce603f71ac1aca88023187ae119153bddf765de6ac3489389464613cbca5c240a33965751b15c36daad7e16dcc3d4eedc339956670afdd4d7d3a310434454d1cf471b863740b1e9c7e8128c269780a170e676c0baad2bd601e458393b7fd56762cac8a3e649c1ac78798abc99c98b3166f6dc9a091632f2e821efb45dca70d49cbd535718bea9158d1e0298a98cf4de516ac3679fc9eed52c2c8e10c4bc50a4339a4ae2b40cb71f42472c49d7a3935d1b01fca6099e61cbee232096da1aad948d4efd0c6fae548b7140e78d5f4b0bd90dc74c2e2bab1211840d9dbbb8443c8174e46137f294524c9df2f0ab2bc946cf5e0b342edbae83328178f3fbe8d416920f6c343126dda865cb59504dbc8668a1a0dba91e54f37a9e80f55d6857f62993f052416cdba3a90668d8ca0be7e4c7c02641fcfeeabcc8f093a343ae61c8c9ec8047b446eb4c6f2f13b765240a9fa24a83eeb9e472809bd6435b958b2b98e71fc0961a766eb1fbd31aa0ee4a04044c4b2f810910a905c87ce722416152f134529ccaee0553b6a85627d84fa16f64b73dbab2c70116c9babd8e3aa424f11774c13de44372559cb5380124ac11ba0bd87cf73d80fc8cfb60de5e38bf017b92ad66bf19f0f45c97e0562743b23c1dccbe31b678ad541fd83b485efa2abc2e75d228e6ca6b5507c1a819b9956a97900c7e1964f2b039f1d4cc4e1b1e3a02cadd27f1a1c1b5669e14eaf2ed07d1a28037b3183dc80e3bab97addc3aeab754eeb77a7222881aad417a33732a8ba416e20cdcb4fd29214a4621861d719a0c3869e48de42f0b2fc9d7f5cbe23b38d8e1e2eb6547716157a0254bbf6861aa1b6a71c65c3f3187e6d3a61f281cf95bd576a541d4c5172674843ab744851960b4ba156029577fc6d85bc2063ca32a66391e2427df11863621550f518b7f29cbe993e6c3368685d639fe41c7b382a6a0c7cbbb72b8e4a8b4a5fe1f8172b61c5a5ee79090723a46bfe166464ea8d858e9f559ca07c3145c9bb3fa0a8f89c87716f810078da05bee0acfc513c9edc8676093d34823532393a9320b1ef596d54647a62f53e0b1b2b3afd46446a9f40f95476812a65d3a42f29e68be0400dfd8160e9eabbd2ecc41663bd57ee900221f1d2277179ff991873a6eb74658538bb881c7475d5b1e8e51995f6113df986d240f62463701b0b4ebf064390a775b274d5a2e34c0b5f87d75b3a5937e7ecdb08bc2b1f8d7f0da67fd1adaa53bc721bea91157c32c6dcfd4c51759935028e3bdad5ee46c9c9edc204f987bc5c2178af7cf476d149be7ee1360593a7d0ca17f819e378ef0f432890eba753fbaac7fdc9ef6dd3b2cf364a391797bc22b14af1b548d570ba462ebdddca2bb50d08b6c0ecb8ffb9a4a484aff595fde4aa007b1b3e6b1a1c7b86775bfcb5b0db50be68fce867c030c8485eabce49108d61c87a7d32e98faf259613a2b5ca8f033ab6160a78852485448e3a454c3f95be393c555e556061cc94bbb787b5f83b9148ff5562449801948dea68c71227752a6c3be07016d444deb5ed76ad938f343499953e8ace688424a65101529a155aca5cad71f624e15552bd1b4f86911ba3dc2e13e152baaea757a05e78f6b4c89853488e6b5fa94e934b56ea6394983d2ee39a4d971af002f476a1dd5802bc0505ac8459cb8e36c33071f4ef6864c3584c1b0dba25861e8e24952f961ba8fc840415c1361cca7f89852b2b1d1343869a99ff04665cbf3a16eee0cc6bac314345b6894ab9291a8b1f5f634b86e6f2a10e09500a0b0593c33107c8b5a9e2bac45513147b44cad43502d1ccad740f7a3a18d45aed43b081a8a4bf258d9eaf1ac66a368d19af1b00880e03c3eae13eb676920940fdd9e54dfadce1d14d9534919d64d8d89daa3bf44edb0e0ad1c27c9df95b52184b1e2b49ed6b38cf41ab2b71b8beba218aedffcdcbb7cd0aa5d0c6d4f6b94f41563cfd7fe3b6524f3d78fe2c4aa77f51341ca3e384ac80ced92a5e120f287f73c7ae03a41b216b07b12c9c5c89a1d31504c8371ded310928da21f853417b1b593d3bcf8e030c7623bdf04ef03c1e92a552e597008ecab94422aea3c228ce21be697da828a5009f016df1fa109fd810233406f4889a0ff525aa86496e464cdd72d56c31c8977f8630acfa05c838a6a1b120c422fdada6b9e6d808c283966bb90ecf333284c3a2d6849bd3be3891c1c4f70c283575ca7e15797bbc5c8cd4f22f3385c06007b987b7a8686f81245c7486a35178e513a904f95d57c4f121474e403986f697146c0f1bd653207e4ae719d8c3d0b58b6e236d0a5e65555dd14c37c1f4e7a0e86852f03d1198e01613149c77887dab9b42d05572e70af4f0b4148638c850997ef87b86410eb931f160497452dbafb81e1a88600010f527da2fdbbde66caa4342f5867155bf89db748278ac456806bf21f47f685f234f0d86d01beffab0b9344851bf362259929b95589ab1217a3cd4dd5177385bf5ebc186824dbecbaa60cb11e49b9e8696f3028905734bf951cca0fa689bc7f18b20156ec92084c1bf6b565a418bd24bd98cf3a1cf07aa717a44dbfdb21e48ce01a1bf2744d32bc0d96d58e77f8cb96ee1d517edafc29b8b69fcbeeaeb2718eb033f5f52223255d480be671cb844a0ddaef74a7fb5865a52cb8e51dadc173ddbc95a529aa853cb64c61791473402e29297fd1460244b82c4dba3f2a1707656b427f2c7969ca51ded756252e9862fb236c08c3f868e18fd5ed6628c8dbdd3899122d125dffabb9b9c9de9daf20b85b13f41cc20a982ee95ef715aaa010ead438c0b8040b07b3bb7ed9ba4f42f15aac1a79c9c3d39c1778b413ecd6d27cd0e3ff4fb83f0bd94810a24f9184088e882d2400d22782e003420c3d062a7e90f15a4b750b8fb65da808ea5268d9c3efd7501ebbf8b6f159ae7b32a1494f266d90c35166e8830b5ca8d3958eaf7fcf4a2c2ad4a3bf39bcfb72ce35ef4d051e1718f71df09682e8633fca00e50d63e87726abd49980d35279ac8d4070554d164ca5efe97a5a7c9ce16113f6911feb0d69e7efdb2679d189b3c6a28b260ee5d1711a2286c1e44499145166ac64a9c040a5af82e0f1c8773fbe3013bc14eee4776929b291f8e857d50cdcc6926e5ccf990e9bcef5ff4434f70c704946f7d5375392568801f949719f1f5bab09ac712331263feea5524eba663c507a3306b3730470f7b2da8a2819ce15e47b04391d84c65a3535f4ebe3d7550f718d3d5d4a1366b014882e34524fca809ce2a9d7e13b59d7f807b64313c3d7dde86c5f6abe5af80ae55d4352abd023f218ae273e358ed54160f3e9eb90a1d89408baea395cfc54e6beb1ea3260d8a2e1d75f88dcfbff2468d000618d21bf134097fe5f1db01c0a7133a5c3869ad6c0e481f9a83725baf12e09caad824995988d5c092b9bdedfc72e4e74cff6416c45d6e582af21fc9d5dca3cb010a413631f963d091d4c30986ff2163e3314e7be9a62e48e5bc7fa60b0fcb4368d806d8f522d7282f24a53797d5b82788a8ba46ede7c482696a771eaaa94c080b180cb9073e4d787f8c3ec9b3a388bab31257ec823318d2f51892be20c676c1a1ee24d2081b0a4ba686a62e55fa493ce4721fe41d701c82b571cfaf9331e0b277c4bf65de7f969fad9be81824b44ab30c86f481fca8b9966461ab9004c53b600d60d167f6d3b6bccc11415080aa5256043a12a9b7b21a4aa0a7cbe648add13e2b1bc5ae2b9a623e39d8f06798f16c31c766d1cd71cbc498151c8f7740ce1c25260bb3c8b2f6f5fb39af2874c2882f15a30960555f24060f298da1aae2af35922188f2ffe68b8a41b72fc271ab475c25aa1a727fbc65e603eef2aaf180f959debd7b3e8393747ef25feb01510ac55ec9eb1e7fc0971b3416914123661e3654a5d9f045c2e21a51fd44da48d425bc5b7474296c564a4c44b83eca2832c41eabb6c9cf99dbe8754444a43406ea34c3519fd12063a232d5e773629c53afcf4fb7389cd8c56f54e474b0f222d534e8b8aa70d21c6bc967c43a473a64ae2b2a88b3351831729af5b1a06cd6dfa8ebe714305918afe26e59451b77006de98dc623fda1a4c277980aaedaee208548f24159f654217040c25625588ccbb7fca5f50881e79608a30f4b50529a8ec0f23f07ef13e06a50c8b607e481d86f2d0805c8d8876db45c138dee9fafb4a2bf4d66f94e8a543557867d2df3f172df76dfb4b83857623e7c3663a3b5e5cc05ba047b98a433a60717189a81db840985c246b073eb5209921fa7d9496cdbd6c05f3f2fd9031d91953e171a1050728cef54a41ea0c9876c8eb55f9e4fae2ce68cf1d3af21e5728ee8084b838206be29f113da01e9f016ca67e7f968c51a0e06a817c3eb8577674fe1472fa3471966ee1b79317fee34c0b588dec562f7a53cb9d3692e51ceb3436647701df4de0e949575798dc9a25dd5d2374d81ea895380c20db68c4f880f50e223b4a685082731806fe034dc34321c7e28d0d61f41ecc4f628b3d0115a4fcb8e6e8a9a9fa7f4e6c6fc2a5106f4335f11413bc8bf89ce914df9a08d88b02b3e9b97c6f5db3ff8ea505c6ea59604ca8ca5600b05a21780223b5bcfde78b6146a2ed90049a83f684e0ad885314539b4d959b1cadfdb9177c6cdb8ae470938a30105130264f70d5f6bf554620a11cf1e954f1a983dfd95aaa229acb1d65f65fcef2176f1250bf425b20bd927e354988bc43ffa168bdef7f1090e050274d4c748b9f1d8e7a890840930af57db7de221da1d4140370a11cda916abc8644d673c39a934dee5351fbf4c5d6b83fbabf2707a6a0d35d14bf66a124338c98c53c29d03edb702aaefc4b060c6f35e51564b9f4f37fdcae923fb697cd823a335251d94dea2ee9a949a4de38c33ff6ad6df0aaa1d74e3bfd12580515851bd969506481b249c77c123aa11f4a53591abe32e43acbddcd35e0f5f007a0ae70ad59560f6effb2eae25b0dd5bd7601cfde34875d38137fbf0277c1f85088202dccbcab439345da533ba7a80e7b0135035fab0b41fe1c000b55126805396bd041eb491c8f3604962daa6a1155be1872d71a07c768e87cd6f2dadad54c8c1e9f1b7c5dd938c08dc21db4712a11daa8c0a8ed04bb2e8c029525c1180c0f20d5fdff0fe86fb56e53f7bb28f57412a623025f6006c82ee30c39627ea2e8384cdec22da6d579acde7e2f942157154ce0d284c445ca39e4db2a3ce459efc03a4dece777f1b224cebb2f69f1934ea8c7b14d05af3ace4a5034255943bcd500791f3203607689928adbdfd73bc53ddd5f39ef5edd727246eb895f106c3b5531e3365857733482822b6430d9ff097f4945727bb8b46eb1a719528fc79578efbd01f48ac6635b1b359d0235cc66a8ac21bb779ef48ff072cd1b86c837ee67f733a1aa6515159d67849643b105ba88c56f1b04c710d607d5a37ddcdfcfed2e5ac532cdc13b279418ef53ca2e1ec383de75594311fe4ca4cf712dd30d225d39626fe32957149c32d1754fb8bc12e655e8687ce4169552452f898ca758a8e964abd44d6c50469c2b7d6bbf8eb1fe51d290f3a87aa7ff80c0250bc3359ac12f35891405ccf06265146c17865967ca5a73d479c97ae1f6ddf4"})
sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x0)

[ 1687.180033] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[ 1687.180033] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[ 1687.180033] 
[ 1687.259785] EXT4-fs (loop3): mounted filesystem without journal. Opts: noacl,,errors=continue
[ 1687.293221] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1687.293221]    program syz-executor.4 not setting count and/or reply_len properly
[ 1687.443439] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1687.443439]    program syz-executor.4 not setting count and/or reply_len properly
[ 1699.136455] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
00:57:54 executing program 4:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00076a6b8c8a413a9f327bb14142c04c0b3bba97d1f2f5cc8ed4ea62e232ea8f0f5b5922ea518ffd6e867f72f83a0d51bc280b091355edd7dc9acdc4191408cf148105331adb4b558569b3b47493f2d725e14d06000000000000007a11fcb749cee2540952e865cf847fde11111f33a9012bb543e13322b52c2d747ff65f095568bc63cdb48f1a1d6bf02cacc747a2902ad3797a46c775dd0fe78c2bfaf41d22d830fbd1102e49d64bd005384fcc4a2ecc12500000000000000000001006a666"], 0x14}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161})
r2 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}})
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r5, 0x0)

00:57:54 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="071dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:57:54 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x20, 0x2, {0x1, 0x0, 0x5, 0x3, 0x3}, 0x9374})
r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000700), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r3, 0x58ab, 0x5759, 0x0, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)
ioctl$SG_IO(0xffffffffffffffff, 0x1263, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/50, 0x32}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x4010, 0xffffffffffffffff, 0x8000000)

[ 1702.723211] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1702.723211]    program syz-executor.7 not setting count and/or reply_len properly
00:57:54 executing program 2:
unshare(0x28020600)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4317, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7}, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a3934ef8e4ccc48"])
unshare(0x48020200)

00:57:54 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200010100000000000000000000000008000000000000000c00008008001d00bbda358d6e18012593a325f63a04d534ceff59a36a8a11f7f8a83f6aba1232f1bee7414edcddc969011ea1c418fe43017236a79fd8f1ec358c6ba73e9587a75228128045d14ffd378977220061c04510027338f335d7422d9add4b3ae69262da7946858e5e01000000ec3d71fbb86c3eb64d70318eab194654484f78103a1dbba9ebfa1b5a4b38ee439ccc7453a959063812ed5eb7e90e5a6aa2b8c8f153cb8248920352108a76e5a0f093c3c28252fbe1346f0303642d5d8b40f831403a65746d"], 0x28}}, 0x0)
r1 = signalfd(r0, &(0x7f0000000000)={[0x1]}, 0x8)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
splice(r1, &(0x7f00000000c0)=0x8, r4, &(0x7f0000000200)=0x7fffffff, 0xffffffffffffffc0, 0xe)

00:57:54 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000400)=""/137, 0x89}, {&(0x7f0000001640)=""/145, 0x91}, {&(0x7f0000001700)=""/241, 0xf1}, {&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/144, 0x90}], 0x5)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0)
write(r2, &(0x7f0000000200)="de3cb96b772ca689f4c796dd1b77df2b75717574995af0e94cec2cca1ca0de6813ac7f7a3c774b2f1778d51fdcf63e21c98db0e0e6ee82b3637e1b1759a4b3c37ed04306886ac43d2d97d1895f831b4987dd2fb7f0d53f5c3ef61113a260ab86a2f59ac03efa9a0d304d0760915db8b0057ec39e15af6ebb33581ad9", 0x7c)
write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61)
r4 = getpgid(r1)
syz_open_procfs(r4, &(0x7f0000000340)='net/netstat\x00')
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
readv(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
r6 = syz_open_procfs(r1, &(0x7f0000001540)='totmaps\x00')
r7 = fsmount(r6, 0x1, 0x9)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
unshare(0x48020200)

00:57:54 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:57:54 executing program 1:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$inet6(r1, &(0x7f0000000140)=""/189, 0xbd, 0x40000043, &(0x7f0000000200)={0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})

[ 1702.750416] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1702.750416]    program syz-executor.3 not setting count and/or reply_len properly
[ 1702.756274] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1702.756274]    program syz-executor.6 not setting count and/or reply_len properly
[ 1702.775049] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1702.775049]    program syz-executor.6 not setting count and/or reply_len properly
[ 1702.791098] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1702.791098]    program syz-executor.4 not setting count and/or reply_len properly
00:57:54 executing program 3:
clock_gettime(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x3, &(0x7f0000000080)={0x0, 0xb, 0x4, @thr={&(0x7f0000000180)="f5671eb304000e794d9437767c8e3b80a9f114137840a6b129daf69ae7a8117cbf27b184b0602589e9156ac2b5b6e98fc3883e8abcebd185ec4714b27ac1c726fd7ed8ecf40a908a4f00de843a95c312a966ecdaba1b593c32e64cfda54ec6f381a3485d7dc7291f32b4f1f1efadbdbac3906872581baf1f5f27b8d9b53918ea70f64f20bb5176c038080bd8a04a319b1ecd5f7ed20ed32b8bb319c2d084bdf7d1d8f100a202923442b57bad91b1ed135cc1cb02adeea55c1dca5ec55f5d7dac9803097d74d4a659b5b3313d270f2a4cf55a", &(0x7f0000000300)="6fcf6be73a98f756c8cbe3eebf34f5918ced17a8ad5448c2219c24d67d6d07c2c7ab6b33a478cf6c52924d681eabe70835367a8ea9adbfbf436cd288c1f31384a6bf557d14ff80a6e173b3a9c5f7b30e3d96c40583c5c87ccc75d34a9a57a1a94888cf47168be58864d3c12437cd766adf3a16060e991fa7e3a75f05a6f3770fa4bb36d70eaf72b3f0d4eaa14918b2795fe1668220"}}, &(0x7f0000000440)=<r0=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b48000, 0x0, @perf_config_ext={0x0, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404c008)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)
getsockname(r4, 0x0, &(0x7f00000001c0))
fallocate(r4, 0x22, 0x5a3f, 0x2)
clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

00:57:54 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="1e1dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:57:54 executing program 6:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x200100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x2, r0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
creat(0xfffffffffffffffc, 0x85)
lstat(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {<r3=>r1}}, './file1\x00'})
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0xb9)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000001200)=0xf04a, 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x81, 0x8000}}, './file1\x00'})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x800}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffff80}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1ca91954}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}]}, 0xa8}}, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000040006809a8cd1d9082a85541e010000002b66af6c9ab3dc474c65b6c325e8c6d319a8cd28a3999f52f4e9ef94ef45286158adf52b4f2a3d26a4928e0cc6d03e77f934a78c24712271c70a4e67480846f344219960601acb40d6ff41a5c80b152af5a6a54a5c8cbff67cbb40753b79d94b88310e993c5de11b012dc86eeb0838bdf5325e256e0e18eae35fde00"], 0x18}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00062a65c5f04798a5210c00"/26], 0x1c}}, 0x0)

00:57:54 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:57:54 executing program 2:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224)
shmctl$IPC_RMID(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz0\x00', 0x1ff)
r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$SHM_UNLOCK(r0, 0xc)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400)

[ 1702.939553] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1702.939553]    program syz-executor.7 not setting count and/or reply_len properly
00:57:54 executing program 1:
syz_emit_ethernet(0x86, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x50, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "aed449", 0x0, 0x11, 0x0, @mcast1, @local, [@fragment={0x2b, 0x0, 0xff, 0x1, 0x0, 0x5, 0x65}, @dstopts={0x16, 0x0, '\x00', [@pad1]}], "42d6e86d53895cc9"}}}}}}}, 0x0)
pkey_alloc(0x0, 0x0)
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x33e0, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)={0x2, 'vcan0\x00', {0x2}, 0x2})
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x9bbb)

00:57:54 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[])
fcntl$getown(0xffffffffffffffff, 0x9)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x34, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r0)
add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r0)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r0)
r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d44d63a8a969a8762e5df703019c056c1108e3ded8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb67300", 0x15}, 0x48, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)={0x1, 0x0, @b}, 0x48, r1)
r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x48000}, {&(0x7f0000010600)="ff4344153031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x0, &(0x7f0000000380)={[], [{@euid_eq={'euid', 0x3d, 0xee01}}]})
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4)
fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4)

[ 1703.025716] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1703.025716]    program syz-executor.4 not setting count and/or reply_len properly
00:58:12 executing program 4:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
io_uring_enter(r0, 0x66e4, 0xe164, 0x0, &(0x7f0000000040)={[0x3]}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0))
syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:58:12 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3e1dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:58:12 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1cbb43, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x3, 0x5])
fcntl$dupfd(r1, 0x0, r2)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0xfff8, 0x1, 0x67, 0x2000, 0x7}, 0xc)
write$binfmt_aout(r1, &(0x7f00000008c0)={{0x10b, 0x81, 0x5, 0x382, 0x15e, 0x4, 0x1b7, 0x3ff}, "2285b0fc3efe67a2c1b151e1d8669c5d4b5a9ab99f33755c15290f9625c523ac64fa0fd7dc746a5e535e50a1d3de4ecd5fd2dfb93654b5f680d1b8f727331783e8d5f82dbfddbad48789252aa78bb1a50e02b644e4f7edaf61ba9ddc0caebec4bb3781836ac54d898a1f0b82acc7bfa68c33c49a1f9ad8f6347bb0ed2e4259636de40c962ad36e7df48d2101c5072acdbcf2c9f6a24dbce73fdc1bf1a7bac1a2e5933bacebce2c0cb6b348d1dddc43fbf43cf1420060402ef4b76118de5a2c0aac135d2945aca3d45aa5370bcbcb3191", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7f0)
ioctl$DVD_READ_STRUCT(r0, 0x5392, &(0x7f0000000080)=@bca={0x3, 0xbc, "852b0d9d45e58ac783ee677ce3b70ce70da1ca16ae9c02714a331786cd63d4c3fb73564ddd37b30e3bb47868056496f5f1d9e91f09efca33a92730a9423b35b63ad00d41eb0b11ce8e28e6de5a5619484c0468bf4ce91a346122f2030034a12d5227c8be114882ab940e78172cd401aa09c076bb96b3523a7e7d788ad8cfbe93823abb1634a4681fbd672d8bc599b09d4186471bd89fab625d742f825298b342467a323d0b2a88701e65aff5923e53b86a4d3907c21f5faad28cea27"})

00:58:12 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000040000000000000000000"], 0x14}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d2e2c4f4b4861777938e37cc6aaac2b2ae3a0bfa05063787f5f99462ff96073b36d0dfeec64c8612182a77458d9f01962cc08fee60a7f2ca8ce21c049939c62508d63a620f84413f1603dfb148e94af82224325fb1489d30a0f68b3c8eb43a680161bbed8d48d64550cd6802e3ba67c054c9fe640e32a3dbec96f8e7a2ed03feaaabb19df8ae4793f9886a30398e821982c8bb6e37ea10c78eb52c2a5ec2880fe0ebf0945e728ad9eaaade0ab3646c04d11e5"], 0xfdef)
r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x40, 0x3, 0x21, 0x4, 0x0, 0x9, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1f, 0x3f94}, 0x8, 0x8000, 0x100, 0x2, 0x9, 0x1, 0x401, 0x0, 0x80, 0x0, 0xfff}, 0xffffffffffffffff, 0xa, r1, 0x3)
r4 = getegid()
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x4b2d8d77, 0x4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3})
keyctl$chown(0x4, r3, 0xee01, r4)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x3}, 0x6)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
unshare(0x48020200)

00:58:12 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x990040, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/713])
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', 0x0)

00:58:12 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:58:12 executing program 3:
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
openat$sr(0xffffffffffffff9c, 0x0, 0x140, 0x0)

00:58:12 executing program 2:
r0 = syz_io_uring_setup(0xc8d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = eventfd2(0x0, 0x0)
r4 = io_uring_setup(0x68fe, &(0x7f0000000240)={0x0, 0xe320, 0x10, 0x402, 0xe2})
fcntl$getown(r0, 0x9)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="7ebfa3094a8510dcfde31242722b32d0bafb942c8aae1c2a9b3cbde8732fffb71d1c607bd96bb747070cb15203a2b10c9ac9bbdd0897960262d359f445ef3d1c8ce065", 0x43}, {&(0x7f00000002c0)="db10ba118092b2d4e1187de8435b83df2560f0dc22dcedabaaa5e9cc2b47e42e4389d14af6de48081e92e849acf1544c9a4fb48caca648bd4aaabb5bbe36285b6a8008cf084e4ae90e10dd67b1f5f74386cd49e1e422251186497728db05e7e6da24cce5ace29b8c88041cc455a3bf533c5e5b89ae9dd62be17a0b53bc", 0x7d}], 0x2)
io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0)

[ 1720.445678] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1720.445678]    program syz-executor.7 not setting count and/or reply_len properly
[ 1720.451714] sg_write: data in/out 862/1986 bytes for SCSI command 0x3e-- guessing data in;
[ 1720.451714]    program syz-executor.1 not setting count and/or reply_len properly
00:58:12 executing program 6:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x800)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
quotactl(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300))
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
dup2(r4, r3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0)
sendfile(r5, r3, 0x0, 0x7ffffff9)
fallocate(r2, 0x0, 0x0, 0x8000)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
fallocate(0xffffffffffffffff, 0x40, 0x3, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40522, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1})

[ 1720.505551] sg_write: data in/out 862/1986 bytes for SCSI command 0x3e-- guessing data in;
[ 1720.505551]    program syz-executor.1 not setting count and/or reply_len properly
00:58:12 executing program 3:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
get_robust_list(0xffffffffffffffff, &(0x7f0000000340)=0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x8, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x9)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0x3f, 0x80, 0x7, 0x0, 0x5, 0xa003, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x5, @perf_config_ext={0xd9, 0x9}, 0x108, 0xffffffffffffff85, 0x6, 0x0, 0x80, 0x4, 0x7ff, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xa, r2, 0x9)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff})
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r4, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff})
openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x4400, 0x20)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$LOOP_SET_STATUS(r5, 0x4c00, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c06, 0x0)

00:58:12 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="481dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:58:12 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netlink\x00')
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0xf88c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x400}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x5, 0x0, "3f23651948cb22b9afc3d2b4578064299b89020f761c67a9cc77faaf7a179298e4065cc55ed8a73a99c5418c19c9044db9c56c6e58028bc8fe01fda2cb94536ed1f421f08d3266661d3402ff0602baff"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, @nfc={0x27, 0x1, 0x2}, @isdn={0x22, 0x4, 0xc7, 0x2, 0x40}, 0x1fc0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)='syzkaller1\x00', 0x1ff, 0xcdae, 0x6})
sendto(r3, &(0x7f0000000600)="3bd20e63ec0f1ef9e61e5642245d84006067cce071f9dc566c8752bde6da2a34972b604f94e775eddfb9af735c6fadd533f335542ac0d2bcd11fcbf2e18d8901e41295f21dee2b9b8ffb4ab1446e854e26d8e76a17bba05dc09916708504685273f242a83ded8a3dc9845ee1b2db6e87fe9f2d836284d8a7d85ed9a0790f028eb7b37ce04719801c1dc9aa076b942c027a85c1e6c9b22bf23c2350866bfe368eb263107b00edb7d298156f7c30a3edad6d0408f7f2c412e5e857265c5fd688668ec6369cbef72ac4a50cb7fd05612884497c10eb65a6b08005379dcbd9db7703fcc3362c186942", 0xe7, 0x400c0, &(0x7f0000000180)=@llc={0x1a, 0x8e62a6b7cad3054c, 0x20, 0x8, 0xe, 0x40, @multicast}, 0x80)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x6, {{0xa, 0x4e21, 0x3, @empty, 0x1}}}, 0x88)

00:58:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4842, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"})
r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4e11, 0x4, 0x2, 0x184}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000a80)={0x1f, {0x20, 0x20, 0x8, 0x800, 0x2cd9}})
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00')
readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x4000010, 0xffffffffffffffff, 0x3)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000014c0)=0xe8)
getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000900))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a40))
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0), &(0x7f0000000180))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f0000001580)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001500)=""/95, 0x5f}], 0x1, &(0x7f00000016c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x10000)
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0x3e, 0xe6, 0x0, 0x0, 0x10001, 0x1200, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd, 0x1, @perf_config_ext={0x20, 0x4}, 0x818, 0xd05, 0x0, 0xb, 0x8b3, 0x5, 0x1, 0x0, 0xf263, 0x0, 0x5}, r4, 0x9, 0xffffffffffffffff, 0x6)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]})

00:58:12 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x540b, 0x1)
write(r0, &(0x7f0000000ac0)="a2959deb720578ac36771e0fa5008830da7ac798c3622194130baacf9ad1534c2ade81543869da03b3d2d7fb4c96e8b8b87e08818b3dc2c18c1fbb8c779da6ed90ad4ae0d67098df42ebaa6767245de722e84398e47ab8b2cf797365af544c964d0e091f60cbe1c53febf39db06dc2a6fffb704969dbcfff23af9b827fcf962e67aca09f6533ff14b026d397d25ed74a9cb3cc1c96b4692aa9404176c25afd8ed2102638da0d2e56dcafb2bc368678ef5fa3ff391ef792b92813fb7f8462f3b634bb32437e51895e62fdd8e36a666085d98349f0ca97945c71e2076614b927417ff07a4d42dc518526df5520724af1fb6a129cd7067285aa0fb546144c047493133f5886f718380a124191bfa8dbe15f199487afa8512404db91020f849b21508ad1310b885e37c5d256dd152423785c2e4978f21d13fb7de31b822c2c1eed0234eae393d1f98b5a4cc78114d2d789c6ea6366673f9f155b7a81558b691be29d5cb025610b7b39d65524b6d6c0015f9fecbf3a482d57ae5b16ab0764b8fa6fdbf02b3f4ff854d0d70699534c3fd076925c3696cdfb2402558ce3087e642b11ec72ce0b450eb6f139b163e1bae2b92181e24263d3ec5709dc2672913ead84aa6fc7dbec9dbf1b7959e25fb63b5dac71c27a5897a911b73cc4a5a5dcd54b5418db759bee9c279083c0cc698b8156fd6e82b6910ed9b2416c17efbc2bade2aa8e7b5b1b5c37478a097bd1335c35ed97e4d2fa04bb1c73ab6396a1f54372dee9f5978b990c633b0fb26254b2f9d8917b2e656efaf8eb4189d020a17339d2356a8f28ff8b78dc65426e89be2cd949deffd528ed454e3b808140f310f2a6838dd6122c5c884fd96cb74b4cd39890fb8bf14bbc172348e9c42c104de1fff350a8134e897d6e1472b2075b612deea653faa1b22759f9accb8cba165cf7c226cbeae6be0740a6166c3e93044441364a70a3c11234d5b567efc0c668c1b325c8900e2f506f90eb61c39fcd1c49c7190f41ab6f2baa6b382555788e1b9d087ee1360af4dad96e1bf7fcdc11cbecea793dae34239eb58e41b8845090ba2d010ddf4ddb548c4193dccae8e7e09748c6a17961335a9aee1f5b547a2fd943318fccb3e097e04e188d2d48396dfd09c6947ad9add93f6ecf1ad589d6facf6c23455c190e91b8bdad56e9483ac7920ff700f694ab1d2765fa3a9b637e4feaed7e3f0440264d5393e96745cc4554b98b5334a1b14f5f6f362bc0e337f72a90bc27ded5a81497ac41d58d482fd148fcf2e2a3bf14187420707cd3f6613286ad853e7db01bd371e8a3e7123d8c7dc41815622478d6f8a373ada86aa60d560c54ef7ec697c1b48b855e6fe5fb17726bf99dbde569fc89916ece3d2fca348f1b4d2833f4cf7dc83c1a4b1bd5aa871da9496622375cca21078186360f05e8f320de6657d0f3f7a1d9461010849986c63a41ca6c91e2c7c206fcd56f83f6b0b740f1bdbdbb57df26e6ddca61ca0bf81496a93226914608108c09a3c97124d65af0a9c1af6b704f2402f21ae36a0871b0677e90388cd0dd6f0b003b733f65c3fa7c33a9feb42ba37656aba3c01597d3ab095866beb29c3a2dbd32268dee22613ff1b8502d4877148f385506c2c4cd477307dcf311dad7ad3990c511b0d08533705b191c9356dd914a82044970084bd3c774f537436a57f9fad34710902c61780dff050b2654cbfc64cfb6a00a30ba807a0e57a0c21756934ca5d74275932ee5db9f7b477fbdd9baa49de0f84cac433ce69776af56229b237869ef42a414827514d8c0a65de45d28b407c588c6dd257126862423a88e1b63", 0x50b)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0xca, &(0x7f0000000040)="997ec3fa0f3f47b1df4fb78516c731b386142de85781c4e33d996e4f428f38dd889414400bb09d56c91e403260720d5e8bed4dfe1e388f778f900e951ed31c9dc3bf9d23d1bb30e7f09420815525152c52e31542d76d2dc6fe050e85f770c3dd2142726c6f11aea0370e55aaea098fdec48e9ab4edad83fabea7ef138d37aff469120bc56d5074060f6ab00338292092583e7e7be9e9d371b1d9f0241eb3630303b4701ea801ec2b694e147d535065c8d3e613f156a4544a13557ebcfab93e45d44eaa1649bfbfa6e0ed", 0x43, 0x0, &(0x7f0000000140)="0eacf126389bd6e8f365ad6a0b1e7151d26382c4efea3e2e4ebc99fa5aced681cb29401bac3abbd1c6db146a86b70f7b28aefb1941123cf94785913256f98f77068875"})

[ 1720.628304] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1720.628304]    program syz-executor.7 not setting count and/or reply_len properly
00:58:12 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1730.368432] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
00:58:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000180001002abd70000000000080000000100000800c008a00060001"], 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa0, r1, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3040}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x84, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x40}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xbf23}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

00:58:27 executing program 4:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/vmcoreinfo', 0x100, 0x168)
r1 = syz_io_uring_setup(0x546c, &(0x7f00000002c0), &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
pipe(&(0x7f00000014c0)={<r4=>0xffffffffffffffff})
syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x82)
getpeername(r4, &(0x7f0000000400)=@xdp, &(0x7f0000000000)=0x80)
syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x42d01)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
syz_io_uring_setup(0x453a, &(0x7f0000000200)={0x0, 0x6523, 0x0, 0x0, 0x103, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000280))
ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000004c0))
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(0xffffffffffffffff, &(0x7f0000000500)=""/138, 0x8a)
syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:58:27 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="4c1dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:58:27 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x1000, 0x3, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7}, 0x7)
fallocate(r0, 0x20, 0x0, 0x8000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x414c812}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40082)

00:58:27 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x808, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380))
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7ffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RREADDIR(r2, 0x0, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000040)=0x1, 0x4)
write(r1, &(0x7f0000000400)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53e5ffc4951d0a6a9f38ddb8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3801e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02882e708a33dd60181f84c65d017d6367a49a1625151792a6d09c4d701cb3e97fa2cdf86af825c6a971f722fa599d7b2490d319858ac3e9cfcf7fff01b93172df491180f490fdec283d288d843f5288d83e1228ab2", 0xb2)
syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00')
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)={'U-', 0x100}, 0x16, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
fdatasync(r3)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0)

[ 1736.073526] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
00:58:27 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4)
fallocate(r0, 0x0, 0x0, 0x2)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x1, 0x4})

00:58:28 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0xb285, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x0, 0x947e}, 0x20, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x8a99}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc)
fcntl$dupfd(r3, 0x0, r4)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r8)
pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000180)="cd77a316036d55d2ab8084f8618d58fbb5a33ec7740bd77c712cc2f9e516472f2a3a6e86ba7da45ae8516b9fb95891d07bd57b648a211f", 0x37}, {&(0x7f0000000340)="c589cebd180c5b83e241ef9fa8403e11187d9892b0350df7aa5f454f7ffdf51776f9df3eb5bcdc84468f60f04abe7f7425815e2cb4e5aa19be7c80577d67aeac0233b6030e2d52d9a570c1602cb78a6c52c3af95422a3c3c9d0c32eddd62828bc9abd1dd97bca3cbc144ac6f1f8d5e03a430dad15039610a5b69fe81bbbb5b1ed67f07b92c626214946e49adb1cd5ac243500d9974e336066a1b4e84ceecde7fe2a00a395c36b5f0766a0b9e224f755d7aaa64ddb254c257bce9f1", 0xbb}, {&(0x7f0000001e00)="61494476a94589b997a79d2aa803df67774d93e760f93c476e6648a3f54de071a71391a31f0bbce432916ca5becb347b791662a42248ce080c3188406be98dc234a261cd305e294822626008c33a7b2eea944367e5f640a5d1d2b19c6ece18670dc1e85c4959cc29d8bfc4e27ad0e5d69febee9b3917a62e74c1ccacf53f19c6dbfa5fb875fc460811d92ac9bd5c4bd3117ab3105a894c3c129a89a8537536924bd2b682178667015f127f49bfea4f247617e1f6ec41b55196b500a51291517f665cd17856fc8668ab7eb8e0cb7b6c72d601df0d92c7137eba25e55c322dcf810e1d477ef2f93b5520c0c3773f49022936559e28224406235cc41b42d523fdd087226e022dc8f8d4e723fad158fc5d5c5e4a0d7c01d5cdfd8766aea77463f4fa591177374239178387c81f8336ef1fb49733c0a120a591ca9a399edca5f851a70b3f80718088438df6c909a2689b8d942b561c2118d43eef9bc2776288845c962894296a90665636c5e0ded993110cc325baf3f261fe733840c4759126dad482bf8de4d1d32908540bee9714791d108e66d266ea780cd181e43d7feea4de347f9e985f91952a97441b431433885bf1781ab1405d370cc7c5a1170916a9b235ef647c16786910eb49aea7aec502495fc8237c5f3ece28a807eca4e04539c7310fb09d76ebe50e393f40b40bfca3615809f094d7c5234de28dc1c0791b090fc5d7a49be0bf47dc465ae9e593d85ae17f70801fa00eab6d0609ed65bc8c818d0a5506bd8f5cfcffcbe47463eaf437d4543fb8d8869cb9a165cb6832e1de00b6479d1b45e0c2d5d7a89ff7ed12444c67597d5f96abd235301d85b83306a7f2fec9efdd6fcdc566a18ed59638ed1f6667ebd3e4bc7b8964ccaec49d0e83d4267482b3d6b65e12fd1ee3a5caad69335d5a554d9822320619a2311586932e03fe07e04531c79f9748a255f4e444464329200c1f13e1004588d5d06916cddf8301a1c3fe3a020e89b703359f8465fa84e68f88d5db53175090103e600b7a53a3041b103bc38234d53b1531b9e0176d9ea2849b428a64aed075314b4bdaca5c5f71d9f3a3dca617ef4b8b4e429f4109380559343cef8691cc01fd2edd10e98aa56aab61e5cd5198f60b32d5b288a5468708ee00e056e6cb2224107d86095abf1c220655635d00577896f5f7868c2baa212702e07df3ba6e0207dcfa0464132fe7674a37e1a0ce99d99a2d0505a9b2045ea4505a2739eaeccf9b339f153c45e061835b6145e55bf4bec27c4f368dbd91bac346281ae797587eb78fe87edf68890f2bae01618d1894b28e5d2f27df8f36979f8b9b0b9c4de9b76c8792f0b75ca7cec785b635b33c4c90acde0c9649f4a673940e64e8b92df570882a3c7664f9f7205eba114862bf24ea799865494ea28fcdc115aa760d296cade10d9615f76006117cd70339dbeaf643fb0c75678feffee5ba63520d541c044efb1351f05aa957b3eb3b4999b805fffbdcec46dc84beae8ceeca7384622d90661eb339c25668ea7f4f39fdb07ecdd2b0305d4fbd3a1556637d7a1046f834c57bc67982b9460647b331edd98419d379b6df4e37e3e9f7ec89c9e6bab80040dc4447a136f26a653f86ebaea561e5c947e8ce66181378273a1835d79a191e6bf7ad5f2848b8686e9b92700ae4445fc7592e555f2ee06bf1add676852b61f739eac9e2ace2e85be5372896687a797b6a134f59fa5d2829a47c0d35b3599bf22fc6b05d5ba3aaa4cdc9cce717c13b9f1740f38e6bd00623cd2d547bb308aa6a94c63d8daaaeebdd7da68dd4a25adc3eadc1b55037017b593da32f3189f6161bdb2f7e19cb768b346f7200867d618d1063a5bb5231b3d655552d3d42741024eccf558f0c1b4c5256d762b2a8ff0636069602cb7c506d1ad9c3078d03ea7c87152c9e47e17ca92a889674c83d711deced0f24110714bb22fa503f4d0c6529c90aaba07ab40d2b47cc749d57342acb870a9936e7771d53bf97b0ed4874ec8ffc47b1eb6cf84bec226d38445c1e8b3bf71a76e48da357aed4e31390c3945188d7fececa610a506493f39ad91420ae66cb2f901385f6e8b28c9a5f43db78f190b464673aaf83f80f996e0906006897f83ef6e6ed892cad91306736878c130f31a9d2f896f78277e9af6faddd59027d1596c3fe47559bbcd28d7b1314451870aef72927642d3ce228b8d8010c6bb5e8bfaa53676bdc5c2562c080dae2060eeb661bbb06d32de58fa717d04d768bf854bd73e410bacf2871649bf4e5a524c7537614607344e4d81365657bdfd58364062357720b70995457e3381a867c2f2b8f7e7208f15e2024580416cb51032a8855fee1cf09a67d67fbe9af067b008c21a8ae2db59a00559bb0dfa92782303c81719c0dc919611cca48092637c49bc1d62ed2332cdff1aa062510f5da2bc6c1b06ed5a1ab7884aaaf41344d8adf23a2fbda66670c0bd55a272dda1df2dae52f891d52757dac5008159c0b87c1a8213bd803b116aaee944cb17565fa9f02c8f897f75391702c27ec57b15754a01d8354de2ede0dcfaec82a017ea52d73b23cabad93e92a623d77be27990b515d550e421f0e83b1d91a17c937ffd0068d49a7c91ed0260632fbf96299b696cbe5fda1f13f01ff2808aa4e4779d65d42189b7279c7222fb4c12128941bd98ebfa21f0f060d5a1d3e33a1898965cae318a88c8703ad8d1d8fd5adadb151d72e5a6cf88f469f997aebb12499b298b44d4087682da98b27dfb5c4b7657ca609cbb96d2e103327fef9b23a67614398737391bdac8dd833f41bbf4350f0f8bfc2480a451978d327d937e04d4cf338b7da8901c2283658cdc762700043f34c787aed72cddf22591b18199a266818495402be79c0050540c713fbcb8c8e7c37a46049490d2fc55d4920ce525f3b8d313dbc444bee7a32a40245fa0d9de333bf12b30a3f8cb68eb49c3d474e919cecfbb63733795b635577d9184d7a98c6a34476c92f373d15d6bbd94f79f9ffc9f37cd982650678c356a46e5597c2274fffe9044c64d9552de08bea751a59db264f6577449267c0ae8bc4efcd0471a69e7ee6afc78a63f28a9395ee14a8d895a8db9240f9effea8e284879b5c0c5ffb6bf4c124fd5042262c8df4fd013c4028099c3e8f0b6e479842b2743a4a566bbdaa00b59a7cac8d183adbb968b26623b1a2701550c4d9135c4944012925bb06eaf3c95a34a18a8f7cc2b458017cf5180b00998ffd572414f4fd1ca4cbb826e3b48885e2915e29f53d5bc6dc6f994627aa7e39835db4562475d4f076cc1fc27acae4e53c73710acf2b121d2d7f69ad0618733d5aededd0fd1a72e618d2eeb3c5fae2a50297c2bff4227d9e2d7b8a2ff8692d1355b9dbc3ce3a050e6eb22de1ea2626b64b2e31d60623fc1735d24c626770ef7a0167a979d78b91d88d1fd49f7c9753e476ff8295efbdcff1aad3737ede8bbe67b5e57fce18ad9a53b266151adbd38f0b7448d7c4d5fb4ad3c4899a8514094ab36d98823f68dd99a654172cb6fd61519eb7181ecb1166a749c0cf5789890d4633667f7e94541a9f3d884685413cd15e53c2ed7f1f450ceb90e49aa4106c2b83a6620f81e111f8a96c3f80e031bacf707d3f98c9109143043143a3c56a614a15cc1e5605f0e6a1cb33fad08a598a789b77f946a5bf9c3deda7175004000fc6bd1d9d17fd73ccf7626beaf5e2daae490cbfb6d5da5f9edc3ccc0230eb88da2e122bf905553c7ff927bd66417655bc86e564b7b50325d0fe0063588e817f4025b358f307727dc58055a0197acd59ff4aa3ae8db572e9068e1a4674cb66223118844e9bae32fcf1521246cac221ee17a52f02de7e15b70c2d84552d01df0f1aa5c70ce5f7aedd3d9852ee4119205cac640934b7bafd5b9595bd2490ca31869124b0b615fbaa858bc0f16c388dd4c92f288b2de32e0ae187dfae352c9def5dd7e5acf194bbdc7dc72791732b40a7030cd81f45cb5f5fc3083e869e6941bc205ac36caf0c4b0710a9d4f6796b8ef931270b4bca679a029208217d849cac37ad0a2ce9b0c7bd1fb91be582efd03d0b0beb038f18513ea18def8facbb6c66eafae5aee39bbd0df9ef549cf9e098ba57ce3c63b3f4bc572e4b79dac0042d00889e003ac068c26c0c279aa5ee762f7750fc49250bf0cc651242a8d89d83208328d3727388fe9c7a866f0379753218637f2b1c13be86e65d6d271e6ef140c254f1195744b884bcba42e4f1123cf2085ae3ca35405b123a17ceb4003aaf87c18e7b87cc9bde0b9c6133d4e7276e4b44656aae1de50827b5979199425ab19c40ac0cb254ed90411262fd228f2132609b42b8cb3167f021396b7fb17911fb55fcc5c6bb0d568b8dde4d9fc8a0a1e5dab596f7ba82ac6123c72a161877511db648c317833f6e3fb14ae52f57ada85f06cb21ee737e6880ab9d47dd65c50775668a754e78366ea9f228d220b38699fbec3b4d98a4ca562c2234861e8b3359ce3c835d25b819512fd14bc24715ed450ebad4b75912179bb1b9ae672ba865884c06c6337860c20742a807c9d8de3a0b448878025dd61d7e323ed476d9254c4045776304eb59592f3eb78b3b99ed20462c588138a9ada03ca9703ac0df13e2f17594808ad924f0e9994f1aad94943556dbc9028ee77bd1704a6bc00e4a3a63016de217aa879bc7a133a3d6e89382ec55a17b5e619a235783f06ec02819095013775f627b52d270f873d518e849bd4acb003d6e1d21721f178b4347dba8345e5ec676a5e71c89de3363761f71b0a2d869be56441d8c47abca9b22df54c7b6365bde8ba3ba7fc5582b5914677ac5a48c567aa0a731785a5156b47551889628f20c37652df86ef2683605386d3b97c85f29d239ca7d8e4dc4641c976c4d5450366ac9ab670c65633f014c7977ce21468ee7771d43d23e6363521f94e6a957c86ee6c6b0ee62fc4385001aef4bcd652dc24520dd32bad328bc0d23fb0fba8713c8e14a595809d7aae860a56bdc46e879b8d167a50cd1862349fbd965b42def3d6cd2d9fb4c2a625aee596fe6e6477e4eb3d833864696d6a3af85281a01430fb1f1de9663cf507af1681008ad28020d0b1b8c0580ba45468713cc0baeece79c4af7f953c2cbeaa4ee0efe2227a47bb08f5ccca90adb0f95396ee75b190db10bf3fc8905fe0250cfe1343c0cae85dc7656d869bc79ce5b86b02d484d9380e62b3eb688ac77666dec85b1dce493c2f15037c9d7e7edfb25b3f19fc95acc6384540e197de01bfde100cdbc0316677c9ba501f9957094cc557fe4ccbface9c05433e64d034d0292924b75d20d444767075cdd616ad201fe8607c69ab1234f766a5999869081a43b5873ed7aecde6ebd57cf7458d69c1f11b11cee459a1953d307ee4d0204d82ed88432492a8ca3e12f8c0c2948b05a51fdaa007fd82198435dc06ccb8ef950968b31ef30d2ed3cb4559b3030f81d36179c79fe1a2d1280426e0815f0fc9020860a93693670ac1b265b817bd1a0d2c25551b365765f5869e336eeb61391c9afc0b562aa5cdaa28b3101a134f7499e05645f9c74276525abccd79fe6c6694fc91ef5202df7a9a01e667bcaa4760ab7c51b9488df0c9c3c202c6e6b25ae958f4d8cd517ae91240240793e13262d77d7d325388929ac985826f6bc4351db5dd721134f4c1bd71026d4146485f8c03dc8a4f5330aec9ccc868296cffd2f4ee999cffffa6d796ffc9fe9918b0d32b9c259ca4c22caa5375197834bbc12a705de2281032b77155bf091139122f54e7c357a221c0017e7959b", 0x1000}, {&(0x7f0000001340)="8a86547a100f6149b3f9ed8580f311e311c3ed2e10afd782515e5aac3df6e94c6eddaff81143778e217423e77bd27e5d885681cec163352d5891b6b3314a12cf544bbfe7a479ce0f7fb30d54d0ce3f502ab43c6aecc450f5568b065ae102bd8c74115325d5df02d5b5da8edc386dd3d3cfe4aa01536fd083643ba840c3b54e0b4d18149b6f5d7a910539", 0x8a}, {&(0x7f0000000240)="bf64c4a81efb817b3f9a", 0xa}, {&(0x7f00000001c0)="501d787f1b4d2b490722b77dd5d575086b5ee8a507abd3329a2a451951ef6ed6fc48205eb954fb8fc4af48ea400a6220909e79b11a44872035f925d187cb25ad5e1938576c4d15df1c4c36a374c72e2298623a68feffe66114a19b4fb74e58ab5ce11b9d7bd4e555db9c80", 0x6b}, {&(0x7f0000001480)="ae4b8cbaa2e0918891e663b6e4e21160d0bac08737a342874e6a5c74bf925312dbc44bd4981c65a7a33d5108cfad62883f3e6369819526516577a484d39a910eb18adae03fd42b415c60740898ffcacbb98033e67568129c109780cb633d5bdb2746bcd9481eb61228a5414b430bf69f4eb3f5bbeeb9af41dce5d5a79274f6da17ce7119eddfdca98cc8e9b46e32b3cb446bafd64674a29ab35e328c4b2a004f8c47c72bc003b11def5f4150c1bce13572ea30d0", 0xb4}, {&(0x7f0000001540)="de4bb9f904790e3846109ccda6e83fc4351f9f06cf670e05d493422d2ddb99dd88b0adcfca89735d5ce2d43f831b78d0ab613b0c932309c8ad5157ce31ba605eba43383d7278bc62079a74836d07efb1df5ade1619642578b0bf9be7594124776186c1354d4fb4e20bcd4929bd272134cd95", 0x72}], 0x8, 0x8, 0x5, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40400)
r9 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x42c41)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r9, 0x0, r10)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=r10, @ANYRESHEX, @ANYRES16=r2], 0x1c}}, 0x4000000)

