am 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:36:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x0) 06:36:07 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) r2 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040), 0x40000000}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3) ftruncate(r1, 0xffff) pwrite64(r2, &(0x7f0000000300)="02f1fc9a3858e8df81c649c440eb08101c05bb79e3abfc019d47701eed90611d071f8b64d5c56ae8c197ade6c3bd3e5fa4308da33e39e3710d91c2a091210cfb1155017bccd685bd0b838236ca857a8c63d930b9855bb01f9aef0b74fdfc07f458", 0x61, 0x6) flock(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x7fffffff, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000440)="b0b4fa498b726e63ce7fb3471c1b0eaeb94c911cc503a3c1c31e409ac0301b199fab8a1157ea431ad5076af11343ab54d96261fb9fe46ccadcfad56b80d0adc4cbb1c093543d47c39f90360781033021e35b3ec62289fe4deb801211bd910998d68716830c013d1f8593197798f971c2e23b7a0300056c0cf79bea0ea14cdb1a55f7d872173f093f677dec500ac7067b63d42e3a6eb8de66732a6fa8e9c3d97627b7bdbacf", 0xa5, 0x1}, {&(0x7f00000006c0)="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", 0x1000, 0x6}, {&(0x7f0000001e00)="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", 0x1000, 0x7f}, {&(0x7f0000000500)="083ccfad547567aed27a2ecb5519e74c1023eb862b777c89acf47012a932dbf9f980740d5a64ce36ac743367c77444791e7a4f845cac6d1abee580550ba64d3da93efac97bf4c4f6d395d4dd95b99b5ec404669e4827365520085f30ecf113918347e20990d9c2fc6ac2685cc470894e54c4e0e883784955ab16265aa4de6ea6314eaffa92f66c4120b68dbbf3f7ad2149d213fe88d9175bf76fd31b37943f7f9d", 0xa1, 0xfcc}], 0x80040a, &(0x7f00000016c0)={[{@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@rodir}], [{@subj_type={'subj_type', 0x3d, '-'}}, {@smackfsroot={'smackfsroot', 0x3d, '#/'}}]}) r4 = openat(r3, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000680)=0x800, 0x100000001) mount$bind(&(0x7f0000000040)='./file2\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000400), 0x40040, 0x0) sendfile(r1, r4, 0x0, 0x80000001) 06:36:07 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x700, 0x0, 0x0) 06:36:07 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 2194.010294] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2194.012131] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2194.013121] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2194.014782] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2194.017296] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 06:36:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x34000}}], 0x1, 0x0) 06:36:07 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 2194.100552] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 06:36:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0xffffffe7, 0x0, 0x0, 0x0}) 06:36:07 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:36:24 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:36:24 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:36:24 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0xfffffff2, 0x0, 0x0, 0x0}) 06:36:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) 06:36:24 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8802, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:36:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:36:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x1000}, 0x1c) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000019c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x16, 0x0, "2dcec6a5048f52037d26ec15c1209863d9dcfbd2eef0cdf6fac20511ed473e2bb0de8c1dd6788ca6c53a4c520b6346148e9e670ac5fbf1be5ecf6a9881c70fa76f6f00b2909f2e5744cc99709cc5334d"}, 0xd8) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r1, &(0x7f0000000100)=0x3, r0, &(0x7f0000000140), 0x3f, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x10000, 0x18a) recvfrom$inet6(r4, &(0x7f0000000240)=""/128, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat(r3, &(0x7f00000000c0)='./file1\x00', 0x20000, 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="9335fd02ac8dddb607ce6eff5c6011433122999d9e0b7403eb045d4cab2ecefb3db5ca26820fe0a14abe24fe4d748083a75a23e1331ef0cdc366c8ee86a6337b06eb10ba8912b7018fc3d4c50ff24f147cf6c34e3d55fce8fb77efe5ee584efe253d9f5f00b9afde9b0b48043ab3a8aea1a8783b4a9ba45ff29efe02dff6498bd09f942ced3b34360f", 0x89) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 06:36:24 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0) 06:36:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:36:39 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 06:36:39 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x800000}]) io_uring_enter(r2, 0x6003, 0x22a8, 0x3, &(0x7f0000000080), 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00000000008f84158e66f57946271acf69220bc43185f54423f543d654959c611bb55b7c162628836b9faec3f8b07d16e9bf78837fadddde1c5e840fc8bc"]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c000006000000a9cd685676972493fb5de5288c2a367df5f13900ea53d200030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8"]}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) close(0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x1ff}) syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r5, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x47}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) unshare(0x48020200) 