00:58:28 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e3e1446562e9d03e408d1ea655783e34d349f69cab76130588f8047c1ffb4c58e75c4b38b80fc608530602fefcca1e8090f2e97d416035cb160bb860230e5e2a84a4e4b97b2c98bbf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1736.104580] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
00:58:28 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @dev, @void, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x28, 0x0, 0x0, 0x0, "dd7e555ce5c5aea106dbb2188404c9a344ad8a4b7f3c13044604e784aac1382f0dc569a72a27b22407bcc8e01d603e80960f3de458138e90aa48a640688263cd"}}}}, 0x0)

[ 1736.149803] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1736.149803]    program syz-executor.7 not setting count and/or reply_len properly
[ 1736.162247] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1736.162247]    program syz-executor.1 not setting count and/or reply_len properly
00:58:28 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/mnt\x00')
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8746}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x58}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)

00:58:28 executing program 6:
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}})
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xc0d00, 0x19c)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x408000, 0x137)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x200980, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0))

[ 1736.237034] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1736.237034]    program syz-executor.1 not setting count and/or reply_len properly
00:58:28 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="681dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:58:28 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:58:28 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000300)='./file1\x00', 0x70)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xa1, 0x18, 0x8d, 0xff, 0x0, 0xffffffff, 0xeb176b59f69afe12, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x8200, 0x4, 0x8, 0x1, 0x1, 0x7f, 0x29, 0x0, 0x7fffffff, 0x0, 0x5}, 0xffffffffffffffff, 0x1, r0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)

[ 1736.355311] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1736.355311]    program syz-executor.7 not setting count and/or reply_len properly
00:58:28 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000013c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f00000003c0)="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", 0x9c1, 0x200}], 0x0, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
mount$9p_xen(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x2802000, &(0x7f00000001c0)={'trans=xen,', {[{@access_any}], [{@hash}]}})
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)

00:58:28 executing program 2:
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000080))
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r1})
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x5201, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ftruncate(r3, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r4, 0x1, 0x2f, 0x0, &(0x7f0000000180))
dup2(r4, r2)
fallocate(r3, 0x3, 0x0, 0x30000000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x401, 0x1, 0x0, 0x0, [{{r2}, 0x4}]})
write$bt_hci(r3, &(0x7f0000000580)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none}}}, 0xe)

00:58:28 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})
r0 = syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x9, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="fe33bb766760f778bce6e97ae9dd7111ab4acc7294cdc1960dd30802106f9059f1a639f904161505841709b41755280a0a14e00e533a5106da35b696285f786a2aea8bc05bf79fd636828b59fab97f0c05aaebae5fe67f305b5742e6052eb02ab5be046e125276da1b138eed8c82e1dcf3b4c5c6647e9bbba2053d32fd8a24dc4e4cb085d1966c1d56860ba7538ff53e085278bfc44199df33bd68c847d57db1df4498760440dde73e41c0a21a4dc7d3a0f9f26438f077bbfcdfccd7d4d7f8848a2e705129ecd8cb8aa8e25fdcc0f83798bf413a15764f5ed351be66c44470", 0xdf, 0xfffffffffffffc00}, {&(0x7f0000000440)="236bd234dd7d888b9d0d3c12f217e6149320ae34c50deef82ee0ec28079feb4dcde434a10b4915ebd1a5be7bd8fe63eb3bd78e0da882b7c763c5e941527b9aa3992f67d07f8820ade18739f12e0b6617fad5ee5ecd48891b90a35f7a1488ce99bbd3911245", 0x65, 0x4}, {&(0x7f00000004c0)="ff1cb63ef83e5c7ee2339b9e2c7841e8290f24abd984bf856e50edac44d6255698d911b9ba4ff8a2d7e693d77cb4e47c12bed118280cb73d5ccfec9e6ec7cfebe778ae725880a58136fc366cfea5f387670ad13e6ef7b4d834e3eadbbef3042b8438c05dc60a8d1402d6e3ced444cfbbc9de56459b05eef968fe3fb07ba8b36104a02428c5896bf8d5d1353d0027e4a942234a974909155d1071372f972e56dd4dfeef34407dc5f065f230bb514899a499a76dab6ef26535d4b056d82d7f99e3484f686323", 0xc5, 0x1}], 0x400, &(0x7f0000000640)={[{'\x00'}, {'\xe3'}], [{@permit_directio}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'syz0'}}]})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4007, @fd=r0, 0xffffffffffffff80, &(0x7f0000000680)=""/206, 0xce, 0xb}, 0xcb4)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/179)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000404"], 0x28)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2d5, 0x208400)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'})
sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r6, 0x0, r7)
write$binfmt_misc(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xd2)

[ 1736.535934] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1736.535934]    program syz-executor.4 not setting count and/or reply_len properly
[ 1736.539235] sg_write: data in/out 684341810/168 bytes for SCSI command 0x1f-- guessing data in;
[ 1736.539235]    program syz-executor.4 not setting count and/or reply_len properly
[ 1736.549466] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1736.549466]    program syz-executor.4 not setting count and/or reply_len properly
00:58:42 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000003c000100000000000000000000000000050000000000000004000080b801fc8bf8ddbac142f6992887515365665124576362c0b58acca74542d298e85a75b95704c59d8ccbfba4e8e1545568"], 0x20}}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0xfffffffffffffe5a)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x6, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'})

00:58:42 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="6c1dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:58:42 executing program 1:
clone3(&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000001ac0)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x501101, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r4, 0x7fffffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r5)
pidfd_getfd(r0, r1, 0x0)

00:58:42 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:58:42 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x6000)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3)
shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil)

00:58:42 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1)
mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x1000040, &(0x7f0000000100)='\x00')
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1, 0x3, 0xffffffff, 0x0, 0x2})
syz_io_uring_setup(0x4eb1, &(0x7f0000000180)={0x0, 0xe24c, 0x1, 0x2, 0xa2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0xfffffff9)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f00000002c0)={'veth1_to_bridge\x00', {0x2, 0x0, @broadcast}})
r5 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x10000, 0x180)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x52000, 0x0)
mkdirat(r6, &(0x7f0000000400)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7)
ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000500)={0x0, @llc={0x1a, 0x706, 0x9, 0x3, 0xac, 0x8, @local}, @l2={0x1f, 0x6, @none}, @generic={0x0, "bd9e2529f65fcaa1dbd5e434c28f"}, 0x9, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)='netpci0\x00', 0x5, 0x1, 0xaef7})
syz_io_uring_setup(0x1d3a, &(0x7f0000000580)={0x0, 0xe5d2, 0x2, 0x0, 0x3db, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640)=<r8=>0x0)
syz_io_uring_submit(r1, r8, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index, 0x8, &(0x7f0000000680)="b8c6ba03a13d090364aa8dd3b92a20994414d261baa565c70a4f8e2fd3178fa969bb1c2390acbdbc23fefc666e376f6c0e2930f6c611d240", 0x38, 0xb, 0x0, {0x0, r3}}, 0x8)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000740))

00:58:42 executing program 2:
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000080))
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xda, 0x0, 0x0, 0x100000, r1})
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x5201, 0x0, 0x400}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ftruncate(r3, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r4, 0x1, 0x2f, 0x0, &(0x7f0000000180))
dup2(r4, r2)
fallocate(r3, 0x3, 0x0, 0x30000000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x401, 0x1, 0x0, 0x0, [{{r2}, 0x4}]})
write$bt_hci(r3, &(0x7f0000000580)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none}}}, 0xe)

00:58:42 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
shutdown(r0, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
r2 = dup3(r0, r1, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'})
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
fallocate(r2, 0x1b, 0x5, 0x3)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x47c0, 0x1}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x75dd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)
shutdown(r0, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x2c1)
unshare(0x48020200)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r4)
sendfile(r0, r3, &(0x7f0000000040), 0x10000)

[ 1750.830442] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1750.830442]    program syz-executor.7 not setting count and/or reply_len properly
[ 1750.839875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12855 comm=syz-executor.4
[ 1750.866629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12855 comm=syz-executor.4
00:58:42 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="01c9"], 0x8)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x8, 0xffffffff}}, './file0\x00'})
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1750.877057] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1750.877057]    program syz-executor.1 not setting count and/or reply_len properly
00:58:42 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="741dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1750.930424] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1750.930424]    program syz-executor.1 not setting count and/or reply_len properly
00:58:42 executing program 6:
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0))
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000))
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000100)=0x17f, 0x8, 0x7)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0)
r2 = syz_io_uring_complete(0x0)
io_uring_enter(r1, 0x630a, 0xce52, 0x2, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0}, &(0x7f0000000140)=0xc)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
dup2(r0, r4)
fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r3})

[ 1750.952445] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1750.952445]    program syz-executor.7 not setting count and/or reply_len properly
00:58:42 executing program 4:
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000000000/0x1000)=nil)
pkey_alloc(0x0, 0x2)
r0 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r0)
syz_io_uring_setup(0x78fc, &(0x7f0000000100)={0x0, 0x838d, 0x20, 0x2, 0x286}, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000000000/0x12000)=nil)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13)
pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff)

00:58:42 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000))
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x10, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './file0\x00'})
ioctl$KDDELIO(r1, 0x4b35, 0x8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev_snmp6\x00')
sendfile(r1, r2, &(0x7f00000001c0)=0x7ff, 0x400)
openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=<r6=>0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2100000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@afid}, {@version_L}, {@afid={'afid', 0x3d, 0x8}}, {@fscache}, {@msize={'msize', 0x3d, 0x7fffffff}}, {@cachetag}, {@version_9p2000}, {@version_9p2000}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x44b2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8850)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'gretap0\x00'})
getgid()
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0xff, 0x81, 0x99, 0x20, 0x0, 0x7, 0x200, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000780), 0x2}, 0x80, 0x7, 0x1ff, 0x3, 0xbe3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1c2c}, 0x0, 0x3, r1, 0x1)

00:58:42 executing program 2:
io_setup(0x7f, &(0x7f0000000080)=<r0=>0x0)
r1 = socket$netlink(0x10, 0x3, 0xb)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000400)="d9", 0x1}])
recvmmsg(r1, &(0x7f0000007b00)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/230, 0xe6}], 0x1, &(0x7f0000000200)=""/181, 0xb5}, 0x6}, {{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/21, 0x15}], 0x7, &(0x7f0000000780)=""/137, 0x89}, 0x1cf}, {{&(0x7f0000000840)=@isdn, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, &(0x7f0000000980)=""/254, 0xfe}, 0x7ff}, {{&(0x7f0000000a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000000b00)=""/59, 0x3b}, {&(0x7f0000000b40)=""/28, 0x1c}, {&(0x7f0000000b80)=""/109, 0x6d}, {&(0x7f0000000c00)=""/167, 0xa7}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/149, 0x95}, {&(0x7f0000002d80)=""/4096, 0x1000}], 0x8, &(0x7f0000003e00)=""/26, 0x1a}, 0x50000000}, {{&(0x7f0000003e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000003ec0)=""/243, 0xf3}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/43, 0x2b}, {&(0x7f0000005000)=""/50, 0x32}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/236, 0xec}, {&(0x7f0000006140)=""/120, 0x78}], 0x7, &(0x7f0000006240)=""/97, 0x61}, 0x1}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f00000062c0)=""/103, 0x67}], 0x1}}, {{&(0x7f0000006380)=@hci, 0x80, &(0x7f00000074c0)=[{&(0x7f0000006400)=""/143, 0x8f}, {&(0x7f00000064c0)=""/4096, 0x1000}], 0x2, &(0x7f0000007500)=""/204, 0xcc}, 0x8}, {{&(0x7f0000007600)=@isdn, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007680)=""/7, 0x7}], 0x1, &(0x7f0000007700)=""/104, 0x68}, 0x10001}, {{0x0, 0x0, &(0x7f0000007a80)=[{&(0x7f0000007780)=""/110, 0x6e}, {&(0x7f0000007800)=""/68, 0x44}, {&(0x7f0000007880)=""/86, 0x56}, {&(0x7f0000007900)=""/116, 0x74}, {&(0x7f0000007980)=""/200, 0xc8}], 0x5}, 0x4}], 0x9, 0x2003, &(0x7f0000007d40)={0x77359400})
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r4)
r5 = syz_open_procfs(0x0, &(0x7f0000007f00)='net/raw\x00')
r6 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = fcntl$dupfd(r6, 0x0, r7)
ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000000)=0x1)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
io_submit(r0, 0x6, &(0x7f0000009080)=[&(0x7f0000007dc0)={0x0, 0x0, 0x0, 0x3, 0xfff, r2, &(0x7f0000007d80)="49af785d23f22f8dc5c7c844a051a8b9ace6db5f87d3928ecb0ffcfc3fa5c7b797b3599b6df70fb2b3aff48e350bcd574af9", 0x32, 0x4, 0x0, 0x1}, &(0x7f0000007e40)={0x0, 0x0, 0x0, 0x6, 0x1a4, r3, &(0x7f0000007e00)="c59eb0b81cd261c07cbcdd7858c2a30073381114686a33d1dc4da1", 0x1b, 0x7, 0x0, 0x2}, &(0x7f0000007ec0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000007e80)="f54b093a1c71c445a893527904725db88ace5b2fb30743baed751b", 0x1b, 0x7c}, &(0x7f0000007f80)={0x0, 0x0, 0x0, 0x8, 0x8, r5, &(0x7f0000007f40)="a332009d3db15519719a727ff80ec134590057248458962e661e", 0x1a, 0x6, 0x0, 0x3}, &(0x7f0000008fc0)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000007fc0)="b1612b8da7b953748fddb3c6248e96e6744f794d820f10670c5fda1a9dd42fade3befd68330c096c59bf2fa66303037b052481935af66bcac37c329ccc68e9725a643d7449b52b2a95ea5efb15c3c266c176b7deefe9dd6be893c4e3bddda141bd96f08568170f56e8ed71af0ba2e0c604ede552bbf8e549f33dad94056103ed15cbad9e33bf88434ff697efc34c0503ada1c2a564ecdb4cc35e378e150be2ef1e129998cbd5eec63e6b8e1a1a2ea7ac7893a683ae76b25c437f7039fc54e47a1ba00ba3ae08df05855ef2fdaeb38070d8ac2ba289062397a47a4ec1b62c8bea00dca6f1d3b2f651c872ca5ee0ba0ad91940ee85d050a00764017fa5197ee2aed027f2979453b81990ff0ca078842f52a7a7edeeadc574bf898fe108dcaaa9b49601c13b96cf58810cf0e0c3ef06ab927d2879f9c82f8e114c7caccd7e30498f638e091ea6244040bbb66f849dcc8711729cf1100dd5118e84ca2184a71c3dd21cb5ae4329ff9caf1edb4f0125923f302d0f7dc1ccafe8d5b7da69f4414d201bdba8e8ce9af4d5fb8ef1d6b45d2026a19ecde78000f43c4420c84f5a92c3bf3e15c1092dd836c928edefa7499b134c0814de17bae23df68e98cf0c4f2c967bc3c37430dc5912d90fed4ad0c55f6b9418afe2c1a5885c519a5cbc79e849b7ee9ce29cf2d336dc80270a0132d990125c3ef244979467eedd2bcb20a9a47bc7b37b813627a732dde7bc67760087826a2e070f840c36375eed3282054d97f09327615344e49e44c6360e320988efca1103aa0cba851ad2c53677c5004e7685ec06d59a3a7206fe159c383630e877368200329d0e54dfb90d4213e41d6758abfbad38739d2999ca6049a16b379045123e02b121950331533966a90ef9f6ecd5543f23ee2a78b1ced61c4194e780cdf745c826405d3b43c506bf9977c08da21c46938005db4230352b1fd12f7fc3641e542a81b5cda0f917b5a1b1bcb1d264263d550a9f056480d2f194df7c097f17f10c5c80b0a9c6ebd43e5bcd4c9bdfd5266259a9e35c81f56410a0a091f4ab3c344ebb9b3ea44257c011284386429048e472017a508cdc626955b51c965a3bc4d322742b0e28b9d61de5392b3bd7b0fddb66e549a71b27ba3e166472907402fc4b7004000e7ee76da5685eda8880ca3e1c55fc0487b2ac58ccc817fee98f5e2f308fc51f1689bf43569e1d003ab6d601f51830d05a90a6e8327227d213f1bee0dcdb4e55e0608cd75e3e20d2304d406cefbcf398b2e2d19a01abbb7399efbce5f381e7bc4c682440e05ce868be41b4fefe41d42bb4497be26806477a4fe7452a6fa457051df7ec4f0546baa39b50036b805b2646376410c9f8b364c08d0cb2f8f6666d82191cc7302fbac74cb9e6fec16512273828997761e0aa3aeabe224f3cf64d04f776cbdc81eaa055c168e04e3dfff48dd05d47d21b8d893a16322e8b2c5c307b16586847bfa060e44deba3a9675a4ee538a03f0412e8f7f427760b9d0f68707e942b69c0b0178fb1c02e0a5c4bb4390de69d00521d4a258f69dcbb5a5a507894ee491e461347a9f3e31f9333d9f6e40b47553d30f2203e5b84773a3d586c231f405466c6de471fa5a9d86189ae73043da29ac4ffd19e944d53dbb83c0b7ef367ff5337fca36037228073e86541d2f95682f6bf6f22567c951e99a6b9eb80fe73723a082835f0aa192b98b740f1261dddcba34690b6b04fe825da2c9616a9820d47dc3a9664035f5c73b983f9884d36895cad91cd95074bfc5c3339b3f5062d38679663dc3d679f43b2ab4bc56c8389cd09d2b8fb12ad097284402c446c922a75429dfd40e9d02f3bf7c70592b269b13a1a1bbde819b0353f60576aba9b73b7cf95e1672ad95144c441c255e0c471c11a62f1ac5e25c1b83042b4d947919a6fd44b8be058132f726916ab6d043ecd52f3e47a2681b069fcc68a3d5b5706fc6b101a700f134ed75a69965c273719be516dc75c7c2105f5ab92351edb5dd41f77054b218132a439fc6fd6d4a6f758617af8eeb10090c96b77360c0fd21796d198186c0bb602c5c1737dcfd46fa8ae03b1cecd02e0f15ba7177d2c1d56971dcc7573bd2b301eeef5d12118731b9986d29c1bbf2aadd4970fbed2f6637669ec0934f2d5c5d1d2aef2efb4bb9de838b237da58edb111464443ae1a9299f0763511db8fea01bf08015967ac0ed54497c5c8b870aca7aec6399d35f0c8037afd8918d7335337e3ed18d47781f846552b20ad9bf0f72e59c80b838b2f82631292d71175b9912dce2d48c51679992203174785274032925dfbe69d69889c443799606e49684c4dc2e522114d4ab12de7c2b255e1a3b0597421fc45cc82dfa1f936a08a3de699301d2c3894a66cc0407b27110e2c5da34c739f7ccac9664c922e0148d1f568410df714d8725f5b56a042ac0d7adddf6ea93ca823041df7f40a12c815d223f12333c9be387b4cc1558da7050b2209170d822a01bc834224fdd1af2617793a9b6ff7275034cf323e46dec8b73be560b6e99434f4282a880e4e6256d3b9b0aa4d93f5da4736ef5cdab24adae19d53eea633319175b851418d873a6b5a4048d5004de73d12ca98faa9aa4bfc034bbfa233e1e50578f564d0d3b532fa4b324de603865b0b9630aac73ddace297f1661df7f8c4929e0db52389bbac56770a971fa6add2fd347cc16d86050a2d7e90211a864840935dc955750aea11ce882366a24778417844e73400a0d453582bda861a4a0d7468f42edf1c5e8209a870cc181e377e883a487ceef33df12b9966ccf9ac5dae3678ea87dd439ea99b2f849a8798af74f7dbc8b7f7e6db3531b412b866740ea4e9f54ceb3e40d82e031eb7c24822755398fb5ce3ab8f318f8a3c808879272284d6f88f0bbac063f4e18f55f89d3fdccc29f97fab69ba857e2be0a05d76a7f775073e735ef4e6c89f809e1f7ae13c6acd2634f806a89725a00a3d4f22ddd64952bfabbd522886bf00c20b4e80d7fb278f9b3b7b36be4188c719d6aad820da6d3b498a150d9dfc459d7cb455f91f1f1ca804b522b3942fe4670fe5d2c3862e2a7118bf60de40106a063cba06002da45fc9b67f74eb00dd849f5f7480830d25a1ca6dde08fd2fe6f8c7158c75ace1d1b35cda574d808046a5e0b24b1ce92e9c1150a467e8a243878d0244953f6db18021127a64cb1b9cb1fea178074aa9f8a1c3b51c49fb9d14c004c554c52e2b6c44dd91b6bcc8d625a51cec35b58fd8a51e0caa1ad2e3199041f3faa27a411da7dfab336458360631b075ddf91c403da66b26c76fe47bbfed3939c61f58620d7fb5ca3ab193220b03c10c2179f0eec1ab82ad42efd640b03adae6f2bafc9eb6b6779d38c524af0a454c7b1ced5d8f0cd6d369b0d2ea8e0def3f267eec770245e2d5a39c98edfd83f36ba77a4b1ade2b2809824fb12c00b7c7acf8681dc589e750e622f8e4e9ec0a6deaab1ec60ceeb20a50e26e2a1e0ecb281e18e7bf0427a5617d5e077b273103a993c4a5b9bd8ddbbae9da77ff7864f2a409f242473945b3f8d549f44de8d4aa0fd98c872fb335608837c871b5d82e2080a79c0070003ab14c402a152d51312f9db5a4582d80afa435a64251faaadba7e284372684a68197e6dc8c94e4634fc21cce431f9419373ab9f57de1ac4ed00349c05a00fd7da6d7c655d02e93389c7396c87e6b8a3200d8818e6aa43ffe7e505bebff0f3021c336f410d6463e4cc9fc4f7c5a713f4b8517dde90c7421543069cab9316cac33461c3cb3af93ba5285e7b864bd525f9cc478edea4aaacb1c4cf26acc0b28085a95bf5792c6a874b922b95efd4cf2955ce867bd9a38d294a24c04911ceb6d1a148db6ad21d07da9a544cd1cb0d522be69dc587fceb8a7819024df0fff31315a0fa69cfac781ef2d123bf9129871022819fcdbd2134662a3bec724ca79efc93125c36304e8018ee12ab32efe1536fb84f09337d6ee0a87e3264e5116968cc9d4932d9185f8f31cb9382b6bee9874e961a19fa034082d30fccd15935999c087b4c376e8caeb17f856775a6cc54871d21838179f798a0afc789ec5a1439b9dc330a85d7d1d5f101160f8d4a40568c824b4b00a6844f0caf11921665a3e33670ceb80592cf7891c60cc675a622a40873a78fc60ec87637b0f7826027320e23adcaac19a443eb8150c3ded1750b366ed7528f72c313204d5b67ec5796d8435f007ef3413aedf5ad30e0743bc81511c39d8baa911649a16e2b35827a333fc432fb199b0afbf2e235b41957f14183aa7697c5c283ade967d07430b3dca03a60af08ec7b1f15db1f50c3b5c9fb9251f6588a5d62fd7cdb3e7563b9cfff5eb3d16fcf5ffbc95f4b534e585af2439f7e4db4c3677527ed87b6060f2951e2acf65d0eabc12a75598757dfc7b29d177256cd620f04aea240f20935ccdd07497eb045148e1d242f963efa39f284da9be6366e7f3bb53e05c93135fb10abc4c90c7283c8f4cdb4657e144d185af6458f373188152fb1612cb1322757ac8bf9c7aa422745174a82fc4273267921e3814a9994baf5db51ebb9a1bc2996c450abc4d633cb2662da6ec3e1052184b03f338c1c8d9eea73f43745bf187ebcef45237bd774a9278e60c00c55e2839aa9d05ee1f6ba8b9a58f4e6e399d9978ce265dd2718ee435df71c6e1e792616d158c0c3df718f0f2fd95dbb019bee7fad7a0ed98944a420ad2a2ca53e684ef9454ffd0e1bd029c1239ab6fcc0515b36ddc7715d3f339e7161ca6461dff79a00d4f9e04d1073d67d6d302c61f8327bbcbd0a029e10631af4caf52160e4d28f732224de893a395f04b5cddd2658ad051ea2b825e9bfad4f9e3a1d85e7171e29c167c6a42e7a87f5f9d25e0fe6ae68be97202827c89ec4d0ce90907ce9d0b85fe3a6dc1301a093fec944669bccfcf4db14d540aacfdc5ed24d9628e6d7c28a77ae2aacd3ddf5052cbf4d72adda15473012d1954255983000c40eb82bfac91437aa44c8b6baca9d7c7c1ccf1d26ced4cb1a34922c30851305dd3865040e8b27845ae750c13752334e5c1baf868e323299737239441759b7b5ef0faecc9ef5ef909bb08eee49a19f5667bd38d4bebc870abd247bd178415b945bbc3d36c1f8b33390ebf71f639ec3de1408268ce70fc95e6b7404adbded4bd486865aac4c77d352cc8072d3fe316259727f27571fdcc01004d6dbf3dee7ee0acfd314c8a685a3005476fdaa69883efb0461a293acd59fd42fd0911787db71e503a59489844036c09e5ed3c63e3af59132dd943f1e2ac2c295af83e45d7f51d91358628acb633aee1507591b46b612cd51894c67eca1f4c072bfd6709de96888f4b41b2613592994496cc8dbd18dcab816f4c01a57abfb3b8f56cfc27d640dc4c19467511a6942fb443c181477c91acefbb88950beaf47501b1f37fb860d86fe75bef61e497037541e24b26cd034e7559f6204e5115e0e6d4d8bf5b16a2115497df61ef9e1139f0ba567f4d9b36efbe62eb4b1241a5ad14abf7251d4467b8c063b0b2595ab6035df30c334c78c2e7d5b045fe415aee76553ff468e4c5d43d582069dabcd95882bb95654d3ea0fae10af2e698a1088f7e1d9dd1be85aea9d26b05ccec50472a4709fa929b0de28fbb1ef5334d1f681b7bbf27da86171d6a154ea5c28fff524f1b936e4ba8e0d1e97df558ee03588e378685891cd2d43dbf305b0086e0e337e0acab527386304eb25df615a53c302d57b18c0b57194907a965e9948a670aaea0f0bdee26c6ad0631163d609282f334d0f4457d085e6e8", 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000009040)={0x0, 0x0, 0x0, 0x1, 0x9, r8, &(0x7f0000009000)="83b607f7bde1", 0x6, 0x10001, 0x0, 0x1}])

00:58:42 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x0)
write$binfmt_elf32(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58)
mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x84000, &(0x7f0000000080)={[{@cpuset_v2_mode}, {@noprefix}, {@noprefix}, {@none}, {@xattr}, {@xattr}], [{@appraise_type}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsname}, {@obj_user={'obj_user', 0x3d, ':#]'}}]})
close(r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

00:58:42 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="7a1dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:58:42 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1751.099090] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1751.099090]    program syz-executor.7 not setting count and/or reply_len properly
00:58:43 executing program 2:
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040))
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x0, <r3=>0xee00}}, './file1/file0\x00'})
r4 = getegid()
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000300)={0x124, 0x2e, 0x400, 0x70bd28, 0x25dfdbfe, "", [@nested={0x8f, 0x1, 0x0, 0x1, [@generic="1c9fd72b5f87de778cfb83385e511b662c4e458fc65bcb74a298c937bdeac712f2eaa434ffb1dcc8345647a7276734ef246ebcde823f01d295d7543565bb317a4122bcbee401912b963e06c84d6ff9334ae5f18780e1b7261cb6cb342b5a68822e5496086659c62618dcfbfb92541f71df025dc2495c6a09a92be2ee4c9ab3135529fbee25915c", @typed={0x4, 0x85}]}, @typed={0x4, 0x3d}, @nested={0x18, 0x86, 0x0, 0x1, [@typed={0x12, 0x20, 0x0, 0x0, @str='freezer.state\x00'}]}, @generic="10aba47b5dba40645722981748a2d808f518b985163ef2689251a697c7c674d2455daf00e5ff2ba23c4fa20bb575cfc76f10556a77feca59b63118753f1621d53daf8301b951113074d048c75149824f3ef7aeb6fc8e184dceacef76b146", @typed={0x8, 0x53, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x124}, {&(0x7f0000000440)={0x274, 0x1f, 0x400, 0x70bd26, 0x25dfdbfd, "", [@typed={0x43, 0x3a, 0x0, 0x0, @binary="e419a434beda4d4c8a91b98941b5423767053a794aa7ad7a2a65ccc40d22e8c12a1b839d30499f927424e35ddba8a984e9c0e3471cfea1a3241f062690f5a5"}, @typed={0xc, 0x26, 0x0, 0x0, @u64=0x8001}, @nested={0x212, 0xd, 0x0, 0x1, [@generic="27024ebb4ab40e262e375cbab85f22001a525b11d6933ff7157cdd421f70bc5515a2ff119613e832376c4bb936c0013cfb8bd7cd8ec2e9137c7662f20c50d3c4dd67b9e267515f1df8a3b0780f0cc6cb2901cf7c23525fffa790b7ed6c4d1cbbbb0444e2c2407f64e2439f751706ddd5a1554172fde84773dc77a8853e12e088cf9c370330a4d899d718bd5c80d1d02d7adc421c9f48af847bbfd9ad4024a2753cd40e67ef5d14d68e2afc7403f1463d107c8d29a96b8f8a4ff0e554c8777408c834220c3a3a2a266fe1d0720cf42b41120c30e6f905", @typed={0x8, 0x61, 0x0, 0x0, @fd=r2}, @typed={0x5, 0x76, 0x0, 0x0, @str='\x00'}, @generic="a052ddb2d14939f7f8aadee3920f7af2716f1a78ea470705ac7e9411792fd8633fa805fad513707c5600fb259bc6d0f3ba4ce202e9bc5a1dd0f16a60fa370eb69f1f291257fd9560894e360d16d4831274bb7cfefc13f923c5f3dc89ceb063", @generic="67aa979e88127a219eaf1a3f0ce7d9858496be94c4fa5c9b4756be564bd5f11baecea34a749a9f22fece469e7eb3f82849c85657970b48599a1cd66331ceee74f610e64f4f1af1a0a1020096ab33aaf50876ebf78b120516a55aa2efdcf8a9637aa38de67e44f236be774874516f4af263bf80f87d9e9a4e0ae6e4afac4bd35d6d520ea93bfa623b5034fc4e18d9ecc144fed07bb3aea53376dfe7af190475210afde6c90d0a61c76fc26f15aded192a9392f509b03f3272f586900c3adfbf357d3c60ac71228849af"]}]}, 0x274}, {&(0x7f00000006c0)={0x1a0, 0x17, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x18e, 0x3c, 0x0, 0x1, [@generic="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", @generic="6702997df1356d32cd89fc03ae7e44aa593957f258e2b7f7ac2fea1fba66b511709a2d040e33038b7c3291694cc622d1c07b35655199e434fc5c9589d79bea4d2b96057e64c7facf7eb29ce0402436c374e95f8fab905f6f22e5cecf752b3d47f7219fe2d76d4f23876878de8c7345a5d260c2fa99ee", @generic="e0b679271f248dd158f6eb98091c9c555f88bb806dbf7ee39ab9"]}]}, 0x1a0}], 0x3, &(0x7f0000000880)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x40, 0x810}, 0x4008000)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0xee00, @ANYBLOB="040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000600", @ANYRES32=0xee00, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="01000100000000002000feff00000000"], 0x6c, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x8010, r0, 0xe1921000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r8, 0x0, r9)
sendfile(r0, r9, &(0x7f00000001c0)=0x1, 0x8000)
close(r7)
sendfile(r6, r7, 0x0, 0x100000001)

00:58:43 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1751.158369] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1751.158369]    program syz-executor.7 not setting count and/or reply_len properly
00:58:59 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x20000000000004, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = dup2(r3, r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"])
r6 = syz_genetlink_get_family_id$batadv(0x0, r4)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', <r9=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02002abd7000fcdbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="f4ac810500290001"], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r6, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2e}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x167e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x24004010)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xff, 0x7f, 0x81, 0x0, 0x9, 0x8, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9ea, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x10001}, 0x4241, 0x1, 0x7, 0x6, 0x9, 0x0, 0x401, 0x0, 0x8000, 0x0, 0x100}, 0xffffffffffffffff, 0x0, r0, 0x2)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x201280, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYBLOB="04000000000000000000000000000000010000000000001000fba33200000000fe00000000ffffff03000000000000000000ffff0600000006000000ffff000006f9ffffffffffff0200000000000000200000000000000008000000000000004800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/176])

00:58:59 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0)
write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
syz_open_procfs(r1, &(0x7f0000001540)='totmaps\x00')
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[])
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x8, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x8)
mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='io\x00')
unshare(0x48020200)

00:58:59 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r1, 0x1000004)
dup2(r0, r1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x2}, 0x20000000)
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
preadv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/161, 0xa1}], 0x6, 0xee, 0x1000)
r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6)
fcntl$addseals(r3, 0x409, 0x8)
fcntl$addseals(r3, 0x409, 0xc)
sendfile(r3, r1, &(0x7f0000000100)=0x9, 0x7)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000001740)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}})
fadvise64(0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x4)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0x2, 0x5, 0x4, 0x7}, {0x9, 0x9, 0x0, 0x8000}, {0x8001, 0x8, 0x3f, 0xffffffff}, {0x7, 0x7, 0x0, 0x8}]})
open(&(0x7f00000000c0)='./file0\x00', 0x2e142, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0021200000000000000bfd"], 0xb)

00:58:59 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:58:59 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="00b3abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:58:59 executing program 1:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000ffc000/0x1000)=nil, 0x2)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15)
pkey_alloc(0x0, 0x1)
pipe(&(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, @perf_config_ext={0x20001000000000, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000240)=""/135, 0x87}, {&(0x7f0000000100)=""/22, 0x16}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000001e00)=""/102400, 0x19000}], 0x4, 0x0, 0x7)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0xa, 0x8001, 0x2, 0x32b8})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfffe, 0x40b, 0x7, 0x7f})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c)

00:58:59 executing program 2:
r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x154, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@generic="65db1f79534510f593acf2bfab5d48821ddb28214d08c5cd658b016334f30807cba10f0a42828fa0a447dea82f96339db7f366a351454736bf593530333df92aec157274576a6822f589f86affd11bea626b76f5351868ef0eace6b4d096316096a935a8d972ec54cd4b9b61fff66e0d7fb30ddcb260617cc865523fbc587337705e610a8c69882b67c64517a96678c2b65ceb5cd24916467aabe17412c9283b7b3bf9ce8efde18d862f03f0bfc9a9ad78132b0e78cd77fc337d47f0bf08", @nested={0x7f, 0x9, 0x0, 0x1, [@generic="7d106715f9d76c62f3bd7f426c620496158e1e636d2292a638e3d068bdb62a3f288208434a5a6e3492c9735c90eacb33efdc60e5b64f129147d9d173dacb5f5d17281f954b32130a19ad4f6ddcc6caa1654bff6fdd87af40be19cce736e8e2a05ab302d4fdcc152496a661a7a20ae2d6b5ed7f5479a7a203c32cbb"]}]}, 0x154}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000140)=""/255, 0xff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0xd8499488957a772f}, 0x14}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x110002}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x178, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8e000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0xb8, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1ffe2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0xc080)
unshare(0x48020200)

00:58:59 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)="01", 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2, 0x0)
write$binfmt_elf32(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58)
mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x84000, &(0x7f0000000080)={[{@cpuset_v2_mode}, {@noprefix}, {@noprefix}, {@none}, {@xattr}, {@xattr}], [{@appraise_type}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsname}, {@obj_user={'obj_user', 0x3d, ':#]'}}]})
close(r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0)

[ 1767.883547] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1767.883547]    program syz-executor.7 not setting count and/or reply_len properly
[ 1767.892940] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1767.924653] device lo entered promiscuous mode
[ 1767.945299] device lo left promiscuous mode
[ 1767.991320] device lo entered promiscuous mode
[ 1768.003561] device lo left promiscuous mode
00:59:14 executing program 6:
r0 = openat(0xffffffffffffff9c, 0x0, 0x640683, 0x0)
pwritev2(r0, 0x0, 0x0, 0x1, 0xff, 0x1e)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x20]}, 0x8, 0x800)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
ftruncate(r2, 0x9)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}})
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)

00:59:14 executing program 4:
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x7f}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000800000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x18801, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r3, 0x0, 0x5, &(0x7f00000003c0)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108)
setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f0000000100)={0x5618, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, {{0x2, 0x0, @broadcast}}}, 0x108)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000080))
dup2(r2, 0xffffffffffffffff)
write(r2, &(0x7f0000000240)="01", 0x1)
openat(r1, &(0x7f0000000380)='./file1\x00', 0x20800, 0x1ab)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x115342, 0x0)
chroot(&(0x7f0000000000)='./file1/file0\x00')
ftruncate(r4, 0xffff)
sendfile(r0, r1, 0x0, 0x20d314)

00:59:14 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0)
ftruncate(r0, 0xffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r2 = syz_io_uring_setup(0x263d, &(0x7f0000000080)={0x0, 0xe009, 0x4, 0x2, 0x1e8, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}, 0x8a1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345}, 0x2)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x88)
syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0xe2)
io_uring_enter(r2, 0x5e1c, 0x6860, 0x2, &(0x7f00000009c0)={[0x8]}, 0x8)
syz_mount_image$nfs(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0xfffffffffffff360, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000400)="f9b50ed29ee00ed0b49942b2c716c3da054e72030421fe4c57a19fd3c0c9d162625b471b", 0x24, 0x9544}, {&(0x7f0000000440)="d84a87e64818f6cec3d70b177815ffc6714b0cb44f502ba3d16079f56af6a5c541cc3ff41d8d6b4098681e6c858e6bd45316285690efb523a82aec132972566f1632f95362b585405aac5c308e185ad0f6dac77881cba03a1a0f518e8d5535222f8ad7bf84532acc8e", 0x69, 0x81}, {&(0x7f00000004c0)="ba8ec5d3caac330a04442b0af765f161831b79e05425f77b3fb0cde1815d84ca6e3f16dac5a37da8fe1789cb3dfd284a80de406be666bd4033e004fb4323c0d199c2b1403524d77b8555e1f7ed42", 0x4e, 0x40}, {&(0x7f0000000580)="68ce5b240360b3ce3d91710d86b95321d860b4b9ecc6ffd6a368617d1cc0789dff95461501452d6baa850e9e53eb82d2ac31274a9bac08d72e98e4c60c78fb91508e55f2c77b7a8c29e5421af63dc8bb4100c139d3757c517ae90ff240e5bdf7ca1634a9764e7ff93cb155ec9147b306b9017ae845111ae03fd3bdaed1f6d8c0d5354c", 0x83, 0x4c6000000}, {&(0x7f0000000640)="9e220fadb0b96e3582b21c83c1573c748e", 0x11, 0x101}, {&(0x7f0000000680)="a95211d06ababede4382340e4ba858ab1e2ab707468368531c1576c99600199f57df36f362f76bf04eb3ca9bd2df11a4ccc3abd7dbebfa7d16fc9e7652f05546365f6c9c87e5bd0892941b6ff8e3e1b6daf0560a87", 0x55, 0x1}, {&(0x7f0000000700)="b7266ed337d753ee4eebaa19031c315e67c97f88558f6f30180dad761dfb6c7d34d564ede5ed7e5680f51f363c24680997b5544ce752373b2bc9199e9f9f46c09ed9de3fc9eff0dfe9190403837903cdf1135d24d6f9c0028f4a2d5228868178c19a750788bcadd34fb672910cc8fbbf3a288547afb5590e8f940aa859d43bb216737c3c87ef85293368d5a6e8a71b95715938dd8402ec0f0273e8a93a87c2af80e0808e676cd3edfb0dd4070a1a902db4fbbc9b49c6e07c", 0xb8, 0x101}, {&(0x7f00000007c0)="9ebe8002ae196c2aefad55664588cd38ad3212f3ba95bc34bca4c720ddcb256cc8bad81d4e8f4c12f6fb4c0ba351d399827a2d05bab397681683fb19eb413c312e319b449fc420b7bbdf5d876b66b41ea887f1eeb0b7a7134567e9c9d0fdb2bceb93edc86c6a35d395b5ab8ea6c6a97b5d20e4cc265864bc3e3552164020ac2c5786ed0f99936c5f03449ff480963302e9ac79fc7f4fd6686d82d25fa87d6481bf51ee95e4807955b1228e07e2734778973dde6806d86d4becb508d821ca40eca5d30a564d09459162403ccfa370e7baeda114214efbfd25c4b863fbdb6f960ffd831e", 0xe3, 0x7fff}], 0x44008, &(0x7f0000000980)={[{'\x00'}, {'%[n#'}, {'(/(@$}*@,'}, {'\xdf]]^'}, {}, {'\x00'}], [{@subj_user}, {@audit}, {@fsname={'fsname', 0x3d, '\x00'}}]})
dup2(r4, r2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x4010, r4, 0x0)
getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000140)=""/230, &(0x7f0000000040)=0xe6)
fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, <r5=>0x0})
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x7f, 0x1f, 0x0, 0x4307, 0x2003a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x1}, 0x0, 0x0, 0x400, 0x0, 0x20, 0xa27}, r5, 0x0, 0xffffffffffffffff, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
r7 = openat(r4, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r7, 0x0, 0x100000001)

00:59:14 executing program 0:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002600)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
fchown(r0, r1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)=@updsa={0x410, 0x1a, 0x84, 0x70bd2a, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@empty, 0x4e23, 0x7, 0x4e22, 0x7, 0x2, 0x0, 0x20, 0x67, 0x0, r1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0xff}, @in=@private=0xa010100, {0x2000000020, 0x7, 0xb82, 0x7, 0x9, 0x3752, 0x1, 0x8}, {0x7fff, 0x3, 0x30e, 0x85}, {0x7fffffff, 0x2b0, 0x3ff}, 0x70bd29, 0x3501, 0x2, 0x3, 0x1, 0x82}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@mcast1, 0x0, 0x2}}, @algo_auth={0x141, 0x1, {{'sha256-arm64\x00'}, 0x7c8, "160be1808b321d19e2d36150e7cb501da5a108c38a3be7aed27498e9bda996a3920612908e85478a60873d613ca9f1312dcc74bea5eba553644db2f9e84b05763bc413a3e81b4b1b1fc6dc2f709faf68629dee4ee2025806d5279c903045bea9b03083d8e1f4dbcad49d776f87bf65ccb9987aa784f30d35f0ba13e3dce9445772e31ee7d0440dd2124d91b1ece7f240bc6a486d715481878c3fcd22c0f63befc21c6aa241ce12fe32ec66db299736c81fb80f5679ec22f2bbcfa717016dfaddc708ec2c7a31d82c362a60669ea0843d3ebdafe9783be51a66496f96a23a5a534a68c59d8bba725af2692b2018117220efd9e0554cf3798d55"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @migrate={0xe8, 0x11, [{@in=@rand_addr=0x64010100, @in=@remote, @in=@multicast2, @in=@remote, 0x33, 0x0, 0x0, 0x3507, 0x2, 0x2}, {@in6=@mcast1, @in6=@local, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0xff, 0x2, 0x0, 0x3505, 0xa, 0x2}, {@in6=@private2, @in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@remote, 0x33, 0x4, 0x0, 0x3505, 0x2, 0xa}]}, @algo_comp={0xb7, 0x3, {{'lzs\x00'}, 0x378, "5ffb9fb2a364057edc636fd888237e874ce77d0a875caeaa166eefbe9bf96152973259b0c63ec983aa64cbb3c0e74d748b01d5dadcd29a65727bd088b74b202d4375cbbc6f19f153df30587a030005e53a061eaf875302bed50bbcd0abfc5ed0527abe12fd2851903a44345f18be59"}}]}, 0x410}, 0x1, 0x0, 0x0, 0x48004}, 0x0)

00:59:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000f200000000050020000500000000000c111a000600000007000000000000"], 0x2c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="31ec38fccc329f", @ANYRES16=r2, @ANYBLOB="000429bd7000fedbdf250800000014000600fe8000000000000000000000000000bb08000800e000000208000400ffffffff080007007f000001"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4010)

00:59:14 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="00b3abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:59:14 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:59:14 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x28}}, 0x0)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x4000800)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x802c2, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
pipe2(&(0x7f00000000c0)={0x0, 0x0}, 0x800)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x80000000)
quotactl(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300))
r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
dup2(r5, r4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0)
sendfile(r6, r4, 0x0, 0x7ffffff9)
fallocate(r3, 0x0, 0x0, 0x8000)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40522, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2})

[ 1782.709891] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1782.709891]    program syz-executor.7 not setting count and/or reply_len properly
[ 1782.717783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
00:59:14 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0xfffffffe)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @initdev}, &(0x7f0000000480)=0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r2=>r1, 0xfffffffffffffff7, 0x8, 0x401})
connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2c06897188957398c966ca7e71b60f3c1360cdc5cda4c50b032c4bc2dddfde5dc869db3ed86a3ca072da7d4513438d2ed94415cb9528216251198bf55b57243daac71267c1acdc8c32683d18c048dfd0f015f0b75d89a170660f0fef3f9446c232d789b7959ee78fec1e81cb0bd50f84e025ff233db84992"], 0xf)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r6 = dup2(r5, r4)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[])
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0)
fcntl$F_GET_RW_HINT(r7, 0x40b, &(0x7f0000000240))
sendfile(r7, r6, 0x0, 0x7ffffff9)

[ 1782.766559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1782.773591] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
00:59:14 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:59:14 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001db3e0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:59:14 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0)
ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = dup(r1)
getsockopt$inet_pktinfo(r2, 0x0, 0x4, 0x0, &(0x7f00000001c0))
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5)
shutdown(0xffffffffffffffff, 0x1)
ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f00000000c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, <r3=>0x0}, &(0x7f0000000580)=0xc)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r3}, 0x18, 0x0)
kcmp(0x0, 0x0, 0x1, r0, r0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"])
ioctl$LOOP_SET_FD(r4, 0x4c00, r5)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1}, 0x40001)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, r5}}, 0x3)
clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$tty1(0xc, 0x4, 0x1)

00:59:14 executing program 2:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00')
ioctl$FIONREAD(r2, 0x6801, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2200, 0x145)
openat(r3, &(0x7f0000000140)='./file0\x00', 0x101002, 0x62)
getdents(r3, &(0x7f0000000380)=""/78, 0x4e)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000200080017000000000034ce68d67e30ef35101502b804a07df1e221ecb650e5531d6315236ac07dafb63fb19c137089999b612cd05a92518c5040"], 0x1c}}, 0x40000)
recvfrom(r4, &(0x7f0000000080), 0x0, 0x100, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0)
mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0)
unshare(0x48020200)

[ 1782.983451] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1782.983451]    program syz-executor.7 not setting count and/or reply_len properly
[ 1783.027235] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
00:59:15 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x101, 0x0, 0x3})
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={0x20, 0x12, 0x69844ea0a6ddcd11, 0x0, 0x0, {0xa}, [@typed={0x9, 0x0, 0x0, 0x0, @binary="5ef6a6516b"}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}}, 0x24}}, 0x0)

00:59:15 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
write$binfmt_aout(r2, &(0x7f00000004c0)={{0x107, 0x2, 0x1, 0x1a3, 0x2df, 0x1000, 0x311, 0x7}, "3677a3f37904571e6608c1e98c6aa35a37a96700d7d83e1afa3b2b14b37764afb98a2d3702d5443160596917bf0eadacaf8acab54c9730e7b681de53a965e5cc0df675db01f116daff5d5b756c192deb49b28f70061cc6335f3027fc61c8bbe676b69741941e8e3c3e6cab0ff6390b0374d93155554cb905c05057193a59e53ad54ae003014bea2883d3edefb8d05c4abb1dbad568fcbb2b4ecdbe18ca039a0eb134ffd1b2ac171d9220d2260ba8961452f75f6fe49d17078c4052056e077e1bf62b12c4b67eea7de117513bbfda3a01c1be71c9c8996621e68d03cb20b924305a22c1417ccf63755222ca2b083686c5c850687b7e4575552f9e47adfddefbb51dbb6a90680a136e0fee4f948ba3fd7a2852f56e739e766634f77a1f0423a9a667971dd4488b6a9eed60116096a1560e7211e19a961b56f6e404981188c3556ca862bb2abb288e58758989f26afd0d3cecf2762c660ea86f7086c92ce900b655a1cb2e167ed903176b8c04fc074287867e8a70b93ab7f704501cb0475f1efba28ac806c56b5a1d83b1e05c4f1982dcac71ecc5bda745ef9f09f9812db3ead8c06aeabc39e9f7e4e41c568584fe2a85f0d98c8d665b0a6ded8aafc0ed87772a3ce1e8ac9f45e39df52597929f09c2854845405afbdbec75ecc92277cb60eca7fe33423380328278263eceeb2f05171dd127a026134fc85ba9e2dd66bd364dc4b1e023e6e02f21043b84bcd83f613701d0d1296a96d7500d4e0bbe1cc745894a0dce61e083054176710f2e55c211526d38e5179e0debdf8c6d15a1bd5c071b54cee182a393d49a9837d0bf24f6e802b8e57d13defdba446190b37079334056c043b38fe5ef30bd2c0f77326f55978d5aedff09cb05efbdf4fd5296a1b7736cf24011abc1728f7fe8585db93370560ccbaa2d557e525d9c41d4048f3306b4fe4feaa2e6c7c7aebd1feffd656fee46e1d52272f95ac256af2b44144352e74cb911fca670ce2184ea46ab5a35bfb627927b9f16133d02ecffe95e467db0ccf9eefd5a9226435c46c514f9c0b6112f9bbd36631ced189b7cedadc6f4fde7b6329f26cf062672d9c067e5edcab5037165cd6217a94092cb7d4729917cd7c24647e052f8fbe4ed2015c2cdee665cf9dca1808a0ccc402ba81c6c625cfe13f9757b3582c85ba6591bdd4e54de8fdfccc6928ee11c1e4afd22d849efc8d5176c21d5e4b8d6a1e8a44708cdb3717f030505d73ed1e996a9fe598ea6246107f25274794133c2841dde13915a5be15e63f73859ca7b6452f346588ee675cd5df5cabc33ac78730de8803a7aebf4b65d8e829d03c13a3cdd18122ed5572c9075c69258eefd3777eda010d99c59c796d019405a29d3409087162a08d87cee96c80b7d1ed5223505681cd8a85c0a829a3ea2ccc94fd69a6e4657e3eba135651ef242e4c51a747da14dd827019361d2ca1d7981e5e1b78fff5b938dcee32d54709d8ba28be8900a43ff56e0d8af1b3c4e280e76cb09cc28983856dfc90c8baf9711dd2859c8497fbe4e00c15d2b9592a12bea42fe8d9807aa6882baa8e338f737bcf69c0213573fc240052a2d43dd857484ad57ce58d6b489ff0b7f7c97151cbe2f9bca4b8f224b9f4b762d039a0418348f5cb464c6e77919d9232bc9f31ec770821bc0ff54ad985de6f6861bf3261d468c81ecb3beec92f687ece63a7edc7ca827d6c1c3f3c404eeccc30843eb0266a4c3e51c29e648ea3681b9a600979057192d71d0b3c61c14513b4989b988c1d44c50fc7bd32ba0cd625be66e35449dde862a71a880c89fc03c540e1f92a8c025628362302ba6ef96f09ba89b7db1bea5e60e6f61ce9ff2b3366f29b412b82ad9afa65d42ca1d632f20563d58ccd7997a83ccd9db70b90627babf7bb3258e2184704e220dc416ffac9bac679b3e4bd85c869e13a1749db3680ed1db5b7a0fc926c2ecc06702d0756ee903d3d0a8746d6e014b46f49fafabceb06eed2c943e6504821b28776bcb1a2e18e0761f4970fd61164788d22f9a49afd5c0333e081748fd57504ee1538d35c9b7a7e4185e65e2eef35ef9a2c19777c233de2b33ee08324efbab2cdc9801c4ae9b97cb1c96e910636e961559966a1a0b6f545fcd385af272b57d24a92a7e4280674482a117a0fe8e32421bb8af80a314db4adb20e92139543b15ad0fac4102dc9d55673cf5e9d5519b2916ba1f28dd678490ac8238d7785475ff4ec98ba2df833a4d9a328c8ea7c1a1ba237c17ec5269973c2ee5b4d65933b82698a32a4653756d12a266545bf44077b232e8283893a0fa74d3682f9f1da2790020f8822c2db2c4a15fa93ea7643ac44d8f4b5092dab86e3fe3ab80c3b1bc9710c212fd6cd74406074db6391feefc156044823fb54ad87d18a1d44adf039e8c0189875fc8a1f318577adb22410f80b94ded51f5aacdf80abdd2125c3bea5673a1b5c8fb984c00c23f5da8cb0324f07d9775776bbb4d64f912c4ceb79b0244f3ca4a7a1f7de433e4927f28c1562263f5d13d24fdd7179f675dcb9e943ebd441bb32ece779b129a9bc731169fc69ee17b12d670027146f1a8615daa28f74f7a14804640a1681214e83d37ac19c82f9182e7d00290a7b731bf84d654bb4e63f4119e35f7a7b8bab4c47dab642a52b5e05e2acf186bca0790ca7c32340f158156c4d9e35d8e18ce833ca30f5119ed4404b1e862ef9875e06322ed557162688013e0218f5968b3c2fb0fab97b083193d358870eb32cb0493920382ba73455ba45e4b386e08993f61e684e4b4e01f233b893d9fa2fe251230afc5f3b2f4ebeb68d16c79b5ef226a18b6fbdd8e7a86caaaeca1ba955577a767fd6faf6cf2e73008a70ca60ee14385e965456f310e3fb5fc188b7c9c7a14682db9f317d1883f09537ab344b290b133a1ce474b762a03772cb0a21456f066ee5d4578c7fa1f1ed114998ca8ee6f71c71fe188737df494385bbd102ad9dcabbb738268480a6f070c3be50fa690fa80d3281e764125edf4b9dc95362c57e4774bcc95ffa09e948564a6f0f50b397c5a6ea6a5e631b9271ee5661c80da9402866c7f5214e82648289142b904ffb2ed9178f81ab1bc20e2ff092922ce039da746ba1d59383d914c87dd4df65b201316791f7a01a4a6e90fcf399b1b117d2096412cdf5c5a584ce37f3dc6b48a5d98252a53c4f451249df19c50252c1ffbc40582fc2387f6df890e3e388641fc63cc93c24eeb6e05bd66a512d52d1d0751284e968e5e667ee6447ced4253881a1503fb43b65c45116df3f3c94e890dc8a196a73b7f2bab8c195dd366eecea05258dd5289b2ef1f85d66fc62342c2913102205a2abf2b18f44d423490967c4e885ba4f8598fee5815e870cbc62a7030b64dca8ed297728f7c42dfba2bb2fef74865fbcf8089e5685c30b73e5a23452103cc7c3ceda15f4f0643dce11f6d5f7a9cc61a356b988168904c9540115823c4a1d401439549aab79f8711dc3063fd3bc104fb445f006fe2d7e3a2bb9e3cbdab212a397fe080b0447ed6daf82550905ff5f4dbafae10b01cff6aa966d1c342779ded4d309a0ab7e7e2a795ff5a1c64064eae542cb844f833328e8f0c277c6d0fb1e896989756e0eef1c030ab00b6347856765ac18df874e24a32c764a029cc9128bd14290e73662239c461dfdf3220f6867d91b812543627891a94e49d10db705ae7ae54f9f1b05ecff1c956f72be9cf3840e363e014257088255c81e98caf08ca25d6b8618749e170e670b0d51aa5247568dd7cc27366badbf26ce3325862a00c9f5661bddecf5e2f5750d50f6ebdd2caf13ced030d83e8c2843870197a2b70a576a2c5f0de1beab09abb9d4c4c3d336b32cf8216bd6721f9c47505950df8346719e972902c966f8276782720452cb3b75aa694ed8725967637fef9de8c6c103a8af7611c2e63c50525b2d2f7147d46764fdadea9932568a4038a9508843f3209eb569ae7d69e3070c3da17ea7473c930c5fe0fb811588594dacf00e49cd245f6760d9bee6d55ce3a971646a166dd56efc0e23e7cd368b746d6b6fd2f055f3ff14b8213b536db2c061328d21d2352d8d4277a70a3e55fb51c3596db2c2449f120618e7af13e7aa357cca24ac43d15ca1ece21196ebecc5a4e63da3afe5f276dc50b1019fbee1ff3d339c5d2d100f8b5f9e9f1df14adfe54349f1e7318d200eed4ea4c67ad2f25773505b9c80796c9b4cb496ffc55de3630d2206681c8bc7df38036c0a21a894de463d97fa1b79305419963e869fc7594f39f3ab4d34b65672f80339794354cd62cda52181d673d0709d754bf62fa9d96f3119b65c32a1bd91e1b78927028534bc4f0b5dfbaf806c001360530b59b56b87513137f7953a82094f36945df906956d65c6fd3f55074fbc839d126bcab9f8a5438e3fde709e3dd7a433cf17d4933ba4b5edcd5101a930baded46773b57ad690dba9620504f8b3204c06abf12c684d350754ce09792609d9f687a231c736620c5d61e30427390cf3e8732f72f8cd5e0061eb043b96d1f55aeea56c3226d3215a90d681e62e3ad70539ca73eebd0c40ccd46fdf6159f02a2382eb84e2c7bd2a0ae9d9187a355b79f93daa101d0849ec0a61743d13b9c6de1f25c5eb38316814329d6cfbdb1fa1a3411e0efc4a647ccd3c44af00fc44209383121bc219aa1b93499b013c3329793adac7f7a1ab0401587468ecd38b210674f4450ebfaa92e8f74458965ba75c8f13a281a2078c1e131c53beb8c3b9fbe805bd8ef9afe3266b600cc0e5a68b181bd853652313342ea0f658f7aebb5f5fc872953ca1e1a9b116e9b5e4ee871de955ac6159943e15f11f6dddad195ae0ac5c25463c9be7a78231f09682a444dc53364a694167516128ac8345b5cec65d2a851e7befe69717303f58c27ddd4ae72bfcc5e47f96c697859485e1cbc363b3b863585457a1718e1d030792802ddd9233ae8f3c29abd32406af675f87a40db4be16b81bd62fbba708f50f90f0af17ed09bc3daa6fd6c77ae71357417629ca18fb2f3cf2dfbd1ced953452108646964279742f80d1c6e23cecac7306a9e6adbcbc8604779f5ee776f8f77465a67f44f006f8d5bcf7b118d15327b74d71e08077208cd33d38b0289743676246575a05f860526b0dc0b862e347f3ce2da1f2677cfee88c75d8b12932de08102762ae0aee011d5a545cc5d8f43ef5c338b142ea36ae5555bfd1acaf97cb6ca6bf1ed510e01b2e65748cc0f9d0ae17af566d8fd399d3a2f2de0663c31c2b1151d6d3e5ad46eb586cb2bfaf0e7baa6bd40eb03b2e5c906cb7a4c8d70a8c125c35519b3dc878ac7b93945af3929df65a480ee75e3746b84d8875c3dbddaa5a68bbb4b17ab824fdbb0a908f0592b4745705717c04dabebeff071c5fcc18fe4e186df827f81ff843c23466cd539bd9f9d601367065a7e0329397b27c56a9a9fa06b75cefc260d318268f4211bf7bffb0e4f1e5d9d3930eb6e507fb72e2e94a49775a44aa7dbba028c3ddf13c350a9d1400a3a6f568464a1903e57d1992c21cfedb4d693eee2590f629c3446d7a5c2d44367c890446393bf476019f630c706bdd363a2bcf1cea36b5c1f7d751d928bdbae7c05577d28f0cd810ebe46e2cb4103c0e14603c141afbb5bc0657f11997f1cd117a59759f44fd0f6dfda964a158bf929421c8fd475917b23cce113906fd0b9b8039d27ae61e64c4d1b1c03032ab24dfe6f0dab33c2a9a7d02a6c9dd154cf656edbe618387c7d2ba0c36ea87261cd2e3dd29734ec6ec06ab74d386a316639e92c3fa39bb8"}, 0x1020)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfffffff7}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004050}, 0x5)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x17, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

00:59:15 executing program 6:
r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff)
r1 = getegid()
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r0})
keyctl$chown(0x4, r0, 0xee01, r1)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000340)="2000050040000000000200000002000000008000000080000020000000e2f4655fe2f409000000000000000100013e1a00e1f4655f00000000000001000000000000000b00000000028c9f739c82322a1ce2695983a66d432d2e64c23561e71dce26cf3afa61716ef59edc42dab3a7cdfc008cf0804164b4f3f335b625c482b10aa3f6af9d71a2c2dd6d07bc6c4134efdd0e6a14225bcc06175255a5fe34bcba3d7ae5362a25fb841e618e", 0xab}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000080)="ed4100055fe2f4655fe2f4655f002000000000fc260800000000000000", 0x1d, 0x4200}], 0x30000, &(0x7f00000005c0)={[{@barrier}, {@errors_remount}, {@nomblk_io_submit}, {@nobh}, {@nobarrier}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@init_itable}, {@journal_async_commit}, {@resgid={'resgid', 0x3d, r1}}], [{@uid_gt={'uid>', r2}}]})

00:59:15 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0240000000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:59:15 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b0800099809800006"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1783.289556] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1783.289556]    program syz-executor.1 not setting count and/or reply_len properly
00:59:15 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x88880, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
r3 = getpgid(0x0)
r4 = epoll_create(0x1)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000040)={r4})
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x7f, 0xe7, 0x7, 0x0, 0x401, 0x48000, 0x11, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x7, @perf_bp, 0x2040, 0x5, 0x3ff, 0x2, 0x3, 0x8, 0x1, 0x0, 0xfff, 0x0, 0x4e77}, r2, 0x2, r1, 0x0)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_io_uring_setup(0x450, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[@ANYBLOB="e6023600410008004b33fec6cefcedcc64456dc3026fc7270300a28ce2d10d69c19cc92a89e0e8006ce92d1ca02d49bcf41c21e99e30bd00ab"], 0x54, 0x1)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5)

[ 1783.379443] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1783.379443]    program syz-executor.1 not setting count and/or reply_len properly
[ 1783.416306] audit: type=1400 audit(1717117155.333:466): avc:  denied  { tracepoint } for  pid=13018 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 1791.296441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
00:59:29 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x9cee77976883b6aa)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$rfkill(r0, &(0x7f00000000c0), 0x8)
renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0/file0\x00', 0x1)

00:59:29 executing program 6:
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd=r1, 0x58c, 0x0, 0x0, 0x6a943ca0b9b9ea70, 0x1, {0x2, r2}}, 0x1f)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'})
syz_io_uring_setup(0x1ec1, &(0x7f0000000240)={0x0, 0x4012, 0x10, 0x1, 0x1a4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000001700)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r4, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f0000001740)=""/181, 0xb5}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000002c0)=""/70, 0x46}], 0x5, &(0x7f0000000700)=""/4096, 0x1000}, 0x0, 0x40000143, 0x0, {0x3}}, 0x8)
syz_io_uring_submit(r0, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r2}}, 0x4)
r6 = dup(r3)
sendmmsg$inet6(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xe70, @remote}, 0x1c, 0x0}}], 0x2, 0x0)

00:59:29 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b0800099809800006"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e3e1446562e9d03e408d1ea655783e34d349f69cab76130588f8047c1ffb4c58e75c4b38b80fc608530602fefcca1e8090f2e97d416035cb160bb860230e5e2a84a4e4b97b2c98bbf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:59:29 executing program 4:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r2 = fsmount(r1, 0x1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2b80000}}, './file0\x00'})
read(r0, 0x0, 0x25)
pread64(r1, &(0x7f0000001100)=""/4095, 0xae3, 0x6800)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x0, &(0x7f00000004c0)=[{0x6, 0x0, 0x80}]})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x7, 0x6, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x890e, 0xfff, 0x2}})
sendmmsg$inet(r4, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$security_capability(r4, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x4, 0x2}, {0x7fff, 0xa0d}]}, 0x18, 0x2)
ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4202}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000340)={[0x7fff]}, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{}]})
fallocate(r3, 0x18, 0x9, 0x100000000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
splice(0xffffffffffffffff, &(0x7f00000000c0)=0x92, 0xffffffffffffffff, &(0x7f0000000540)=0xff, 0x6, 0x8)
fallocate(0xffffffffffffffff, 0x5, 0x0, 0x8)

00:59:29 executing program 3:
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x1ff, 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

00:59:29 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x0, 0x3}, 0xa30, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x98100, 0x0)
fspick(r5, &(0x7f0000000180)='./file0\x00', 0x0)

00:59:29 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f)
fork()
fork()
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa)
r0 = fork()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180))
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x501800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
ptrace(0x10, r0)
fork()
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=@ctrl_frame=@cf_end={{}, {0x8}, @broadcast}, 0x10)
ptrace$cont(0x9, r0, 0xfffffffffffffc00, 0x100000000000003)

00:59:29 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc02000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1797.674722] sg_write: data in/out 187568/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1797.674722]    program syz-executor.7 not setting count and/or reply_len properly
[ 1797.686810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
00:59:29 executing program 3:
r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0, 0x0, 0x10}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0/file0\x00'})
io_uring_enter(r4, 0x3c89, 0x9663, 0x2, &(0x7f0000000400)={[0xb65]}, 0x8)
lseek(0xffffffffffffffff, 0x0, 0x0)
syncfs(r0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x800, 0x800, 0x1}, 0x5)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x50, r0, 0x8000000)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:59:29 executing program 6:
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00')
pread64(r2, &(0x7f00000001c0)=""/122, 0x7a, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000580))
fcntl$dupfd(r0, 0x406, r1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x50b00, 0x0)
copy_file_range(r3, &(0x7f0000000040)=0x40, r4, &(0x7f0000000240)=0xfffffffffffffff7, 0xfff, 0x0)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2)
syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
io_submit(0x0, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r3, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}])
syz_io_uring_setup(0x1d7b, &(0x7f0000000380)={0x0, 0xcf0, 0x0, 0x2, 0x26a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000400))
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r1, 0x10000000)

00:59:29 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00')
pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$FICLONE(r0, 0x40049409, r1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000200000000000000", @ANYRES32=<r3=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)=""/245)

00:59:29 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc04000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1797.799110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
00:59:29 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b0800099809800006"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e3e1446562e9d03e408d1ea655783e34d349f69cab76130588f8047c1ffb4c58e75c4b38b80fc608530602fefcca1e8090f2e97d416035cb160bb860230e5e2a84a4e4b97b2c98bbf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1797.858570] sg_write: data in/out 318640/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1797.858570]    program syz-executor.7 not setting count and/or reply_len properly
[ 1797.894185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
00:59:29 executing program 6:
ftruncate(0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(r0, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
openat(r0, &(0x7f0000000440)='./file1\x00', 0x8000, 0x46)
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8)
getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8)
chdir(&(0x7f0000000380)='./file1/../file0\x00')
write$binfmt_script(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x128)
setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x0, r1}, {0x2, 0x4, r4}], {0x4, 0xa}, [{0x8, 0x1, r2}], {0x10, 0x5}}, 0x44, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x100)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000680)=@req={0x28, &(0x7f0000000640)={'team_slave_0\x00', @ifru_map}})

00:59:29 executing program 1:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = dup3(r0, r0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0)
r7 = syz_io_uring_complete(0x0)
io_uring_enter(r6, 0x630a, 0xce52, 0x2, 0x0, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={<r8=>0x0}, &(0x7f0000000140)=0xc)
fcntl$lock(r6, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r8})
r9 = getpid()
sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000002a00)={0x266c, 0x3c, 0x100, 0x70bd29, 0x25dfdbfd, {0x16}, [@nested={0x32b, 0x59, 0x0, 0x1, [@typed={0x74, 0x2b, 0x0, 0x0, @binary="0c26fe82cdc4c8806d3c09048569b38cf8d0df5616e0b41331bba015bc06d35cdd4f4f5988d2de398c05d456977ae01f62d69b6309e8594bc273d65c06607b7c5f60d472ecdb94107d4d53639f54a9a8d7be52b53534ba99ac2bdccecc6e56f38cbf088cb27efa370ca5bdda89b148a0"}, @typed={0x8, 0x89, 0x0, 0x0, @uid=r5}, @generic="f7a1cdadb0dbd6059753030e913ea9edc70c3a9bad62d31990185ad1c12849391ec9acb9c967d80030eb2110cbd3ec5a7e4d3b5f05980bb623b6cb918454a8f64689e4d95b9aa493e3a36d3af1cddf7e8e4df738edd18b6a21b7c95b52d311b9", @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@multicast1}, @generic, @generic="afbc779debe1e36bcc75c76b2c8008decaaa900c6b53114830cad16bea31e085f6f97aa2818d38d8ea800984b9572a176e4e40a1debe6b75d0f247817839ad17e37b7ec30b49a50643509d0b1e870763c7c4ff5620ef838994e766a216fd9830f7c7257a97b1848787b0dcfe26513f5df3496d4cd7bca461a6be488708e25466ee2059436fa184688124cbc1644c943107f5a36987ca2d3fa0c874b8b68e1cadcd13b17169", @generic="5953b2804ace6cb6170dc3a78b7cf4eee23f759d9cbe1d5662a1262ab66520dba978ffc8294abb925292571443d535c6c990f966d0d03a2c79474261e75178a85e8b6f4800050cb2d67b98c7f7882e711eec0c27716bd95ef28a1fb13d", @generic="e25eb76928b03d44a4004d05f89aec941718e8d9da9361d35d6493d65bca9c87ec7c19fee92f799b8e17b7207f2414dd5140155d95b503a8b08919d3bcf0507233728de18c6927ca18d964f315de6c3c79952f0fb7583c4ecd1b923618423393562ae6629f2a62911c", @generic="83881678d62876301db6d1e131b4e00942b43b068ef7c19036cdbcc2353438038602e7443c0f5d01e7a5a3e07a5205578133c9f442af65f781e60d160c0f84c20205c2473559fefa167c51a9fc6562b18725a246fa6043d2884f2044e0c6b9b0ce6ad213ebcac78e5787f5d3e66cc0996fa43b7135acf0f1089d7eeb07504cd9b4eb5f0ae6077937543ba0ba15a99429df525af09968252af11e25a3c6ca8b4f9c5ee0ea3dceb936b6640f43ddafb770bbc32c70e8c00e2f63be6dbc6e01f77679c9058d54cbfaa74ce068676c1982d9", @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@local}]}, @nested={0xdc, 0xa, 0x0, 0x1, [@typed={0xd8, 0x44, 0x0, 0x0, @binary="f84a38b140005c8fc03607f85e28fe89298b645e2795d1937faf598b961f995dbb6000f8dfac308848ce402f7255bfc7ad290bf8d5783ac9e3e5a03eb4f7434d2b092b94da1b7b89ee086ba479a9264605bc5edba8527bf41a1705dd31891c73868d49f71257244c55d945f36ab13a6d2c86490542e74cb5ddb50e653909295152d35437b78b2bdaebb9fcc989d547639de3dc3aaa64a67f244b4cfeb9c2b57af048b95e9888c405c0f1b8c7d85120a6d4413c2f0f05c1e80f758844ecf541b4bd3a89623c97e28072f661d534c4fa45f18af500"}]}, @nested={0x1157, 0x13, 0x0, 0x1, [@generic, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @generic="98fb882aaea07a0c68813520b3d7d3956feac18c62509a1adaeff194946b8b3483c825b077e078267e000d1a3e7042b69fbd7299b2400e3d41e5", @typed={0x8, 0x8f, 0x0, 0x0, @pid=r8}, @typed={0x1004, 0x45, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x20, 0x0, 0x0, @u32=0x8}, @generic="64caa18ba8c083a141c097ce9340d6372bdf5be7a87ef2c10e1ee9acc942181a26a40e36a73d146b8f36b46129549e12b0f8cb42beeb58ca09f4476402de13450afb106a43b9c048eae0c0f9536a1d5f491507685661dade289a5075a202791743b406bc703b3d04112c704fb592ac6f1763ca07d259dbe6dee6c7d294f6586ce5cb5957eff2823c0a01a25f89d989e79334793ae79bc41feda51b345b1ec55b737192b183f0b02507023dc7d193eb264fd6a209ca2a990328f299f19bce7abcdd60eec868a01943e63b46233db9d33fd5b74d494240de6e851a53eedad209228a191337bd"]}, @nested={0x10f0, 0x8d, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc8, 0x63, 0x0, 0x0, @binary="59422f1d315c96450d1187ad3e97d87638f81a757242c152b681716f897f84228dace3d336e12df0a3709a3fc4d093e2e14e451c924ce4ad93091306de3d68f66552d1606a022974181f4009e3d9046d7101af70f235cd1c6dee68ab921a3346255e2a1d7dfb9ffe3322acbfe5420c534cd124b9e335da9c88242ce00f9ce4e01eb3435a876538b8b0ba74edfc858f61562bad5c2a856cd5437b4df9a56e90a3efccb8a1d7442e5c1f5ad3474da2c993f52390119fa46f6c369610e9779b49fcff32a0d5"}, @typed={0x1004, 0x7a, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x94, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x85, 0x0, 0x0, @u32=0x8f7f}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@multicast2}]}, @typed={0x8, 0x5f, 0x0, 0x0, @pid=r9}]}, 0x266c}, 0x1, 0x0, 0x0, 0x10}, 0x4008010)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
close(r1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x0, 0x0)
io_uring_enter(r1, 0x58aa, 0x0, 0x0, 0x0, 0x0)

00:59:29 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc08000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1798.061677] sg_write: data in/out 580784/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1798.061677]    program syz-executor.7 not setting count and/or reply_len properly
00:59:30 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80080, 0x0)
mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="667265657a65722c00c3d9236efdfdde033f4899ff5de99bdbe36f1bbd22bc7fb31387daedc74de21e2762a616e38916694dc8fbf55b151bd2fea49da02e3a4571"])
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x71)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x8)
fchdir(r1)
mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x1, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000001c0))
sendfile(0xffffffffffffffff, r0, &(0x7f0000000440)=0x7, 0x6ee7)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000180)={0x1, 0x3, 0xa})
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
copy_file_range(r0, &(0x7f0000000000)=0x6848, r5, &(0x7f00000000c0)=0x6, 0x6, 0x0)

[ 1798.150841] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1798.150841]    program syz-executor.1 not setting count and/or reply_len properly
[ 1798.166311] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1798.166311]    program syz-executor.1 not setting count and/or reply_len properly
[ 1798.205065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1798.213432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1798.245972] cgroup: fork rejected by pids controller in /syz0
00:59:45 executing program 6:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x81]}, 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000340)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200002802000002", 0x61, 0x403}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f0000000280)=ANY=[@ANYBLOB="004eacec960ffb88f61a07b8c3f3c1aa396415dd0a7ffd1ad8f12a0550226bd1e28d87988166"])
chdir(&(0x7f0000000040)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240), 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xa563, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x80)
r3 = creat(&(0x7f0000000540)='./file0\x00', 0x0)
pwrite64(r3, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x3)
write$binfmt_aout(r2, &(0x7f0000001e00)={{0x10b, 0x2e, 0x6, 0xcf, 0x3c6, 0x1, 0x39f}, "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"}, 0x1020)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x1, 0x8000, 0x9, 0x0, 0x11})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3}, 0x23)

00:59:45 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7573726a7175c1ff613d2c64656c616c6c6f632c00"])
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000d75839e3ca5869a423a5057d4a6be0f7d4f10ffc50dabfbf7dea7f039c2772c025ece864b836eb620137f4de06af046b3728d0d98e3b57f9b3a0a803278b68b326920d13806bd5f3c81e14bb9a6b8fde07b3ddb2d50a5a9ed4d9d78d687bf2003b6c7dcadd4921c9e9d06dcdfa1f5317194658fd8d47dcdbb90f482a994b4f2cdc6ee86c538157e92e64eafcdfbc15cde3ba860caed9e0d5847b894c64226420e1531baf7a5c1f8859852136e2cc8c8f1d011149d7754e51bcc98a03556756ad2eaaaac148c344f493e29ebb7a8df0", @ANYRES32, @ANYRES16])
r1 = openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x42000, 0xa)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r4)
r5 = fspick(r1, 0x0, 0x1)
r6 = dup3(r4, r5, 0x80000)
sendfile(r1, r2, 0x0, 0x1)
syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010001000000000000000a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099eb365b98ca20a7b60004000b00"], 0x2c}}, 0x0)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000004c0)={{r2}, 0x7, 0x4, 0x72b683b4})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000005}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}}, 0x2002c801)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xd00, 0x0)
pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

00:59:45 executing program 1:
r0 = syz_io_uring_setup(0x1cc8, &(0x7f00000002c0)={0x0, 0x610a, 0x4, 0xfffffffe, 0x135}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'})
syz_io_uring_setup(0x1ec1, &(0x7f0000000240)={0x0, 0x4012, 0x10, 0x1, 0x1a4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000001700)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r3, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f0000001740)=""/181, 0xb5}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000002c0)=""/70, 0x46}], 0x5, &(0x7f0000000700)=""/4096, 0x1000}, 0x0, 0x40000143, 0x0, {0x3}}, 0x8)
syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f00007fe000/0x800000)=nil, 0x800000, 0xb, 0x1}, 0x5)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth0_to_team\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2130, r0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0)
syz_io_uring_setup(0x3bac, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0)
pipe(&(0x7f00000014c0))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001e00)={{r0}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001900)=ANY=[@ANYBLOB="010008000000000000b3d4c81f34c45ec5cc3d817700000400000000000000000000000000000700000000000000ff030000000000000600000000000000f7ffffffffffffff0000100000000000080000000000000003000000000000000010000000000000f9ffffffffffffff0200000000000000070000000000000000008505056100000000d864ffe75a0ec751caef14c5d7b053c79bb431e41cd3a883c3550a68b9813ef2f49053889e1b792e829155fcd721ca8dd7febde0ef16ee062295d61dcd20f3714051965c054c6b11033b64bb49907672da3a3daf0205a5f37b4f75a16f64e63516b8a9c01616b2433779a5c3b2"]}, @devid})
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r3, 0x80, &(0x7f0000000600)=@pppoe={0x18, 0x0, {0x2, @empty, 'geneve0\x00'}}}, 0x99)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x148}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:59:45 executing program 3:
ftruncate(0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x0)
lstat(0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x3, &(0x7f0000000000)=<r2=>0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa8, 0x0, 0x1, 0x280, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffba8e}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000020)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

00:59:45 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0f000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:59:45 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:59:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x20)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0xe8, 0x5, 0x8, 0x4, 0x0, 0x10001, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0xdb, 0x1}, 0x48029, 0x400000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x0, 0xfff}, 0x0, 0xc, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r2, 0x0, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
dup2(0xffffffffffffffff, 0xffffffffffffffff)

00:59:45 executing program 2:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x5e33, &(0x7f0000000040)={0x0, 0x82ee, 0x0, 0x1, 0x60})
r2 = syz_io_uring_setup(0x4f4f, &(0x7f0000000180)={0x0, 0xfffffffe, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000)
syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001)
r6 = fcntl$dupfd(r0, 0x406, r2)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1814.023101] sg_write: data in/out 1039536/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1814.023101]    program syz-executor.7 not setting count and/or reply_len properly
[ 1814.025426] EXT4-fs (loop4): Unrecognized mount option "usrjquÁÿa=" or missing value
[ 1814.032207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.032902] print_req_error: 342 callbacks suppressed
[ 1814.032915] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.034658] buffer_io_error: 390 callbacks suppressed
[ 1814.034667] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1814.036240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.036894] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.038036] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1814.039045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.039697] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.040788] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1814.041826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.042464] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.043570] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1814.044561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.045154] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.046255] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1814.047260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.047900] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.048981] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1814.049994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.050613] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.051704] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1814.052704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.053287] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.054386] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1814.171746] EXT4-fs (loop4): Unrecognized mount option "usrjquÁÿa=" or missing value
00:59:46 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc1e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:59:46 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
lsetxattr$security_evm(&(0x7f0000000640)='./file2\x00', &(0x7f0000000680), &(0x7f00000006c0)=@md5={0x1, "c13855a804d2885ac9f3ff6c6deedaff"}, 0x11, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000170001000000000000000000fe880000000000000000000000c448132177478a0000010000000000000000e00000010000000000000000000000000075768549a7067440000000000000fc000039f000"/96, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYRES32=0xee00], 0x134}}, 0x0)
close(r2)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'hsr0\x00', &(0x7f0000000240)=@ethtool_regs={0x4, 0x9, 0xbe, "028c0c7c1e3173f3347bacbf191369c19674f5cf58dd06b88563f08fb79d4b54e98cf212bb7eee1c7eaf0133fc29aa0919abc05be6e7dc2561d316fbbc66c3f88bea23e392b845a2b7da14c2d86aa73ac6bed6fa0a05af352b55c3b4af20399be0cdb729212743eaaef1d4d8b131574ad08cbc7de6a2856bd8a476aa5ba884ca2e768a63c12e2514e7385daa73d3a979dd88bd9e24ecc29b861a82830ae9e1ba990e91a25b3a523289306d5dd6cc8287525953706febbe4be45c4fadffda"}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r4, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x204282, 0x1a8)
sendmsg$nl_xfrm(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@getsa={0x10c, 0x12, 0x8, 0x70bd26, 0x25dfdbfd, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x2, 0xff}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@mcast2, 0x0, 0x2, 0x0, 0x1f, 0x100, 0xf516, 0x8001}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x1, 0x1f, 0x0, 0x2, 0x8}, {{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in=@local, 0x3501, 0x3, 0x3, 0xd1, 0xb3f94945, 0x0, 0x4}]}, @mark={0xc, 0x15, {0x35075a, 0x9}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x2b}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x50)
copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0)

[ 1814.297182] sg_write: data in/out 2022576/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1814.297182]    program syz-executor.7 not setting count and/or reply_len properly
00:59:46 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
syz_mount_image$msdos(0x0, 0x0, 0x3, 0x4, &(0x7f0000000180)=[{&(0x7f0000000080)="ddfee068d2f951747541", 0xa, 0x9}, {&(0x7f00000000c0)="9866e1d8d64346569268b8d8984ca5adae41c0553c1d1a1e6ff900b79b15fea911f8d02af6cd755fb4286ee147c1a95301a2855ad62014ccef6366", 0x3b}, {&(0x7f0000000100)="f781e229fb5056ec", 0x8, 0x2}, {&(0x7f0000000140)="e93be92e3bafb5e64f1edb053dc15249234b19", 0x13, 0x1f}], 0x2014, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef)

00:59:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x1, 0x0, 0x2})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0xee00, 0xee00}}, './file1\x00'})
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000180)=0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0))
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000000340)=""/235, 0xeb, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7})
ioctl$BLKTRACETEARDOWN(r0, 0x1274, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000))

[ 1814.332837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1814.335676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.336208] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.337184] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1814.338092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.338624] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1814.339573] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1814.340619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.341291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.342094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.342783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.343491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.344160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1814.374347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
00:59:46 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

00:59:46 executing program 1:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0xeb)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x7f, 0x3, 0x7, 0x3, 0x12, "d52f6d8b1d9bea29c39b86b818049c8f59bdf2"})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2)
ioctl$TIOCGSOFTCAR(r1, 0x40087101, 0x0)

00:59:46 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x200)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
ioctl$CDROMVOLREAD(r2, 0x5313, 0x0)
openat(r2, &(0x7f0000000200)='./file0\x00', 0x521000, 0x60)
close(r0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x81, 0x0, {0x0, 0x6f5}, 0xcca7, 0x9})

00:59:46 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

00:59:46 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000900), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
fcntl$dupfd(r6, 0x406, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c7edaa6222771ad3f6b1daa553eda4476393824a47f9cebf9e1c98f53707b4c303cde47e50265b7674dab4f93ee559d776fb160d31292a23e46473974c953d0f6efeaa13d8b42808ee9c4286489f7562", 0x50}, {&(0x7f0000000300)}], 0x2, 0x2, 0x7, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

00:59:46 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x7})