06:36:39 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:36:39 executing program 6: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040050) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "cc132701a84a9f82597b4cb931de2ec9"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e1c30be3a888"}]}, 0x3c}}, 0x4019) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x1, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x74}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x4c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x89}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8094) ioctl$SG_IO(r1, 0x40081271, &(0x7f0000000c00)={0x0, 0x7ffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x24, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:36:39 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0xfffffff5, 0x0, 0x0, 0x0}) 06:36:39 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:36:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x400300}}], 0x1, 0x0) 06:36:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf0ffff}}], 0x1, 0x0) 06:36:40 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000, 0x0, 0x0) [ 2226.458769] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2226.461123] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2226.462515] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2226.464575] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:36:40 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:36:40 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) 06:36:40 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:36:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0xf0}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:36:40 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:36:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 06:36:40 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x80fe, 0x0, 0x0) 06:36:40 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) close(r0) [ 2226.817373] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2226.818503] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2226.819066] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2226.820068] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:36:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x7ffff000}}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="1f", 0x1}], 0x1}, 0x20000040) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4000, 0x10, 0x8}, 0x18) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r3, 0x29, 0x1, 0x7f, 0x6, 0x2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x700, 0x2, 0x8}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x7f, @mcast1, 0x3ff}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r4, 0x4, 0x1f, 0x3, 0xfffffffa, 0x41, @ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x4}}) 06:36:58 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:36:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 06:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x18b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:36:58 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4020c1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:36:58 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:36:58 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xdc05, 0x0, 0x0) 06:36:58 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x2, 0x0, 0x0}) 06:36:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x3000000}}], 0x1, 0x0) [ 2245.073364] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2245.075754] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2245.077044] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2245.079385] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:36:58 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) getpeername(r2, &(0x7f0000000780)=@nfc, &(0x7f0000000840)=0x80) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000380)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', 0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="ad33878e392e6d6cb99b2e170310ab", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff080001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:36:58 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xfe80, 0x0, 0x0) 06:36:58 executing program 6: mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=xen,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6163636573733d757365722c630000000000000003738fa06163636573733d757365722c63616368653d6d6d61702c7375626a5f726f6c653d2c2e7dd02c6d61736b3d4d41595f57524954452c00100000303030303030b02b363b3021991d3030303036312c00"]) ioctl$SG_IO(0xffffffffffffffff, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:36:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) 06:36:58 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:36:58 