[ 1814.459932] blktrace: Concurrent blktraces are not allowed on sg0
[ 1814.499421] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1814.499421]    program syz-executor.7 not setting count and/or reply_len properly
00:59:46 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1ff, 0x0, 0x1000})
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10049, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x430}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, <r3=>0x0}, &(0x7f0000001c00)=0x14)
sendmmsg$inet6(r2, &(0x7f00000041c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x12, @private1, 0x6}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000340)="fbe3e8c4a22521c5aab8fe933f04a47ed09b8619d1205860ad907ad38a7b70a6946c2376ab5f337af94f479a71d49b19dc50e953931353e78f605650dbfe713193228f5954f712d2412efa0340d22c7e0e15585ccee9512c7bb6c9f6f30b037971b63005a86b8804a4a20b6eea03a6330dd6ddaaee584857cfb8f6e117c70937c9925a2234a11207781738b33bfd87ab9ae967bc794799ce4889fd3d1dac0d347bd345132eec76e85b0ece819259592f2b3c519f5d8b311e97bbe03af24f7708defb931d801af9d4ccd25cb95d233f3f8cd880745686f5ab5fbe055ddfc782d8f26f419b131fc13536cd", 0xea}, {&(0x7f0000000500)="6c4fb72132a4c17e2250667305f03129f9d0bac5015566eb5f91b94e10770a3040c19b9be00431fb69f27f70ffac9ccab09a56a9fff1a956a90ee1acb3602e4c6d55aabc44e8c8c0227b0534a7b9f8df041440941fafdcefb9a2e2623af8f72b9ab045cd276c4374f26accdd77e12e61ba0d911890b12b40a6ed7c934bf50a5dfd155ed6ee7525cfa202b6e22a452f6228bf0cfc9885ae21f6c1491bb794f114c2eac749d51a894577073ea925cc95f059236492c2b9b032d41024542e82e42b14b40bf04354a5a7dba45958c13713016d2c14eb07b09f4a8627c33ad685e7673c1cc824cac37f5fa3ae75ae85b856a98d012e", 0xf3}, {&(0x7f0000000640)="c315c42cb95a7675e7f1456c8dfc7f19af5e95b2a8fdb3f7f42e3b8763c3ef0149b6bf5f2583f9cc03f0a7693fbddec47b4c3ea6da6f4119ae4396", 0x3b}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001e00)="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", 0x1000}], 0x5}}, {{&(0x7f0000001700)={0xa, 0x4e22, 0x4, @private2, 0x80000001}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001740)="9cc6955596459c28ca21fa838ad06bbdd072848e291928104d6da6f479a97b33c17fb41748712a227b2aadcad45725c148d41b58a32776214fa40661d9806f6491d64392f1531f594c69762062464d044f23383a7ad51a48bd8955d82f2b358a763c", 0x62}, {&(0x7f00000017c0)="0d19b0fa20b954aab6503fc2495644f2fc9c768ad77ad9e859ddcfaa9fc9e07520db7253b1fb805e6789579a776594177dfa2e3e5edbe3978c59ee68c9aad5146a3311083651af958a25d827600e28d7c6c44eb64f3188e1105bcd8c3c6465f81b589b5774c6adbd73ed65f86e8bbf46c36b3b7f31985cac17879866e88b2188bb319c455f9aa0bdf047eea57feebaca942ca5846099477b1bf75fbcc04fdbec09582bc5f80fc285480994712718db5289480e64a3db5e9545bbe529183fd721448fab903de959ca248f49ee1fa19d19e69d43f9", 0xd4}, {&(0x7f00000018c0)="50766a82895e9c0e79beea00c1cd58fdcea33f5ff444e8e2c28cdd468ae3627bb815a0f7101e0e51ae2813175d0741aa3aaeaccb858e4a247b12bf6973e0b7c7974340d44b0a29e406e4b3f598ebc53f6a08a06d9946452c11dc6c2bd201768f05ba184b1199b114f467a3c6f5e0ea36154264f287af7bd533ef053f61e4c1e50e45d10fe0ab067d5f6253c21f2ffd8dbef13f0979817501d609d0f0b3344abd7e09d8067301ca71bcf3ff18147b446337e6c169a8de47cf03deb6c0b6aaedf129aec4f3ef5919e3acb520d2a924a80e6a583d2b1198c24db6701c6fd6e6ce3c9e577d980d", 0xe5}, {&(0x7f00000019c0)="eccc666539fac16220909e86b4754582d616c8402605fb9c826e993831a97e27adf993ce32c343dbf970acdec863ff9c5edb9ff7bdaaf0f5600e05db268a997e275eb5a7688466ec4c23d3706a94ac386bd738608403fcbb54b6e26e4a3aa5", 0x5f}, {&(0x7f0000002e00)="343b9320aa8b1fbd0489a96662cc0b7d0502999f4d9fbfd96d3243dcd936803035b9944822d9d653be676f49d42ce90faf614f4bb81a614accda2ef74350e34c9fff601b396b9c5f85935836f0f97afbd9de999908e5e69cc1e9a94261eb22b17c23a1afb5a9240860727dd896e1eeb7223e77f05edbf091d5293252b35b3936f0bff60859827c4e86ec53fd81f0aa7003d721daad8a1fc626c96775febb680f0b74e49c938baf8cbc7507995bc2235707e597d2566e7aa728046e3f97cd3e07b20e9fc1a5b98cca5d3eb81f6348bcda9f182ecc0abef6f1cf699f183eeba5b60764efcd6c763d69a277033e65ec076f6c194b44e2fc310808fc88a96bcd7cfb82c99e6e5dc6dfe400d08decd8be7a33e92dd66e05fb02893f8de74675dc8af67ec7d0f19c1b42fe3861762bbe9bc35d77bf9df7c4dbee764ace867d9b8254fc260d6890f5f3c80e165268791cbf62a3b612e017e2d1aedc34d09d811bf6de2ef072ca5ed973ee87095a30ee6e73c78edd4e25183fbb633c53710c2fec8a48917d171f6126741d54835dd8ae27e64a3e7551a4b7ed68c84d5d66985a7be053fe3223061e686c7c5ecf9f4adc77d4c438ffbfa82f5a129587923077d10a18b622701c60db368e553b10d0e2b60e9aacf4c769b88cb2cf6751be4c97d2030ffedcac483cd7da7517341ce1016265f45cc226de4abe0a0bcdbb02af137f9e51b86dd5a6130da6028cd08ebd72ce2c42e4453ca9ce9a0ae035781d31790b1486b80e011bf11949ff6baf6807f1e7e2d3b729ed3c71c0e7fc2948d95feb10a9e5f97805e04403e311ffc1e7b56332b606598d5dab11654b4aa9ab7c608d0d0db26596de49328aa3018eb365dd37004d2674e3308a1217fe984d5bb94d360924eea3fc48729748f2150e21a4c2bbe05bd699f8f2cd62d77b88bfe92fb2551cfe0a33ea3ed66cde2389c84de1b69d8854f6dc2dddccbd0f044e083e4878e2acc79986415ba16f5ed87e1af5fa10080db3f8cfd861e70cbfb6271f2b644322961148d19cb3bd71120f2e1eee3d124a19c2ad8002b4cd23ea62f93b3dfd8357ff1dcd0468370a7ade49b9988a310a496e42c1a9c0536c786a7b20aab4d5fdfc099c6a499753db6a745397ab92b6d550dc54d061572630e7fcd840f03b18081f30d28889be8edd0ade362566ccc0dc9d51fcb1556691512427ff151908be705ecf003202dc56fb1a6f2b2b2ea97b0a4d65cc87e64ec4b4b83886a68bcd414d23acdcd81df3aa007cae33409686bc3078f5a5e74c1bbce5695c23e08c59f02a405663b0d2c0055b5d58ca4496d53c982c71db60aee9fc1eed4eafd166fc1d7f37b87f3224cd9fa72b9682f2d612997867511f8e28639081baae193bbb6d67063ff597fc8a4df080493334d37ca3883df14a7c5c8747ee58755f7bd77c7c54d66cc6f916abb325bbec8b56de570bdd485fced4e2050327e039d5f0de412bbaa8db5386f8e319dcb448aff8d15bbb84b8b30ba4495e11000c681c43bbe869df4ea854ec53ad0d9f6307c271ef740c1c196b85252f4bb09cd99b14ea04e0697bd35b3ba3b51f2b0ca45ecb298ce6a8c5303f8b11e4773e852596244f60a34bdaf51661ec8495e76ab5ce0237f155f4d53234067f93020a2f1cc163ab5d8970e5a84122db9e5f51fc00e94c6e23a2730e545df65cbd3d2f6c16c0a9a273ef1336c9a6392440f78c332fa991503e84ccd9547f85dff4165557b1bf292ed04d905fd0828b40c38b70d628c9acc3285d603022e69bcb31f47d1b5357c4bbf3bdab55dd59ef55af46c61d5a3698e944245d32f25ec1bcd643887fe3cbf0da5f1d9f84bff426675a2461a5963e12540bd43c3bc3b68f4c56d14500e974fed617fcc0fea74ec45475e512cf721e784b61a9267b2a676a016d5561dbc34d6abbad2d728f73198952299782ba17b7e5cd828f1273c4429dfc4c757297850fdaecd440bba5c239dbf55a7bcb1aef99e9bbfbf35a212bd16a314ddcbb1852b1a642282d6dfdf562078f095290e839faf88811294a4d82fa3ed43005f1a22027e962882b61e46d235d295f99942b8685ecd4d11d6b1e832f73c00a8fbc41eb682f37dc0cc519fc005b5dfce7c056d360f36ac5560ac1d8c527738cde47553f85ed8d50814e8b70784a4c9ef2fad878ac220952c9fa44824e3550039943e50aa9e66a4f4042dc69abdef4e1a3e330ab794ee2b071b618eb1113b58fbeb4e25f45584d10783c427bb94e8bd6a4c1c5491ca8d252ba84fdf0f2ca21dbbcd36a44d29a4fc7ddfefce8f06181ac207b1dc84ea44913b90abbef42ed6b582cbf62f4eca8c40fad49bb4e18c896e0655226df3407ab488fc57359cddd25546c7cd7820cdda5a465d2a9c97fbebede5b7b1e20142396b7344a87687a8736dab9ee6a844de5fd687aa51da9be9df3f35b119501ec51754830f19123f83442a19e1fb9c2abd54d781cf76034e51cf755f1fa720feda0218dd0e2f84e037fef5f0717dc17370c50f4353bb202fba0c6d3deda473f8cf31030c390a2e866d5078ace5e1099224f96f866ffc3eabb72764890cc738f9cfa24ef1c1a965bee8bd20a36fb95efd4a71e3041d1869a7751d740ff94ddac0c0880ab70a85e2917847f8053bf151d0ed89c90fe106257e0477a68a2d92ea0ddbbde74240ff05baaad37c435a05ee8b9290366b33dcaaf16a94890b9d255a10641b4994be90d71dd641f6725663b9ade0b1fa7098e6cc11e21530a663beff6fa573f4ecae1fc1034802b1340373f6b8ad0d0c329c4bea0f1cdb0cd5d740622691b688c7bee6a5f46bbea6966f397a5dbd925b603d6b3cbffee8fbe6cb80f53ac67d140d23d23329f1669d3100a4c24b530c84ffbcdd85a55928842f0f050d70fbf1e7a3e82bdad41cfd0cbc481fb6e28ee7b3c91a7fec6469035a11efae49685f620b3648483f35d7b7c0505d1b8dbbed4d631b4361796b74c88b9cb8ccff5e33f6c743a02aa4cc1ebdeb58755d462999a5802fafb19d7736323727a2c38c13f182b668a4292b18c314b13ab87e4d786470b1fb601799c399e8fdba8664bd7369cda751dcb29dbc3cb3906459c329bf954512cd58e65c6bf693ac329ebb05843b15eda2c077e5e8c3ffd0fded180c1904a1f1c4cc6caed71b52d4c8f5d008e0fd3e389cee4b4008e5d25dd8cc068f3cb2e2b15d6363c8228dd9c4fbb8dd3ccac8621b57b772f81a92442fc3b433b1b30510b36127b07a2f05df5c54f2f2a61474ce7fd99823653e28c6d42315b749ebc0d28991f5b2b7c4a35c32cdd5a82e8bf9e37ac2d22cbf6fb8931d3c0d8bc8f6cd26f3dabc4b8680f55d16eff77e0a57ce061a713ad841a16a7ab90d0a8a306023333a2afed05a6ec87bebc90cf956055aaca1c939de480ad7bedf1d08bc55a10d61191664d2d4d230279dbe01e1680d1ab3627394d5d67270ba9c5d63d56207f54cc1b47a365a02d9a0c399b22483ea37affc1d534b77c4b3fe98e823f08bf30e0415cea8e5e5ea607a79fe90c725d7d6fbf442c3d22749aa97a63eded46b9b7133a96c79894caaad6eddfafe2616f347fc776ffe3a71ae74745c1b6f628b1d7cc2e2a43e7384da3fc2ea9372a3a35736f9fd5180e8c3b231c7036fd8f9ab431180f11c258232720925acab6377ddeba2499a3878abb7237349e2a1f74ff5dc1e5543a83e1eecae48b479d8bcf2b68f63d13417acef6577f7929e2794c9b96d644305d74ec07daac9fe99c80217fb3c520ad71246d9a4675bd53833e8c3dbe4fd1e65cc491632a10e21c0cebb4214b5131897515e9408bc9a0087eac98fad555a8ddeb5d51e415b3b0c57451a533395fecc9061ef1f0278c0b50938f6f84e1d9fc7df9bdef0b2bdf6eb164babb0148d75c46cb9f7d3feb8ff11a5226cde4f9a5898e7645a5da5b13298422c939c57c5592885761f0745896e3dd327be17d5bc385ac9d0464aa6784220a6fad664f6b6235a65b32c146c58da00c0d7ab7ecca80938cec9ce2fcfef05169ff93fd1daa8814a2def67658b285466fe78b1f2a480de53a70dac30de350d38459b7f241ace4e29acfb1b36297ee278782e1c6eb5cb9017425bd8271e7b5743e7911a3ade2e2bd42cae0ab3fe96619e21af8f5c03cc1edb9cdcd50eae57b39ea30ddc074fd5c867e137f8f885fb341b5dce4a8448d1ec06e3539ce5250e19a0f08f58d3e76b6b74ff099e26bfbbc5f40951cf5ab356c938e78f42397dcaf4ac8e16324d0da8ba4191196a16fb8a6cd6082ef8015111ee8edac19cdca63ee09ccfb713d4eb6a5dcb1c8c3a30d0167bcef5a5f1f5944d121add0fbc791a1f2a21c7855c42021d6c34781d1bce0f5a76db08daeb525804ba49290ea901feccc3440f51aed156a3a3fd7b92abf5696a76bb456eddab6d5bec2aa69778a41028872251fc9ec8e5ec7d55c395381def42a95953a50dfa41878130dddb7ea0105931dd0bead1bfc5fcb59d78c3449bd940326ab3b08ab58dffaf2cf042203d25f7cc0e4985275d47a615a91405889c3211a1a6309a5dd1e35e3b1c102f56d596deafbdf40ac10103aca3102e9032f26d1c90b7c8854912314bbe614c3dca0bc189aa6fcc0b79ca970551a05b3e68f6a0d9a02cd066ea0e21fac7200dda2facc7f9bc3d94c3710cc6743a85d03955a589404f78779936c12a35e82c80f1aa8b8c1b22c3141ff9259b9309a28ccc1ebef1dac4336abe8d9a6f91e53bd0570dde8c06359d16b48affdfddc926f310e2a7cafdde78767c3fee6baf3c9b61d5f041a6ac02c8d7e8fb2560b67471a0c5aebe3d7e566a5a101474852e47372619efde96216350543a19f4b074e1f6e3f9ffdaf8ea69f2a4a769ae67cf25846746e3048aee56c263f392656e1f39cd0c57b7bb557a6eca76fb87dbee1609bca6b04656c13f59e741bfce68903187d8073b557044894717ec007976cca3c3f57c06b7416db4607848e2c027305d2feb0f46f1c8a23327cc1f4b677d86a5e0fe8d204d074e5478433abc7e29e3fa52a867f6d2b5980c050a0bef47b9eeb28b1dd96d2e7aa3a2f14ff7d06d2e2c85bad7261f186a37421f2c24d37abc8c54cbf131def59c79e68752599d0b8b3319e376454a7e0968f8ec4dbc1eb5ec11be5ca3e89fed98e6bb8aae2f9a412b48b96a4927ac06c068226b086ec9ee9f7272d141715d4ec8cd67a02dffa6521691e152bf5441e7ff391d0c7c2b3f8c72097abe0b059d0bfe97bc3e79445388b0420bcca117133c4c7ef199ac31319effb14a39e064750bc7d3ecacb0b715c46dc86b6bdd51eede35a97a98bd9c4faa1fe0216265b375db75d976564302cdb03f6382414cb8b0a29091a01f1438d3985e16ef8a103d3f8417b07e41715136a8af239c5f050405bc7f28e00ab8ed888e51881f0662d7bedc798447c9f914cce05b6691d2a9ae0c6f8b97345ac9d540e29e69eaf6f714f01ae9e3d1b1db37ae9e11c1ee05273f9ac5a6762a1367b933ab2d85fa49e15074e735f3152671012d1b8c504c443cdd4e4576d926240247565b7b6130d5eb3ac22782eb8ae58f1867ff7a227c256e0d800c30a3919b0aec7d40b1b8772d2316622063f57eaa2320b63f6c4fc291b12be834d6ec7634b4e58441e46f7ea73e770754e2f881ba61953c66ffb625bbeab6132339363a56f6d0cb9a599c0f9291e741cd74570cdaece7b6445a84d228566fa350d45033790afa7c6c280e9906b8939bb52d8ef8727307cb39066d50bc8677e4eae9921f38c87cd90286b53d5905b54a6c8dae82d74c68abe12", 0x1000}, {&(0x7f0000001a40)="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", 0xff}], 0x6, &(0x7f0000003e00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2e, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x37}, @jumbo={0xc2, 0x4, 0x9d}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r3}}}, @rthdrdstopts={{0xe0, 0x29, 0x37, {0x1d, 0x18, '\x00', [@hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @generic={0x6, 0xa5, "0b4acaec70c0143ff40a44d9c0185082a0997502d64944b6cc542ee62f8031d0c152d103086d5eec8f0a4e659d415acf1f2a992a03a82ad2853058e7e157d4de754ba6eae8362bd935d62f2ad6ed943c886804a51b6795bbaaaa200cb73c4f280f200b347fad2a2912aedfe55a7f584bd34257f823bf144c3ede49a936811d569043336653b96a9bc6be0781066f3f90628427e5ec543924190679c1cdb09a11520b2d0b5d"}, @pad1, @ra={0x5, 0x2, 0x9}]}}}], 0x148}}, {{&(0x7f0000001c40)={0xa, 0x4e22, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000004140)=[{&(0x7f0000001c80)="3784bf55de44df33c004", 0xa}, {&(0x7f0000004d40)="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", 0x1000}, {&(0x7f0000001cc0)="cae4015e84ed9f2c0d39876077b2a41e1ba0bc6be7491ef94a22f0942de7967f99909c0bbd5590a8a09f2f1c3c9545a400098b28b4ee0485297739a905f383369f44319381287693c85890c37e7089e713e49220ad60477495899fd492b4497dcdea0d141bf321fb75f1263c3f869f7cbbeef82f0f898f23e7d5d37a70bb141a79ba358d58d7b4a39295c4274b845e1c4f4f1a4ad768c4e0bc5293eb17aa4aaa841ad74c88", 0xa5}, {&(0x7f0000003f80)="f638d57b159eea682e1cf3cdcb8ea94af4556a05a96ee16baa5e643fc1acb6bfeed51138a2eba1a9788637f73e655f3571283c040bac068d19e33772a2c4c760e710d676a020c2a9220a13d995613e188f359aa21db27d", 0x57}, {&(0x7f0000004000)="3434db8c5371ca4b1441bf3e4c006b2907fcc4e6ce5e0c215418b586e1836848ca6c02a49914e7", 0x27}, {&(0x7f0000004040)="a3a8da4ec49a503a5b", 0x9}, {&(0x7f0000004080)="c176fe017be52ac214bcdc2e5f2baabe37401cfda04155b3e0e6908b263002a411493e21e3ba9d3807a343cfb8d920f3819f5147570851e364d6b93488db3c90790454f747950b97e87e1d361d789f0798386ab81d47954ef3bac5a0053d881e2f3a79fb79e9e9293a8924805ef5c112c1836b29533b2723f1691db0d4b74bbd1a4a3461d6d4a2e3", 0x88}], 0x7}}], 0x3, 0x4000004)
close(r0)
sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0)
creat(&(0x7f0000000480)='./file0\x00', 0xa0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x8000, 0xa0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000040)={0x0, 0x200, [0x7, 0x6, 0x1000, 0x5, 0xa56, 0x6]})
r5 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="f2c849edb850d7d614f42b72639492b6ce97f365a6b8", 0x16, 0x4}], 0x2a1008, &(0x7f0000000240)={[{@dots}, {@fat=@umask={'umask', 0x3d, 0xffffffff}}, {@nodots}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}], [{@euid_gt}, {@appraise}]})
linkat(r4, &(0x7f00000000c0)='./file1\x00', r5, &(0x7f00000002c0)='./file1\x00', 0x0)

00:59:46 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1822.703030] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
01:00:01 executing program 6:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x3)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x2, 0x2, 0x6985)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140003ad81db54ceec5400000000000001000000d9b2af50115869f6f27f9a42ed13d930dea3d04f047c03eadebf0d6bea6e3fb9ebe9bc2db9f2f2500022faa9c8b17129d9abfb5d7460c8a75693041f1a787cef8a8210b5d671eb4e327c4a51a9e2aed039e32f536069ff156c9c2add4de3cbf5011d43a34f2d7eda76e93d755bce41c35c39de0f4e88310cb0b062d8b2cbd48b96b2067bf62268d15a93e5e51905f224f75ffabf563b2fb44932ccd92387"], 0x14}}, 0x0)
close_range(0xffffffffffffffff, r2, 0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x2}}, './file1\x00'})
syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef)
timerfd_create(0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100)
timerfd_create(0x0, 0x0)
unshare(0x48020200)

01:00:01 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00'})
sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1=0xe0000002}, 0xffffffffffffff66, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x38}}], 0x1, 0x20000000)

01:00:01 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x0, 0x9, {0x2, 0x6f5}, 0xcca7, 0x8})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x0, 0x0, 0x0, 0x2}})
ioctl$TCSETSF(r1, 0x5404, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200))
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0xe4, 0x0, 0x18, 0x0, 0x0, 0x16000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8, 0x8, 0x0, 0x1, 0x5, 0x15d, 0xffff, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1})
r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x7ff, 0x201)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000003c0)={0x6, 0x2, {0x1, 0x2, 0x0, 0x1, 0x80}, 0x9})
openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
unshare(0x48020200)

01:00:01 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001a80)=0xfffffffffffffda2)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x2, 0x0, 0x0, @str='*\\:\x00'}]}, 0x38}}, 0x0)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001a40)={r1, @multicast1, @multicast1}, 0xc)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002300)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001a80)=0xe8)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x2, 0x0, 0x0, @str='*\\:\x00'}]}, 0x38}}, 0x0)
setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001a40)={r4, @multicast1, @multicast1}, 0xc)
r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001a80)=0xfffffffffffffda2)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = fcntl$dupfd(r9, 0x0, r9)
sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x2, 0x0, 0x0, @str='*\\:\x00'}]}, 0x38}}, 0x0)
setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000001a40)={r8, @multicast1, @multicast1}, 0xc)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="525846db46d080b52698a2b17f7740653d17eac8cd784ed1eea3911a8244d978bd59cacc26fdd873e99cf38137d9a0140e1687db7293b198586780fa4029dcbc30031e3535cac2ed3cd5a48872d17c48a9d5115e30f5e848a333f2757ae18eb20b32afa1de67f55aa1271513537ad50da706628f82e049022dd2887a66b949f5e976c10901faa4e7d4350422fa1291ccd38d0ecb69c8ff86b485d12568566a984ad7c60632331f7733bfabbac3c107", 0xaf}, {&(0x7f0000000280)="2db1585d47e5c2e02df38f8a7e412eebc0424a7302085ac5c1f676d76c79944f945ee9d7f7671a0018749bd5a029f8e542a0dd992134224ba9e561e922de018c2dc5e0b06caf40d2492380e5445e786736bbc06121a18302caf6d4dfb4df5e3a3ac94d833d968613a735a7268b9c0572d804", 0x72}], 0x2, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xa8}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000400)="ab9dad9cabf6b8d382425fbb4dbc579678ebf624ec341e08ad0b65e651a570e76b9704f0559a592b894680d3c7566c0ba82239f04eb370846c07103d10d10fbc7ad5292740894f8c8151f497dc1ce47757f1d8835dead2f5822d594cba8a76c2422210180c839cbf9ca34a0a4d89b4f3cb6e7129ce126b7a", 0x78}, {&(0x7f0000000480)="6b5e12b6a3b98ee6751e3ee494cd3686faae5d97b0594d81a32d54814076b5ca6b709a0f1df8cddcbc72e71c6cfc777d04c5157d538d2b279ee0271de17dee4140c4c2a2042f09a0926d67aa8c1eaf8191ffc787492953328d1d6ccdf6d21451b22e4f5ca811cabf0f2329258d6fa13efcbe1590d43e5cf04a344f982c450e660c3248c4b242267f021bf3792ad72fe7a387a681aa674f2fc81ff0d03091dc0d2ce24b95ca8015df785cc5d43316c3934058e4570940d218ff307e77155c8d64b60891195a487ec7c162202fb92d42186f6d05ba575fae", 0xd7}, {&(0x7f0000000580)="21180198b300967644113e187f06ebd7d7c0df9d888fe9cf9bd378f015aa8a7ec6cc91a91365540c472e9cc700729323e0a4374defe0a3d526113c583f5f0cde75a97ddfa4fc8c2ce27d0fe319f93b67ef5b61c3e9e27cc3cee2f5e0d8fbd04cfc655d9be837c04e391785ae52ed1d15b8949775cd829f2a9cb90a1f3022142d4207d48503f2226f98e9bb6b74fc18ee078fabf75e421693debb0be9e413e38f096e", 0xa2}, {&(0x7f0000000640)="d7fabc203631574026e71f1403778a80482f59b5855b3955ceb5aa417f15304908eb178ca5ed924457155dbe316e955fc87ec6b868b9fd276613daaf10281cedf94fdf293dd4df1ab11ca2ac712c358c78ddfa06ada738981944fa28b946b608fc45a2467e66f40d4a72955af59b44f76f4e53cdda892a0fa4f320f6e06deb026ee18f40823f10f505ff25d7f155d829e72caa7953d7bf00f1c1479465113f5e2df075e4e28c1282679f952d012acfd43cd9a91159d500bc9d562639e4de8f1d359d063a912417f1f00853e8bc0201e6f3844a032de2f3", 0xd7}], 0x4, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xbc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xef, 0x1, 0x9, [{@rand_addr=0x6, 0x8}]}, @ssrr={0x89, 0x7, 0x53, [@local]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xa8, 0x1, 0x0, [{@local, 0xffff}]}, @timestamp_prespec={0x44, 0x2c, 0x57, 0x3, 0x9, [{@loopback, 0xa7}, {@private=0xa010102}, {@loopback, 0x1}, {@empty, 0xd3bc}, {@loopback, 0x4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0xc0}}, {{&(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="a183b48d0cb154f86f531e906889551dd93d8360c95bd8c17a101e5ef2a784dc5163a1f9a230a87d42b6be507b059c434405c1c4ab06fd3326a027b42994a2ca58051f1c2186837954e1275f27695cd7410d0c326b7fe6b793a396bee0605435bb9713c786c82a2fde9bc1fdbf6cce883a2120e69e28dccbf4faecaf0420074fc5bb2b491c5310bbb7ac8fe116286c38154b4ae761b201083611c3b6ff9e539f49c8a5dae4be26442120c0134efed816ea4fb520e2ae65af8d0fce8f3168a7d85dcdcd", 0xc3}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000a00)="6b7e4b6e5fd6d33a41503a2f1b0344494c4e6f8295a6b722bb1c24125f81a54689d9dcc834530a493e7069d86211c0d12cfd8b85f125ee1720eb099db3b517c93ad93b3286f884b6d7936a8f7d83d6bd3ec4d68504cd9f4c121870a485e1bf91c5a80d62a33d36dcf7606ddb55b67927006a9d5837ccc5bb4e3bba52f5d71c227ee1de785ec5c33ee74b5a3227df431325c3234c6dc264c9f2b0c449cbce89989978de978787728d368a47c7b6a81b6c3f2efa7853e44bef9eb951c179a1ee480625c402", 0xc4}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="7f01", 0x2}, {&(0x7f0000001b40)="1bc35224dc53ec2e805274aea13282ea74e3ee2fe126f664ffe02df37320f1bf48e35dfeaf1550f9389006034b87c50c48f85199c875538911e8b9ec2f527b05e94a8baa31dd04f6021d9a92de8afc7738d08bc33d66dbdc03f4b5bacfe2336aae583b2d99864a124ca86e637853bfe42d2fcc2fcfea4d7d0c050eae8a52d7d35fa3f3cf177f279fce701b9f601fa557f89f9117d6ddd0c5e8404405499fad7f4b02f3706c892c32295e73470e3abe02", 0xb0}, {&(0x7f0000001c00)="5e7a3909817d6c08c5681267e91e65077d8412a7d930bf1ec4b5a8a04a3c3429498eeb3c0b8cdaba6ca155468855ee9c355af96ffe91fcf8e5f4dd344642a0e8af8474aca0f3eeca35776c8fe7b24bfa2e2365a92a456fe56ef5c2421d636893a1f0e318f12d4758da5c1b64a7d80cb5f8fef8f3631003990c9448", 0x7b}, {&(0x7f0000001c80)="97f2518d02784aa329c34f93fd4cb10204119127e9329f54cc414217ef06b0c28c6c3e8a939554b57b1ddde566f05b5b376d36f03525384b761ff50c26ba9d21e39e4890098bf3303ec7e5b493", 0x4d}, {&(0x7f0000001d00)="704b2d380d95420e11378dc0a6ab1e46379ce14556db4051a71404299fcc234e10beb568ca8087c511f5dd5acb80fe3f13e47ca38135d87fbf0ffcbd7eb2fbec73599dc5cc82092616cc73e446ea8826529b16746fd1ab00d4d61a0608d3c6225d791947ebfd78399b38948f36f9355df7b9309622fb343019f5be250bb529eea6b7f038bd", 0x85}], 0x7, &(0x7f0000001e40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xb6, 0x1, 0x1, [{@remote, 0x2}, {@local, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7fffffff}]}, @ssrr={0x89, 0x1b, 0xa5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @remote, @multicast1, @multicast2, @multicast2]}]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@cipso={0x86, 0x52, 0x3, [{0x0, 0x2}, {0x5, 0x4, 'd>'}, {0x0, 0xa, "1878699315fee602"}, {0x2, 0x10, "c4843642126d799ff484d70a13a2"}, {0x0, 0xe, "df3bab9569d1e1cdbf494ddd"}, {0x0, 0xd, "261705f3d9d4fb1c44a784"}, {0x2, 0x11, "2f577a407d02ed948180ed2388507c"}]}, @rr={0x7, 0x7, 0x89, [@local]}, @timestamp={0x44, 0x18, 0xf6, 0x0, 0x1, [0x80, 0x1, 0x3, 0x5604, 0x40]}, @generic={0x89, 0xf, "2492a46103f8e30eb0156a0431"}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x110}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f80)="321565aa68", 0x5}, {&(0x7f0000001fc0)="4ffaec98946692c6a5bc56731869925af4272509f76ec7c2af311c6277fd59cb5cde", 0x22}], 0x2, &(0x7f0000002040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x1d}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x70}}], 0x5, 0x8000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf7e49a1d95947318303ae70299e26a0010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000000040)={[{@norecovery}, {@journal_dev}]})

01:00:01 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dcb3000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1829.533833] ALSA: seq fatal error: cannot create timer (-22)
[ 1829.556518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1829.558793] sg_write: data in/out 11787440/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1829.558793]    program syz-executor.7 not setting count and/or reply_len properly
01:00:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000))
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x28, 0xc21, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0)

01:00:01 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:00:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000280))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x70, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}]}, 0x70}}, 0x40810)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0fad2466a87d87ed4216efe2267b5119cf3dacb3ce1b22aab9cd437c71092", @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf250a000000080001007063690011b523efa6694e09d74d85abdf3b3521c7000200303030303a30303a31a5cdb2884550530df898a5b39cacb5302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000058137d5cb8242384e6d82fa9371b1215d091324137240993decb20b8ddbba80af13fdec75837e1b17cdd6c956bdfd2668cc2d96659c3157037159c5ab3a6c3457309c3edacd5b0d6f13ca68d8deec4bd246e3915c2a3bc1d1c397770c4b804632d944939ce679e2f4baa858c11c27e81ec3db07455"], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x8010)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa4, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x434053c6}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040885}, 0x48000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4084)

01:00:01 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080), 0x4)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r7, 0x0, r8)
syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x5, 0x4007, @fd=r8, 0x76, &(0x7f00000000c0)=[{&(0x7f0000000940)="7ae8ca1a38b41bad85dbcf175297136c52ceb90fc427c5ca86f62514f931a652175257290931330a18b047e9cb27c4d14f7ee7c2dec264cc0ec3615f74e631c2807aa9417dd6d5b84eafa73e6b18a5169206a078fe5bc7eea905c1987509414674af431f126026bd0eceb9917f58565983354d670a800722336631e1c8ad21d3e23ecdd6d8a79e5c5754bfb9f84f27963f2f19e6591f16a48be10dc724bfc90a0fb0e733a7c1745de9191b07bfd1cddcff43c64fa22b04f849fe1db4387e13298e5da1ed21a5977bc652846d9f5dc7931ed646d75f7bc49b21064c2cd013ab7130b4382407ae7a1ab8f595100d351d7792672c6183c2cd63e343d2e0498559f9aeb2c6ae9e2852041c449361180920f624f400076c330b825bf1f6f14fbbfe462e65d7df9e7796aebd222b5ab11ea4311dd6ac5c19502892827cfd6474e58904344c46ee3f6026efb473cd7a357a67e7fb39502c6decc0f3ef4909ecb9707dc9bf86143adad16d7181f47307ea2e83f3e79ec1ab668e913cccec585f88090c06eed1c48f77e5b8dfb2ce3df5f6b15549f6fdb9a224628d8c882ba9a6882f3725078cf469baa1295e95a076cb0564b4103537682aaa72757012d09a4fb1e6a7af7a9a728af10d3a9c639633dd021f488793c9ba7db6baee4766aa158ec3fe8c119efec48993c8f34933388b5be4a32883adac55588d657b9eeca1da9f224a6a80210dfcd0fa63cd22ccd23331b6eff3599e3b88ebb33251d1c315bbe7144d9207d6699bc21bcc3b0ce27781063db4a546a5633f326b647f8f2a1f99eb708214a0175e8c7d5d91e20cbdaab7475ed49acc71650ef40bebc7f8b682c06a2af30ee1cfc55389e0889a45cfbe605c83ccdcd0977995d8629f9bf368a6096c3891819a453ec8cadd9a99aaed14d623864dda5c85d694a252dcb2c7a2142db1db2873d6c39f3f3779fa1adb3c306914bf2e45ca2ca804f3c48290d2635638ebd446aa28bf78577b8bd030843fcc6119a7083f2ae4c7017d0af9306e029577fb8a23f32ac661a093245416459c26630ddeea95cb40b7e51ea9a96d7e2a40ffb01baeae373495e0fc1a02c264b808a89a71f02769c3e75d9efcfe5c1721ea876bb0c91982b73f29a9904bad172347835a44dce1b1de1d41fa3ddf685c122fa3521ae925d5fade8746e0e57e3885c030a6218df9a60743bf103f2bf5c54f8f8b01cdb8cd497f3813ad1d5df0e33c4ae3d8744be932d5d0cdc0bdec0af637c5b0b01882130b366e58334ff94e58169301ba8bddc29e71f29ae21a052c1b26ea794a0910510ea8cbc5d30378cb663b708f622c420f6f0f14cbac243aed0925451c23843df7055040e2dfc431f411c7d75d2319583a91c78124be0a1d0cfd71982bea23b40e2efca9567963c2d8e23c408a6eade06ce9288003c5f5b2e09f7145cdec3c150f9d5735219fc0d207021ea00c0515cfbee46f9cbf8a6f8f72d53452575a80189fa20336724eac379bbfae55c7898bf951ac4b71bddf647f9214c238d54659d1ed7fb0a3a6d4c330289b949e8b88f6436cd281503615ab5c846ad95f5f52f18b0e1bb40414ba740d4dc29883c141f0c1116b840723c7df6e2eb3f9f831f8260753c09c7192e88cf8f8ed6db8cced64bdc8b86f75a0c398cf887877b07f713c9f7dd9fdfe6ff873fd11eac6de31d81fa4ddc273b7bfd1bfca7082e8fbdab9553a24de35639dac34be7fbdc886a1a0ef610d8e7ee619457f60255cb8d04396b49bf37fd08f4b0158a3c7f91247bbb237fd109405904ba955158a7af669f1669721b6308867b77dbf108e1dcfdb598c1a82df3c455c29e52250a56a59578ce04bbff87e5dc7184b5aa014b2a2966bff62bf43846905b47c48dca59e55265052ad7e23180deb05e2337bc42f3a2545b430ef9c2d3795c14f7d31af53dc944ea636a57ba068614c51176ec03c7381f9d04219f5d20311a210b9d0256fac1fef720b0a43c8abadb1b3128d8652fa7d5376d407b831dede6cd0c7f5550a1d110be7d78992c396f6bb81a916070d38a756a1ff3646851dbc0eaf2368c2617a51dfff90eded5cfa8764dd2fafaeadccccd44f053f6dfaaf02235a993fb4b7837836b922026c43fcd61a693ecdb93cf0b98bcf74763a64716b71660785bfeee48b92c5c3890cb95fca634e21217cc5ea86cc1ea9a690c6445414dcb7ad19b362ecfedeca12872f7d283bee1716616c41b77ba5388651bfff81852269679e854ace808fb471ed3f2dc07e183f20bfe1dee095fd321a674c9811b1fa94141a3674071282c9408cf463583581228534cef4e8996476f489eb3d27ebbce18943f48ecbdb79e9e2bbf90975604f475490d3c473a97a6b5db78f3a698d1533a5a1488bd0c4ad47c18769d585b22f01f090eaa8a899012b435c1313cd0b67dd2d81e16d98fa472d0d51fb89327782bd712a5be43c93d0c0a15971631d4e434b5d62a8a6fdc4fb5658000a6b41eab053912d226f50669a76ebbbdcb99d9ab238c74631ec6f2bc86ff1503762e163e563196f85cc1663b169a04b80701f9b221992a364c1c5402158ce85c52ae101489a376ae139048dee3fd7a00515966dba4e3c72193d854d2f412b05224f4b83ddc63161b0cd0680b78cc505f3d07969d42ec99bb64bd0462c1fe94af0b3508f700a2231ea11ce942d04a97dd2518c3e58d1c8ef8d2580c9e5246e72e6b25673465cf53ce68bfaca3e392c6624ffbdf1a82bedf3e5fa15c656f98f75c57a3f4bc091f7d4dc6ed184f49ce4efbefe96d53060b0446d7ef74ecfa6a6e4c475601e22d69e6af46266683c6022df540c2c423053e2e0d67ad3ae9fda046a051f15d161d0d2b05d26f97399030f8adee8d711b2a5a89c4a337a373d2409af51d2741f44c83fd57fd842112afeb5776ef47190874d267aead7ab15f49f56fc4607d5fccad2c8406f3096154561c6c834c74d3c9a884feeee5a6fbeaff1ac1b9ddc2fffac87077963d3c854c1a67b90778dc0b18a62851f463c5fcb4441997e64bd33c78af5aa8f863c17eff0d2afb08e45c72d471e24d694d70fac5e3f8bd8fafb8c7a556e33343144a026016b752d72683778ddaefa7a86b40b897faf276c94e47ed631c8eacfd2c68f13f97061db0ed62b3ae0d5ac2d48e380534e3529d953173418f7b5947e3855185bc5c4309122ec601dffac1a93f8bf3ee0511e1b1ce8c96c7b8a85e4b6a44a234e1afc9193a46ead2b0406721b3c2eeaa6bb5a8b795f639b0712a3369244f2cd7c6281801cc31ededcfd724a214217d38a3e3850b000a06bf34df878815e266b7bd696f8c86064561948283470e66cf5926c9e61d03476b2fe8f2cb5725e3ec10a359bac88d43b76e13873cd3865d3fe91c4b3f7b2f259f1a615a3d20beb5ca01134e48d19ef835956e11d980f504c7c3947be5874da6f4710c77f88060f9864feec36e090ee916847c992e14d72b692d0672d71987dbdeb143e0e10ab488c35c31644b41a3c0d4e5204fa64a01aa30dbb32e2ba528e5f669c450206963f1678ae58f7b3fb2adf558ce9bfa522a4b81efe7f343717437860a77af4e9001ef28a7c197e85401ba6bb14a67879c9b0b9117a48a972560ee4b96dbcfcda4e890db3df439f4a4978f638cb68c3e7a4113c419d2209664591243c01b29bdc3f83a87f0feb6118a4bd2de39c4730d84ffc32d50b56da00fde87636b7ea1ad99296e0e08e957c2840b80c8764a437c800a5d975ff2e3e4bfd5b495bbbaa78484c11a8e4298f792a65a763e978f43c1dbce3977294b08be1d321c5802428a95d073fe761c19b0e878d3c28ace198176e76617f5714ef99527e6d1e9114ced10b44203b0b5477e2bee9253d6f7676c42d56e8a7587904afc319d770d5d947af8aeadc3292fd8ee1924997568cadba69d89b6e4ec3d6ede3d0adf7b65aaafb1df4d76645de206af562a97f7af13d56756f6fb4297c092b40ea1925997cecdd91474b9040cc0aeba984802d3a1e9943682a23320a6101146d789d60ac0e3081fc411ff92a980761539b8931f2413caecc2ed4fec288d02e077d016e29a96e212be67c9a2080ef07e76da56b95a13bbe5c3515c181879be920f588a453139a08dbca0df37355d881af5a0e1b3a26592df5998a63e5322261e02a2b05125737706cbd7ce34f12482aa854423877dec84d5d1a43743479cd60fcdebb03ee263b0d4e89cdb522898cb09b2227bae300ca889c0970171ecccf086e95b14217e4841a49d018b388b88c5e91c8b39c31c6b6f6e0bedb36596bdabce7566db9de67542d436fe834d24cb00dce74be3f5ffe233cdd6a678ef916454edb8ddf666b8f304b6620b7fce9ed924ee05a272773ec81e7413261ef9dfcfeeda6fb13e094d6639c4aff693aaab8b9f9c769a37db539f8ef271ee6d81828183b986ade02929abb3097cc4dc7893fa24fb34899a7293e4fe69af59736ab9ac9997a3e7b8a25035d3899aabf237460ca3b336a6d7fdc1f7b5def7fdc49351078e2e7f4ec32583bd8f409341d33e3f41e837a85e759e9ae9f6749bcb9afb95a68232ba53cb86e2fc8e226f0b02355c30f49893d97c78a53cb73d54f2fa62b21b8cafb987e70159fab42d0e91b18fb475c4932d33c142c8fd8c03705b3b0251d69184065e9781c56ef5f53e8fdc2981a06e84374929565c0ff6c9bbad0678be73b495f4ce1ddd174cdf447218aa2994d8d280cc5b31dd5e206f479bd085f5462f24111f93297fc4c3430712c0f93819a8adf80ef936a6c4191cd75e56db8fe80a69dc975605ad8603415e4fe852cb639920d9d41ea59f3cff030a006817743926be239cd6d3324161ce12de685d802b685721efb6cb6a9bf46c662bcddca85767437b4d1cb198e0da0789f0f7906e23c72cb7d7126de7494e9a523de33dfbcb42325007bf3110257d0ca4ec656da30a8625090d111d25aaaed24183cb131abf0ac2f3f11e1ebdb255ca63de342a2fb03a367250ab4b8976ecca0db5b4d004b1ea93c745ed94f6c6300457eb4e802c26e48116c829e6156e4a34c79975c323c667b03c7ff7781bba0ce4ef5686ff3f11797d76c8606c5dd9bfc69feb739a96f6955fbbebd08ca015afc4fc491709118e1c18409c496645eb24314ee4c6268ff5c577236eda872d1c16fd43d5e194005ae8e741288b5bf58fc9c11804b8c7e42fc876e9b7ca856e9231b565158036a64d6e14b3c61f5e11fa6fd5d138ed522d400a32c6e31db008c0d5c90c5ccf787823f703ca0574f815386fdc79786e8912ffa770a355c73b97930c5817270a5bc1e5e03d76d9a231d50523d6bc0e6fc0274f942dc8f0c5b36d5b8e287cfd8602692752ce09aac91be0b56834c261a2c77b373e68a5c113c0df37063d5d4f88e30f56aa123c15cb7c3fe0bcb49013863a15d2b9173b7a93b0d911ec7ca3c2abbb2f64bb004415fc602d58714a39e250f9a15a9e19270eaf71c6488decd521ad035f1cbb388cffbd23459d91a3454784295ae81f901eaf33cb2ba4d1296fdec0ffb8305459ae6c9820e32d12d0b8f0ec5a42741f8edc1f466873425f1e4330bee26cccf2594344e997d38ef1894145ab757cd5717f2446ff9f12e53d66e89222257bd5fe0231b029c48421ddad1763384f50828dc3ab201b127e1889ce1c61cb29fcac207154c1fb5668869606588f3e7e94f8a403da4dbcd48336c336a5145beffb8fa6c60d7fcc204f61c7e4544aca2e59d07ade0b165c61fcbabce235c9f200fb4253e63fc82f0b1a1dd1586b308d84ae4188fa29fb56eba", 0x1000}, {&(0x7f0000000340)="1a105812944abf7c2244c97b96b77f43e007ee5c66a2a27bef16224ba227312e5286e1c80a9eb810069c24a28f8a3129b928a01b1c539a0828e7a84b3f985a1f99e83d7b0403f6926684885592975d998c2d5a1f4b61fe090c9a5d4a3eaf00202374fe01b7bbbf186474c7b94323318ff09c6db45d9022cae4523c189bd8343edc2684ebcf388edb21b7dad357a47168c5bbec8a21b414d11610c4746d09b1f2172f8f748aa4969deec368c009237e9a1d2d529bf49b5230a392f5759e8aa4c0b2bd8b5e4cbf30d57d9e9abcecee31ca47f9276892ff", 0xd6}], 0x2, 0x1d, 0x1}, 0xc)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

01:00:01 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03020000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1829.727935] ALSA: seq fatal error: cannot create timer (-22)
[ 1829.802819] sg_write: data in/out 33807536/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1829.802819]    program syz-executor.7 not setting count and/or reply_len properly
[ 1845.587520] sg_write: data in/out 50584752/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1845.587520]    program syz-executor.7 not setting count and/or reply_len properly
01:00:17 executing program 2:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x10403, 0x0)
r2 = syz_open_dev$mouse(&(0x7f00000006c0), 0x401, 0xe0440)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r7, 0x0, r8)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, @out_args}, './file0\x00'})
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0xe02, 0x0)
r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000780), 0xa000, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="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", 0xfd}, {&(0x7f00000001c0)="f48dc20da0bde83fef098ad3731574ba068b02b52916975e7ff2598619217db478e4e02a98acb7af138a564d65f43f2ec4134fafb81101186db7038852f3152b9f118e38cf70a4edadf1fb6e4ff5bb28822689f640316b91422b6509cc938c52d1d06d1e91e399144e698625eb3e4336c0d1164a0c310649152ad081a75e5a308027acef5be300f9269c6c1227bd04ff3bdc78098a8ea63aa10ac74be3cc7f5f58f8451bbb7ff8daf5c0ef305ca98a5c41f53c333bc3f78f07519c04f0600354b3ec20d5d2ebf00b5e10f14b463b60d78c1e507f4f42b4d3720a", 0xda}, {&(0x7f00000002c0)="93f58a72db2b02445767c42e95f6fa38f487bbb344500b6fa8d480260441b5481a11f086f37f72be39d8e634617b6d76762d781e25dccc39d032a8af2b726c3ad29d6b13ca83ab9d1914d42152b065de53b87ec1d36b6eb734b7e64f13dba4e76b06f896d8022b7e", 0x68}, {&(0x7f0000000380)="bf4f0dfb33d04781dff88c0dbd13ddbcc7df87fb5c56f36edf52370fecfefbf031ae75b06d70b45d9eb0a99cb3fc2ea8d5e34f37841314fa1ecce7ad5c0e7c72ab764b95454c1da3b41a3e0d8dac6c4f650abb3814269f0f6cde81a14d3428855f137c3b3e4c60d4c77393964e4b450dce824e93e7640f3d272903642cea7bd722daf9da3bade22949e788eb72564ad3344e062060a90988f205871440", 0x9d}, {&(0x7f0000000500)="ffe5b8a203a16702ff5407cfd96871545cba8037bfd849f1d7326a42ecefebb1ae2143afa16d3e8987b72fcd73063028ce5c291db020b0b0d40121eedd7b4dc61e85f045af07b91a4a57de0494c3aeedde2c59dba5a1df943ccde7ec67a5a7bfd9f3094871c6b5c653e38af8b52d6ea1ff87fc0fc301ab3b0ea2062dcaa553cdc552b3fb10d110f9f9e2086126845d7ae28a358ed2eb252d417fdb41496bab41322b30b52b", 0xa5}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168, 0x40}, 0x2008000)
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)

01:00:17 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00')
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x20004000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x8927, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
r4 = accept4(r0, &(0x7f0000000140)=@l2={0x1f, 0x0, @none}, &(0x7f00000001c0)=0x80, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r6, 0x0, 0x0, 0x1000002)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010000}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0x2, 0x0, 0x7f, 0x0, 0x10001, 0x10, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x8800, 0x1, 0xffff, 0x4, 0x7652800000000, 0x5, 0xffff, 0x0, 0x7d, 0x0, 0x8}, 0x0, 0x8, r6, 0x2)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0)

01:00:17 executing program 4:
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000000140))
sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0x154, 0x2e, 0x1, 0x70bd26, 0x25dfdbfc, {0x5}, [@generic="594e06aaaafa0a37d3639e9a8eecf48df73e5596578c68c6dd420d9e39d3efcb06dd2426748564014b09788e318d0c0240a1aa5214a2bb252b0bd1899c8714a1ce37ff679789866e1273b6d8392806242a5e95b9445d255e8d1b8ffec36ebbbafa6a9179", @nested={0xc9, 0x7d, 0x0, 0x1, [@generic="c6c72288accd373c9620478229c031253604cbcbc68f06a3945d1b372899895a457943aaaf72da0a8102c679dcc15325f41c2d49a30a7b5c9d5c4a67f49395ad3d979d27d72496c7618a27e7dc83775ecb4e90e6ddf3dc7f74d884ef2b025d519a2d86e092c79191abe2cd1c9c30b6237901946af9b54f56ee6145aa1a14130377334cb88be001dd44c4428d4013e76517e1353c5d2f4c30c1507f1e8e09d64d24", @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe4}}, @typed={0x8, 0x12, 0x0, 0x0, @pid}, @typed={0x5, 0x7d, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x3f, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x21, 0x0, 0x0, @str='%(J\x00'}]}, 0x154}, 0x1, 0x0, 0x0, 0x8050}, 0x80)
fallocate(r2, 0x0, 0x0, 0x1000002)
ftruncate(0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
lseek(r4, 0x800, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x4}, [{}, {0x2, 0x6}], {0x4, 0x2}, [{}, {0x8, 0x3}, {0x8, 0x1, r6}, {0x8, 0x1, r7}], {0x10, 0x4}, {0x20, 0x4}}, 0x54, 0x3)
sendfile(r4, r5, 0x0, 0x100000001)

01:00:17 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:00:17 executing program 1:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
flock(r1, 0x2)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'wg0\x00'})
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x1, 0x1cf})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r2}}, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00'})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0), &(0x7f00000004c0)='./file0\x00', 0x200, 0x1000, 0x1, {0x0, r4}}, 0x801)
r5 = socket$inet(0x2, 0xa, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4)
dup3(r5, r0, 0x0)

01:00:17 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9064d68a1d688cb564c5100107341e4376c1319a3cb91015718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af1589080dab9e300e7373804caf35b65ecb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195cdd6e5a3ec6986122d762e9332637b2"], 0x34}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = dup2(r4, r4)
r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1})
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
r7 = eventfd2(0x8, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2})
io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0)
r8 = fsmount(r5, 0x1, 0x72)
execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E/\xc6\x17gB0Qim\x82u\x0fZ\xa9\x14\xf5\xc7X\xa9\x00\xb7\xaf\xcfouN\xbd\xb2\t^\xbe&~\xa7l\xfa\x036\x1c\"\x80\xfc/\x9b\x95\xf1!K\xc5{\xe7\xfdB[\xca\x87\x9bc\x98dg\x1a\xa1\xaa\xb4\x19\x7f\xa7\x90y\x9fq\xf5\x8a\xa9 \xa6\xdd\xf0+gb\xa6g\\\xec\tz\x06\xdf\x1a\x9c\xc9\xf7\xcc\x85\xb4G\xe9\xd3D\xf4\x8c\n\x17\xd5\x00\xf18\xb3T', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f0000000940)=']\xadt\xe0\r\xa3\xd7\xe8\x91\x90\n\x03_\x85\xa9\'E\xae\"\xeb]DE\xa3w\x8b\x94\xf7Yf\x03\x00\xd2:-\xab7\xd0\xf6\x0e\x903U\xe1\xe2\x8cS*HC\x17\xa0}@\xf4.\x87]\xed\x1f\x1e\xe8;\xfd\xee$\x8f\xba\xa5@\"\x93\xf7yR\x95z\x95\xc4\x03{\x11\xbe\xb3e\xb8B\x13\xa3uh\xcf\x11\xc7{Y\x0fp\x031\xb1/b_mq\x96\xccc\xa7\xbb\xb4T\x00J\xd7\xb8\n\xd4\xd9B\xa9\xec\xc5\xb5\x0e\xf1Q\x03\xbcX\x8d\xb2\xf6^\xb9\xc8\xa5\xdc\xa5\xcb\xde\xd3\xd03\xcc\xbe\xed\x9b\xbd\xcbb\x91\x98\x80\xe1X(t\xda\xd3F\x02\xa9\xa0\x81\xce;{\xfa\xba\xa3,{\xe87\xf6\x0f\xf9M\xb5mz', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000)
openat(r5, &(0x7f0000000240)='./file0\x00', 0x200, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r10 = dup2(r6, r5)
openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0)

01:00:17 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03030000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:00:17 executing program 6:
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='-\x00', 0x2, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4080)
sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x200000000000000, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xee, 0x3, 0x0, 0x3, 0x0, 0xd3e6, 0x10000, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x4, 0x10000, 0x5, 0x7, 0x2, 0x4, 0x1, 0x0, 0x20}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x4)
close_range(r0, r1, 0x2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x5}}, './file0\x00'})
readahead(0xffffffffffffffff, 0x8, 0x40)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x30, 0x4, 0x15, 0x0, "fd22fac34f56905718f5d9db6df31691dcac92b8ce754bb08fd62d8de53e4e85ab749b5dbec5acff051297507b9d113c0348af4d2888512c777d2748883251f3", "4a994d0d901eca9449bc4091932b28aebab37c6cf1bebf911930592d5be0a3ed", [0x1, 0x92e]})
close(r1)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x101081, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r0}, './file0/../file0\x00'})
r5 = epoll_create(0x7)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\'\xda-\x87\xca', 0x0, r5)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0)
ioctl$KDGKBLED(r6, 0x4b64, &(0x7f00000003c0))
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0)
setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000440)=0x20, 0x4)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x80, 0x8001, 0x20, 0x8, 0x11, "d74fe9119c823335"})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000500)={0x7, 0x80000001, 0x800, 0x4, 0x81, "f73f057781faaa0cf2df489d51f9d05ddc65f1", 0x7ff, 0x7})

01:00:17 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03040000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1845.632625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1845.673688] sg_write: data in/out 67361968/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1845.673688]    program syz-executor.7 not setting count and/or reply_len properly
[ 1845.709267] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
01:00:17 executing program 6:
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000000c0)=@generic={0x2, 0x2d7c0000, 0x8})
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r4)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaabfb, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25, 0xb8}, {&(0x7f0000000240)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x5}], 0x8011, &(0x7f0000000140))

01:00:17 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000140)={[{@utf8}, {@shortname_lower}]})
chdir(&(0x7f00000000c0)='./file1\x00')

01:00:17 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03050000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1845.798178] sg_write: data in/out 84139184/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1845.798178]    program syz-executor.7 not setting count and/or reply_len properly
[ 1845.803972] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1845.803972]    program syz-executor.6 not setting count and/or reply_len properly
01:00:17 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000000101040000000000000000000000000c0002800600024000eaff00"], 0x20}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1d0)

01:00:17 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:00:17 executing program 3:
r0 = syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x7, &(0x7f0000001740)=[{&(0x7f0000001800)="603310d5ff8a86b9e033846e8008200b6ba9c745ea116ddeb5972154420e4953470493cb8357d88ab6185b79e38822f37cde0c9062e6afa47959e62390def96caf7ca09cf149a6387bec9fd57e39473337f77dff6d065c27ea69949661086bbdf35183145430a2183fe4aa7df8ea0555994bf9a31936051b199610c523ee5ae416049b8606e32ec41a12cc14e3274b6f639dc9b648cf0c5bcc70fb64ed1520800c027b86a2653f989738429d47b9dd65b37c5c8b57d5d6e99dc36c3381862e7e0a5f7266b5aa75a9d23a539afd", 0xcd}, {&(0x7f0000001a80)="5eb06c55c1a7419f8acb8a4c2bfb8bb0ee242baa2d07910631ed524a9edf09fb4724693232b15e3cb50a4201a33011cfb2ebba413b7ad728093c4c85c53c3dbe44a145532eaa9c77b6504ec87ea206fecfe135089bd082b001555f1c23b07477cb20e29ab5e1e0b3093bd8a0519c62ac0199ebf6eda8af052f811ecac7320614e0862bc50338ce09f40d39dbef2a17f2ff3ba90e6943a4007681772845a82648f4c8f67f640de6c79ec15cdd678ea7480916544fee812bc5dd3c4ce20038f7aac89b27db974786781b3ce1edfbb59d589da657a73a6dc5a171b1726931ce3b57eb4cca440036", 0xe6, 0x2}, {&(0x7f00000004c0)="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", 0x1000, 0xac}, {&(0x7f00000014c0)="b7ac705643d2ef219d77eaa93d6786228d3dbb53c651e3e5f9d543419cd0e6f15d92008f8da10c85b1e57495e989b4b179c78bbad12c080ef6abea580503ec670c81a98ac4be6948ac46a4a73097b34a0bd89aa71c5c1cdb4d9b4ed1", 0x5c, 0x3}, {&(0x7f0000001540)="eaff0f4969dee3103c43af49065577bded724a6928e8b0c634469f8b897c496c8de0c3ada42efd6023fd7241d8b5b00d0bf4da87d02b2f27e6f6aa90b73c59a9ab7226ef652b10b3217ac556d19744728c9815b7f5a484be0ce5e41be4075652abbd47fcf46be0d634d5eb170813da48d32e1587038f4ad077cb67cb66c94f7d2e03ef60642cc7f0efc3bdad15f92fb22ea6c9380cdcc60c894fd51977ce228dff689e4e41fe2e46f49eb63519c6c6462666029ac6f4c758f38a56a12efed0bb39bfad7cd9273d74284378000000", 0xce, 0xfffffffffffffffc}, {&(0x7f0000001900)="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", 0x16d, 0x3}, {&(0x7f00000016c0)="79b4eac3ebc299bb90734126325d05c96364e53f243a7b27e84ebb3ba1da09ee2afa790e13d08d656bee6eaf4713a9fbb91c0d40a0590318af4de546efc161d3cedec458c2189c812d1ab82f2d51c7fdc3329009ac174b746afb21916d71b69d48f9f6f99ac78bd60fc411a7831d23baa719b3e6cd1410", 0x77, 0x4}], 0x3005493, &(0x7f0000012900)=ANY=[])
execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='ext3\x00'], &(0x7f0000000300)=[&(0x7f0000000140)=')@)\']\x00', &(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='ext3\x00'], 0x800)

01:00:17 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03060000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:00:17 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0xfffffff8)
splice(r0, &(0x7f0000000040)=0x9cf, r1, &(0x7f0000000200), 0x1, 0x2)
r3 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x1000)=nil)
syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1845.879195] sg_write: data in/out 100916400/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1845.879195]    program syz-executor.7 not setting count and/or reply_len properly
[ 1847.680427] Bluetooth: hci3: command 0x0405 tx timeout
[ 1854.273356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
01:00:35 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfff, 0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3f, 0x4, @perf_config_ext={0x7, 0x2}, 0x10, 0x40, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0xfffffff7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10200, 0x108)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[], 0x10)
fallocate(r0, 0x3, 0x0, 0x30000000000)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x185101)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000700)={"2843341570364a66c1bcf3fdcc85f81d", 0x0, <r4=>0x0, {0x4, 0x68f}, {0x80, 0xffffffff}, 0x7, [0x1, 0x6, 0x9, 0x8, 0x400, 0x5, 0x9, 0xffffffffffffffff, 0x100, 0x3176, 0x6, 0x2, 0x6e, 0x1000, 0xff, 0x5]})
r5 = memfd_create(&(0x7f00000000c0)='/dev/full\x00', 0x1)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f00000002c0)={"08afc4b8c2fa101ecd00000000008000", 0x0, <r6=>r4, {0x9, 0x988}, {0x0, 0xffffffff}, 0x9, [0x1, 0x3, 0x3, 0x6, 0x4000000000005, 0xbaf4, 0xa9, 0x0, 0x101, 0x5, 0x5, 0x8, 0xcc, 0xba, 0x81, 0x2]})
r7 = epoll_create(0x7ffd)
readv(r7, &(0x7f0000000100), 0x1000000000000073)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f00000001c0)=r8)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000003c0)={"e54e477a696d2cc7e8e14ac6378a00cd", r6, r8, {0x1, 0x2}, {0x100000000, 0x7ff}, 0x8001, [0x80000000, 0xa0e7, 0x8000, 0xffffffffffff9b1e, 0xf23d, 0x3f8, 0x7ff, 0x842, 0x5, 0x100000000, 0x1f, 0xffffffffffffffa9, 0x1, 0x1000000000000000, 0xff, 0x10001]})
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000001b80)='/dev/full\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x69, 0x0, {0x20, 0x4, 0x8}}, 0x14)

01:00:35 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x29)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x600401)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x1e, 0xe21, 0x0, 0x0, {0x7}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x1c}}, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

01:00:35 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b6"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:00:35 executing program 0:
syz_emit_ethernet(0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa00aaaaaaaaaaaa810000008ba8a7ea88ca"], 0x0)

01:00:35 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x100, 0x70bd29, 0xd3c, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ffffffff000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
syz_io_uring_complete(0x0)
r2 = accept(r0, &(0x7f0000000040)=@x25, &(0x7f00000003c0)=0x80)
syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x2068}, {r3, 0x2100}, {r2, 0x9080}, {r4, 0x10}, {r0, 0x1000}], 0x5, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0)={[0x3]}, 0x8)

01:00:35 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX])
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x800, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4001c0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, r4, 0x8000000)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002480), 0x800, 0x0)
ioctl$CDROMREADAUDIO(r6, 0x530e, &(0x7f0000000ac0)={@msf, 0x1, 0x1, &(0x7f0000000a80)=""/1})
dup3(0xffffffffffffffff, r6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

01:00:35 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03070000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:00:35 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x600081, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003)
r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x39d1, 0x10, 0x2, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r6=>r5, {0x5}}, './file0\x00'})
pipe2(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x4000)
recvmmsg$unix(r6, &(0x7f0000003d40)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000900)=""/187, 0xbb}, {&(0x7f00000009c0)=""/25, 0x19}, {&(0x7f0000000a00)=""/187, 0xbb}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000bc0)=""/141, 0x8d}, {&(0x7f0000000c80)=""/85, 0x55}, {&(0x7f0000000d00)=""/32, 0x20}, {&(0x7f0000000d40)=""/41, 0x29}], 0x9, &(0x7f0000000e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001640)=[{&(0x7f0000000f00)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/174, 0xae}, {&(0x7f0000001080)=""/193, 0xc1}, {&(0x7f0000001180)=""/101, 0x65}, {&(0x7f0000001200)=""/209, 0xd1}, {&(0x7f0000001300)=""/96, 0x60}, {&(0x7f0000001380)=""/159, 0x9f}, {&(0x7f0000001440)=""/215, 0xd7}, {&(0x7f0000001540)=""/237, 0xed}], 0x9, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001800)=""/27, 0x1b}, {&(0x7f0000001840)=""/110, 0x6e}, {&(0x7f00000018c0)=""/121, 0x79}, {&(0x7f0000001940)=""/154, 0x9a}, {&(0x7f0000001a00)=""/141, 0x8d}, {&(0x7f0000001ac0)=""/249, 0xf9}, {&(0x7f0000001bc0)=""/121, 0x79}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/62, 0x3e}], 0x9, &(0x7f0000002e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000003280)=[{&(0x7f0000002f00)=""/124, 0x7c}, {&(0x7f0000002f80)=""/220, 0xdc}, {&(0x7f0000003080)=""/254, 0xfe}, {&(0x7f0000001d40)=""/3, 0x3}, {&(0x7f0000003180)=""/181, 0xb5}, {&(0x7f0000003240)=""/59, 0x3b}], 0x6}}, {{&(0x7f0000003300), 0x6e, &(0x7f0000003880)=[{&(0x7f0000003380)=""/173, 0xad}, {&(0x7f0000003440)=""/13, 0xd}, {&(0x7f0000003480)=""/113, 0x71}, {&(0x7f0000003500)=""/104, 0x68}, {&(0x7f0000003580)=""/205, 0xcd}, {&(0x7f0000003680)=""/237, 0xed}, {&(0x7f0000003780)=""/194, 0xc2}], 0x7, &(0x7f0000003900)=[@cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000003980), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003a00)=""/90, 0x5a}, {&(0x7f0000003a80)=""/243, 0xf3}, {&(0x7f0000003b80)=""/135, 0x87}], 0x3, &(0x7f0000003c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x6, 0x0, &(0x7f0000003ec0)={0x77359400})
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0xa6, 0x64, 0x0, 0x0, 0x8, 0x80400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc572, 0x2, @perf_config_ext={0x8, 0x5baa}, 0x40100, 0x40000000000007, 0x3, 0x9, 0x0, 0x6, 0x4ff, 0x0, 0x7, 0x0, 0x802a}, r8, 0x6, r7, 0x3)
inotify_add_watch(r6, &(0x7f0000000140)='./file0\x00', 0x140)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315)
inotify_rm_watch(0xffffffffffffffff, r1)
close(r5)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x8013, r2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r9, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1863.868836] sg_write: data in/out 117693616/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1863.868836]    program syz-executor.7 not setting count and/or reply_len properly
01:00:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}]}, 0x28}}, 0x0)

01:00:35 executing program 6:
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0)
ftruncate(r0, 0x1000003)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x1, 0x2, 0xfffffffffffffffc})
getpgrp(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x300c)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000140), 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="2c6e8f657874656e642c76657273696f6e3d39703230bdb966090000000000000065723c79ab0aa4ffd87b81cc42fd2f8e184c2b0ddbde386bb1a76f67020f662bc62b87e3db204ee0aac2063a3b92a6025bb53989afe1070000000000000015120346d447fdc43a67bfd814145279292b3712df7029da3adc6296e9e4337c8cfe26daabe737e7303eb1f9f6f8dabcfb9483b688c690e55171010bcd4051e9f691c54b0129ea82b8109d3bd3dc4600a1588eb8643ea6845a82e825519d7ba7878943a11131da599010152234708ceecd4ba4e41024284b1f64770bbec3cd83a663000000000000", @ANYRESOCT=0x0, @ANYBLOB="2c66736d616769633d3078303030303030303030303030666666662c736d61636b66737472616e736d34f600000000000079e60d7218a5194155fc1bb72d662d0000000000002c00"])
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0)
dup2(r0, r1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb)

01:00:35 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03100000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:00:35 executing program 4:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0/file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0xff)
dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
connect$inet(r1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
getrandom(0x0, 0x0, 0x0)
shutdown(r1, 0x1)
syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x198c, 0x2, 0x2, 0x1000ae}, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000001c0))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005800)=0x4, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0x7, 0x8000})
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x3ea)
unshare(0x48020200)

01:00:35 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65)
dup2(r1, r0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x2c}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={<r2=>0xffffffffffffffff, 0x7ff})
eventfd2(0x7ff, 0x800)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x5, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="01", 0x1}, {&(0x7f00000001c0)="ec9fb690f4a13e532714f03ce8008e2cc778087918d41ec2d47933bf3a7c176b96fc704fa613594ded8f8136d306d64eaef44b7afa3de90958b7788f148ffe8698a6387ea42f2d8b75d9bb439c921c05", 0x50, 0x367}], 0x0, &(0x7f0000000300)={[{@map_off}, {@nojoliet}, {@block={'block', 0x3d, 0x400}}, {@session={'session', 0x3d, 0x40}}, {@overriderock}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
write$bt_hci(r2, &(0x7f0000000380)={0x1, @sniff_subrate={{0x811, 0x8}, {0xc9, 0x45, 0x0, 0x4}}}, 0xc)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x70bd27, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

01:00:35 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b6"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1864.051119] sg_write: data in/out 268688560/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.051119]    program syz-executor.7 not setting count and/or reply_len properly
[ 1864.066435] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[ 1864.123622] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
01:00:36 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r3, 0x0, r4)
dup2(r2, r3)
add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
fcntl$dupfd(r1, 0x0, r2)
pwritev2(r2, &(0x7f0000000580)=[{&(0x7f0000000140)="9e74ba02abc7d767651827904d488a9fab5d8a5da8bd6c4c5f8523df0e7137592f46e1c9eadca5b28c94bd0dfa41f193d7955d4a20ce750a90ead48f742d090fed3c2d038e53892b281c6e5be2d399e7e2376ecc61d2480e61c8bba11a4ecbbe0cafc4b6892a7b8ad4c61c25e14bdf085e4628254ecf33a3cfbdd6e68b450cfc55797f14b029818e7d5e102a9684af2f69e5137c8cd6aa4981719b68229e18bedef5cee807753a58c504c62618943827d0aa0c64c4870b23e00fbc6b7939f7b56ff3141844d6d3730457fac96c6db356b3f616cf6f45b3708b06c31c2879287aadb01dd56fea9ec62f9f52e52adc8678cc43915fdc", 0xf5}, {&(0x7f0000000300)="da9516d3da834558915bee88f0606c72dfef127720c5b0a8b7fd5d336d284af5f11ff09ae932e2b3c1a96b40cd66da6e3b0a794a158002c9a5016a6033bcb6edcce90d52270990fc6d883984c3242893e07f26b9d1e66c9134900665e55efce3a8f42c91cdff2bf250c1c0bde7ff0085136bd2dab844f8a282fed523df07bae473bb9f1fa54c3b3c11d7e72cfa72f0ae", 0x90}, {&(0x7f0000000000)="a71e5cc459538baa22daf688e237b6e2f02aba26ac3a23b90c4fcdbe03a03b96edeaf794fb23517614ad2cfae3757ee3704a", 0x32}, {&(0x7f0000000080)}, {&(0x7f00000003c0)="e127ad88480412439885cc2c53e5a4a21f2b7bf94f54044c87f130e8ed3f76e53310dd538fe6db8bde797008f7979123d614e5e4159c4674fe50616f745cef63a9469d406401ad0ca2737cc6a323d0efe52eda7c7fe71e04fdc7620d55d15f9890fc7b67d157b69b5366eeebceb2c4221352a3875872998560f0d0faf5f4dc1692c858c3b407817087a8074318dda9bd942b34097c2351ff", 0x98}, {&(0x7f0000000480)="dc0a05ef92b12cbdc561fccf8479d9579fd64fda1e687a544b600a374ae14cf09d28e964c8bfff84ba467831c8996096df12d26e2207fa6f7c80986c12a7d5286cb196808f38756322b1ffa512c4c3c3a208e4a8f01bde97dc20cc5bdcb13bb5b6a0abe807ff3e28b7cfa992a3c5bb2a7ba882deace7b15b505805dbf9cfdd92c981cd64b85249ac0976ad652ee20ca05f51d252f2710abb27d4008243ad7c922fe7ec657a2b4b4e3da919636c8d928989401f6954283151c12074bd1886dc6b31369637e833bb014d80d6e1e7706a7bb9c1", 0xd2}], 0x6, 0x56fd2a15, 0xfffffffc, 0x10)

01:00:36 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc031e0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:00:36 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x4, 0x0, 0xfd, 0xfffff02e}, {0x6, 0x0, 0x4}]}, 0x10)
r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xff, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="dc84599cafd08481cddce823d6f815ea17cd78783a3c7e23e4b8ce01010c53455df433533bab9c498ecd0ad8fba51e47c1629f965c2f583b69dc68171d4d4f9afe296a2856bfdbe1045da8be3eeb69d645b644548d69301a387daa1eead79e1b16240ca3dc38b29b13b7f21bd13b699396e70de42a55ed6995186ed6fef6026242f0c151a9f5be0f8e00c4dedb319d5170eccf1a08afe241dd05e5a374fca8bba067dcf1ff8658ad25f8", 0xaa, 0x5}], 0x10, &(0x7f0000000200)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x33, 0x33, 0x2d]}}, {@huge_never}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_within_size}, {@size}, {@gid={'gid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0x55}}, {@huge_never}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]})
close(r1)

01:00:36 executing program 3:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x132}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
pipe2(&(0x7f00000000c0), 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x385003, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xff, r3, &(0x7f0000000180)=0x80000000, 0x5, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 1864.330183] sg_write: data in/out 503569584/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.330183]    program syz-executor.7 not setting count and/or reply_len properly
[ 1864.348403] sg_write: data in/out 503569584/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.348403]    program syz-executor.7 not setting count and/or reply_len properly
01:00:36 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b6"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e3e1446562e9d03e408d1ea655783e34d349f69cab76130588f8047c1ffb4c58e75c4b38b80fc608530602fefcca1e8090f2e97d416035cb160bb860230e5e2a84a4e4b97b2c98bbf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1864.365379] tmpfs: Bad value for 'nr_blocks'
01:00:36 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
openat(r0, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0)
write(r2, &(0x7f0000000240)="01", 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
poll(&(0x7f0000000040)=[{}], 0x1, 0x5)
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
mq_timedsend(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20, &(0x7f00000001c0)={r4, r5+60000000})
r6 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0)
copy_file_range(r6, 0x0, r3, &(0x7f0000000280)=0x10000, 0xc3a, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), 0x0, 0x0, 0x1)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
openat(r1, &(0x7f0000000300)='./file1/file0\x00', 0x400042, 0x159)

01:00:36 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1812c2, 0x21)
ftruncate(r0, 0x800)
openat(r0, &(0x7f0000000140)='./file1\x00', 0x20000, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r2, 0x0, r3)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r4, 0x0, r5)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000180)=0x509954696fe446f0)
sendfile(r1, r0, 0x0, 0xfffb)

01:00:36 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc033e0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1864.510804] tmpfs: Bad value for 'nr_blocks'
01:00:36 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00')
bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @private0, 0x82}, 0x1c)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x420000, 0xc8)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
openat(r2, &(0x7f0000000000)='./mnt\x00', 0x80000, 0x62)

01:00:36 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x1)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r4, 0x80, &(0x7f00000001c0)=@ieee802154={0x24, @none={0x0, 0xffff}}}, 0x1000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
unshare(0x48020200)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x60, 0x80, 0xfd, 0x0, 0x1, 0x20000, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0xcc87, 0x3, 0x7fff, 0x2, 0x0, 0x4, 0x5, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r3, 0x0, &(0x7f0000000280)="bf54a4fb62e48151544bbe267e8bb5a89e7edc3ba0d32e7106a72d0e22f01f29f273cda0a0e6c637bc14cd17a50e6b83bab26c7161bbb5af2ad08c86c855f7a6f2781933cd47cb9c4147dc79df52392e3a66eb754abe9b2f25b10a30941a5115ae55006ba0c825688d1e31f912c5c989b36e238d26c91f3c356f233fd9a64d9817193e65146370d8d44d8a9de91fb05a1d4ecc339c527d05a16d439b769587b6a34f41f94a4a4afc3dae090b7e1208bef72beb7143e5d5a16361f0adb96f1ff88450227a1fe4916dad7f89864a6cdd822b7f1d7708f3c21eb8d80d0b3e9cf329951516a4e6e7146af1a44210a9f0681b", 0xf0, 0x2000, 0x1}, 0xb)
unshare(0x4000000)
r5 = signalfd(r0, &(0x7f0000000180)={[0xfffffffffffffffd]}, 0x8)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6b86, 0x8000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x6}, 0x0, 0xe10, 0x8000, 0x5, 0xff, 0x92, 0x5, 0x0, 0x7ff, 0x0, 0x5106}, 0x0, 0x4, r5, 0x6)
unshare(0x8030400)

01:00:36 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1864.614647] sg_write: data in/out 1040440496/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.614647]    program syz-executor.7 not setting count and/or reply_len properly
[ 1864.645276] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.645276]    program syz-executor.6 not setting count and/or reply_len properly
01:00:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x81069300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}], [{@fsname={'fsname', 0x3d, 'cache=mmap'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, '!'}}, {@obj_type={'obj_type', 0x3d, 'cache=loose'}}]}})
execveat(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', &(0x7f0000000140)='fscontext', &(0x7f0000000180)='cache=mmap', &(0x7f00000001c0)='$g\x00'], &(0x7f00000003c0)=[&(0x7f0000000380)='h\x00'], 0x400)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={<r2=>r1, 0x0, 0x6, 0x7})
r3 = syz_io_uring_setup(0x3a72, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100))
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
getpeername(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x80)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x13, r6, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r7=>r3, {0x2}}, './file1\x00'})
unlinkat(r7, &(0x7f0000000500)='./file1\x00', 0x200)

[ 1864.703162] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.703162]    program syz-executor.3 not setting count and/or reply_len properly
[ 1864.754958] 9pnet: Insufficient options for proto=fd
[ 1864.768651] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.768651]    program syz-executor.3 not setting count and/or reply_len properly
[ 1864.811810] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.811810]    program syz-executor.0 not setting count and/or reply_len properly
[ 1864.860833] 9pnet: Insufficient options for proto=fd
[ 1864.874163] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1864.874163]    program syz-executor.0 not setting count and/or reply_len properly
01:00:53 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2a, 0x400, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}}, 0x4000)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xc080)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x78}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x37}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_IE={0x14, 0x2a, [@mesh_chsw={0x76, 0x6, {0x81, 0x2, 0x11, 0x89}}, @cf={0x4, 0x6, {0x4, 0x5, 0x401, 0x86a}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x2400c002)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r5, 0x600, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffff7, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8890)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00', <r9=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x800)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x40)

01:00:53 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x93240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000001c0)={0xbdb, 0xfffffffffffffff8, 0x2})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0, 0x20000040}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)="8ce0912f7abb2aa59cb460a104b3fa5e227e1142072d82ce29fe39d85e946a3245cf3642119d5a09d496a4d28a13b6b86209ce5dab621ecf4e28217ab3c815300382b03078c54672a78f15faca8e5ab2d01bbf01261ea10d33680815e908ddb169738210561e3757d405b5b13fec88b881d965065141b89751b6281c69ca0df1857d7b12c57867c69bfe1f48f2a59dc3", 0x90, 0x0, 0x1, {0x0, r5}}, 0xfff)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0)
r8 = syz_io_uring_complete(0x0)
io_uring_enter(r7, 0x630a, 0xce52, 0x2, 0x0, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={<r9=>0x0}, &(0x7f0000000140)=0xc)
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r9})
perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x60, 0x65, 0x27, 0xf3, 0x0, 0x3, 0x22020, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x4}, 0x2800, 0x95a, 0x6, 0x5, 0x7, 0x0, 0x8000, 0x0, 0x7, 0x0, 0x80000000}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
r10 = socket$inet(0x2, 0x1, 0x0)
dup3(r10, r3, 0x0)
io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x0)

01:00:53 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x101)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r0, 0x8, 0x0, 0x8000)

01:00:53 executing program 1:
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="162f", @ANYRES16=0x0], 0x24}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, 0x0, 0x4004801)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="010200000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800020500530000000000"], 0x2c}}, 0x0)

01:00:53 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03480000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:00:53 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e3e1446562e9d03e408d1ea655783e34d349f69cab76130588f8047c1ffb4c58e75c4b38b80fc608530602fefcca1e8090f2e97d416035cb160bb860230e5e2a84a4e4b97b2c98bbf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:00:53 executing program 3:
r0 = epoll_create1(0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000019})
r2 = epoll_create(0x3ff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x20000001})
r4 = getpgid(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x7f, 0x1ff}}, './file0\x00'})
r6 = fsmount(0xffffffffffffffff, 0x1, 0x80)
kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000080)={r5, r6, 0x401})
dup2(r3, r0)

01:00:53 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r1 = syz_io_uring_complete(0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
fchown(0xffffffffffffffff, r6, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x100)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000004f40)=ANY=[], 0x30e8}], 0x1, &(0x7f0000000c80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x58, 0x20000000}, 0x400c0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000038000000587100f962a1d136e046f1daea2ddff25d7613907597174edeaa140050a29df69cf380b74041e1756411d5a116e263a41c4fcdd9c24928a883e3a064cd20e31e6d05a3d2c40b90f4680d86223ad4c722546ccbe375baede4fd001bad5c85941b008370feb9ac006026e2d7b4877ec7f89a41619d1591507a46760a11", @ANYRESDEC, @ANYRES64])
r8 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="01000cb469000058cdc6fca279d994fbfe467e903fc0e8d44a06e61f07b4faa3b48a256a7345dd74984571a0741b4eee78515ea3f03650bc91f1ec130662e52db5b6ec83b34c28a1cad40600680036e2e298e3ca4cc80df0649c40ed9a769acd95fa638932054933685771a623fe5be1952f8d21faf9d1b17acb3e8298f8d2d5e2fa1f4d05b491791a6f424b84d2bafaf58ae1724765ac39cd22327be19f968397f14cc23b0ab45adc28b1de31018992cf69bcd9fe6bb04da463914257d23c2b6b66d9fa29b1d2cfe3f9993e250793dcc96a8a11f07965a475612192e9a41f23dc926944a9c6dad8402eb2333bc40e3067632fc23391e46ec32fe5a1b304a7cbb39a77", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250200000008000700", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r1, @ANYBLOB="0c0003000200000000000000080008000300000008000900010000000800020001000000221b1727a6f3fe4624d86d804b3c9d9a57068e36b5d454d542b5e54c6d5e3ce6c21012612ebdf760a55cc5e1ec1c0bb0e6a611578d16"], 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x20001000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r9}, {0x0, r11}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r3}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r10}], 0x0, "46dacd8396fe92"})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0)

[ 1882.012347] sg_write: data in/out 1208212656/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1882.012347]    program syz-executor.7 not setting count and/or reply_len properly
01:00:54 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc034c0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1882.174213] sg_write: data in/out 1275321520/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1882.174213]    program syz-executor.7 not setting count and/or reply_len properly
[ 1885.504392] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
01:01:10 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x5cc9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xc6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x0, &(0x7f00000005c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

01:01:10 executing program 6:
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x2042, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x400000, 0x78)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newpolicy={0xbc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {}, {}, 0x0, 0x6e6bb2}, [@tmpl={0x4}]}, 0xbc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000062454812295e66706812d515b77ee03e618c21d36baa3c19c093801c3f07dff26a6e6721f07f371c129fc1f8edc7cad39c3d4ccc075c1e13c7c8d34ebeeabffd593c633003ce20a23dc9182cb99c108bdc84fafd582b8e86434a415297171f26f9dd49510855056e6c94d75336c0028456d358efd836b1fd173ab863655dcf03376001793055492e55b3b91c762f4ff4832d5d929297b313f25282c103b94", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac1e000100000000000000000000090000000000000000000000000020010000000000000000000000000001ecfc330f0000000004000000000000000000000000000000e70e7416ef"], 0xfc}, 0x1, 0x0, 0x0, 0x4004804}, 0x0)
poll(&(0x7f0000000080)=[{r1, 0x19}, {r0, 0x402c}, {r2, 0x8040}], 0x3, 0x9)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0001010000000000000000004d000014fbc071921c7784000000"], 0x1c}}, 0x0)
getpgrp(0x0)
getpgrp(0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9bbb)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x400001, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r5=>0x0}, &(0x7f0000000140)=0xc)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r5})
perf_event_open(&(0x7f0000000140)={0xb4d61e49f2ecbd7c, 0x80, 0xc3, 0x7, 0x81, 0xa5, 0x0, 0x9, 0x800, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x5, 0x1f}, 0x2008, 0x5, 0x7ff, 0x1, 0x1, 0x6, 0x40, 0x0, 0x5, 0x0, 0x8000}, r5, 0x6, r4, 0x3)
unshare(0x48020200)

[ 1898.447582] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1898.447582]    program syz-executor.1 not setting count and/or reply_len properly
01:01:10 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x600081, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x4000}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
r1 = inotify_init1(0x0)
r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003)
r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x39d1, 0x10, 0x2, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r6, {0x5}}, './file0\x00'})
inotify_add_watch(r7, &(0x7f0000000140)='./file0\x00', 0x140)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315)
inotify_rm_watch(0xffffffffffffffff, r2)
close(r6)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x8013, r3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
syz_io_uring_submit(r8, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001)
io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r9 = pidfd_getfd(r7, r0, 0x0)
inotify_add_watch(r9, &(0x7f00000001c0)='./file0\x00', 0x10000000)

01:01:10 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:01:10 executing program 3:
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="7a1e36c02f277dc40403cd74b53797a417823314a52f263f21aac4d3ad651169645ec3cb3248f14867d4", 0x2a, 0x5}, {&(0x7f0000000100)="d97578d69615afe714472cc9d5f96dde06a2623f5394413dc50757a0e0ed3b2b2fddf66ff29ce0c7c8883b92f14714adea2c359b155d9321cc079d9d4aa6fa10367c76597e8aa63316d20948905fa25479ffb5fbed72849b55cc966539995dd590d67e6431f8b89517e0d171ebed9b421ff96b4f26595412abf35d75512c705af7cd46fb639bf9fdd27bd4337d0a1c7bc0c40da3893b1b0bb896b8dcd32f399b4cec0d4e55b3b5e4810527d641c0c12c2c3cb56e44efb369a14e9634ef0c88f98fbfe1b61e233f746aeb3f768a94", 0xce, 0xca0}, {&(0x7f0000000200)="643d3ee37374c3ad12dd847b95b3fa4657e74c761cab63", 0x17, 0x5}, {&(0x7f00000002c0)="598630978639c26ce1d60522158bcae79190b42463d5f660b6fc20f557c2c31f56013ba61e84012d2dfcba89e9da8336453a3591a92be0f1070d24ffd563a4", 0x3f, 0x5}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='usefree,euid<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b66736465663d747275737465642e6f7665726c61792e6f7061717565002c00dd89e0962a01d00b7bd41ceb302224cfd3dcf971dd67e384f403000000a89658eac8236035e84767ae5b5de8d25ac106522ca7ffef56ee49c8a2df3a908cb54b751958da0e10e3709398151cb23456b3f8e0976041ba10e33ded3d9a"])
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3)

01:01:10 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0x94, 0x0, &(0x7f0000001300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x101, 0x2}, @flat=@weak_handle, @fda={0x66646185, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x8, 0x2, 0x20}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/4096, 0x1000, 0x2, 0x14}, @fda={0x66646185, 0x0, 0x2, 0x30}}, &(0x7f00000001c0)={0x0, 0x20, 0x48}}}, @free_buffer], 0x78, 0x0, &(0x7f00000013c0)="cfb2ae266308055f5fc5d879f7ae860a0e53e71ac60ff3a5d5371c764a9648da55cfcc9222a0ed76a8a1984097f26980544b7ca76c833eafee23264a3d14ff4a7f0e22d8927b4deecb0f500dacb0ff5b3770230d71c82773dfc4411c18d3b377f1a3246e9a9f13b98258bfcaea102efc698ad06c64f1a2f0"})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000440000004f80100200040000300000000000000800029578ec3f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100035ec70325132510000ec7032510300000000002e2e202020202020202020100035ec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200035ec70325132510000ec70325104001a040000", 0x80, 0x11200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21200}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51200}], 0x0, &(0x7f0000010f00))

01:01:10 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03680000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:01:10 executing program 0:
io_setup(0x0, &(0x7f0000000080))
socket$inet6_udp(0xa, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @remote}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0)
read(r0, &(0x7f0000000000), 0x1b4000)
keyctl$chown(0x4, 0x0, 0xee01, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff)
r2 = getegid()
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r1})
keyctl$chown(0x4, r1, 0xee01, r2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000380)=0xc)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010004000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0xee00, @ANYBLOB="0200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="10000000000000002000010000000000"], 0x74, 0x1)

[ 1898.472205] FAT-fs (loop3): Unrecognized mount option "euid<18446744073709551615" or missing value
[ 1898.475159] sg_write: data in/out 1745083568/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1898.475159]    program syz-executor.7 not setting count and/or reply_len properly
[ 1898.526396] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1898.526396]    program syz-executor.1 not setting count and/or reply_len properly
01:01:10 executing program 3:
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8040)
accept4$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14, 0x80000)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x220, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="30010000", @ANYRES16, @ANYBLOB="000326bd7000ffdb012501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbdeadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd03f3d6e900ff7f00fc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17ce3bb90511551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29d0000000096ef"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r1, 0xf441d5139846b434, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4015)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000b40)={&(0x7f0000000500)={0xa, 0x4e21, 0x5, @remote, 0x721f}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000540)="004514b0c3a6be528780c542305498d7f5ad4d73f24c5bf403a16580995a6b9c9f8d50ac3879bc", 0x27}, {&(0x7f0000000580)="9a5736963757e1bbaa23c921e19476cf1ead238f31da18f953feeab0140b8740b30b7e1c", 0x24}, {&(0x7f00000005c0)="d93faac3eab7d82ebb3a23fb1624c58ce5171390854668aa3e72fc8f45bee789d69a7a392403085a8f939093feb17acf5c4cb2473345fcc8e72ed56289a0a07022c9588a08726e745b7cd5cbd1ec", 0x4e}, {&(0x7f0000000700)="3141dca2c4a5533418acee08125e3c47b5906c402e668fe835634e51600037dd00b916b9a392020af80ceedaa5540bbca41f71233bb1283054c596973cf0ff7ea3e633f1d66405d0c93d7db3e5b721a970401809d5c38a94eecaed7bee614d95ecf6771b1acdc481490dbb020bc870925ee980d38b5b19bd0bd721311aaf702948321eea777be13a82f494762428d65005a2ac720d64f326df5628bf172a884b59ccd16c771dbec6581ba1b67dcd3cd09c500c9ffce747d37d2ae838dad33f3c0b3e710f2ca57e87", 0xc8}, {&(0x7f0000000800)="0f4cbae8611cc72bfe4a26abb6444c1eaa9279d7c388150124484608f551f2870e37b6042b7da803f531a6817d740dcee5c850ecf318dcb8c2e3d7e791d93d1c3053f609aa2fdd206e1ceacbb0da058c66f55be1dbd7680c539606696e3edcafe8cd425c2cd19047dfa4d309f6d8a78ff576edb0e90d3c034a2a8c45bccbc1eddbd06651f26513a639a1", 0x8a}, {&(0x7f0000000640)}, {&(0x7f00000008c0)="7b9798d45c0fe444df70d929636f82118331d91a6f0be3beace166671802dd25e871d5d97a036340f312086179fd50b5bf2b42593de4c612b752f5df8459c647851178e29affcb256f0aabda6df4affa6b7bcface4a0b6aa3b0966d66becf092b8dd7d13518060f7caf183680d15ae7f8110d0818caffd8bcc033047e4081964f6abeb47390e5441e727c64a450e7ae35602733481e75236e3b9be1527a37582b8e950b0572968591700b9e73489f3292fb517292c9ddbc7709a129222b4d55440f5e0db20bec06267d6c7293eac694a4b", 0xd1}, {&(0x7f00000009c0)="7b55118d105bf096fdfed1db60639d9fa8df19c48cdb6dba38cc3b313096e6107a42984576b99ee7c1929793d9c4f42f8233", 0x32}, {&(0x7f0000000a00)="def4603a5253e2e4dad4df8aec7c25734600c15fc7bdd3728468b61a28219c613ee4715f25f1b7cb3c7d917e9a75867ca43b39b63f93e7f1b02bc0fd2317b8e81b57c5a9c1d6792c3d322152db17d4fb329440c837e12ae8ccc96598db18d2c408cee72078a7f29d814e0f", 0x6b}], 0x9}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001d00210c00000000fbdbdf250100020058e1f427ac228a56bc00c90f3fe66cd20f0db019fd35530419306c10c4dbc57d0b913654ffed04fcea7fae2d1da0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32fd06d2267d09aae07f6db51a7ddcfe39e42a36bda4a8694badc4f48b0754e2a90b7deddf4"], 0x14}}, 0x0)
socket$inet6(0xa, 0x6, 0xfffffffb)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
connect$inet6(r6, &(0x7f0000000440)={0xa, 0x1e, 0x80008003, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, 0x7}, 0x1c)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0)

01:01:10 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc036c0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:01:10 executing program 2:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac4", 0x22, 0x4e0}, {0x0, 0x0, 0x9}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'])
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000140)='./file0\x00', 0x800, 0x4000, 0x0, {0x0, r1}}, 0x1)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x0, 0x1, 0x8, 0x0, 0x5, 0x7800, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x20c0, 0x10001, 0x4, 0x6, 0x4, 0x2c, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0xb)

[ 1898.679751] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1898.679751]    program syz-executor.3 not setting count and/or reply_len properly
01:01:10 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e3e1446562e9d03e408d1ea655783e34d349f69cab76130588f8047c1ffb4c58e75c4b38b80fc608530602fefcca1e8090f2e97d416035cb160bb860230e5e2a84a4e4b97b2c98bbf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:01:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6fe9094aa2d235e1edce3892104e69bec56d56172300"/65], 0x98a)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x2000000000}, {0x800, 0x0, 0x400000000000000, 0x0, 0x27}], ['\x00']})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000100000003000000030000000220000001000100060000000700000001000080"]})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
dup(0xffffffffffffffff)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)
unshare(0x48020200)

[ 1898.722536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
01:01:10 executing program 4:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
futimesat(r0, &(0x7f0000000080)='./file1/../file0\x00', &(0x7f0000000140)={{}, {r1, r2/1000+60000}})
lseek(r0, 0x0, 0x3)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27)
fallocate(r3, 0x2, 0x2, 0x6985)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0)
close_range(0xffffffffffffffff, r4, 0x2)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef)
timerfd_create(0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100)
timerfd_create(0x0, 0x0)
unshare(0x48020200)

[ 1898.749130] sg_write: data in/out 1812192432/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1898.749130]    program syz-executor.7 not setting count and/or reply_len properly
[ 1898.754895] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1898.754895]    program syz-executor.3 not setting count and/or reply_len properly
01:01:25 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6fe9094aa2d235e1edce3892104e69bec56d56172300"/65], 0x98a)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0})
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x8, 0x4, 0x5, 0x0, 0x4, 0x2220, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x9208, 0xee, 0x2, 0x4, 0x3, 0x4, 0xeb89, 0x0, 0x2b, 0x0, 0x3f}, 0x0, 0xf, r1, 0xb)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r5, 0x401, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYBLOB="5836c8a3e4174e502571d8a684fb377b3983761a218d049d0d691f6bc2d89ed403e8fb8a778bab96af9d0d25bccc5353980ae7889513ca23884abf8d46f889b138fc32d8a17d5c50999d89fa7a82858171fc517d84e22b77fe3883d699a465817ef3b16aa9d2c6d82ce3745c25316273fb6b5051191d10eda141bc960074e268efbe54b85c0d731df1a50ae5ca1ccb0298af3dd683956338764983b7d3cad659db42c7c3d1be6a948910513fdb59fc80f32bcd8978939cce013785001c7a11a3730749e2e0ab09307fe497a6a5ef578e7466822bc18b03ca1a7e5dfd6136b987a8f22c396f1c6187190d620a9aa18fb6797308672702a4000000008c9e1d30c184d36bf1f77fd0bceea120c7", @ANYRES32=r4]})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
socket$packet(0x11, 0x2, 0x300)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)
unshare(0x48020200)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

01:01:25 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:01:25 executing program 3:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod$loop(0x0, 0x0, 0x1)
getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp, &(0x7f0000000140)=0x80)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x1, 0x0, 0x5}}, 0xe8)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=@caif=@dgm={0x25, 0x1, 0x4}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], 0x14f8}, 0x0, 0x44881}, 0x3ff)

01:01:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setns(r1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd28, 0x0, {{}, {}, {0x8, 0x2, 0xffff7fff}}}, 0x24}}, 0x4000000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)=0x2d61)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x202001, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001fb7a345f19484db5b2ffffff7f000000000000005ad97db86ad6917200"], 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', <r6=>0x0, 0x8, 0x700, 0x9, 0x60c, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x14, 0xac, 0x0, 0x7, [0x7, 0x8, 0x6, 0x248d]}, @timestamp={0x44, 0x8, 0xfb, 0x0, 0x2, [0x26]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r7=>0x0})
getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x110, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x401}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xdb74}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x48090)
readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2)
unshare(0x48020200)

01:01:25 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f0000000340)=ANY=[@ANYBLOB="42a9ed4dbb9cdaddb93f0688440ab74933ddd8eee66b5bf16c5392ad212a97951e3bf0e88e497c438f95a9df8062859d7f68e2b163d025b8f54f99f26175b4af9db73fb3cd2bfd10a6303f651d99704ba52b7264c101ad88dbae88525ce90e2c68a3d715f26cc9e6cceef3"])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
ftruncate(0xffffffffffffffff, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='!', 0x1)
migrate_pages(0x0, 0x4, &(0x7f0000000200)=0xffffffbffffffff9, &(0x7f0000000240)=0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x145, 0x4001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x15100, 0x0, 0x9, 0xf9d6ac85e061c4bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)={0x0, 0xfb, 0x15, 0x4, 0x5, "14731104df594934e179da3497f0c6c6"}, 0x15, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10)
r3 = fcntl$getown(r0, 0x9)
ptrace$setsig(0x4203, r3, 0xfffffffffffffff7, &(0x7f00000002c0)={0x1b, 0x1, 0x8})
sendfile(r0, r1, 0x0, 0x20d315)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
fchdir(0xffffffffffffffff)
fcntl$dupfd(r4, 0x0, r4)
rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00')

01:01:25 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)={[{@gid}]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8800dbdf25070000003835b5779e23bee466529bfff3310f329fb362932d3e54d11aca78d822a2d5a5f5f5f2ab0f9450c376a50f8f812965e30e4f2a3ed11d3bc0405cd0a68a3ff61d10b94f7d78a739b7a927b1922c795de8574cce61d4cdfabe39000000a27ea926e3745391000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x40000c5)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r0 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = dup2(r3, r3)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xa001}}, 0x1000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x260}}, 0x4)
io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x10, 0x4, 0x31f, 0x0, r0})
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@sco}, 0x0)
r5 = eventfd2(0x8, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000040)={0x3, 0x2})
io_uring_enter(r0, 0x76d3, 0x80, 0x1, 0x0, 0x0)
fsmount(r4, 0x0, 0x5dcd1adb6edb7f7a)