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:36:58 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x8, 0x0, 0x0}) [ 2245.250891] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2245.267930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2245.269934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2245.272261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2245.285682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:36:58 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xff02, 0x0, 0x0) 06:36:59 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x535, &(0x7f0000000500)={0x0, 0x4c7f, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff2000/0xa000)=nil, &(0x7f0000000580), &(0x7f00000005c0)=0x0) syz_io_uring_setup(0x3920, &(0x7f0000000480)={0x0, 0x8ff9, 0x8, 0x0, 0x16d, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000400)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0xffa, &(0x7f0000000d80)=""/4090}, &(0x7f00000009c0)="2f4f77d41f1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xbb, 0x1, 0x1, {0x0, r7}}, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ec0), 0x40280, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7f) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) mknodat$null(0xffffffffffffffff, 0x0, 0x0, 0x103) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:36:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x0) 06:36:59 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x0) r2 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7dd8, &(0x7f0000000080)={0x0, 0x74a0, 0x8, 0x2, 0x365, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) r11 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) syz_io_uring_submit(r5, r4, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x7, 0x0, 0x0, 0xffffffff, 0x3, 0x1, {0x0, r9, r11}}, 0x3) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r12, 0x0, 0x0}, 0x0) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) syz_io_uring_submit(r13, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x4) 06:36:59 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:37:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0) 06:37:16 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:16 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:37:16 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0xfffffffb, 0x1, &(0x7f0000000000)="db3fea5784081c827befd55a5d23d18558efd834f0e43d3b9938df731a8440be778cef9ab09bc3173fd19f4a644ef1d591c68431274123168b35e038420e30ba7f7b618c1f008abdbad7e9e7258fa61f79008a049d11c3b550180fa6363284e148c9c454c1ec78a69b08bead576c538a808cd2cce73de0150c735fcfa09112089acc67cf9b6acef0cfdd7ebd478abc7eaf5296c5519c241c175808b484d91da7cac6000ef426494ac5", 0x3, 0x0, 0x1, {0x2}}, 0x6) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000007, 0x4010, r0, 0x10000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/snd_intel_dspcfg', 0x40000, 0x1d0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00c90fc4ae389a8ee0002e2f666d6c653000"]) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x7, 0x0, @fd_index, 0x7, {0x0, r6}, 0x6, 0x6, 0x0, {0x0, 0x0, r0}}, 0x4) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:37:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:37:16 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000, 0x0, 0x0) 06:37:16 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x602, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1f, 0x9, 0x9, 0x36, 0x0, 0x10001, 0x40, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4, 0x1000}, 0x10000, 0x685e7927, 0x1ff, 0x7, 0x4, 0x4, 0xb2, 0x0, 0x3, 0x0, 0x7}, r1, 0x0, r0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r4, 0x6801, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001980)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x53000, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400cc0, 0xa6) r5 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r5, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@audit}]}}) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) unshare(0x48020200) 06:37:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x7f00, 0x0, 0x0}) 06:37:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) [ 2262.704992] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev sda, type ext4) errno=-22 [ 2262.725263] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2262.726523] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2262.727251] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2262.728418] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:37:16 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 06:37:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:37:16 executing program 6: preadv2(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f00000006c0)=""/167, 0xa7}, {&(0x7f0000000780)=""/225, 0xe1}, {&(0x7f0000000880)=""/156, 0x9c}, {&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/68, 0x44}], 0x7, 0x380, 0x1, 0x8) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r0, 0x100000000, 0x0, 0x6f, 0x0, 0x1}, 