01:01:25 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x3)
fcntl$getflags(r0, 0x1)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x40011, r4, 0x8000000)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r1, 0x10000000)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = fcntl$dupfd(r8, 0x0, r9)
ioctl$SG_NEXT_CMD_LEN(r10, 0x2283, &(0x7f0000000000)=0x1)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r11 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r11, 0x0, r12)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000140)=[r7, r10, r11], 0x3}, 0x8)

01:01:25 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03740000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1913.249581] EXT4-fs (loop0): Unrecognized mount option "B©íM»œÚݹ?ˆD
[ 1913.249581] ·I3ÝØîæk[ñlS’­!*—•;ðèŽI|C�•©ß€b…�hâ±cÐ%¸õO™òau´¯�·?³Í+ý¦0?e™pK¥+rdÁ
­ˆÛ®ˆR\é" or missing value
[ 1913.295314] EXT4-fs (loop0): Unrecognized mount option "B©íM»œÚݹ?ˆD
[ 1913.295314] ·I3ÝØîæk[ñlS’­!*—•;ðèŽI|C�•©ß€b…�hâ±cÐ%¸õO™òau´¯�·?³Í+ý¦0?e™pK¥+rdÁ
­ˆÛ®ˆR\é" or missing value
[ 1913.299730] sg_write: data in/out 1946410160/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.299730]    program syz-executor.7 not setting count and/or reply_len properly
01:01:25 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc037a0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1913.347200] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.347200]    program syz-executor.6 not setting count and/or reply_len properly
01:01:25 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1913.443206] sg_write: data in/out 2047073456/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.443206]    program syz-executor.7 not setting count and/or reply_len properly
01:01:25 executing program 3:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000800))
r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x20c800, 0x10d)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000540)={0xb})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r0, {0x7}}, './file0\x00'})
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x101100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r4=>r1, {0x53}}, './file0/file0\x00'})
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000008c0)=',#\xc8@-,[({+\x00', &(0x7f0000000900)='./file1\x00', r4)
fsmount(r2, 0x1, 0x8)
r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000, 0x3, &(0x7f0000000400)=[{&(0x7f0000000140)="3639fb808abe8e4eb9bead0077856e43452cff8625204da8360755ff488c655f722b0403f454346a0eeaf3161999122c3fe4a0fbde42f8e8e9bfac8d827e6d8bcb14dcc52543bb905735d55664e6e7f085e0121767c81c51e20ef5335deb2e459b20f98083da2856fa5a294ea030c1ffaec8e6cfce9e5f6054afd255aaa43b3fdfb9d73fbbafb7f2f8cfbb7ab06e003c76a6a1b5e09588aa700141", 0x9b, 0x6}, {&(0x7f0000000240)="2eb9ec669fbb9dbfb008eaf805772c6fb858011d2511ca5059153dfd2a82925211c4128e313720f745d45cf8af4b49645bc2e738707b99c4b32b70e6eafd9e8f63735bc812d57af5468b88853ec399f60cdc8abedd90d1853af82768c48f2023a101011d3b180129d1fa2688e1d995a2b5cb2d6f5f45f9f4c714d7e2715ed5fe0a7d9a76a1ad9f00f9d86755a113def33cd484810432f6dbee245dfda22c9135908c4218504d29d0e673d7c78ce86e211650f9a72a0dc63aee946c8c895d733ec962c7bff285aafa0faf1a9174216ecad611a9af77031d6bf43be1c3e59653efbdc6abee5d1fc2", 0xe7, 0x8}, {&(0x7f0000000340)="8a2a0757713705c880082bab10ad6cd217d7093f548874a16efcddafee80a78538e57d15c967a8370014784fefac8b9c0a0534ac87845167c7362f4e7678507e64762ce5a49c7bad5c943d4596bbbf6d1fbbe8c47901619218fa03989cd00cdbb46acce004d962885bf79982c53ec4d2ab8ba7379c88e2f548baa192bed02a9b094d60d42354f853edfc5c653aefc0c3047e6f7e30c54a7717befd95fcf75b1950737f58", 0xa4, 0x2}], 0x0, &(0x7f0000000480)={[{@bsdgroups}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@journal_path={'journal_path', 0x3d, './file0/file0'}}, {@sb={'sb', 0x3d, 0xffff}}, {@stripe={'stripe', 0x3d, 0x7fff}}, {@grpquota}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@init_itable}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]})
fstat(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/uts\x00')
r8 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = fcntl$dupfd(r8, 0x0, r9)
ioctl$SG_NEXT_CMD_LEN(r10, 0x2283, &(0x7f0000000000)=0x1)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
dup2(r7, r10)
mount$9p_unix(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x10000, &(0x7f0000000700)={'trans=unix,', {[{@posixacl}, {@mmap}, {@cache_fscache}, {@posixacl}, {@version_L}, {@access_client}, {@msize={'msize', 0x3d, 0xbd}}, {@access_any}], [{@uid_gt={'uid>', r6}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', 0xee01}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_type}, {@dont_measure}]}})

01:01:25 executing program 0:
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x74)
close_range(r0, 0xffffffffffffffff, 0x0)
write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x10000000000, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x9, 0x52fc, 0x63f8, 0xffffffff, 0x6, 0x8})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000faadd12ecf7507c16cc05983600002000000e0ff0500000108000301", @ANYRES32=r2, @ANYBLOB="0800050006000000"], 0x24}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000d77cea141873a9859e2792e700", @ANYBLOB="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", @ANYRES64])
signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x800)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000200))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]})

01:01:25 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x5)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x1, 0xc6, 0x1, 0x7}, 0x7fff)
connect$unix(r1, &(0x7f0000000480)=@abs={0x1}, 0x6e)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0)
preadv(r2, 0x0, 0x0, 0x401, 0x0)
listen(r1, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x131201, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB="6c6f6f73652c76657273696f6e3d3970323030302e752c64666c746769643da43b65785a38893dbe75697bf8a80efac11fba43dec3229fea067d6f", @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC, @ANYRESOCT])
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010004000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="100000000000000008000300517fb1c5fcf5f5939274c8a5c16fe7ed886727033f00ec0000000000000000", @ANYRES32=0xee00, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="10000400000000002000000000000000"], 0x44, 0x1)
read(r5, 0x0, 0x0)
fcntl$dupfd(r2, 0x0, r5)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x8000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

01:01:25 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000300000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:01:25 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1913.572443] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[ 1913.612250] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.612250]    program syz-executor.7 not setting count and/or reply_len properly
[ 1913.639670] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[ 1913.668601] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.668601]    program syz-executor.3 not setting count and/or reply_len properly
01:01:25 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x803, 0xff)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0)
r2 = syz_io_uring_complete(0x0)
io_uring_enter(r1, 0x630a, 0xce52, 0x2, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={<r3=>0x0}, &(0x7f0000000140)=0xc)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r3})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x1010, r7, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x20, 0x9, 0x9, 0x0, 0x8, 0x8088, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1, 0x1fffc000000}, 0x10050, 0x80000001, 0x2, 0x1, 0x87bc, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6}, r3, 0x1, r4, 0x8)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="b683ae7d0000000000000000000000000000000200000000", 0x18}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0)

[ 1913.698497] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[ 1913.720164] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,,errors=continue
[ 1913.742157] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
01:01:25 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private1, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="700b8e3ba071bb6aaf68229e5df387b02d8974ef1222ce01b8cbb2219c7340d2a994ac889e6f1ba1fadb2f5299a96a8b19277efc23e538ebf9792be0a66f66802f1898260941e45436c0441f7b5a77644a04713e3f46d38ce17ea71a29dc27c6f65d22fffe80edd82c38", 0x6a}, {0x0}], 0x2}}], 0x1, 0x4004)
dup(r0)
socket$inet6_icmp_raw(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfe, 0x0, 0x7, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0)

[ 1913.771255] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.771255]    program syz-executor.6 not setting count and/or reply_len properly
[ 1913.785846] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.785846]    program syz-executor.3 not setting count and/or reply_len properly
[ 1913.795771] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.795771]    program syz-executor.6 not setting count and/or reply_len properly
01:01:25 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:01:25 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000500000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:01:25 executing program 2:
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='/usr/sbin/ntpd\x00', 0xf, 0x1)
clone(0x1002000, &(0x7f0000000100)="75d0124de0d0d1853ee833bc874cef158fffffffffbebdb35bec7c8bc7bca1fd3b606d000000000000002000"/54, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000200)="e9c6fd4802f71540e88df284707ea7ec7182f6fa1f2c96f2fe61f28a13c8750d56978244deae534850bbd34c1f29ce7c12bf4548bee683814d134c8d20ceb2dfae854de969a2e0bf10455eb8f47976f6785d793f2ff0e3fbbecdd32de5245f42c8b9eab7a6c7bfe98bfd4cb0385e1217fd143818e0520f3c75b5a14bbbe38da582d9b47406139c9341fcfa58e2e2bab07a4dbb38c0289245b49990474e9b1b53f674797dbf9dea")

[ 1913.814381] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1913.814381]    program syz-executor.7 not setting count and/or reply_len properly
01:01:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x80)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880))
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x1})
openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x1, 0x4)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
syz_io_uring_setup(0x4751, &(0x7f00000017c0)={0x0, 0x45b1, 0x0, 0x0, 0x290, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000001840), &(0x7f0000001880))
mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})

01:01:40 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r1)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @local}})
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="1180c2000000aaaa5f209f8608004502003c000007d9a6099078ac0a0001ac1414aa03009078ac1e0001480006000000000000000000000000007f000001440c00"/74], 0x0)

01:01:40 executing program 6:
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0)
r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x501, 0x80, 0x14}, 0x18)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x6, 0x7, 0x2, "93847555e9d727ef6a37856d23644e00", 0x10003dd, 0x2})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
openat(r1, &(0x7f0000000180)='./file0\x00', 0x24000, 0x110)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x16, &(0x7f0000000040), 0x4)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

01:01:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
fcntl$dupfd(r0, 0x406, r0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/auth_rpcgss', 0x20000, 0x109)

01:01:40 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e3e1446562e9d03e408d1ea655783e34d349f69cab76130588f8047c1ffb4c58e75c4b38b80fc608530602fefcca1e8090f2e97d416035cb160bb860230e5e2a84a4e4b97b2c98bbf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:01:40 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000600000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:01:40 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
dup(r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = dup(r3)
setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000000), 0x4)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, r1, 0xffffffffffffffff, r2, r0, r4], 0x6)
fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000d5ef9d5200c5d5228445b904421383398ae54c310fd31950061d45e7d20e03467dc2ae6781bddab2559e24"], 0x14}}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_tables_matches\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syncfs(r5)
openat(r4, &(0x7f0000000140)='./file2\x00', 0x440, 0xa1)

01:01:40 executing program 2:
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x2)
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"759d35bb067ffb0b891426733e6f3864", <r2=>0x0, 0x0, {0x6}, {0x4, 0xd0}, 0x100000001, [0x2f, 0x5, 0x47, 0x2, 0x7, 0xffff, 0x1, 0x29e, 0x3, 0x8000, 0x213, 0xfffffffffffffff7, 0x1, 0x8, 0x9, 0x8]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000500)={{r1}, r2, 0x12, @unused=[0x200, 0x0, 0xfffffffffffffffb, 0x3], @name="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"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00')
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0)

01:01:40 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f00000001c0)=""/66, 0x18)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={<r2=>0x0, ""/256, <r3=>0x0, <r4=>0x0})
openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x331100, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051540)={0x7f, [{r2, r4}, {r3, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r2}, {r2, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {r3}, {r3}, {}, {r3}, {r3}, {}, {r2, r4}, {r3, r4}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {}, {}, {r2, r4}, {}, {}, {r3, r4}, {r3, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {r2}, {}, {r2, r4}, {0x0, r4}, {}, {r2, r4}, {r2}, {r3}, {0x0, r4}, {}, {r3}, {r2}, {}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {}, {r3}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {r3}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2}, {r2}, {r2}, {}, {r2}, {r2}, {r3}, {}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r3, r4}, {}, {r2}, {r2}, {0x0, r4}, {r2}, {r2}, {r2, r4}, {r3}, {0x0, r4}, {r2}, {r3, r4}, {}, {}, {r2, r4}, {}, {r2}, {r3, r4}, {}, {r2}, {r3}, {r2, r4}, {0x0, r4}, {}, {}, {r2}, {}, {0x0, r4}, {0x0, r4}, {}, {r3}, {0x0, r4}, {r3}, {r2, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r2}, {}, {r2, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {}, {r2, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {0x0, r4}, {}, {r3}, {r3}, {0x0, r4}, {0x0, r4}, {r3, r4}, {r3}, {}, {r2, r4}, {}, {0x0, r4}, {r2, r4}, {r2}, {r3}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {r3}, {}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {r2, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r2}, {r2, r4}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {r3}, {r3, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}], 0x1f, "041ee7b2a19982"})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000440)="9c3168e78149c78d7ff00b5cc0f8b3c53ec5a9bb3eed7a888858f8310d5333eead11e6bd9f5687bcdb78baf844161f780e5e691e4751c1479f0d11f09709dcbbbe831285a55b49636e8a60", 0x4b}], 0x4010, &(0x7f00000004c0)={[{@fat=@check_normal}, {@dots}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
r6 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x5, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0xd1ffafc370a788c5, @perf_config_ext={0x3f, 0xffffffff}, 0x3000, 0x9, 0x3, 0x8, 0x7f, 0x6, 0xffff, 0x0, 0x100, 0x0, 0x6}, r6, 0x8, r1, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r7, 0x0, r8)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000500)={0x0, r8, 0x2, 0x435b96c4, 0x4, 0xcd})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1929.082982] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1929.082982]    program syz-executor.7 not setting count and/or reply_len properly
[ 1929.099930] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1929.172703] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
01:01:41 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
renameat(r7, &(0x7f0000000080)='./mnt\x00', r6, &(0x7f00000001c0)='./mnt\x00')
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x3e0000)

01:01:41 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000700000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1929.267897] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1929.267897]    program syz-executor.3 not setting count and/or reply_len properly
[ 1929.280000] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1929.280000]    program syz-executor.7 not setting count and/or reply_len properly
[ 1946.432424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
01:02:01 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03001e00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:01 executing program 3:
r0 = inotify_init1(0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x40000000000004, 0x0, 0x0, 0x20818c0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
syncfs(r3)
inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x128)
openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x40000, 0x4)
syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x82000, 0x0)
sendmsg$802154_dgram(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000240)={&(0x7f0000000200)="dca8dab3118ef7e8f5c6aff3228f2c08bd9fa24e080bce15cd1e60495b24727e474482a781ec96", 0x27}, 0x1, 0x0, 0x0, 0x40105}, 0xc801)
open(&(0x7f00000000c0)='./file0/file0\x00', 0x902, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
umount2(&(0x7f0000000180)='./file0/file0\x00', 0xe)

01:02:01 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:02:01 executing program 6:
r0 = creat(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[])
creat(&(0x7f0000000100)='./file0\x00', 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x7, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000380)={@loopback}, 0x14)
setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4)
r2 = fsmount(r0, 0x1, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1000002e2f66696c6530"], 0x10)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x10000, 0x8, 0x14}, 0x18)
unlinkat(r4, &(0x7f00000003c0)='./file0\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03)

01:02:01 executing program 0:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4", 0x14)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005200210e0000897d00ad9c63ece7a4"], 0x14}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010945394500000000f50000000001000000ed000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000400000000000000000000000010000000a0000000000000030010000000000000000000000000001000000000000000000000000000000000000764ffb3d84824900"/202], 0x110)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x2, 0x7e850000, 0x5, 0x0, 0x0, [{{r0}, 0x8e}, {{}, 0x2}, {{r2}, 0x20f}, {{r3}, 0x800}, {{r0}, 0x1ff}]})
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
close_range(r1, r4, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1)
unshare(0x48020200)

01:02:01 executing program 4:
symlink(&(0x7f0000003140)='./file0\x00', &(0x7f0000003180)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f00000031c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000007f40)='./file1\x00', 0x0, 0x0, 0x0)

01:02:01 executing program 1:
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000340))
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000005"], 0x3c}}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
write$cgroup_freezer_state(r3, &(0x7f0000000380)='FREEZING\x00', 0x9)
ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000280))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34c974952130ceb08fd22067cd7561a16d58086c063132cf3dea4564c57430f4ead277273af46f85d1d9c2f9283b978f2d41ff7d13e33894d2e91e4bccff875db6e88428556fc6a49d8464a69a8fe077642d540a771d68b8cbe66c8207b5c700f77a29443bc1d6719597585c7649ab4ce1f86ec5b30a96998af31e8f755878f35807d1052b7cc638fc00228d5dac31f9751f89bccfb800942eda2b5cd90111b7d414a3cecd89126e7c6b", @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf250a000000080001007063690011b523efa6694e09d74d85abdf3b3521c7000200303030303a30303a31a5cdb2884550530df898a5b39cacb5302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000058137d5cb8242384e6d82fa9371b1215d091324137240993decb20b8ddbba80af13fdec75837e1b17cdd6c956bdfd2668cc2d96659c3157037159c5ab3a6c3457309c3edacd5b0d6f13ca68d8deec4bd246e3915c2a3bc1d1c397770c4b804632d944939ce679e2f4baa858c11c27e81ec3db07455"], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x8010)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r4, @ANYBLOB="000328bd7000fcdbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000002000006001600a104000005001200f8ff00200e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00fa9a00000600160000000000050012000000000008000100706369001100dd00303030303a30303a31302e3000000000080003000200000008000b000000010006001600ffff000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00ff0f000006001600001000000500120001000000"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x8916, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}})
r6 = dup2(r0, 0xffffffffffffffff)
lseek(r6, 0x1ff, 0x3)

01:02:01 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001400)=""/53, 0x35)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ppoll(&(0x7f0000000000)=[{r1, 0x108}], 0x1, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'ipvlan1\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="3e000000ed4a000004000000f10000002e0f3f21c7c5846b5fd9bbe1a0d7a218cb5f2f4434ccba1644384704a77e1937db77059809f03b07583b204e46476ebd9419ff11c62c39eaeacbd282807cffee9fe270d4adee5d26ea5b4458fae9b689657a9744e1ebf459ed74ae097caa53c94d1ef6d0a1d0485eeee99ae2b16460d71d7bde9fc696538d8379c9ed07c49203ef2971f4ad1b04a2f628103dc363c07b465b294bf0c71649a807610d3f4627098bdaf504cbf033cace1c26faafd5f3db901e67ed89c4aef85f10c06a54ab9f2358d2e9c4fcf2afd861faababb5f6e2164397174d619a30e1f2d2d25713e959086f9888fe4f703c9797ff8ced46e44007a1f1b8d9bf6d9c555dab621693068938bb06000000000000000f33a6c9c9b2344b2bef2a02727f3387597c6957bdc294becef8e51d1762a6f144000000000000000000001095f92e8a8f3b9d7411"]})
io_uring_enter(0xffffffffffffffff, 0x5aaf, 0x8, 0x1, 0x0, 0xffec)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
syz_io_uring_setup(0x205b, &(0x7f0000000100)={0x0, 0xd3f6, 0x1, 0x0, 0x2cd, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000080), &(0x7f0000000180))
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="3a0000000045160000000010000000ee5da02a54eadd749219378f783c00000000000000f36d496700"/51]})
pidfd_getfd(r0, r2, 0x0)

[ 1949.364826] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1949.364826]    program syz-executor.7 not setting count and/or reply_len properly
[ 1949.374689] 9pnet: Insufficient options for proto=fd
01:02:01 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
read(r0, &(0x7f0000000340)=""/148, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r3, r2, 0x0, 0xf88c)
dup(0xffffffffffffffff)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)

[ 1949.452772] 9pnet: Insufficient options for proto=fd
01:02:01 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100060000000000000000000000050000000000000015000080487fec864b245e0f3f9be149f83265549b0000002078873a53c945aff6e3a0e03d66e079de353c8e12"], 0x34}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r1, 0x100, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

[ 1949.532594] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
01:02:01 executing program 1:
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0/../file0\x00'})
r2 = openat(r1, &(0x7f0000000040)='./file0/../file0\x00', 0x121082, 0x20)
sendto$inet(r2, &(0x7f0000000180)="a2bf9fa1c2959d1ba84df153ae9a142b68edc10eace64e6a4078f6079371c7d8419f4aab69b229f3f97db7128619f88b", 0x30, 0x40000, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0}, './file0/../file0\x00'})
r4 = syz_open_dev$sg(&(0x7f0000000800), 0x81, 0x591841)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000880)='./file0\x00', 0x8)
fcntl$dupfd(r4, 0x0, r5)
sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="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", 0xff}, {&(0x7f0000000400)="ec057b9477b18294e9b7e6496557444175", 0x11}, {&(0x7f0000000440)="b20cd101159800a35434e66d5c7fda5fdf208f2503093a51d6f37b3607304319014ce278cb4d7fe3de5696a285b75c468c2d904af89afa4d801b005a412f168dbc957f7db54a0b079ae3871fae7bd51a1e8f9f747dd705a6d03a556c45fce3b4633b737b367f79cc21e5d6f5eaeff4a6aeedc28a68ad76d64df1d83a299994b9e0198055f5697286fe56c56dfc5bef260e1cd29dda80fb2b0a79e88bc0d9bb7890b409a94323c04bbe0c5d2c007e81d1b110ed422501fd21cdfb11212066345530fb4c59311cebd6122232dd71016be5dc2244d1538dd1c2b1e3bb17435a431f409fa4521fc351f4f7e632", 0xeb}, {&(0x7f0000000540)="4cbe313056e408bcbd1fdb969cef04dae9a2665d4fce07f1a770e8d884d8037c319606bbbc1ea1104f23d66744e5bda7ff63927a98131f67672a92de353a468d0c55f29aadd6b97f70adebb661f993fbb1f2560ba2186a87de934cadef60d6772c4a69a29516869628b3fcb70f79089be8cbe4702e9a2aa5b11ecbbb759bc1d45117b9866e18ca7aa9219356c814fa17484ede7752490f4ad9dabb5c89121609c39808d11687c6042cb7f65b246ac39a0352cfbd2fafe3d4805a1c2b81de93a609d1f1f8bf8c6673828ec806f95ea2", 0xcf}, {&(0x7f0000000640)="c88355542721cab056f4eb556a2f4fbef550ab600a7b99708cdeaee4351757e1b52e2cbf7b930cc1b8fc917e502f64705593474ca6308eec229c3892ff58eb93880e9a3b4cb22b8b5593fb09a86df705e30c705e9a137ce5dca475a99912c68913e9aef31274c076e46d743c116a01c05da0095d5c653aedb9c39a13", 0x7c}], 0x5, &(0x7f0000000740)=[@ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0x13, 0x19, [@multicast1, @local, @local, @remote]}, @end, @cipso={0x86, 0x18, 0x1, [{0x6, 0xa, "64656662de563ba3"}, {0x7, 0x8, "256bf8e2fac8"}]}, @timestamp={0x44, 0xc, 0x7f, 0x0, 0x6, [0x3, 0xffffff37]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd094}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x80}, 0x2400c000)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0xffffffff, 0x6c66, 0x80000001, 0x523e, 0xa4})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='syscall\x00')
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f00000002c0)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}]})

01:02:01 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03002000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:01 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
perf_event_open(&(0x7f0000001d80)={0x2, 0xfffffffffffffd8f, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

[ 1949.616712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1949.619360] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1949.619360]    program syz-executor.7 not setting count and/or reply_len properly
01:02:01 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:02:01 executing program 0:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xffffffff810013a0}, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0x2, r0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200600, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="001085c5eb060000000000631211b4d1460f7a8b11613c9400"/70])
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000, 0x100000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x5}}, './file0\x00'})
bind$bt_sco(r5, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
ioctl$FITHAW(r2, 0xc0045878)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)

01:02:01 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03003e00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1949.701681] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1949.701681]    program syz-executor.7 not setting count and/or reply_len properly
[ 1949.717581] SELinux: security_context_str_to_sid(system_u) failed for (dev sda, type ext4) errno=-22
01:02:01 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(0xffffffffffffffff, 0x8)
r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0xee00)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0)
r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa})
r4 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2)
add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "71308b85e379520052f6526c3e5d49e865e4d21d71135e8997ce87ad7fc5941b238a41333c2d823e211a5ea5b6ee991500aa9b62881f7396935dfc3cb98838d4", 0x29}, 0x48, r4)
add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0)
request_key(&(0x7f00000008c0)='logon\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)='$*$\\^+\x00', 0x0)
request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='HL\x00', r1)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x151180)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:02:01 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03004000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:01 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1949.796930] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1949.796930]    program syz-executor.7 not setting count and/or reply_len properly
[ 1949.813828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
01:02:01 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03004800000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1949.876827] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1949.876827]    program syz-executor.7 not setting count and/or reply_len properly
01:02:18 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:02:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x4, 0x6, 0x401})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x7fff, 0x4)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x4)
sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a0011cd000000000000000000000000000a0000", @ANYRES32=0x0, @ANYBLOB="68f9d4dfe7a717b7feda5b261e5198c26162082e505d38c78b1843874e597e82918e3d8a1a3258122db28517aceb5acebaca9a42ab90c9f15e853414212e1f87243d10b71398c09b71feffd97ad174"], 0x1c}}, 0x0)

01:02:18 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x43005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00')
write$cgroup_int(r2, &(0x7f0000000040), 0x12)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200))
fcntl$getownex(r2, 0x10, &(0x7f0000000240))
r3 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fork()
gettid()
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fork()
r6 = fork()
kcmp(r5, r6, 0x0, 0xffffffffffffffff, r4)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, <r7=>0x0})
r8 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x200, 0x20)
kcmp(r6, r7, 0x2, r8, r2)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10)
r9 = getpid()
kcmp(r0, r9, 0x4, r3, r2)

01:02:18 executing program 1:
r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa})
request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000000000000102030405061608090a0b0c0d0e0f101112131415161718191a1b1c1d9e1f202122072425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40496cc97c6f824db219993f0abe66617221396581240ba35642962912f9c6eec6e784"], 0x48, r0)
r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd)
request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r2)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x22}, 0x48, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r3)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0] \x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00<J\x98\n\xfbf!3\xd7\xefk\xc0S\x95\x03\x03\xda\xac\xce\xe6Z\x14;87\xcf\xf1\xce\xe6:>\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r4)
add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4)
request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0)
add_key$fscrypt_v1(&(0x7f00000007c0), 0x0, &(0x7f0000000840)={0x0, "9963a2e8c6e15a8df2985ff3f30bfb18271157c43ccd7e75a9467b54425d802f479b28c3f7bddcef7d479740cd4121b7d1ef427246bec19fe1c2dc52c2166269", 0x4}, 0x48, 0x0)
add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:02:18 executing program 0:
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$addseals(r0, 0x409, 0xb)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="001d040000000000"], 0x8)
pread64(r1, &(0x7f0000000640)=""/186, 0xba, 0x9)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000040)=""/16, 0x10}], 0x4)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000100)=0x4)
stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000001c00))
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
setxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)=@v1={0x2, "9ac8"}, 0x3, 0x0)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
fadvise64(r2, 0xfe000000000000, 0x200000010000, 0x5)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x800)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00')
pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000540)="b68bd2c352e4e28c62ce35d35ce977efab94b5b114d19604", 0x18}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000005c0)="514e50b7ff945c4eaf57bb19affafd600372dc495e9557c58a24630a3d140bc0ba684fc56607e56338", 0x29}], 0x4, 0x7, 0x8)
preadv(r3, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}], 0x1, 0x5545, 0x0)

01:02:18 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03004c00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:18 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff3, 0x10}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000140)=0x2)
r1 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xa8b02, 0x4)
ioctl$CDROM_SELECT_SPEED(r2, 0x125d, 0x20000000)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x81, 0x40, 0x4b, 0x38, 0x0, 0x4, 0x55d08, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0xffffffffffffff00, 0x8, 0x1, 0x266b, 0x2, 0xfff, 0x0, 0x7fffffff, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0xa)
read$hidraw(r2, &(0x7f0000002600)=""/4096, 0x1000)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0)
inotify_init1(0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000012c0)}, {&(0x7f00000013c0)="d22f07a74c9a9662ee40c2cfe16e1209017af9ca4600bc0939588a173e9b873a2cc46350cab7db81971996f735f2a8cc51f4e0a58da6647c48c2a78e9f4ddb9287da5a7526a8865f49ee56366ce90c93ef343861df3fc9ce5ccab9b967cc4b26d2a0184214e45c24566c35c3925214c893e5a270ddd7226b65dc57a0ac833628965c5fb5a43c5dca50e4d971f43214d77b17a49e0b189ee1586630186a1f01a63abe1a3b14a5f6dba79e8fd6545dc062bbc1f80f5b24eb5913fa667010f8cd05cb33f7964a9e9b3f88a1b0f307ec066747fcb1132e2d1eebb170f80252750b21b589fe", 0xe3}], 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

01:02:18 executing program 6:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001100), 0x2, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000740)={{}, 0x0, 0x0, @unused=[0x3ff, 0x7, 0xccd5, 0x400], @devid=r5})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001380)={r5, "a93bd9e747b6db4d6591e961a7817484"})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x3e, 0xb5}, 'port0\x00', 0x41, 0xa0000, 0x1, 0x6e, 0x2, 0x9, 0xfff, 0x0, 0x5, 0x80})
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r6, 0x0, 0x21, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/301], 0x10)
r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x100)
shutdown(r6, 0x1)
dup2(0xffffffffffffffff, r6)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r8)
sendfile(r8, r4, &(0x7f0000002380)=0x2, 0x97b3)
ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000100)={0x0, 0xffffffff})

[ 1966.859179] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1966.859179]    program syz-executor.7 not setting count and/or reply_len properly
[ 1966.861524] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1966.861524]    program syz-executor.6 not setting count and/or reply_len properly
[ 1966.889562] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1966.889562]    program syz-executor.6 not setting count and/or reply_len properly
[ 1966.899767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.900320] print_req_error: 6 callbacks suppressed
[ 1966.900332] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.901731] buffer_io_error: 6 callbacks suppressed
[ 1966.901738] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1966.903035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.903672] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.904609] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1966.905418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.905920] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.906902] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1966.907736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.908245] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.910032] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1966.911220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.911790] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.912714] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1966.913521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.914025] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.915110] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1966.915865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.916404] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.917326] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1966.918127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1966.918679] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1966.919615] Buffer I/O error on dev sr0, logical block 7, async page read
01:02:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000040)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}]})
setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@sha1={0x1, "048be52e816f3edf9d75847e8cc2c2114548cf48"}, 0x15, 0x7)

01:02:18 executing program 3:
syz_read_part_table(0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000100)="b53bc55ba63cc243e3381b421c736e175cf9d61d6a24d10000fcc8136f3346c7a9673972", 0x24, 0x6}, {&(0x7f0000000040)="fb8f58361136c8abcdb9abdc0ac39ac070add482918524a6d7bba1a6dff6046170424c2f1f299b2e6c5711f63b22014efc99ac64428a0e802aa000b703b471d9052a9feaaabcb30e24d77d36373d067b6eba275e8e029b1440b6dcd7181bd294425c1a33baebc92a7c64b05719", 0x6d, 0x100002}])

01:02:18 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03006800000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:18 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1967.014114] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
01:02:18 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)=ANY=[@ANYRES32=r1])

[ 1967.014114]    program syz-executor.7 not setting count and/or reply_len properly
01:02:18 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setpriority(0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140))
connect$netlink(0xffffffffffffffff, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100), &(0x7f0000000340)=0x4)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT])
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="5d3d53eab3380900eab6a9f07d72c29e597bc57d15e9b2164484d54cd1629d997dac74cf51f18a4984fe4a965abdbb449b88c489417f99f0aecad0f98248c22135afe771032ef278d4"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
unshare(0x48020200)

01:02:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="000326bd7000ffdbdf2501003cc20bdc52f1c971000000140018000008007564703a73797a3000000000f64500000000000007ffc4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389332fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17cee26c0511551d407ac96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048881)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0xf441d5139846b434, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x58014}, 0x20000001)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd28, 0x2, {{}, {}, {0x8, 0x2, 0xffff7fff}}}, 0x24}}, 0x4000000)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000280)=0x2d61)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x46020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xdd}, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000500)={{r4}, "cf7f41de36dd799336257bb124bb38f561a1e2d61ac97a9f037ded086ed5db05c51ba4939bf60d7f34f55a5085686308e0591dec5e5e920855c0baf7098c08947de6b9b565a208fe1109ed9c0019967f1c84bc5eaf884f2c69c5572b145ce9152e8b6991c1ff650b5e95f1e369a557dc2594bc2ab86f72f167ecf7878168c127460b9e839da36c2e2af445cff5fb8a025180f99364ce5bd7ed0293abd78b2b5e77c63760f54eff5c8f7e1d9c9220452bd55fc20b68943eaca097ef0036d0573b1c3907acb075196a5f5977c7d1be06f350455e0eefe44891eb92eccbb9a65f2c1f52d4f47b26f3186d85bf11b23b68ad83cb47e82e8571063e7704d1eb4242d107e11918eba4010023593ef51062d3df77f68e9972c31f9694fa440f07369d146887d0d27d32d054855cc4d4360bf0aca5c0be71d4cae43177c3e934b859417a1a4ebb1e447e18e49a6463ebc1939ae4712ca38947d450c5178e1ee8fba26854fd90787358e10ce88e8becd4b742c46c07732f401e2512fee51691306f662d72680c00cbbedad6b3c35c943ff3cb1aaeb9c140e718680e0ce85623c9705f96c7fa6fc7666a55bf7f9555d5a6351ad49a7a12deabaee08e49640e54e1ec0213eef438173adf9c5cb633dcce0e0974a0381bb8578a08c02895a5fc36c76888fa2d4a80a250fc0c59409701ceec5d45f777bd62e31cc6881c3a47fb162e1e088d90ff4ed7d28212f16f0d42b79ca3578f51bbd5b9e79d891032bedf76044e4d4b5b11e2bc91fc5fe63884d5a6bd652292b3a7532317f546d187c0de112f72c6d2b701c60d1012b20454423d7ff4c2e09e7d14dbe79449ed152e3cddf19a6b4aae6964b30ada67c06887ea934043a43498c9f5e067933cd38010657c935aa993478987ac07ca362ba546f440671699d26f0dcc85f95f2951e32c747d539dccfc5f98957277a58921661f15d6f324e307deb24bb7ce76efba822845ec80e9021f2f0225e4a4a0ab13eceddf56f1be8743de3982b163cfa9518dc3a32b644f77cb9be743ba3cf42d75ef538aeacc2cc2f28b4cae4314061e57e347432aaca57888a46e3df5c2d96bc5e4abb96497a94f633363f0c2593f67c0be9206fd42ee6dfb92ab8ac281695db6f36f8c35a647c254409ba06ff0ac7644f1d1ca71a06064c54fb2057b489f3ee95f3e0c7ff0c36bda73568249ae3c9683b843cb460e6b3605b2a55e2df3d2384aee39877ad301fd3e292660f34c7c9e8757fd822ea3477941480151c6b2e4c50d27066d2a50ca659a3fec4a451edb951b5d1d09dd74206fdb4d895c87a33ede41367e90d869153166e1d1c539fcbe7adae67ead34beefc64b5cdb43c42a2657fca211b331c1382bc68b37755524c3c5bd12d10470876024b5b64745837c21aa80055020376b571a927955a984a1555d3b82d7aaaeb43d8b58ba86bb75aa7e5bded7789c18d0e2bf4c221e801ca070bafa0f49b90d4683ab6351289b07fc38dbc377f26fd40b4c620e33ae64e24c8a2a864c996cc2fd0fd0bc828a1c42bfecb8d08588d3985dfda65b3c0c14e9980e285a24a63a23ae0fcbf86a73a4591b304e88f3c58582e3b2c2c5566d7b1715905c487dac18fe7e214e48993a081d8549dc84bfdbd228ec086a0cf4ef5475dda82b9794e7e57e5ac290385141b25856308d9a6f9f5a89d137010e586164431bed2bf36f725b8273d45fe0d04684d013647ee362d012ed7862235f1451bcaa5867f9d80d078d478b6bcb735012e47c205bef6b0406126c86213394c382cc3fe3a6738dac79ce73d437547a2a0fc8202a2b76c45a98ad9dd297456a0b063d8aec9938dd061d651d02d301ef4e480225bc4c84a6e8eea0aacbcdc78a9cd4d9fed6a58a69871a1ed3248317fef67768a1d77a0019d9d78439eebf025c0930ce3049de449b17c8b37f3dd5864bc97a01d6c204d40d05dd0bd1ccfd73ff5b5a35fe9883f10d1af9c2c87151ad5571e130fd8172474fb809e2bf4541768fe43aaaf9c9fc8ece56894c738950cdb9befa6b9d141c918ad5a167d542c59d048ed38a6194edb446dd3be669f5073cb3b4b78f581654381a2df7ec2f84701288063139d14db1ebd5e0e4ffb535f1a46c6066186f8f1e7521de7a31de11f1050b5f9b580258b5764c880de3878df6fc801d1f0a707dc1e7a90c3d513889069d354bf048c4dea5065d4208cc6c8d98e2a1464eca68b14395daeeba4e26562e9a8c27c49d26e882099678ec5e280bf0827ed1e258562081258fbaa752892a3f1591539ffb0af634b682f0848538767a17bce2c4a578aea5bc1c14b4e18462fd21a9694a96a2477cfee356bfeb51557760c427f76231367446690089cece15d35fe103d6c47c87abf893e925ccdfce16fdf81a007d6ae681cc13562922aa702fab0ac5d3e403ab3c76b6310fc415e50ebd0877332da692e375a70c62bec91bb8cd93212fcea4e8729cb6c645f56b50d3b9acc30f4ebf1b2935abb1b30cebbd9ffe985cb5dbf517bab50908c4f98ca1a129574c12f3ae33e64fe6ebe297b5bf8e0554e28263265da9b5571c68bfc40ce8e66e7bd0c05c295d88682e54f545cfb0f7f7f302f822d0aa1ca2e27c01da9221a1ea9f0b41bd81d7ed0e9c8a58e5493e8445019d213bfc930ed209881b26c07eb940a01bc026366df8111a9e2257cfbce423c2204f9111e683c33979d1e45763ec70f16c6f53eecc23e7d2f769b71e1d02fd9901f538d7c0ddcd841e5cf3522dd255586b779bf788c5d26a6d5ebb9ed1720628e830c6482a1de4dc09a95f7ff77a7584c7aaa7087f497c933ce19113580d1963ac31c62984f08fa1cf2b2f1ac90d3f74512d50162fc255bfa8053bacc6629de66d0918bba9f88b35fe26963c8b58bd93c752ef12a9458aaa6f993b513ea6b82bd773889be72d2c21d14b8cbcfb42ba0c71da797a95c3e24f099743341f71ed9fb5a20d0d1533694d2d0a2b36731d585d0b71884045ccfb1d145b13cb982d0085f70d9972f823751b8012e6dc45bfa2650b0e9efce43d1a0f5ac0a42d5eb40530e9e09fcc3cca3b19e70bafefb25e2b718c8800d5a7c1727d87a02712f1f013348f9357d5f8629bd3302074a8a19bd3dff15716b9fd509775d6a7873267be26f554756ecfad0bb656efa6d535b68d55cbce61df6c05473298be8d0b5da1a0e4bf1a6af2240663a03b7f8d3609741d3410c5de683a70edf119709e40037aaa111638ceb5fc0fc3ab7a8c87d452aabf7d9e63d7ef9a88bd4eb557a897c5e8951e9077cbfe2c895f76996f857f490f471dec587d066b118f398fdf9b67448a8f64e9da16c3ec174b89284474e717edcb35fcee75bd3743c0e51c5a19c7ca350c790d38018943f54fd4bf16a0fdb5f4ef791379a64080c2de0f58b235d174e19aa125c8316b48b23c5982cf1fcd8d13cd2fd5f04509fd54a5f8900f2cdb60e7aa512d6aaf59abf24aa3ee7f613349b3dc8f1e754c152fc306ff262c1669b32ce69d71002c54aac8cf592090fd6806eca75f41b67aabdcc8be2555794675911ad94f751b6072c5efc880ac6aa2e56f491192502f6d58be47ed3598a536ac540b71b63506fdb629183e710f7663f06dd5cf027c8ed4c63dc1e22d19d84726a5c4b1e766cf2a201ab86c9a585eb7288e405d19e63b1ed37e7605f3b37b0098d75728aaca1d1ea78a5ca13108ba0fb53151ca03b6172b2df3ae6c0b322d8021ae7a8bb2a2050730672fcff6e342f0555223f2a040602813328880f9445951f13c5bad1a5187014128adef00e0a43ff2cdb79ca6130042ac010b958b631a1354ecfe006ce578fe531f31bdf2269a3a634f7d40075d9ff2ef9e77ed67b74a922dcb76b462862c0fbf0d5239227f3812f3af72cf4ca87f9f2938e7e3dfb4e1342ac7bbf1d749225647e8a603d70d60283628ef454bdcfe1b361a866145084d92b5d6605d4521e486435121e2c166b81ade4df0de50a88d1cb7b479afb348b7fe96572bfbc557f2fca4734878391dbfae7cdc321a7db6c7ae962661ea0459e56914c92f251c34502d42dae117417240b2090df58b386fa9865917774dbaa1a6fa122fdb62e03c84cc273cb65ae698b902d2cb6df72a167af5a1b9247e844d8cd9b53ee84183170c5e549d92ff1a68cad89b0083799973ce8d6d53b8e67edf7b0c837d5c1b868129c42ec34d95bdd0d7012a42b834fd5b5a353696df16d94c3f6105985bf74e3f5e2835e5ed4cad7e58474822bbf0c7db2c6d8f81ec6191d5b50987d54a13f514daebe7dc754166aed3aec23d94eac7c88e2c539b8e9f93e73a3c891ed24172b58c57c628642a50c56a80dc68b3ef7cbb6ef9b606572008ee7d22cd0b348d5050d5e1c68084d2cf4345200582fe8b3d7cd19ed86c316ecdb264353f97b6828f98173a7485eee2966ffbcbd95edac1764ca1a9eb8ac817b0e6a8ed06157eacc13f6d5faf7155e95d31059768e8ffdedf6e114a0ae91ee474bfdfe0a7977c555ef9409b0f5925bfd6e205b468f69b0128be36dfdccba285b2956963b0f2292d43b7927617c9f4e9ef39ee313dd54760d19dac56b7dd2f59c7eb50f8b0a4ce6ad702628b9d6665d5fa1c3d95b4288bfb37ae68725abe65e79007d04a83a4cfd6414fdd6e963d70ec423614a7d63f71f027f55787edf37100a480c1289bc13e01d03fc7e14b845981c52e219e8b075eda9e12a87bf63e16cce29a58974b521c1576a9ca2d0608407aa0400070d13fda8036cff0fe1aae636386b1786fe7c074d6d460d219877f70097c2edb9b5e2fdc015f8db34d54fbe734eae301b0a139bc20e35ad3e5fa0c6c897e6800873bf6f3ce544f5b241328210932142f9bee94e4c535d26bb5be52615701346d5cbcdab1f90c25a8d6c171432a18bc4c1a7d971bb83678eb79b9bee2e3f8f3477370a67e619cec3deb8d8f17ae8b963401611838289d5669d4936e3816f181ed23c41e9bf88151f70444c1e4ea2386f6f3d39d6a0e13440cbc0fecbd7f505adf6b4b061d694910dc4bc14e24efccbe429724325af77251b9864a3a892fd07c82eb6a53f53b5d2a75fd782b9a33ce05902737e7feac1afd3add61e38ac44a3ae1a0b90743e4f1a3165aaff26ad14f554a88451c53cf9511bbd8db8ff0ca115a5f3bad7cab3b9f638c25b4151e04f1b66a64b930704fb6ebe47a76b92537f95463dd19542938db515389ec522d7577fb8bce927084441f293022a498fbf04c7735351ded1f214107704422efc12f0a6669adf3725d4092235f1c5cb053da991487257858599104d721d70381d592caa1e04e88ee523fa0094ced5de37974e0902d9ce961f71796aea173bdb253add5d06295ba4073f9f2c1ed075d6981bbcc293b5ee96f9f92cc4a23e987b2726f15b9bd905d74346020dc86f414b6381328bbef7f6c6b922c941fa771647994511a2174328f38becc3dc0b51264de01944f0b9b444fc2e3365b8270949cc7cb1acb1a84654589dd8533cf12ac9720dfac0763fc20c7b60c7ac5ed98a8cb4c8f954bd382fafceb7e7b7b6645d8aa0e97e3321255f66b180a0f615e67dab88d8507d152ebaf30366aa0e1a67e5a912ccccdb6786c5d0d6df1ba130f284ad108fb82a1c5e71df591c4f4821320f8c392f93d5de501c7dcd073bdce4671b41743e43dbd9ac5295f34783cecd7bd1ce4700b54fbcb281b457cbda68efc2e60167eecab89102b1c30cd262dea02635fc61f0a54e1422d1e706c3a801f9a98af78a19399771943b9f60527d50ab8c3dda76a966a635c2d"})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYRES32], 0x1c}}, 0x6b0b391cdd0a723e)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000100))
readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2)
unshare(0x48020200)

[ 1967.087988] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'.
01:02:35 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x43005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00')
write$cgroup_int(r2, &(0x7f0000000040), 0x12)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200))
fcntl$getownex(r2, 0x10, &(0x7f0000000240))
r3 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fork()
gettid()
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fork()
r6 = fork()
kcmp(r5, r6, 0x0, 0xffffffffffffffff, r4)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, <r7=>0x0})
r8 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x200, 0x20)
kcmp(r6, r7, 0x2, r8, r2)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10)
r9 = getpid()
kcmp(r0, r9, 0x4, r3, r2)

01:02:35 executing program 2:
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0))
pipe(0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
creat(&(0x7f0000000240)='./file0\x00', 0x49)
r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x4}, 0x0, 0x0, 0x6, 0x1, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r3], 0x10}}], 0x2, 0x24000801)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2})
fstatfs(r1, &(0x7f0000002e00)=""/4102)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9})
ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd})

01:02:35 executing program 6:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="3465d3e91dc861138aa6cf9f10408a0bc1165a7b31b951918f3092f60f029bc6f4405c5830e1ffef8635f8a6de6146ed58c03d020c4a6d2a64ee91e150bcf5201c19233c1e4f05eb1b89c9a2a834"], 0xfdef)
syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, &(0x7f00000000c0))
io_destroy(0x0)
r4 = dup(0xffffffffffffffff)
mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x144, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'crct10dif-generic\x00'}}}, @XFRMA_IF_ID={0x8}]}, 0x144}}, 0x0)

01:02:35 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)

01:02:35 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000e80)={<r2=>0x0, 0x5, 0x0, [0x6, 0x7f, 0x2, 0x100, 0x9], [0x98, 0xfff, 0x0, 0x1, 0x80000000, 0x100000000, 0x2, 0x80000001, 0x0, 0x401, 0x81, 0x0, 0x101, 0x8, 0x1, 0x337dca13, 0x3, 0x10000, 0x8, 0x7, 0xfffffffffffffffe, 0xffffffffffffff53, 0x400000000000, 0x7f, 0x2, 0x5eec, 0x400, 0xfffffffffffffffe, 0x4, 0x4, 0x6, 0x6396, 0x8, 0x2, 0x7c, 0x7ff, 0x0, 0x100000000, 0x94, 0x10000, 0xcad, 0x40, 0x15, 0x4093f7d6, 0x6, 0x200000, 0x0, 0x1, 0x200, 0x8, 0x8, 0x8, 0x8, 0x7, 0x8001, 0xfffffffffffffffa, 0x5, 0xfffffffffffffff8, 0xb11, 0x35b, 0x95, 0x7, 0x1, 0x7f, 0xff, 0x4db, 0x10001, 0x80000000, 0x9, 0x0, 0xfffffffffffffffc, 0xe06, 0x3, 0x1, 0x0, 0xfffffffffffffffb, 0xd14a, 0x0, 0xffffffffffffffc0, 0x0, 0x1ff, 0x9, 0x40, 0x1, 0x4, 0xfff, 0x80, 0x0, 0x100000001, 0x4, 0x800, 0x0, 0x800, 0x6, 0x7fffffff, 0x1694c0000, 0x3ff, 0x401, 0x6, 0x23, 0x2, 0x3f, 0x0, 0x4a04d717, 0x10001, 0x7, 0x7f, 0x100000001, 0x6942, 0x6, 0x1836, 0x7f, 0x100, 0x0, 0x9, 0x1000, 0x4, 0x1, 0x2, 0x80000000, 0xd42b]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001e00)={{r0}, 0x0, 0x0, @unused=[0x7, 0x6, 0x99f5, 0xffffffff], @devid=r2})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000000c0))
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x1e, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}]}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0xfb, 0x8, 0x8000, 0x0, @mcast2, @mcast1, 0x8, 0x80, 0x3, 0x4}})
ioctl$SG_IO(0xffffffffffffffff, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)=ANY=[@ANYBLOB="67696b93", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000004c0))
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240))

01:02:35 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:02:35 executing program 3:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = pkey_alloc(0x0, 0x5)
pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0)
pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00')
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800)
readv(r1, &(0x7f0000000280), 0x0)
pkey_mprotect(&(0x7f0000fec000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff)
sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105941, 0x80)
r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x8800000)
dup2(r3, r2)
recvmmsg$unix(r3, &(0x7f0000001840)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/118, 0x76}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/255, 0xff}], 0x6, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x200}}, {{&(0x7f0000001580), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f00000016c0)=""/216, 0xd8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000585491f27673ccbc9eb9c8c634affbfbb2492279c05872ce49861ef555222676b2576a99c8de6defdee9ebaf1f363c2d63c8e98d12bdf3e710df9fcdfed7415b0a059b0e387dbba60c3f3969af13891637650861c7d3838edcf467fb318975900acc0bdd8778be1b79a52c37ea8b9662", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="01c9000088004e6b679df1a46e7c63d3a35273e5e27115952563579931a73655db9c609003b89e63ac842734b093a61ac589f9a06be567efc6f9b53440e414375dbac4a74dd9a331bc91cb028310eb135eef18796b0000000000000000"], 0x20}}], 0x2, 0x40, &(0x7f00000018c0)={0x0, 0x989680})
mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000)

01:02:35 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03006c00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1983.486458] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1983.486458]    program syz-executor.7 not setting count and/or reply_len properly
[ 1983.493466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14085 comm=syz-executor.0
[ 1983.540086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14099 comm=syz-executor.0
01:02:35 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03007400000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 1983.602945] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1983.602945]    program syz-executor.7 not setting count and/or reply_len properly
01:02:35 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

01:02:35 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)
r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
futimesat(r2, &(0x7f0000000000)='./mnt\x00', 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)=ANY=[@ANYBLOB="0101020000180000004a625379f74c0b8391a2d18e30", @ANYRES32=<r4=>r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file2\x00'])
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000003c0)=ANY=[@ANYBLOB="bd3fdfb7", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00mnt/encrypted_dir\x00'])
rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00')
syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
socket$inet6_udp(0xa, 0x2, 0x0)
accept$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000280)=0x6e)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x5b)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

01:02:35 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, 0x0, 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:02:35 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03007a00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:35 executing program 1:
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0/file0\x00', 0x20)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4ead55a3df90f73c76e18eefea3e1433beffd5fb94fd974590fe8c6b6f9f0005e5b8fdb4518ef8a99978fb47eec56899ccc6a58966ade179c407fc49cd670e4a874ff1eece2e0110012dd75719a6207403917405cc3dcb0b3ea7bd1cfee041d475303b40639a41d14e0b4dcc2de1332727d0405d24"])

01:02:35 executing program 6:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
syz_io_uring_setup(0x1ec1, &(0x7f0000000240)={0x0, 0x4012, 0x10, 0x1, 0x1a4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000001700)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000019340)=@qipcrtr={0x2a, 0x4, 0x76ade6f87610bc1}, 0x0, 0x0, 0x1}, 0x8)
r4 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x800)
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r4, 0x80, &(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x2, 0x7, 0x4, 0x7, "d8114b9f4033cbf9d68a0d7a0ca3a9bf224999159d7b3ae7e68235570285468ccafbba3d4665046404c8688b25253b6b5eb726a4d76a14548c3cb0d50e2b6a", 0x3a}, 0x0, 0x0, 0x1}, 0x80000000)
readv(0xffffffffffffffff, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
mknodat(r6, &(0x7f0000019300)='./file0\x00', 0x10, 0x101)
read(r5, &(0x7f0000000300)=""/102385, 0x18ff1)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa400, 0x169)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff})

[ 1983.807415] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1983.807415]    program syz-executor.7 not setting count and/or reply_len properly
[ 1999.192215] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.6'.
01:02:51 executing program 1:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e20, 0x7, @mcast2}, {0xa, 0x4e22, 0x5, @mcast1, 0x1}, 0x6, [0x102, 0x200000, 0x8, 0x0, 0x80, 0x6, 0x40, 0x7]}, 0x5c)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYBLOB], 0xfdef)
io_destroy(0x0)
r2 = dup(0xffffffffffffffff)
mount$bind(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1-ssse3\x00'}}}]}, 0x13c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r1, 0x3, 0x0, 0x8000008000)

01:02:51 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[{'\x05\x00'}]})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0)
fallocate(r1, 0x10, 0x2, 0x7)
creat(&(0x7f00000000c0)='./file1\x00', 0x2)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x84600, 0x145)
syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x7e7c, 0x4, &(0x7f0000000340)=[{&(0x7f0000000180)="096829af53e2a1293dffa5b8957f15acfcbe64bf48caf16a42fb2363434ccda03a190a805701d5442f3864a20d781fdbc2b88917c1309611663b00d7534abc", 0x3f, 0x6}, {&(0x7f00000001c0)="62d22e4881078dd8fc92503e4a1ab34a24cb9513f5266169a4802f464c78e9af7e00f2c8b8e3d2a7579cfe67764163936049349ba27fac824bf9a5c08cb59e70ec53fd03359058f764f9a2cf6f4c5c238a8ea56dfeabfec25f3a4a6d22ee89338410b0a8819cc0ee43f5dd0273", 0x6d, 0xff}, {&(0x7f0000000280)="d333b751eadfb9f603b2477409bb9c8ec28c48f554acf43fc23fba4696b71f918a352dce7bf81f69192aa983a117be16707f988e8bb7089359a80b7e9bfbae1b68bfe45bd302f57d90d266181269216f236ee974a06c7157ff", 0x59, 0x2}, {&(0x7f0000000300), 0x0, 0x992}], 0x4000, &(0x7f00000003c0)={[{'nfs\x00'}], [{@subj_user={'subj_user', 0x3d, '.'}}, {@subj_user={'subj_user', 0x3d, '$'}}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, 'nfs\x00'}}]})

01:02:51 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001a80)=0xfffffffffffffda2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
creat(&(0x7f0000000040)='./file0\x00', 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x28, 0xc21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="0378e3e7ab50393cb28615c7ea41f683b60e864acf6f3bb058ed565aa23eaa9effb4858648364cbfc25b4f5c2d681b6222cb1f811efb3b2eda833cc9db9bebac5336043abdb6f3e502f2cf98606a6a5d3cd08670b9492219138ea35f99808d06d14fe46df5ccb9748d216f00762dcb01b21c28c47a25b60d0bf2fbbe225f5d9537c15e9f9076c93b26b433c920b228b837afa965bac0a3064e9aa269bd50815b16b9db54af17a9ac82cd1b437e77228e1c218a8398099447b36a4274dc41562984eb3f006a251cfd799959468a271b32ec5ef7eed9ab6446719d53", @typed={0x8, 0x2, 0x0, 0x0, @str='*\\:\x00'}]}, 0x100}}, 0x0)
setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001a40)={r2, @multicast1, @multicast1}, 0xc)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001800)={&(0x7f0000000340), 0xffffffffffffff4e, &(0x7f00000017c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000c00000074000180140002006970766c616e300000000000000000000800030002000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d0000001400020076657415209657be30be305f766972745f77696669001400020069703665720000000000"], 0x88}}, 0x0)

01:02:51 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03007f00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:51 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, 0x0, 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:02:51 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0xfffffffe)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000000100002620a4783bc4a904d04023eca5de61944f1aa92df331f4c8edcf7e94ba26dbe45a6ac67c40c6469b03e31e36f5fe5cfdbb"])
openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(r0, &(0x7f0000000240))
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x9)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x18000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = dup2(r2, r1)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2])
r4 = openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x4000, 0x5}, 0x18)
fallocate(r4, 0x0, 0x10000, 0x47bd6620)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x4400c, 0x0)
sendfile(r5, r3, 0x0, 0x7ffffff9)

01:02:51 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))
r1 = socket$netlink(0x10, 0x3, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x10000000000, 0x0, 0x0, 0xc0000, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/149, 0x95)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/529, @ANYRESOCT, @ANYRESHEX])
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, <r2=>0x0}, &(0x7f0000000680)=0xc)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000280), 0x810000, &(0x7f00000006c0)={'trans=unix,', {[{@access_uid}, {@dfltgid}, {@msize={'msize', 0x3d, 0xfffffffffffffffd}}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, 'L+'}}, {@access_uid={'access', 0x3d, r2}}], [{@audit}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000ffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"})
open(&(0x7f0000000080)='./file0/file0\x00', 0x50000, 0x0)
read(0xffffffffffffffff, &(0x7f0000000540)=""/250, 0xfa)
unshare(0x48020200)

[ 1999.201732] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1999.201732]    program syz-executor.7 not setting count and/or reply_len properly
[ 1999.232961] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.6'.
01:02:51 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)=""/171, 0xab}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/249, 0xf9}, {&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x6)
r3 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000200)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000700", @ANYRES32=<r5=>r4, @ANYBLOB="00000000000000002e2f66696c653000e4662d6eb9e2c37cd5aeb3ed5afd3af37f1be04f7ea91e9a39e31bdc29cba143adc9c5d4deea9f5ff51b3a54e6d46e10b1113709e9c87bea84a972906db9b2d999fd39a531a7316f2fef3c7f6a908fc11abbaa77252e5ccea5fa7574002e3c40c273378cc828ec6b2aca615c66c4d1b80144d2061eec56effc88ad"])
readlinkat(r5, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000440)=""/151, 0x97)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x1, 0x4}, 0x18)

[ 1999.271960] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1999.271960]    program syz-executor.3 not setting count and/or reply_len properly
01:02:51 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000010000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:51 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, 0x0, 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:02:51 executing program 6:
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r2, 0x406, r3)
copy_file_range(r3, &(0x7f0000000840)=0x756, r0, &(0x7f0000000880)=0x8000, 0x4, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000002d00010d000000000000e4ffffffffffffffffff4b984a47c2b12680a0729dab270b6fe68f44a2b63e3b63fb86c9ecba14fd4485b83461afea820078536bb9ca7b60d327b9a5154924413346b8a4dde85a03086f556c8ea8902d14b836eeb995aa946067b6a0f448ebc146eaca5877a9a7d9d28852e3ab9367ef2e67b8247f"], 0x28}}, 0x0)
io_setup(0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x80, 0x130)
openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r6=>r5}, './file1\x00'})
preadv(r6, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/248, 0xf8}], 0x8, 0x401, 0x2)

[ 1999.366688] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1999.366688]    program syz-executor.3 not setting count and/or reply_len properly
01:02:51 executing program 2:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x81, 0x38, 0x96, 0x0, 0xffffffff, 0x4000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcba, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x280, 0x6, 0xfffffffc, 0x9, 0x40, 0xffffff85, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9, r0, 0x8)
mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1)
creat(&(0x7f00000001c0)='./file0/file1\x00', 0x0)
rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00')

[ 1999.430898] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1999.430898]    program syz-executor.7 not setting count and/or reply_len properly
01:02:51 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x8, {{0xa, 0x4e23, 0x5, @remote, 0x2}}, {{0xa, 0x4e23, 0x5, @remote, 0xfffffffd}}}, 0x108)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = inotify_init1(0x0)
r3 = inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x17)
inotify_add_watch(r2, 0x0, 0x4000040)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
inotify_rm_watch(r2, r3)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000000c0))
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0100000000000000ff002e000000"], 0x14}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012cbd7000fddbdf25280000000a0001007770616e310008000c002d0000000000000000008fec6d266456d076401d84153b92f40e4e264f0fc17c5b7ad58d3d4671244f76a199b6649f394f290862d8331843556261c4b50280d20c9cd5cf6cc2234f14d19061"], 0x2c}, 0x1, 0x0, 0x0, 0x2040020}, 0x850)

01:02:51 executing program 0:
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x44007, 0x24, &(0x7f00000002c0)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8001)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip_mr_cache\x00')
tee(r2, r2, 0xbe, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0xffffffffffffffba}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

[ 1999.552361] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
01:02:51 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84)
r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x0)
write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0)
mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=virtio,cache=none,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',cache=fscache,nodevmap,dfltgid=', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',msize=0x0000000000000101,access=user,debug=0xffff\x00\x00iffffff597,access=any,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=unconfined_u,\x00'])
fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r3, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37")
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}})
creat(&(0x7f0000000100)='./file0\x00', 0x15)
fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1f, 0x3, 0x0, 0x1f, 0x0, 0x1, 0x40000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x35, 0x4, @perf_config_ext={0x7, 0x326}, 0x0, 0x8, 0x2, 0x5, 0x20, 0x5, 0x0, 0x0, 0x259e}, r4, 0x2, 0xffffffffffffffff, 0x19)
acct(&(0x7f0000000040)='./file0\x00')
unshare(0x48020200)

01:02:51 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000020000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:02:51 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140))
r1 = socket$packet(0x11, 0x2, 0x300)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
fchown(r1, r2, 0x0)
r3 = getgid()
fchownat(r0, &(0x7f00000000c0)='./file0\x00', r2, r3, 0x1000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff)

[ 1999.612516] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 1999.612516]    program syz-executor.7 not setting count and/or reply_len properly
01:02:51 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="6a02"])
r3 = syz_io_uring_setup(0x6634, &(0x7f0000000140)={0x0, 0x3047, 0x8, 0x0, 0x2c4, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080))
signalfd4(r3, &(0x7f0000000200)={[0x3]}, 0x8, 0x800)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r4, 0x0, r5)
lseek(r5, 0x401, 0x2)

01:02:51 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 1999.635579] EXT4-fs (loop0): VFS: Can't find ext4 filesystem
[ 1999.687642] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[ 1999.704368] 9pnet: Insufficient options for proto=fd
[ 1999.724947] 9pnet: Insufficient options for proto=fd
[ 1999.789988] Process accounting resumed
[ 1999.820666] Process accounting resumed
[ 2007.360324] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
01:03:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x20000002, 0x1}, 0x6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x6, 0x2, &(0x7f0000000580)="c4de0a6ef9e2ce243374e2212edebbb610e1ecd33a00622fe701c4a5c19626b3058bd53ea14f2224b978f8b0af9c1e2abd7e530f042b87cae91614fd8cfa657f78441da9a5859aca2b841c7c834ff9309e0facdc3cb8f318f56585b53f30a7de915e5592075ea220ad317574b9b92b1df93492a708141ab51c5e2919e70010872e16952b2b4b1af4290c7461dafefdbdbb1ed65c9079a04419f9c5a80cf38f0a642871a2dbb0c5e1eb2ce6112be47ec01e69a588a8aa253fa9203d70485dfd9f5d07056efe62fdba20348fbf0b4c80be4bf7342b4986e0dceaafc8d68b78e5b07ed377b52ed2deb887d8f235b7d37154", 0x4}, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1)
listen(r0, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x8, &(0x7f00000000c0), 0x1, 0x1, 0x1, {0x0, r2}}, 0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
dup2(r0, r3)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000780)="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", 0x12e)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x185142, 0x0)
mount$9p_tcp(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x100000, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@msize={'msize', 0x3d, 0x7ff}}, {}, {@uname={'uname', 0x3d, ','}}, {@mmap}, {@afid={'afid', 0x3d, 0x8c}}], [{@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x34, 0x66, 0x35, 0x62, 0x31, 0x64, 0x62], 0x2d, [0x30, 0x30, 0x63, 0x62], 0x2d, [0x61, 0x39, 0x62, 0x61], 0x2d, [0x62, 0x31, 0x64, 0x63], 0x2d, [0x34, 0x33, 0x66, 0x66, 0x33, 0x33, 0x36, 0x7]}}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@permit_directio}]}})
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000004c0))
openat(r4, 0x0, 0x101000, 0x21)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x6, 0x4007, @fd=r3, 0x9, &(0x7f0000000500)="c0a68f8d92c59a63a65eb527f3602a88f55023189da785c8a776554a8b116d4dbb197e30e59b0f1234d8bf27ddce29b831b1f41a4f87db022e2bfb7f8c686879e6ecb127a1c34b17f65913b3", 0x4c, 0x1, 0x0, {0x0, r2}}, 0xfff)

01:03:07 executing program 6:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xab92, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short}, 0x14)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000400)={0x0, "3814637c8891f36f9fd685951c5408da"})

01:03:07 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:03:07 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000010000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 2015.624773] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.624773]    program syz-executor.7 not setting count and/or reply_len properly
01:03:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
lseek(r3, 0xff, 0x0)
fallocate(r0, 0x10, 0x0, 0x1000002)
r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x1f, 0x200200)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r4], 0x1)
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
write$P9_RREADLINK(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="10e40000240110070be3f93f1a02ae9bda72d5e3e3e65f139bef742d6f37953ba058d15050dbdeb780a3e62a6c138a4d68aa34b97f102084c2b2d89469990ec98c53fe47714a50de630a83ad225079a50e20951945135ae3eb8b3f7b4d2744babf9cca0422a5f812ff0b543a18f5b5fdcc54733758"], 0x10)

01:03:07 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x1)
r3 = syz_io_uring_setup(0x3167, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$sock(r6, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000380)="dea1511d27195cd4aa6fe7b555a0477e450945c4cba02b94a77a2369550af725c9b4fae160466f3076bd9f9e9aad5249a5f331a8d89a784947469aa8787ae8759bfbc3b89e4f400fbaccd9e60eb919646b46d6e5138bb8e1765a926cb3c1f0f455b179bb1fabc56c3f769c0d6b0473f61195d8a1c569", 0x76}, {&(0x7f0000000400)="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", 0x1000}], 0x2, &(0x7f0000001440)=[@timestamping={{0x14, 0x1, 0x25, 0x20000000}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}}, {{&(0x7f0000001480)=@ieee802154, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001500)="bddf865d6fab80c87a750edd6e187d3096175f7d0ad0275133575b9877cd45f9ac5733e69a033178b9798f32e55dbe30482bc0e9ae617eb4224f0a90f22aad8424e963b981c228e3080110b9349d555e50df9fa8415826b75fa603f8edb0cfb95cc1648e23755ab2a2a1928e8c730e5936ec072353de1e91934c6df7130884a9722a6ef10502ff3bb28ebad6b58321b5ddd0e0657f7d4a7e52b0c23742e4ec68d931a9d0b82988abbcfd84d0e00896b21c4d2bc3a34770f8c329aabd2bc978569a1a618f0742cab55d9ca6cfce77d22d144e55", 0xd3}, {&(0x7f0000001600)="f14432eef4f914dc3caa2d547106891aa04c0175f971fae805565e051c9316b71d589a3024c1e7e5142c3b9dc94e4430daf2329e966728f9ddc909103af2b33d5faa0ce9357cb507", 0x48}, {&(0x7f0000001680)="c753ca0252b4e1ce83fd798b2d571dcc88fd028808040eb2c945eba7b631e18453a3e8a7a952ff9eb10e2e8ed53525e38bc497596df89fd2d897198ae5e4cf3caaf09677291290de141e83896bd33678862ef2a512caa34e62960da15ab34838d36ff91c8c16b25e0b4cc2b4c723941a04317d272841b8eaf77299d8dd7af53df31827728f1a025452c1e8e72f5a", 0x8e}, {&(0x7f0000001740)="54ceae67c0874d178a45a7f15217e7634ad864322d5e6ceee8dfc08f6e89c40bcbf69b9d79bff78951c9a357180c4097318b2ddd72d1c96466a9ad86e50151fb877dcdc5dff088a91a42c895b8a10949b9a69d1dc6dd665e550640860028ebbc778f95fc27f3a97626006acc5714106ef178b6cd5e822dc8915b0a7cce6796722934672c8167bf548930bf0e3f3768a1ee9c2d859489ff4d8362c5dfaee3b03a07cbf14b034a43d14224a523a9f30469e93343da367315e1b6063108157be69c28fa679e7b45e739ad9651cf65808eab6dc9f6d78b831ddd947b6a5f8bfc74f9bd1d5a9a413802689c3fed624c477e7dbeb23f", 0xf3}, {&(0x7f0000001840)="b9fbb0a6372e3bcbd5dc9c597f994779a8574bae98b6e8b695e5827744081a6329dfa516b8b54a8904ef879eb683c3c0abdae5fbe84438e1b432fdd0f99ad82c4db25f064dc50cf5dc20", 0x4a}], 0x5, &(0x7f0000001940)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}, {{&(0x7f0000001980)=@caif=@util={0x25, "facc3fa756719bee0d7afb4a5f48d4ef"}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001a00)="168a07101b80cfb9dc9b434d4c", 0xd}, {&(0x7f0000001a40)="b1858f5045f5773cfa6b63653a0fc1a812917021c2a6384727fcbc0879b34e077882ddb8c58318c4659d3d853504544ade2fb9240e6a48d90bea8079884cfccc3e36e9da396b1e82ecb2033f5c9c71a384435c4a5d6b0ea767a4423a662a4d1c", 0x60}, {&(0x7f0000001ac0)="e5b338c3a9ed31098badf6d1fbe53e4d62c83c319b40104f17e164c7ad9adfea11962a1522872fd34215182038efde2350153b8c1bfd7876c57313839129258ec6dad51a6ced613dc4d8288a0eac68c5bfed47716cfe835c73e9a32acc3521ccf79c9ac30bd852e6e5b025f83b52c323c04b38e3c7bb4ae9f5486f40247ab017437483d8e96c70b286c97aa767debeb3795221ec9d762f383a0c718f1b6c8278f0efdc0f3e43a0a70f44e71c4b1fa80ee119e94d90493a0394f168ed3379dbf5d6cb6f2d1d4878f743", 0xc9}, {&(0x7f0000001bc0)="2df8012cf8fa8d19d1666ee6f62bd2221a28448e0f2b4ff14901f7a6f8091e4823c0e8ac0fdaa3377597fc21f4b71369cf25b20ceea667e8dc0ffe166b6ece57ce843f9d5215724703e055d3f728da7b6684e58bd1c48d1be07ef14a56e3d3b0caf8ddb12d353c4ebe158b99bc7658f256ab04bfd9564643a2", 0x79}, {&(0x7f0000001c40)="9ec0dbb2fed7105f3b5d2ca47fec7b0caa8dcfff", 0x14}, {&(0x7f0000001c80)="45593b57a6fc68727d1991433e6b05388a683789fc0f5356d0a497ef7504850bbed36783661f939027864fc708889d220763f10d3ac19f025634fe0d83c1ca079e598f0bd736267a1fc0d8c3f452dc185c5eebd8204820f7d3a4e03d82f4786c5b6ee766af5985265b0045fae04af8fb68917f5a091ddd7a73c4822c9ceac9e60ea7f345ec61a655a3f3531ae038a43054aa8ffb09cee44545f376db7efaa95038f20552e032e1fa625b0479bc7b6196d4ce94deae0fd8cb068f1ebdd5d05061f762d62e37ada01eda", 0xc9}, {&(0x7f0000001d80)="2559963e099a3c0d6727caff6bd2a2df9fef01e1b7ea9854be3a7119cbf559e7fc7799084f1c4564eeaa46d91d7bc90df73148a0f5127421d591b1f506b9a05ecbe455e02b0e956cf3e70db78a5f7e58f1d84bf04921934cac843e2699e5bdb82864e3a95cd30ff39f649709569a99d35932ae2ce9e2380c792722dc", 0x7c}, {&(0x7f0000001e00)="891b2f2a8fc78ba00177d5ba82ee0863038f2a74a810f9f8afe4f99b06dc83cad878d5b89c2da7a7cb2e6aa36f1ca370861e5afb103fdd155843768e8f013c3f2a947ba97c6061c8dfe26391de90af64e3354dbb1d2043869f394c6f", 0x5c}], 0x8, &(0x7f0000001f00)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x400000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14}}], 0xa8}}], 0x3, 0x1)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000140)=@rc={0x1f, @none}}, 0x0)
r7 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x82840, 0x80)
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000000340))
r8 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r8, 0x0, r9)
fallocate(r8, 0x47, 0x2, 0x4)
io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x544c, 0x133b, 0x0, &(0x7f00000000c0)={[0x1]}, 0x8)

01:03:07 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000240)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000601900002900000000000029252f450000000000000000000000000000000c000000000000000000000000000100000101000001000808001c0000000000401c18000000000000000000001a0000000022001e63", 0xa0, 0x8800}, {&(0x7f0000000340)="891a6d213cc1e9f37ddb2f4e49c2dd7c0848a0838e603231b5552c6edc612ed995862b6aad420d3e94bb96f2cde502b8f1024c72a9e03746d31aa1d1696c7d61ffa3a0802555e5d9222a8c62102a37a80704dcc66a35f6898dacec2cbd562346e627db4893f19b5260439cadf55ed154eb7101b64c64daf324b3d36e21c1b8e1c72f2f92742a01a45e6de80bfe0f441dd148e7baed896adb3f8808e44f49e2cc0345ef612660873d89340e28b8f7d775c5658de7d14de1f20e26c1923fa45e21a0926c5d4a36ac2fa43da29c1f9fa61ccecce36eb5a89cacba034178fc0b1cab5072ab17d1b7ba6a003969d381b712b4abaa92ddec08abd5", 0xf8, 0x54}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="698dec6c06a5db129ea70b66b2605ef190b274ee3a26f100"])
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r2, 0x0, r3)
fcntl$dupfd(r0, 0x0, r2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r1, 0x0, r4)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
sendto$unix(r5, &(0x7f0000000140)="3d6cf10e7e73a3b049fd78ec583f9cfaae4d829081d848fef9cd4f80d1d4ca802360ccbb75ac97322e78e27f10f209f67697881fccdd1e52c46c7f7c581848afe276c89940d15200af7f85c1fb70556a4702caff228f716b8d35a5df0a413cf7cc79a918ff2bbcb6a01ca4303d58aef3b1d6c05105c596870bb7634b7912babb700a771120aa129767ba47d54bd3947014b9431d53c4317f0a386014fe6064b9acb8cadf9c28ce6a6d976eccf0a00df57ce35571fe6a7b", 0xb7, 0x20000, 0x0, 0x0)

01:03:07 executing program 0:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='sessionid\x00')
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4105, 0x1009}], 0x1)
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="feebb063733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB="9f5fdee413796e02dc931ad62aa8215e2132a140792073e22ba2835ad353506f0b23c5b0585e0d16e70299c27fe47d660416f56e7e59b8ab980a367e06f5103c7710641796684488bcfd89dff36b13a98cec2b27af3ca50f0b0e5283c0084ddf03b9618be8f46ecf98338a3b68f9ae3f7ea12e5e1c1e66a4a234a2afbfa25675c86324e27ddd77825a3efc5d7100c0d6ff6066cd87ba247d031689b827ae99b504a60ea6137a1e304ae749a006b25df61408e4b5fcbdc0c4ab0c2dce31e37a34d6ad0a09b8d3fd5dd60749fcdcda412fd7b4c32843f395f4f96e0bd92f3a6b6257e269508d4d4845663fe2dbc8b87fdea9b789689bee37e092e91b3812cde2a70317d432b9ade8a4307067b2d6a7f2c2817189a3", @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=none,smackfsfloor=:,seclabel,\x00'])
syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x3a3, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r4=>0x0, <r5=>0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
clone3(&(0x7f0000001b40)={0x260000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3c}, &(0x7f0000000500)=""/140, 0x8c, &(0x7f0000000440), &(0x7f0000001b00)=[r2, 0x0, r2, r2, r2, r2, 0x0, 0xffffffffffffffff], 0x8, {r6}}, 0x58)
syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x9, &(0x7f0000000340)={r4, r5+60000000}, 0x1, 0x0, 0x1}, 0x40)
r7 = fcntl$getown(0xffffffffffffffff, 0x9)
fsmount(r1, 0x0, 0x70)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRESHEX], 0x340}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
fcntl$setown(r1, 0x8, r7)

[ 2015.648319] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.648319]    program syz-executor.4 not setting count and/or reply_len properly
[ 2015.657409] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.657409]    program syz-executor.3 not setting count and/or reply_len properly
01:03:07 executing program 6:
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x7, 0x6, 0x4, 0x1, 0x1, 0x3})
r0 = gettid()
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x2, 0x45, 0x40, 0xad, 0x0, 0x101, 0xc4c32, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x393, 0x6, 0x33, 0x9, 0x1b02, 0x5, 0x3, 0x0, 0xa, 0x0, 0x1}, r0, 0x5, 0xffffffffffffffff, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
io_setup(0x1, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000180)="ee", 0x1, 0x7ffffd}])
io_setup(0x2, &(0x7f0000000500)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="1b", 0x1}])

[ 2015.686066] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.686066]    program syz-executor.4 not setting count and/or reply_len properly
[ 2015.699600] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.699600]    program syz-executor.3 not setting count and/or reply_len properly
[ 2015.729181] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.729181]    program syz-executor.4 not setting count and/or reply_len properly
01:03:07 executing program 2:
r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0}}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30110, r0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
bind$unix(r6, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)

01:03:07 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000020000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:03:07 executing program 4:
r0 = semget(0x2, 0x0, 0x20c)
semctl$IPC_RMID(r0, 0x0, 0x0)
semtimedop(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700})
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
dup(0xffffffffffffffff)
r3 = semget(0x1, 0x3, 0x25)
semtimedop(r3, &(0x7f0000000280)=[{0x0, 0x2, 0x1000}, {0x3, 0x96f, 0x1800}, {0x3, 0x8001}, {0x1, 0x100, 0x800}, {0x1, 0x5, 0x1000}, {0x4, 0x3f, 0x1000}], 0x6, &(0x7f00000002c0)={0x0, 0x3938700})
pwrite64(r1, &(0x7f0000000340), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, 0x0, 0x4000000)
inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0xa4000004)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000540))
semctl$SEM_INFO(r0, 0x5, 0x13, &(0x7f00000001c0)=""/67)
semop(r0, &(0x7f0000000240)=[{0x1, 0x0, 0x1400}, {0x0, 0x1, 0x800}, {0x1, 0xdc, 0x800}, {0x3, 0x7ff, 0x800}], 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140009002500000429bd7000fedbdf2509000000dce0523b5c4e2bc4d3408a6c4028ca6f05f2656b774a07e56055c01f3ed8a224a4ded2543b492a39ce73a8c3f72033ae2860e5d008647259ab50a8055bbbef24a3d406ff29c8b05b5d5bb3da10738b00000000000000080d73af5e997861d06c516795478ff591d62089a82efa52deeba26e498d49682f1d79a6f7861a5833b2fa4bd6dcdcedbf2cb96f28712930957621e2999678eb93d8ab64ced440234e6dfe5bc5c3c7dd848071211fa796f624f5d7fb642972a843ca41e24ecf5b8c0988d120b89e86d0bb11cf06b3d23a0291429d3cbd5c"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x3}, {0x800, 0x0, 0x400000000000000}], ['\x00']})

01:03:07 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 2015.865679] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.865679]    program syz-executor.7 not setting count and/or reply_len properly
01:03:07 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000000fc000000000000000000002a974218378929e02a8e5ab1797bd862616680e5d0039a"], 0x14}}, 0x0)
r1 = dup(r0)
syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="200028c97000fcdbdf254a0000000800030050a3c1324dea9fb6adaa9b9aca3b091814b77f28c8ce3e8d6df22bcaa36de94ea93ce66623e4ddf4b56604a5989229860754ac6bd14c77e72cf80fcc0e770fccd59d76612903333e9ffcb79995761f182c2aed90a332539c459a5ea8f456558e33fec9ea6461804e4845bcaffea67b0b463682b1f52a08baac4761265f3c02a3", @ANYRES32=0x0, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x30004094}, 0x0)
recvmmsg(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0)

[ 2015.953609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14541 comm=syz-executor.6
[ 2015.976978] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2015.976978]    program syz-executor.6 not setting count and/or reply_len properly
01:03:07 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000030000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:03:07 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 2016.074557] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2016.074557]    program syz-executor.7 not setting count and/or reply_len properly
[ 2016.781786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14578 comm=syz-executor.6
01:03:23 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x600000, 0x0)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x105142, 0x4e)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0xb0841, 0x0)
copy_file_range(r0, &(0x7f0000000140)=0x3ff, r3, &(0x7f0000000300)=0x7, 0x5, 0x0)
close(0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)
close(0xffffffffffffffff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
tee(r2, r4, 0x40, 0xf)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x80000, 0x1}, 0x2)
fchownat(r0, &(0x7f0000000340)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r2, 0x0, 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0)

01:03:23 executing program 1:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX])
openat(r0, &(0x7f0000000040)='./file1\x00', 0x24a040, 0x20)
r1 = geteuid()
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff)
r3 = getegid()
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
keyctl$chown(0x4, r2, 0xee01, r3)
fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', r1, r3, 0x1000)

01:03:23 executing program 2:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000001000000000000000b0000000002000028", 0x57, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xf8, 0x7}}, './file1\x00'})
openat(r1, &(0x7f0000000140)='./file0\x00', 0x20000, 0x42)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0)
getdents(r0, &(0x7f0000000380)=""/220, 0xdc)

01:03:23 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000280))
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x70, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}]}, 0x70}}, 0x40810)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000001680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080027bd7000ffdbdf250a000000080001007063690011b523efa6694e09d74d85abdf3b3521c7000200303030303a30303a31a5cdb2884550530df898a5b39cacb5302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000058137d5cb8242384e6d82fa9371b1215d091324137240993decb20b8ddbba80af13fdec75837e1b17cdd6c956bdfd2668cc2d96659c3157037159c5ab3a6c3457309c3edacd5b0d6f13ca68d8deec4bd246e3915c2a3bc1d1c397770c4b804632d944939ce679e2f4baa858c11c27e81ec3db07455"], 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x8010)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x43f}, {0x8, 0x15, 0xfa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1f}, {0x8, 0x15, 0x14}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x804}, 0x48011)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

01:03:23 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000040000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:03:23 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0x0, [0x5, 0x7]})
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getegid()
fchownat(r2, &(0x7f0000000040)='./file0\x00', 0xee00, r3, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, &(0x7f0000001980))
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001e00)=""/4100, 0x1004}, {&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f00000017c0)=""/147, 0x93}], 0x3220d4b96fc2e3b6, 0x400665, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000240)=""/129, 0x81)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000140)={0x0, @broadcast, 0x4e24, 0x2, 'rr\x00', 0x0, 0x2, 0x37}, 0x2c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/pata_oldpiix', 0x18440, 0x84)
mount$bind(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x100000, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xb)
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=tcp,', {}, 0x2c, {[{@privport}]}})

01:03:23 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="011b04ad6d86f01363b5c505fa590900000000f61f00995366abc98b79576d263ca144ef9aaa1680e3a6d74af07c389b9fd983de2ebf900c3630abf8af9a8b3462a4925041c570e11ead90072e7db51219b9a378f251353aecfecd600a5555167df52d7b369edb22e4f048902b66c95436778b19d45f01edd88d325a265418d92e2dbc1763c12abea3018000000000000006e2afb9125249b4f91fbd2f4a7da3bd06bd230fc21a99d676a4cce006b5de773d96bb71b4bb81b80c522b37a7f4136455a6e934e4919addbdb797ac853e51b64ce6ed303eba09eb7d0f9ca950581c83efc23bfc190afb48ba21429b85e67a2c25d31f7ec75da7a5f33ac7db5c3a3135e3520842f19978be722fe131da142465eebdf208976405eb65804e68d38a40560774368647d0cf1713d2c51bc6ae856fd7883f3ce35c161c83f5aabc"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 2031.190055] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.190055]    program syz-executor.3 not setting count and/or reply_len properly
[ 2031.198715] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.198715]    program syz-executor.7 not setting count and/or reply_len properly
01:03:23 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000700)="20f8b8f65ee754c07e4b071c8d7b5e6f69c06a20f65ecc9eb39751ef0322aac9c74fee80aaad523190030a1d532c839fdba34fbce0a087bd0bc423e834082496d53c2c4266e181e2ec5aea2abbbbb4778381d030a76cd9154e4806c982e94f9774ef52b70e2d7c26f241ce289c9ea77f0acd57d18a1a21f3ace30ec83913b11984cac53a0968775b7818697418a79df16050879e8f42bf5fc440c58fd7505070c329a25a7f2946e9f47f79891c5009abda0327f8ed8cc02868b2a37a2e73f0ffbd160dc208409bf810485a72971ac71e7738999c24186d9ff3672dc131e27d4f0ef78d8baf297d570d7ed02fae1882794583d01f1c0a28ed324c20b05ccf39cd304821e3c006141e310d485a4ffadb8dab6b913ff58333ee9c7b72589b7d07c49be08bdf564c88cc356555b450c4da251b7e12066ab4d262cfd9b81f5e5a18165dde001550dd84b8027be23a8924ce269f4960af57e6fc259355a1c2ef857c51f6bcdac3b89fa4b730f1900ce7c49810a298c1134ae328ed4bd60fc002bda5685fd4f622045617110462ba198f013e2e9a350b3c55980a19a48606aa7f0d511125b678a3e200d34b5a09fe1b9ab3d15472422e70fc246074dd94f0da12fc98ac4e50060fa0ec1d5620f18e98c593ed4774b925e29d59521a20ae4a787343ea90b88d86b2b9c4d9d38920f09f3205c3ffc4956afc0dc24d65e02bbbff00c6c316d9ed3ce7515b028d2febb21dd54782cdfe3a52b8bd1c42704feee6da583a33f96e18609eb402b64cb4366b26d7719682d46acd62ca65a771ce2bde0e35d83fc375aeb7c7d0d89047894aa2678569ae4ca4e9dc45a57ef51a2409e027eb8747ee1e5840bf97aba77b709b722f3d4ef4e51160dcd021843e584f82e0942e928d5f6091196cc09d14b8f056f462ec865c800caf90d7c28c1322d5284bef22b497146ac678711ed67af6738fb1c1663385d593f6e62010bc15219360d28105e94a4644c4fa3d9e794a53b5abbd8d78ba7ba279a522902ac2e0ca3a2eb9c7ac76ac71123af32f4a15b4ca328923621f11354ae1402b16f579239e144eb0c8f08376862967f0ea2654ab42e459b4d84f0a719e1901e5297411836a40d266e090c5473fe40bfc5bf8581453b8a9617df41f58ab3107b484b622a2aab3e2f89d0955c0a47962f57c8b48bcb4f09f5b8c26b852844746ced3d1f9c6c294aafbfe37bf37de94c6cd9d4bba9d27286d642f21c715f35ab0973542ca9a44f6e3f40dac44128fc69d40321caa5073bea436315809b7a8dd7297832093ffe491a97552bd059cb95f0dc4e1b54744169eb863d413f0da375eca76d0571afc0e4c1551a146e2857b916db99ebfb5744613246cba459dfaedde06d84520c7669629c56cbf4a1d23db7770c727e641d4e52df54849c9eaa447a71d7748c7542e59513834a37071235a0159e40e16c8c47da8136a4b7bc1d8e8c957d7ec0f87c888d7d534c6d4e8b6bfef1f1186169268a45bce6b2c737e0dbcf909ee9ab44b7234010222d5c1deb01138b8ba6e4890f62bcba4822aa3cc54853ae45f033ed9ad9ddfab9f5c52eace2b71832e1f2ed386f5ae46c7d046b98d3519e77e8ab98d2aec160f47bd6955c0830bba4e4c38f8164f7b620acc7e42c7e6fa93ff0a98c31b1f9f9cb26c0998cd2d579439685bb0db892e3411fbbb6b5140a33b52695fab61691f7edf4f5c5bdff98f9e890d7cfe966caabe448fef3bc896dc6d3dda23fe0dc3c8f4b89b4cd3fc5a7ef87299e2358057ed1e285845a69e2f8a07488ab3fa64aa0e78e46afd61ff0f0d208e961f424ba2e802f99ad7f546b651e779f5cb2cea58de7b947035c6081cadc494766659da7e339462ac81508b306511b03b49f65ca3d2159617a21ff01ff6ec3938af6916a5be246442e7f629925164ceafe86c2f0b7a7c6c72ae19537eec2acf8557e91c92f69484ef66c489e82d57ada231b23ec6c8152657968df97141154277e2cee1e296788c3bddc200f18bc03f056edaa3ca32730013213fe64149ef108b5355780bbefb28d9255c1d147326670b6122736f332a3248baf24ae60670d99e24fcd389d684ad0116724e39aa27d4ccd717438d4f9eccf1d301cb8e341ca05a847372cb67ff2511a4047cdacd167b922de11912006270e55ee260fd3d4fe9fdd1f7100263714cf85bd8985dda83f0e6b11b5197b839a3407d5c70d8240a8539aa3f72fe7d4b35da0e2fb3e7228509b53dccf004439f54adcaa42b02a02d39977d1edc89981b5e5f024767973c6e34018ddec267ddf2c7d4b30a512aeb3573e478acead71ee5c7e83486021cd5c416de0d2072f3672b5b58d71d8478083edec3349a569995344199d6a449f27b2fb0f7c25503e2e4b94e4e1a8dd339aa452f889665066e6eb49da4e076c42026a8f24f6500f258b75d577bc4f3888e98a14696dee81722b5fafa7901472863ce85fa932b4ee9e9981e421756d6f55af4f8740cc5ee66bef05a6a4b339be8c5213327391ea09312671a6b2fa97131d46e067ed743086a4846115e2c51af22043990b949a83361308142c0a9533bd128fc63916ce44787fb56fdc8927c45f34c4661e5a838b7023bf236e682ae0a8a32df941eebeabd24dd226cf89a5469d4b60ae8b8ec91e2c8ea017d865cc0025774b8cb045343d881aa69d78d9ec9fac1a212652a3e106305c852b355fcae3ca3afe0693a7c38e79fa688cad7dca9634eea8ab97a28ba903e29ae2b4be4b9c6c340deb4675f60d8fac10749fb35444320249d78f517f4c57081eada264cbe33f4b04bf52d49398193e9ec3b4dbe404ddcb5e6454478491caee037dc529106fbb9697910fcdd610c318062255a1fda56c8801b33fee2e768b89931f06d8c8a1adc31b532bf7a8e96ac510d90f4908bc686a5fad612e0f9b6779d72785a191f9c962975122edd457bbd38b42f44d71ba2747b50d030688428d4d79a23ee9c9447d32769e7bc6a1caa836a3a17478a862be558485b274ccc04d025409251567cb5661105f3e58ae4a1e52b5c4e75e134596031f8a8b1b66e947039e40c180bfb3ad2e5ad989fd47d83618214888e632c6124c534ea1f784928ece345dc78a280d466ee17c350f846961ad6440d8b4e2c205d00af13b5f53d223fd7b4cf1eae3f966e0c5a105d6ec3df9c8e66b2c25bd2c050ca7561d43b6aab75fb14479425dcc4c6e5f3c5087812a0b644147976283550ee34982907bf3265ef1639b07474adad8f72c64abc9448edd6264dcf954e034f3b02d9a781257b81ee63af650bb98413551e47406df0c811d82d986df25c61470064ae70a55a2c2f655556f6479aad11fd6974c4dcf557eae6c432056e22387c0df55b9020da0aafbdeb85a647f1fcb8ff535fc7326a54374c16369ebfa2069fbaa0a1bf3c8ebd45d1666e1df8c91c06825c95891596fdf690c736ad9f9450ee8719479241d78c80be53b8fa0a3c6eb794035a53d509366e060f4f3e77cc0b548b70d7cfb0e1da0e811c54cb6a4c50839516cbb367f9cdbfcda9af426de8a901388071844f6ed1c8a8ef42bcae7098756f3134b0de0d220951fdc6ec243d882aaf509e6eedc30950ca656f605d2feef991cde8008968982c27f65f34e5b8b8cdd22deabb61b159b86ec101741b5381f70086f807f1baa70e6adb9ffd244b0761c83c638bb8b60d77f11009eafef9571ab07974ab4d07675db0c77bb11621f17591189c72a6c35d0f8317b59f91f93c14aec2281b0aaf70b601ca7b7a36d2b8825dfa2a71a82c21ccd4bf8f91b8de3f9cc82fb3d09c82097a7d8696b2f4146c9182d22cc5f299bed2cd2aea254a34dc2415f00003fc5d820febf86b00859067530fdd5e819fa20d069346a2a095f48272669164bd599483c03add6bc9ac9fa5b0b48ebe7c69d58e3ef9b2b6c74d68227ce6e5181159cdf1324bbc77d01fdbd2bc3ba41b532828360fec97da3e8ea412ee19c614ef66335a23270f73faae8a504cfa40e09ef5c78bd704dbc57de3254e27d92c3e48292490f647d573c4cfee13d1c175e8cd425b661c097f2234220010ce47bc016b03cb56c4bb058a80123449464e49a37c6a7f6c5673e978ef26c3cf81e758625907efb13436d1e64aed94487817886aa94085305f1ab1308634bbe60ea0a43b9762703dfafa6c2c81ed19253f01769f582ac9b26ed0d47ddd4da12569faf79609ba4984a497ff2f584782b1ea1a708020dd060d3ffb709eb2f2814867a76ea491ecf4d95a1ccae561439c933c120850a14b17da5526a9fa6393c9a6270d4918d41267cc1e052f5f565c9e57a9952d7859e9e64daf8603b6810d8e9366c095f7f05c5f973c1e3bd5520b9af99d5ff096c4d14142db407bdadd46ff0de562c5f34898c3865881b31e33658c2687a74bb18db6fbed38e58991223468648302f525c7db6565b71acf6b4671aa2bbf1ee62bef2f0d1c212a2b65e8af002edb1337492ce502ac934dd31e5ea8de91a1afd213c30a61a720f63745019e6f8c48ff0f8f5c64e7939b3ab9ae54d23b1daf4a0330f44d70e72f0b04572b7a4433d6b97521ec60912662354b8593fe3f17b781976a3dcc185908bb4c9fc15283975fad428b8ad04ebd0f0a76ebd584aa04a661d1e04cbd0ec0ae19ac5b9d3f82385b6bc5d8ed24559157dbbc5cee77ff5b29fa390f0a6dd1399a49ef54a98a39c36c99953074b76bf639a8f1043c1275e2a3441e1797926a652a83c1db6b468d0c602fc4aeef5955017db9ab45867decb0c17421425d1d26017f0b377b6b9c88080d6dc05c0b5ba72d38f45c5ab1fe07249f271e484ef01174514ff50efaeb8499448633d59122893144309d261472004d281bf4d63ef370dab06f13510183f7056aceed1a3de89a57eef669fb15efb2414ebee7ddd2b8ca049d1a5dedd054e309646b4c6f34bfa434a33595846960c48b821f5cf28c6ccde79a4cae3bab56cdc1fe0fe4f1712c7e4d8fdaa2978d559bfcaee718eccc1000add7c03afd1f916bb9a44b9c6842bdfb08bb1a462d48b664c239d20b1e03b6d7c3622c589aaa909d6956209042ca54f275d09a78489b2c3b23dddd1ab60e7bc5abf1a946a3f6be5add8912e8b0048c6bc582f468221f07d9ca1e688066fa0633aa2826b30fd9502314bd0b8cf555c5ea4506af6a8dd709f3329d3ae51a45f1a957b43cabdd683f916ee5341f0ea5ad874e938c25471994e521f9351cf7a7d3656571c00a7b6c137fe6afee0f3c6e017ac95b638d47b78eaa7eadb6807bd139d6d33c78878c307e54354344e3afb8371d821f6d86a35f7b7fa3284a973c9e41dcc55ece9b7d336a8f9f9eb96889d88e1961356d6a0ce38ae76f70d123a7fbd3d39f43c61fa335fde2e3fbbe777451b4a49ce8916e8ed05aae1a03a87b90b6b2a52b13bf7172a88dea3b7baff3f77f94dd3af9aeb1ec98e9a754eaee8bcd0fe2adfb311d3a399b1fc39ad02069a4865c39d4b567941c28a1c2013e5bf2356e124d1adf2e500561a2403436e4416d8b4f988b86e582a287d9ac4c0ef61b976326ff848ff604141710cc60cb336b5ad2b1e8e2ffa541e8efde2134b2034cb6a10f13b2d15468908ea7a04551bde30c51fcd4e21e1c0591f959c3415ad0316d5a9503f9d493dff9e33f96b8ec6e138bd678660fc899d3398a37a3f35d618d31a0c9ac6fd2147b808fe314c4295c1f285f287220f5fcf4afef33b7b7ba928fa77d4968c9d048bf6b90db90523d5eeb6090962ac295adc23593e83e30a2e29b492d1cb941b6457f3fe3b36412865018", 0x1000}, {&(0x7f0000000240)="e64860a843dbd36c186c5ad7a27f644c7c7786a7e95c4366aaa663cedffdf98e2f3cd5d3b4c78f361b7282e80d35b5860a1095ef65b3ad935a674cdbc334f3691a0834255c98bcc6647a06410344246312fbb7de7f2c33244202", 0x5a}, {&(0x7f0000000100)}, {&(0x7f00000002c0)="9cd01e073fa0405334aa3de6e97ad5975dd98b464837a64abbab469bb450430dd495a7397788986772bfaed124de1384a6fd08d22cdfe11c6d804de6c5873244db0aa93f21b602d67134f2d189597d80d01b4b7377", 0x55}], 0x4, 0x0, 0x0, 0x4844}, 0x20005010)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a5300af000000000000000c3f089694ed90fa8275", 0x2d}], 0x1)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, r4)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = fcntl$dupfd(r6, 0x0, r7)
ioctl$SG_NEXT_CMD_LEN(r8, 0x2283, &(0x7f0000000000)=0x1)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r8, 0x0, 0x0, 0x5c3, 0x8, 0x1, {0x0, r5}}, 0xa)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x7ff, 0x0, 0x0, {0x0, r9}}, 0x4)