0x3) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)="18af0487a524fae1616ea424b79eaf62b343ea8f1a23d9d49375047d50d784b9648052b21b18b69c79d1f6521e6b2f4910344fa1a9db265e0afb83138a6fe8e6ae55070a02ec2890a2c24329b1e58ad2ed5e9cb4de340c42b64f14efbd971016735653144bc9679d892781846aaec96a1055ee1ae2b4854f5fde011ec9674205ffcca78a9ba38927be2b21d8477197b6ff5e32492260a96bf9dac458a992a8f96a22275261aa18f75e131791a767bc1b328831e02d187428f938352ffcd16ff11b2d0368254a98b2fb0fb7bd0d58f445ac7f3e3d2e403965673491a6adb43b9b", 0xe0}, {&(0x7f0000000100)="6f623c5181f795ab04459edb721ad5fd8404871aca8ceb22117aa255eb9efc66b51706b9d69c96e29c8e00184bfeb7243d39a4dc8060f52b1b349706cd6518402dd815057ee128192f03cd8fa8e04a688f0503b737b3cec568db4c67428039ae3f2dfc6f07a18c687ce0eed726c801e6e747961176197b352af43bdb3520794df144255cdf5a1826f09304c60c65e231a3e24e43d6d2a3ddb66df54c8fb3c6560935d1e83551a3a0fa5c32dfb9ce726c694fd3bc136233cb92947cfd9c75dbae9f75c66dcf547aa5", 0xc8}, {&(0x7f0000000200)="5f1383729de0ba93a8e46994271412ef9b8ac3ffab82cce9fa0a7f8b7d63aa05ab50fa59d4e37132cb66e6a549cd08d4f8043019c292e564c7357404cdf66196d8785f8b9364036c5707980d23e5b926b04f8ca9162576c237aab8e0e276113b4c75f90589d0b67fc1a9902737f67d6f6cb5a4c8a5999398fae6848e3557c5f8a2d200b6c7fee0b17b03d6b323c4ed1583314028b66febce137ce6ec685449ab62f0ad9548206d0202a24ec1ced3ae4ccef0d5cd888b0b427872e4bd9fedc9a39d8e790b0867141ef9ef545f9577c818be2a8d", 0xd3}, {&(0x7f0000000300)="bc99eabca7c9f6fb219d3e5cc30367ffe55c30f331d5b72b6944188e0fd67d6f5577645ed5a65d7d771f4eeafb11908dd48208241f686a626354ead26ad686e8a92231320bea1991c3db59ace0", 0x4d}, {&(0x7f0000000380)="37513959e981a946caec0aaa1ca2e47086fa598a92077e903f9f8af8626262e5f38fd0c010395c77890990429b86ddf50e1c63b51ab09eca4d7542e3d8bd8a443eeaea31e3ed10df48802d68a3fd6eae1a4f31bcb948e5454e71b51834e306d3d9ccfe621b1535e20c00941524c825293a3232729981b76962c8879d073dadbaf706999f6808fde2f69e9601ec", 0x8d}], 0x5, 0x33, 0x4) [ 2262.870433] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev sda, type ext4) errno=-22 06:37:29 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x80000, 0x0, 0x0}) 06:37:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:37:29 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(0xffffffffffffffff, r1) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:37:29 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 06:37:29 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xc000000}}], 0x1, 0x0) 06:37:29 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) 06:37:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x140) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x3c, 0x8, 0xff, 0x0, 0x0, 0x2, 0x21ba8, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x20, 0xfc, 0x2, 0x4, 0xb688, 0x220, 0x4, 0x0, 0x7fff, 0x0, 0x2}, r1, 0x10, r2, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f00082c0020010078000000000000000000000000ff0200000000000000000000000000018f00907800f89b1e3c0c94f18d000000a9d3b75e15ed901f73e25de3ff3c82a62676d001ff205fc6de9848ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd7eccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f636259dd752ed823a3b6cb04eeae71035a8446ef221d39d3504136905c2a58700000000000020ae67b64fea2e305f45ed9c0102c04c8552bf719cb84ff6184a3628d3f783650e140ce6b1c3d2a80c0a55f178d30fd2907bf084450fa09588a1b4eb194cf178fffc77509cc2d4ed7f"], 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000007000000000000000000000040000000000000000000000000000000000000a9f70794aad8810000003800030040000000000003000000000000ffff000000000000040000000000521a6900b668a6b6a1"], 0xaf2) syz_io_uring_setup(0x3ca3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x10000) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) 06:37:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xe000000}}], 0x1, 0x0) 06:37:29 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 06:37:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x900}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:37:30 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 06:37:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/43, 0x2b) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x180000, 0x0) r5 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0x0, r5, 0x0, 0x169, 0x3}, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7fff, 0xfd, 0x4, 0x8, 0x2366, 0x0, 0xffffffffffffffff}) getgroups(0x2, &(0x7f0000000400)=[0xee00, 0x0]) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) r8 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, r7, r8, 0x0, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x5, 0x0, 0x1, 0xff, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x5f882e5e1adb3846}], {}, [{0x8, 0x1}, {0x8, 0x2}, {0x8, 0x5}, {0x8, 0x4, 0xee01}, {0x8, 0x6, 0xee01}, {0x8, 0x1, r6}, {0x8, 0x2, r7}], {0x10, 0x1}, {0x20, 0x8}}, 0x6c, 0x3) r9 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r9, 0x0, 0x100000001) fallocate(r3, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000000), 0x8) 06:37:30 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:37:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x11000000}}], 