01:03:23 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0xc8, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5108004600002000000092ffff9078ac1414aa0a0101020702000000009078ffffffff"], 0x0)
r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x800, 0x400001)
fchown(r0, 0xee01, 0xee00)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

[ 2031.251383] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.251383]    program syz-executor.0 not setting count and/or reply_len properly
[ 2031.257583] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.257583]    program syz-executor.0 not setting count and/or reply_len properly
01:03:23 executing program 2:
rseq(&(0x7f0000000000), 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'veth1_to_batadv\x00'})
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x24c00, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
rseq(&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x9, 0xfffffffffffffffc, 0xfff}, 0x4}, 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sync_file_range(0xffffffffffffffff, 0x0, 0xffffffffffff0700, 0x1)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x2, 0x0, 0x4, 0x0, 0x5a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x992f, 0xf000000000000000}, 0x402, 0x6, 0x1444, 0x3, 0x4, 0xfffffffe, 0x0, 0x0, 0x40001000, 0x0, 0x2}, 0x0, 0x10000000800, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8923, &(0x7f0000000140)={'lo\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x7, 0x200006, 0x40, @empty, @rand_addr=' \x01\x00', 0x700, 0x8e6e, 0xfff, 0x2}})
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x1}}, {{0xa, 0x0, 0x1, @mcast1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x190)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0)

01:03:23 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000050000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 2031.281467] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.281467]    program syz-executor.0 not setting count and/or reply_len properly
01:03:23 executing program 6:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x3)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x1, 0x3, 0x4, 0x5, 0x1a, "7f56663129cc233a"})

[ 2031.295441] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.295441]    program syz-executor.0 not setting count and/or reply_len properly
[ 2031.297359] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.297359]    program syz-executor.3 not setting count and/or reply_len properly
[ 2031.314656] 
: renamed from lo
[ 2031.325752] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2031.325752]    program syz-executor.7 not setting count and/or reply_len properly
[ 2032.075840] 9pnet: p9_fd_create_tcp (14586): problem connecting socket to 127.0.0.1
[ 2032.076086] 9pnet: p9_fd_create_tcp (14631): problem connecting socket to 127.0.0.1
01:03:40 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000060000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:03:40 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000001)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000f40), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="8fd57b2a09e2ae180aa1777f1799875d833d75ba9a1056217d48d2b6461dec63e2c91efbf3a948712d5598652eb25707dc26d486c3da8cc3371f3a526ab218", @ANYRES16=r2, @ANYBLOB="0905000400000000000001543170403403c2eb2930ca3756a301ca7061e89b6e4c0d1f7a86fd263dd4117b3f607f09f77b9be3ec718195727702915fb8d37dc7a8863785a44f6a342c1e461a3fdd3a072f6ae7e801cae8c115c002b6dd5ab4b3744484a0c353db398c462ca5fdc942da4d260a54db42cce800ad3c80096fcdda4c066834ea8f4184d728ce4380665afaf9"], 0x14}}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000003c0)={0x3c, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x45)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4077, 0xfed}], 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, '\x00', {0x6}, 0x9})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0)
execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', 0x0, &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

01:03:40 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xaaaaaaaaaaaabd5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0300019f00140400000005000b00d4", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000c40)='./file0\x00', 0x201, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40005, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r5, 0x0, r6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x2, 0x0, 0x1, {0x0, r4, r5}}, 0x5)
r7 = open(&(0x7f00000002c0)='./file0\x00', 0x2800, 0x80)
write(r3, &(0x7f0000000240)="01", 0x1)
write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10)
recvmsg(r1, &(0x7f0000000c00)={&(0x7f0000000840)=@can, 0x80, &(0x7f0000000b40)=[{&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000a80)=""/158, 0x9e}], 0x2, &(0x7f0000000b80)=""/105, 0x69}, 0x141)
ioctl$GIO_FONTX(r7, 0x4b6b, &(0x7f0000000280)={0x16f, 0xb, &(0x7f0000000340)})
openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x650483, 0x120)
r8 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x4002, 0x0)
recvmsg(r8, &(0x7f00000008c0)={&(0x7f0000000740)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/125, 0x7d}, {&(0x7f0000000900)=""/70, 0x46}, {&(0x7f0000000980)=""/228, 0xe4}], 0x3}, 0x40010000)
sendfile(r0, r2, 0x0, 0x20d315)

[ 2049.051232] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2049.051232]    program syz-executor.7 not setting count and/or reply_len properly
01:03:40 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:03:40 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
fdatasync(0xffffffffffffffff)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
signalfd(r0, &(0x7f0000000180)={[0x80]}, 0x8)
r2 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xaa, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x32c, 0x0, 0x0, 0x0, 0x8000002}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340))
fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000003c0)={<r3=>0x0, ""/256, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x7f, "9656c75f04ba4d"})
close(0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x8804)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2)
lseek(r1, 0x0, 0x2)
fallocate(r2, 0x0, 0x1, 0x3ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0)

01:03:40 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000000180), 0x100000001, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5f, &(0x7f0000000100)={@random="32f245172ecf", @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, '\x00', 0x29, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x401, 0x0, 0x4e20, 0x4e21}, 0x1, 0x1}, 0x1}}, [0x0]}}}}}}, 0x0)
syz_emit_ethernet(0x35, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @remote, @void, {@mpls_mc={0x8848, {[{0xff}, {0x3, 0x0, 0x1}, {0xffff}, {0x4}, {0x8}], @generic="d466e16f12760256f7013894e346ee2ff01f3e"}}}}, &(0x7f0000000040)={0x0, 0x1, [0x12f, 0xd4d, 0x8d9, 0x8cf]})

01:03:40 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f00000000000000010000000100000000400000004000002000003de0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000300))
syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="2f5bae34fc79d2699b269dfe2b54", 0xe, 0x6}, {&(0x7f0000000180)="594c7695dd203863b2ec2b1278d96953f7db628670a30a16c4cdba09bece0ab3695a0daf", 0x24, 0x6}, {&(0x7f00000001c0)="3acea5fd572e5d9aca0d945b8ea9e47620abdcf948542e9b38db65ef7dda3549d31fda", 0x23}], 0x20, &(0x7f0000000340)={[{'ext4\x00'}, {'[{-)X#'}, {}, {'.%.\x1e(.+'}, {'ext4\x00'}, {'ext4\x00'}, {}, {'ext4\x00'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x2, 0x64, 0x39, 0x34, 0x38, 0x38], 0x2d, [0x66, 0x66, 0x38, 0x34], 0x2d, [0x33, 0x33, 0x37, 0x33], 0x2d, [0x31, 0x62, 0x34, 0x66], 0x2d, [0x33, 0x32, 0x64, 0x64, 0x61, 0x38, 0x66, 0x66]}}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}]})

[ 2049.115858] EXT4-fs (loop3): invalid inodes per group: 1023410208
[ 2049.115858] 
01:03:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0)
sync_file_range(r0, 0x7, 0x36b0, 0x7)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, r3)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r3}}, 0x43644520)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r4, 0x4b45, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000202"], 0x1c}}, 0x0)
syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x34a40)

[ 2049.161135] EXT4-fs (loop3): invalid inodes per group: 1023410208
[ 2049.161135] 
01:03:41 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x0, 0xee01}}, './file0\x00'})
openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

01:03:41 executing program 6:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r0, 0x1, 0xc6, 0x1, 0x7}, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d)
r3 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x3ff, 0x1, &(0x7f0000000440)=[{&(0x7f0000000500)="14148f4c69089cc979376f201bc8ad5f9d1dde5a923040bb14d4217a4ef1c2f3f1853eac17fae5d006ce52df3777443d39ab5a56ff45ff0bb42ddac3ee3bcd8e9922a01420852e2a5d78899be5cf9da09a339504a5ce2736a1d0efe02cb915c05dfe95247461233a56d1627e76b236ed8ae9e32443fb7a1858ad6cc90c4beccd6527c5d7026a987e1eefaf8dbeaec5eefbbfb4689b97c0f86d884f13d7451070e70b34dd6d860c1db7c480a944e90f62b493b377840f8f92af969e11", 0xbc, 0x2}], 0x1100c, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/sysvipc/shm\x00', 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x0)
ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x401}, {r4, 0x80}, {r5, 0x5006}], 0x4, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680)={[0x1000]}, 0x8)
getpeername(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000300)=0x80)
sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000000)="4f1fa60ea2824c7b22b1f6a153c0def76ffdc8e6ea40c4eb55", 0x19}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00020000349098ff4400ebff0000001100000001", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x70}, 0x10)

[ 2049.208952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
01:03:41 executing program 1:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0xfffffffffffffffd)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
sendmsg$inet6(r2, 0x0, 0x0)
write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39c", 0x55)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/raw\x00')
readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1)
syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/3\x00')
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x46814)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x40)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
unshare(0x48020200)

01:03:41 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000070000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 2049.296132] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2049.296132]    program syz-executor.7 not setting count and/or reply_len properly
01:03:41 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:03:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0)
pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0)
fcntl$addseals(r0, 0x409, 0xe)
fallocate(r0, 0x0, 0x0, 0x4)
chdir(&(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00')
creat(&(0x7f0000000100)='./file2\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
dup2(r4, 0xffffffffffffffff)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x2)
name_to_handle_at(r4, &(0x7f0000000200)='./file2\x00', &(0x7f0000000280)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x5b4e, 0xffffffff, 0xfffff000, 0x101, 0x7fff, 0x7f}}, &(0x7f0000000300), 0x400)
getsockopt$inet_mreq(r3, 0x0, 0x4, 0x0, &(0x7f0000000340))
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000340))
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x8010, r0, 0x2e1b3000)
sendfile(r1, r2, 0x0, 0x100000001)

[ 2049.382902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
01:03:57 executing program 2:
r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800)
shutdown(r1, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
signalfd4(r0, &(0x7f00000001c0)={[0x1ff]}, 0x8, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r3 = fcntl$dupfd(r1, 0x406, r2)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000030000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000", 0x74, 0xb800}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB])
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
lseek(r4, 0x0, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

01:03:57 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000001e0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

[ 2065.643348] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2065.643348]    program syz-executor.7 not setting count and/or reply_len properly
01:03:57 executing program 1:
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/118, 0x76}], 0x6, &(0x7f00000014c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001580)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001600)=""/47, 0x2f}, {&(0x7f0000001640)}], 0x2}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001740)=""/171, 0xab}, {&(0x7f0000001800)=""/152, 0x98}, {&(0x7f00000018c0)=""/91, 0x5b}, {&(0x7f0000001940)=""/177, 0xb1}, {&(0x7f0000001a00)=""/15, 0xf}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/251, 0xfb}, {&(0x7f0000001b80)=""/41, 0x29}], 0x8, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000002180)=[{&(0x7f0000001d40)=""/65, 0x41}, {&(0x7f0000001dc0)=""/178, 0xb2}, {&(0x7f0000001e80)=""/197, 0xc5}, {&(0x7f0000001f80)=""/19, 0x13}, {&(0x7f0000001fc0)=""/110, 0x6e}, {&(0x7f0000002040)=""/96, 0x60}, {&(0x7f00000020c0)=""/137, 0x89}], 0x7, &(0x7f0000002200)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002280), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/92, 0x5c}, {&(0x7f0000002380)=""/24, 0x18}], 0x2, &(0x7f0000002400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000003840)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/186, 0xba}, {&(0x7f0000003580)=""/4, 0x4}, {&(0x7f00000035c0)=""/162, 0xa2}, {&(0x7f0000003680)=""/244, 0xf4}, {&(0x7f0000003780)=""/133, 0x85}], 0x6, &(0x7f00000038c0)=ANY=[@ANYBLOB="1c000a00000000000100004002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{&(0x7f0000003900)=@abs, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000003980)=""/162, 0xa2}, {&(0x7f0000003a40)=""/9, 0x9}], 0x2, &(0x7f0000003ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003b40)=""/156, 0x9c}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/98, 0x62}], 0x3}}], 0x8, 0x2, &(0x7f0000003f40)={0x0, 0x989680})
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000003f80)=0x4, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
clone3(&(0x7f0000000140)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}]}})
r4 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r4, 0x0, r5)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00'})
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

01:03:57 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
fcntl$getflags(r0, 0x401)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf254c0500000c00580056000000000000000c0058007f000000000000008e46d10f8a5f4a221f6b4233047233a7ba598468ea4924548d4b09475c89325b236b5f2538"], 0x2c}}, 0xdaab1417e346d28e)

01:03:57 executing program 6:
r0 = openat(0xffffffffffffff9c, 0x0, 0x640683, 0x0)
pwritev2(r0, 0x0, 0x0, 0x1, 0xff, 0x1e)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x20]}, 0x8, 0x800)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x3cd78f019c4a06b9, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
ftruncate(r2, 0x9)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
pipe2(&(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x80000)
ftruncate(r4, 0x81)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}})
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)

01:03:57 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000280), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000540)='5', 0x1, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x2080)
keyctl$KEYCTL_MOVE(0x1d, r0, 0xfffffffffffffffc, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00')
pread64(r2, &(0x7f0000001100)=""/4095, 0xae3, 0x6800)

01:03:57 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:03:57 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
fdatasync(0xffffffffffffffff)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
signalfd(r0, &(0x7f0000000180)={[0x80]}, 0x8)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340))
fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000003c0)={<r3=>0x0, ""/256, <r4=>0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x7f, "9656c75f04ba4d"})
close(0xffffffffffffffff)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x8804)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2)
lseek(r1, 0x0, 0x2)
fallocate(r2, 0x0, 0x1, 0x3ff)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0)

01:03:57 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000003e0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:03:57 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

01:03:57 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080))
ioctl$SG_IO(r0, 0x2285, 0x0)
r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000008e40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}]}})

01:03:57 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
truncate(&(0x7f00000000c0)='./file0\x00', 0x8)
fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000)

[ 2065.904565] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2065.904565]    program syz-executor.7 not setting count and/or reply_len properly
01:03:57 executing program 3:
ftruncate(0xffffffffffffffff, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000000301010200000000000000770b0006000000048004000180d93b08400000edff03001880"], 0x28}}, 0x0)
fallocate(0xffffffffffffffff, 0x12, 0xffff, 0x4)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000a00)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440", 0x26}, 0x48, 0x0)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa})
request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r3)
add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0)
request_key(&(0x7f00000008c0)='logon\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)='$*$\\^+\x00', 0x0)
request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='HL\x00', r1)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x151180)
preadv(r4, &(0x7f0000001c40)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/20, 0x14}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/219, 0xdb}], 0x6, 0x10000005, 0x4)
request_key(&(0x7f0000000400)='logon\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='key_or_keyring:', r2)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

01:03:57 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000400000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)

01:03:57 executing program 0:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x1ff, 0x2c41)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
write$rfkill(r3, &(0x7f0000000000)={0x40, 0x9, 0x3, 0x1}, 0x8)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="380000001c00210cc94314251a02b8b47dc7ceffff00000000000000000000050000000000000014000100fc02000000000000000000170000000008000200"], 0x38}}, 0x0)
setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000001a40)={0x0, @multicast1, @multicast1}, 0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'ip6gre0\x00', <r6=>0x0})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001680)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000001a80)=0xe8)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="38000002f0334ad71c00210c00000000000000000000f60e05000000000000001400010d938b1d3752fc020000000000000000000000000800080004002a5c3a0100b0c39280863d83542c0bc8902a3bf57d5c1155c552978569b86ce57231ff99b097dcc0b3ca71f74eb79edd01a6ea4d3d74ffcb14bf3675b3f846573123a6663a88568f19eff1018b9442d9247107fc6f0e210c3d78c9a43de4a7e353cfdf5d3f1f2a7b9ab551b716d9f513bea221fc1e7e8c8eeb8850dec08a941304dc8c34f531cfee54b2e15035902dc200"], 0x38}}, 0x0)
setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000001a40)={r7, @multicast1, @multicast1}, 0xc)
sendmsg$inet(r3, &(0x7f0000001600)={&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000140)="df30269326420ec4bcf1425403f239de7639a1579b58ef785a9f32c9d1a29a6f097d9b9b8401d541a149e97a89bf03929126dc563e10481f98f267e73e155c4af9466153960e24c0", 0x48}, {&(0x7f00000001c0)="c3c8fe805133c6cfff7ea6069ec50d4eb9a6beb72f614465d9996a6981962ab184709c46e5e2657cfa036b677392ff2353651dee", 0x34}, {&(0x7f0000000200)="3516d4492d827b7c0c9616bb3bf5d8fc3bbfef4cce59084463b2b0c7b27465fdb9a01822b764a64e278eb56a4bbca96b487a08375286e898d6e1f87479f1060e95f6f1497afd220c6d157dcc7cd9c028c5cf3eaf78f15b849c3457b52bbec15ae9cad732f39b214a0db6b2cc26784558ed88e0f97115cf35f4e40dec0d2b518364fe45a9af109190d1c2d57f96157ecd5b45b89a1e2171c72d058ff9382cf4a355a5640e3ce139d77a9d297f448a5b4fcffb1e288d86a66bd319f8c88cdc4794ea2e5f635671e0e522f0aa5aa79ae9df17e65f6d492ea21a8b5f8e2197f83424a9fbd364068387d4eef64ffd3f21620f2c5667260f96f9672820de2efa4bf0e4ea736280df13aab846dbba5d7c3c8ef3e9ac3bb0e197f4532fa21f448e9c87cd7ac3efe2b6ee22f408167af6eac675206b0d4e511a6fdbbb762951aeb69f91a77d5ea7456ee9225aca0ab414216565e5cb2c91da4c14f1c94733a13d5dbc78913c1c8f729c066aa58cc73f4d1fee65a3496dadbf22d60a8f6e269e7c71247e60eda3f3de6fc917ef5b06ae4e120a7243faff7ecaf180ba667dfc60d05e6d1d63e911180f2b5b846ca618977ad85f2477503338e839390a535ce254717cade4b9dca4ac360a71193d4939fa641808784d5d738d240191fa24c2a8e4f6a386cb10723e286e310520e46e8f52c7000e32d57b4553c3dd6022b99ec099e96c499efdabb0573c67b0dfe2e1b2dfe1c08b72cc3b2884aba0780511a085f017a77682f04780ba60709c872916f8a09f96c16357ccf969f5817bfb71adafd532264b0adbf90478b7d2b0998c40e6c6989498050da180c90eb900e946ad2f28a370cd579bfba075bf5cc791fd605defdc3236b8b3502c695dcba54acd583c8ff2c284eb1f43618f6524c824311d2391e9381a90c6dbf6da45655861edd0537a27401818073aeb49f9c8148d287cfbc8dcaa1e95e33328c1900186e021a0fdcec2399ab90d4128652b835a84180a0eae7be9c105d142bd9e1d4bd9a60d225725088f6a8cdd4ba31c3c359222cce797277b0b225426552bd9478fa3cc4deafe888bf4f5b1887adf548fa416389c57c83fdd74c8986ef9cad9e5c30e1cb3fcda7b6bbe081f5dfb9b8cdb1c805d28024bdf97b291559ad6a6ed038e13b61389a5193898cae60d52a05e70780850ea68fcac1553885a3631612b874ecb17c2ad1e14c0e4847def810401a92263b93021688ca4e0ffc0414737515756511ac0a07fa27d79ba0333763f0e1f4cee9a53e4d23379b837a5572c92b2a9d5ff849a5a6fd14888c9c20d24823c482f87b22bf885689c8da5fee434ccc6950db9ddd45b1d38269922afd100c29a5d976c2c6ce9e04bedb09e3e037aefe787018deaf23fa88b1f9f6722f375369b0de763c90214d0a6381201ae87ddca6d0dbceff99fc8476885e929853e386e3b04a2140f7366817861ea196c02bbb3c78dc9ae6a957fac39bc8b59827512a600e356dc4c65ecf73e937436567dd088bf8d6c16a420d0e741831e7ea1c8d9fe151e09aef725a3db6d1946ca9f6152a6643bd09ac2efaa01e6195ef28606e7899d93382eaef9758c00d54b5750b91806afa121277559b5127f341b63ef08c10297c2f3de7b31b9401e383fdc11d02ce034909b475f4702b90559c5c2139f5ca44a85596f8cc481200765e08ed7638eee91f54918ce5f5b2029d969e541f984a98b235c9eb63d314afa6b5c51d6fffd69206503e23985a979d20d729cbd816409550c5026be0715d092c33a2f2efde9507c006649509a568ef8e6502a09e87227c336214a17759b912413a47e0cb866f9fe3d8b8236af713443b2fca426ad2a20df4be84dc775a42d27237d902bc433b0c44cbdfdea6ebd12ffcefd0114a220ecc4f41f8ee38cb8f8624da572a5f7f4b245a4c1d6fce2232b66620ef8531a41a6360852093619b7eadf5ae2f76080d0c16e60a154e1aad3f0f8bede6bb44b54a4e1cb227f5077a495a932c570fdc6aeaf0525d5aaf104d7d279b60225e964718b50ad99eb31c744afce58e220f94500872c9951713239e395e1ecea5e7e59689098b3590249efc7e8c509d82a268830d500e274775f56bdd4c8732560844c3e0c886c549d351d58dcf38a4517f4ea1417b32a0cd4c11976e7181b8dfc3d53802598ab881875491fbf2b858b4f0f3db439bdd1efff1e7392d3b7bd36534f0c7a005696a9b7ef1f8fbc22f4503aa7a19c12a8e1d8d23f061e2f4dc68ba083a0facebdabaf87fffe3e634a11d0ab88f26c8efa81e4182eabd3207d4b762ab1dd652fb6e8b9d14962649c8d517c7bfa0ecd0934ffb7bc9eb6c5f0a66ab3646c7326d0a5c43dedbacea111846cf534e884d414314ee2c79f205ee618c8b06739d7c5c4cd0fd4ccd094df45ecbf81a2873c0bd5c721475cdadcc92bc82d4b6926e0ce9e1b64c7ff6aa7c6e36b2d433a1896601732b9dbce5cfe01471de06dc832e88ac797f4c0efa81897dc0d08503630b12d739d24b3b4e537d65d36b84d59b7508f5f9d0c9a9998423a7e4cf9a96560cb42111be2c45678d0694998946acc4893e7405c1970a63d50be8d3f130e0c534d759a665a79e23c989962ca95910ebb0caaf11ef80797da55d7b0f288f6b99d6df076cf23f40021568d36499b3cd994fa1930c41ccbfb8dca3df83421ca82e317d6646d426bef80ba96a74e89f5a228242fad541d4d7e3142e3ed1324fade299f23ea1d62c1285c77e0a1df826d0ad60971980951ddc5535718c134be3a565e2d890a688fe5d0aff3c046a7fbb7d4bdc9e341de192a7e7691c7a885aa24abe9f6a13cffbdb8a9aa3d97bea14998f7866c3b41e354382b450093ab7ae2516a8fe19790ed6d9fb2f480eb1093102e3a9ba23c7e20360fe57b2ae6a5b619d8479eb7d8bbf8ee7dccd27bd81b6a365827bec85bdac574e40d4540b82f5271be91557869e823d191d0fdfa24860064739359925afe07baf7ae0094758ced10ad85f9d0245d1c2accc8b0503cf0cb8085340c1d938922573c69494115b8bcd5ea4b174833d601b31bea6f209ef5b56a751a8e5d182dfa16f95a0f1077b99c9fc39d43c536d78e2def8d854f7131b49ec47e7f236ee195cdeac1279ada2ab2af2ef5fc43976c1aed6a0c712778960daae9ec33c35d40f322612e3213904e972476b1e38bd2184196d6c8343c826d12380f911f0fc746013cab72774c4e1c2b977e817c5a816d90c61bd74ba4e7ac732b4a8a4254a5659fc23a7046d3c5d8d015b2b677a678049f6892eac24555afd20182fe276c55f31fc0eee773995f4449ae7170be1fe08d93a042400c4787d50fbf3af07adf4001dde4c13ae895d7318f519ba4458606f722ba6fdde6d6f2ab443a6964d6882fc16ab6c3650bebcf89e974e5e5ff4e2faf6be7adb439b38aae4d27a232dfff8990f07259593a2daddd08c476c96704f87e8773f936f3a872424f2dae7fa9eeb754d095c4cae25c0064baab5862ec6f9a3d0589ce0b17b4d123c6ef89c2f016745b88e6e9f8d6af1facb8d72dcc030927cb825f12e1e9c9bbdfd78dc69fd5123827358e14080b182995920d17383142f9e4a9c36407ea57ed2e9e98a1558aeef38abe6d8b6f2f64651b6aae81a8b8cb5e0ef58493e964071a6dd387e9707f5be7561dcae7097c89edda5af7ad6bf5c9a954b1d86998250b57018de1a6f8ddf961c3e2cccb8841a0f302b8602ac9d112702e6e7d96b5bad4a56a41bd8c36478205262e32a0eb07cd7ca8c41c81071cae4328afe88396e1e3063ac0429ca4ae5b28f42350f5f3f4f2e2dd200cb8f7ab49e7ac61824257545fb3ae427c57cf5cc102ff397f22f9cb68355f52fcb3a750cd4cd47e9d5e751b1e4ccbe53fdf64807ff9bd9542f2184c2d6d8df8b03ba10b24ed760fa4d1581974a4d4162ef1bb2a1b3622e17cb921f26183587e9b2a0a650ceac654251b9a587d4add34578c965c9f248fb294858ca1c482a0decc8e9d99225a0e77297afd96a7fb72c6539ab46c160c523056b3c6fdf455b1914a38ccfb527329ecf3931b45fff700136988cc7abc10aa915c4be1e4742782980c6222525e66f189fea4162c294d662d03eb6d1d77780ff1a8eddd897fac757ff47303dcbf86a58fc01d62305c7d4fa9471ba97472a263e89dd0f72f412750e832b25ac38ee8bc946691013b7cc8f29c5bfd33d7ec4bc59022bc2bec2b914300dd219c5662b925baa85c09d0bd14799abb618a2f808fb68b42026960eaa8363fcb25deb3af2e64a442f62ccbd6dcbab59ae31ba094b5dee869fd0b85c652ac998df859c0229abe95dbb2adca65a3d2862c1bd3f81c61ba5c19effef658e104888cb97806f7dd2919809f9c4073e8498f688e7fb30d7ee3f5612150acb653b44af3209ebe93e18eb142389c8fb8d32d3e58ea0edf3479a9b801fb9e346e95890d2ba2b90f74a1ba6ef6633539d2a3c61b3961ed1146e9245f156dd37b9244b815aeaba3387c856d94849251e4a3ec80fd6964f25fc416a36f76ca9aec1e37d84657b210731dc7533c5236f5038742b5318e2a90532452cb895fefd2a22e7e8152c724cf45471bb94227d776ff9295d2008c14681e5c88e7575b9364d64c66d9961cc37d3873a83e9e0ed8e44d67246879dc6fd439dca452b59a36eb1faeb3fcc66d928f64884116602ac0516a39759429f05d541bc222d33db8d47d15ffc5f5cf39d46ba144f1e057bb8f0a1c4323c74467f13af8ffb4726b0b98eccaad01e1f9cb099aa4a1838d88c6b93ac5508b6ae23bae4ab9f5b5c30a6b642afe131152c969624f1bc9fbcecfd39b531b7f4cc9e199c1fe593303534ef38204fabb728192aad7fa106c54604ed912047a76050a0caf6317ba44cfb5c4474a8f453a557ecb36366044d2ed039703920f99e31e4a41ce232ccc84c858b087331b692b0adac194b17deeb916dbc92d761cfbef95ac843d344246bd570d62300461f6ac0815c77490f028a40118a875bdc4c0549b0f20b1c637efdbd791dc6e06072575b70d9a2b363362229938b8469b7268e7a05057c3a1697caf4ed1391c55ac7dfb7c75714b8db4b6d4e8dd7c9ac1a53b2a795fb130c304ec30fb7c225a25eff5c47a63926a46a5ea276459b5623863c2a668b67cdde6aa2e597f6bf786d23f0117fd24f7da956f6d53b34b9fbd182f90a1e5977fe43c5b6c7c8457e7bed192acfd83d4569b12c7f5375c1cd3ee90c378e30402ea212a8a088e5049c26f29bfbace2b4ffd2c4d21ab9cd380f8fce4da48196794d6b5441594be7ca60592a1c67d2e6c2c75e48832a16d3e374f13bd6ded0cf126142382c3c3d7de75f13600f1ae40a7aa5a2fe16dbfcb2beb91f481e904e22c057e2c66efb53f48718e720faae2f72ce266d2c23955b72f13e41364098f682be99cc4bb8958b4ed2298a7193ea0e769f2187c92e6b1986990f91093553e13ce7d0285b4ac103fbb403810ff97f2a1030f7c74aefc78956f9a8bfa3f72571a2df33f023e80828e7919f3ec4e571276a32e240e6c4b33706fdf96b7d83c7976ab2615552eb0318f27f103733b2e2f5596b5d15350dea05d5cdb1276c9eed6cfc4c83c48d50ac7aaa9c8286bda5a7179c4fecdf3bbce2c8b1cd8107baaee0f45390d8aac7607166060deec5d27e2ed596b30fd380560df908c4b79a1e6bd45c9f84dc637e2e265a4c18d2ad218b829608e84d0eb1e922f18382c4e033b7b68b34bb35abd479cb28f80ef32dc84c7235961f73bb58dabc2a343df742181a88d00426eb08aff8ebd1d", 0x1000}, {&(0x7f0000001640)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000001240)="349942ec7e4d42aa426f90b74f0ec3152d3693ed304dbfd8a308a5cbc1fd718901462896f19376dc51125764b5f6d4bfec8db123c142ab9ed84f264c08910265e80f27c81f7536a1a31bc732608f5eb63fb2c7faf2c578e9fb8142a8fcec645538f6ec1d72a209e585196da38cc4197658a8b547e595573d0f9bda7e363766bfb35133563382edbf322b035f2a61cf9d01d92f41dcb49eea28abf7135fe2bbab060c6a31e8201be35ac9acff9b058cb783d3f0ea153a9371dc63e7740a4b3492bac99e4ee8d8ffd719c2c1947cba", 0xce}, {&(0x7f0000001340)="2d6278a5fa7626218061fa9b78c2f54a930248e0a8dff238861079eb17b7cce18bed37ad80ca226a3e49487216e8ffd7fa2cb85239bda0fcfc545ff259851cda26bf56100011058221e481ed50007256d5e1ee1d12bb7fa4cef437c043e7766c2e4ca7c358822c1c9983e6d6c4a0b6b7187018f6837c015508630b5f6d9b91cd13f8c38ddbff8e56913d5fda7acdff9ea8a5df7785ac2a8164113b", 0x9b}], 0x6, &(0x7f00000014c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @dev={0xac, 0x14, 0x14, 0x20}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x18d6c0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x118}, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

01:03:57 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0/file0\x00', 0x20000000)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x101ff, 0x2000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x13)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1)
inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x64000004)
inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003)
r5 = inotify_init1(0x80000)
inotify_add_watch(r5, &(0x7f0000000100)='./file0\x00', 0x82000003)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x12c800, 0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./file0/file0\x00', 0x10000400)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x802, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

01:03:57 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0)
write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$FIOCLEX(r2, 0x5451)
write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00')
r4 = fsmount(r3, 0x0, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r4, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0141040b08000998098000060008c33a9ddf1a33b9f9b610"], 0xf)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x7, 0x2})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="013804009bf4c220c1efc2050006000000ee4700000101000000000000000000000000000031f5e866d9022a05c753d21efd0a8d09a16fc23164bd9b7ac43e676b641f13b895074de5c106286e4a564bc2a1b728819d3294421639caaf9e12ac16b66aa1bd109e484c79ee1fb30349d95244aed78f3aa2b8c95cc695c9647243e1fb44cd867035f03726e41493d000cf022d959eee329e488f68f28cbd9730000000003c4df3d187269647dcbc1340bb5cb8e5051573ffadf6880504c875c6bb59f3d937783be55d55a6754fcb8500dd1853eaecf4f0af9e"], 0x4c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x163000, 0x0)

[ 2066.050526] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2066.050526]    program syz-executor.7 not setting count and/or reply_len properly
01:03:57 executing program 1:
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140))
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00')
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'})
syz_io_uring_setup(0x1ec1, &(0x7f0000000240)={0x0, 0x4012, 0x1, 0x3, 0x31b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000600)=<r6=>0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[], 0xfdef)
r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x105142, 0x0)
fallocate(r8, 0x10, 0x4, 0xfdef)
fallocate(r7, 0x3, 0x0, 0x8000)
syz_io_uring_submit(0x0, r6, &(0x7f0000001700)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f0000001740)=""/181, 0xb5}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000002c0)=""/70, 0x46}], 0x5, &(0x7f0000000700)=""/4096, 0x1000}, 0x0, 0x40000143, 0x0, {0x3}}, 0x8)
syz_io_uring_submit(r2, r6, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f00000000c0)=0x80, &(0x7f0000000340)=@tipc, 0x0, 0x80800}, 0x0)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
r9 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x0, 0x4, 0x6, 0x4}, &(0x7f0000000080)=0x20)

[ 2066.062190] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in;
[ 2066.062190]    program syz-executor.0 not setting count and/or reply_len properly
[ 2066.083627] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2066.146815] 
[ 2066.147153] ======================================================
[ 2066.148181] WARNING: possible circular locking dependency detected
[ 2066.149200] 5.10.218 #1 Not tainted
[ 2066.149792] ------------------------------------------------------
[ 2066.150823] syz-executor.0/14759 is trying to acquire lock:
[ 2066.151713] ffff88801a60cb78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90
[ 2066.153394] 
[ 2066.153394] but task is already holding lock:
[ 2066.154333] ffffffff8561afa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0
[ 2066.155773] 
[ 2066.155773] which lock already depends on the new lock.
[ 2066.155773] 
[ 2066.157085] 
[ 2066.157085] the existing dependency chain (in reverse order) is:
[ 2066.158267] 
[ 2066.158267] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[ 2066.159626]        __mutex_lock+0x13d/0x10b0
[ 2066.162869]        rfkill_register+0x36/0xa10
[ 2066.163573]        hci_register_dev+0x42e/0xc00
[ 2066.164303]        __vhci_create_device+0x2c8/0x5c0
[ 2066.165092]        vhci_open_timeout+0x38/0x50
[ 2066.165829]        process_one_work+0x9a9/0x14b0
[ 2066.166595]        worker_thread+0x61d/0x1310
[ 2066.167293]        kthread+0x38f/0x470
[ 2066.167929]        ret_from_fork+0x22/0x30
[ 2066.168600] 
[ 2066.168600] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[ 2066.169648]        __mutex_lock+0x13d/0x10b0
[ 2066.170353]        vhci_send_frame+0x63/0xa0
[ 2066.171061]        hci_send_frame+0x1b9/0x320
[ 2066.171780]        hci_tx_work+0x10af/0x1660
[ 2066.172499]        process_one_work+0x9a9/0x14b0
[ 2066.173270]        worker_thread+0x61d/0x1310
[ 2066.173986]        kthread+0x38f/0x470
[ 2066.174625]        ret_from_fork+0x22/0x30
[ 2066.175306] 
[ 2066.175306] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[ 2066.176591]        __flush_work+0x105/0xa90
[ 2066.177280]        hci_dev_do_close+0x131/0x1240
[ 2066.178051]        hci_unregister_dev+0x149/0x430
[ 2066.178821]        vhci_release+0x70/0xf0
[ 2066.179490]        __fput+0x285/0x980
[ 2066.180096]        task_work_run+0xe2/0x1a0
[ 2066.180809]        do_exit+0xb6f/0x2600
[ 2066.181469]        do_group_exit+0x125/0x310
[ 2066.182164]        get_signal+0x4bc/0x22e0
[ 2066.182851]        arch_do_signal_or_restart+0x2b7/0x1990
[ 2066.183739]        exit_to_user_mode_prepare+0x10f/0x190
[ 2066.184615]        syscall_exit_to_user_mode+0x38/0x1d0
[ 2066.185460]        entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2066.186359] 
[ 2066.186359] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[ 2066.187373]        __mutex_lock+0x13d/0x10b0
[ 2066.188081]        bg_scan_update+0x82/0x500
[ 2066.188788]        process_one_work+0x9a9/0x14b0
[ 2066.189543]        worker_thread+0x61d/0x1310
[ 2066.190253]        kthread+0x38f/0x470
[ 2066.190868]        ret_from_fork+0x22/0x30
[ 2066.191530] 
[ 2066.191530] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[ 2066.192874]        __lock_acquire+0x29e7/0x5b00
[ 2066.193614]        lock_acquire+0x197/0x470
[ 2066.194303]        __flush_work+0x105/0xa90
[ 2066.194988]        __cancel_work_timer+0x368/0x4c0
[ 2066.195823]        hci_request_cancel_all+0x73/0x230
[ 2066.196732]        hci_dev_do_close+0xd9/0x1240
[ 2066.197482]        hci_rfkill_set_block+0x166/0x1a0
[ 2066.198270]        rfkill_set_block+0x1fd/0x540
[ 2066.198996]        rfkill_fop_write+0x253/0x4b0
[ 2066.199736]        vfs_write+0x29a/0xa70
[ 2066.200380]        ksys_write+0x1f6/0x260
[ 2066.201035]        do_syscall_64+0x33/0x40
[ 2066.201704]        entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2066.202586] 
[ 2066.202586] other info that might help us debug this:
[ 2066.202586] 
[ 2066.203839] Chain exists of:
[ 2066.203839]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[ 2066.203839] 
[ 2066.205974]  Possible unsafe locking scenario:
[ 2066.205974] 
[ 2066.206919]        CPU0                    CPU1
[ 2066.207640]        ----                    ----
[ 2066.208362]   lock(rfkill_global_mutex);
[ 2066.209012]                                lock(&data->open_mutex);
[ 2066.210018]                                lock(rfkill_global_mutex);
[ 2066.211043]   lock((work_completion)(&hdev->bg_scan_update));
[ 2066.211962] 
[ 2066.211962]  *** DEADLOCK ***
[ 2066.211962] 
[ 2066.212908] 1 lock held by syz-executor.0/14759:
[ 2066.213645]  #0: ffffffff8561afa8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0
[ 2066.215110] 
[ 2066.215110] stack backtrace:
[ 2066.215826] CPU: 0 PID: 14759 Comm: syz-executor.0 Not tainted 5.10.218 #1
[ 2066.216918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2066.218224] Call Trace:
[ 2066.218645]  dump_stack+0x107/0x167
[ 2066.219218]  check_noncircular+0x263/0x2e0
[ 2066.219885]  ? register_lock_class+0xbb/0x17b0
[ 2066.220618]  ? print_circular_bug+0x470/0x470
[ 2066.221336]  ? find_first_zero_bit+0x94/0xb0
[ 2066.222036]  ? add_lock_to_list.constprop.0+0x68/0x500
[ 2066.222868]  __lock_acquire+0x29e7/0x5b00
[ 2066.223538]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2066.224362]  ? SOFTIRQ_verbose+0x10/0x10
[ 2066.225013]  ? __lockdep_reset_lock+0x180/0x180
[ 2066.225746]  ? mark_lock+0xf5/0x2df0
[ 2066.226342]  lock_acquire+0x197/0x470
[ 2066.226942]  ? __flush_work+0xdd/0xa90
[ 2066.227562]  ? lock_release+0x680/0x680
[ 2066.228185]  ? __flush_work+0x78c/0xa90
[ 2066.228823]  ? lock_downgrade+0x6d0/0x6d0
[ 2066.229494]  __flush_work+0x105/0xa90
[ 2066.230092]  ? __flush_work+0xdd/0xa90
[ 2066.230705]  ? lock_chain_count+0x20/0x20
[ 2066.231365]  ? queue_delayed_work_on+0xe0/0xe0
[ 2066.232084]  ? mark_lock+0xf5/0x2df0
[ 2066.232689]  ? lock_acquire+0x197/0x470
[ 2066.233316]  ? find_held_lock+0x2c/0x110
[ 2066.233962]  ? __wake_up_common_lock+0xde/0x140
[ 2066.234699]  ? mark_held_locks+0x9e/0xe0
[ 2066.235348]  __cancel_work_timer+0x368/0x4c0
[ 2066.236040]  ? cancel_delayed_work+0x20/0x20
[ 2066.236746]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2066.237575]  ? __cancel_work+0x1bb/0x2b0
[ 2066.238214]  ? try_to_grab_pending+0xe0/0xe0
[ 2066.238913]  hci_request_cancel_all+0x73/0x230
[ 2066.239633]  hci_dev_do_close+0xd9/0x1240
[ 2066.240289]  ? rfkill_set_block+0x18f/0x540
[ 2066.240980]  ? hci_dev_open+0x350/0x350
[ 2066.241609]  ? mark_held_locks+0x9e/0xe0
[ 2066.242259]  hci_rfkill_set_block+0x166/0x1a0
[ 2066.242969]  ? hci_power_off+0x20/0x20
[ 2066.243581]  rfkill_set_block+0x1fd/0x540
[ 2066.244233]  rfkill_fop_write+0x253/0x4b0
[ 2066.244894]  ? rfkill_sync_work+0xa0/0xa0
[ 2066.245550]  ? security_file_permission+0x24e/0x570
[ 2066.246342]  ? rfkill_sync_work+0xa0/0xa0
[ 2066.247012]  vfs_write+0x29a/0xa70
[ 2066.247578]  ksys_write+0x1f6/0x260
[ 2066.248155]  ? __ia32_sys_read+0xb0/0xb0
[ 2066.248808]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2066.249632]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2066.250446]  do_syscall_64+0x33/0x40
[ 2066.251033]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2066.251839] RIP: 0033:0x7f1fe60e3b19
[ 2066.252426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2066.255317] RSP: 002b:00007f1fe3638188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2066.256517] RAX: ffffffffffffffda RBX: 00007f1fe61f7020 RCX: 00007f1fe60e3b19
[ 2066.257644] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003
[ 2066.258767] RBP: 00007f1fe613df6d R08: 0000000000000000 R09: 0000000000000000
[ 2066.259889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2066.261012] R13: 00007ffcc6ef10ff R14: 00007f1fe3638300 R15: 0000000000022000
01:03:58 executing program 6:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x2a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x9, 0x1ab, 0x20, @dev={0xfe, 0x80, '\x00', 0x12}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8, 0x9, 0xff}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x3, 0x6}, 0x10)
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@local, 0x78, r6})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$packet(0x11, 0x2, 0x300)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x2000}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000)
syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)

[ 2066.302353] device syz_tun entered promiscuous mode
[ 2066.322549] device syz_tun left promiscuous mode
[ 2066.342519] device syz_tun entered promiscuous mode
[ 2066.349892] device syz_tun left promiscuous mode
[ 2066.713576] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.

VM DIAGNOSIS:
01:03:58  Registers:
info registers vcpu 0
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822d19b1 RDI=ffffffff879eb2c0 RBP=ffffffff879eb280 RSP=ffff8880447ef1d0
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000036 R13=0000000000000036 R14=ffffffff879eb280 R15=dffffc0000000000
RIP=ffffffff822d1a08 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1fe3638700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559b59f92a50 CR3=00000000511be000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000dd060a
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff8880200c2000 RBX=dead0000000000ff RCX=ffff8880200c2d80 RDX=ffff8880200c2bd0
RSI=00000000000001b0 RDI=ffffffff86c065c0 RBP=0000000000000246 RSP=ffff88805100fb70
R8 =0000000080000000 R9 =ffff88805100fb80 R10=ffff88800cfe8b40 R11=ffffffff80000000
R12=ffff88800cfe8b40 R13=ffff88805100fc30 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff816c9824 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f36cc204700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d626000 CR3=000000004c618000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000