0x1, 0x0) 06:37:30 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:30 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x1000000, 0x0, 0x0}) 06:37:30 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x3000000, 0x0, 0x0) [ 2276.654482] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2276.655705] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2276.656314] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2276.657369] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:37:44 executing program 6: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0x0, 0x9, 0x3ff, 0x5, 0x5, 0x1, 0x0, 0x800}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/configfs', 0x100, 0xa3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x40010, r0, 0x1a8c8000) 06:37:44 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x2000000, 0x0, 0x0}) 06:37:44 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {0x0}, {&(0x7f0000011600)='PMM', 0x3, 0x4400}], 0x0, &(0x7f0000013800)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r1, r2/1000+60000}}, 0x100) 06:37:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x30000000}}], 0x1, 0x0) 06:37:44 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000, 0x0, 0x0) 06:37:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:37:44 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:44 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:37:44 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f0000000080)=""/121, 0x79}]}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}) [ 2290.697252] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2290.699365] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2290.700507] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2290.702669] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:37:44 executing program 5: clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x71) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x25a303, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffd, 0x11, 0x1, @buffer={0x0, 0x83, &(0x7f0000000040)=""/131}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x3, 0x9, 0x8}) 06:37:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x32000000}}], 0x1, 0x0) 06:37:44 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0) 06:37:44 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x7f000000, 0x0, 0x0}) 06:37:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x8b01}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:37:44 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:37:44 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:44 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10034, 0xffffffffffffffff, 0x0}) 06:37:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x3e000000}}], 0x1, 0x0) 06:37:44 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000, 0x0, 0x0) 06:37:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0xf000}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:37:58 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x24000, 0xc138396eef4a8c09) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = inotify_init1(0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000000c0)) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) r4 = syz_io_uring_setup(0x49c6, &(0x7f0000000380)={0x0, 0x5265, 0x2, 0xffffffff, 0x11b}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) dup(r4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r4, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x505200, 0x9b, 0x1}, &(0x7f0000000180)='./file1\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd, 0x7, 0x0, 0x0, 0x12, 0x1, {0x0, r5}}, 0x9) sendfile(r1, r2, 0x0, 0x100000001) 06:37:58 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x64ae2000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) io_submit(0x0, 0x5, &(0x7f0000001f40)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000580)="13bf03a592d9612165006df4c4dd66f3b8b1c18de85c3b97fb17702ab026a79b7fb949b6a6c179289b32f24c5ce9c7c5fa564ff5a94559539b1aedb5edaa1ed25b78f793b7b7732eaa980bacdf8f07abc6d305b99ecb66ff91ec7e2656fbf5d4867821db06575ba66dac53a644cbe1b0c5ed04f80169db55c3e2e766", 0x7c, 0x4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000680)="6dc9ebdd00557ee7fc0c83f1649569885a962e1dcd4162ee4afbd6c9186d11b0de4dc2311680bac7192c742ca6f95f2ca7bbbcfbce2ac4a6670ecd44f66cf4526044e4eb30e307fc6a9a0169265301c2d9f1783f8c459a5f8c6ca22b69c25100856d95e443a0e979a33ee63c1ecc3bdae07eca73d3eb9e540cb69f3b56727d2ee7474ad9e615e6351749670a5726e412b2a5cf22cdc11e4e53e572522ecde44bce817f5a654e61160bddebbe2a965a4b4878d06e9b6474f2cbb76f104fb91706462afb1548b37f794bc5bacbb534a77c76f907bee299b8170174e718ebe931017994d1c268f3fbace22e", 0xea, 0x800, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f00000007c0)="5ed60be6dcd8d14eb686a8c69f8629297c41b272530cb00efaa2e60532c138", 0x1f, 0x1f, 0x0, 0x3, r1}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000001e40)="4375f95b2df6d5a2f0ffa641f669d57252b35325a9d2767160a0e6f18b16d3ec79f6a66d99bfc2454fdf61bdf32ee777f7232fb9c5363e3ffcd5265ae6ef0477378d210f6d7174c1c877756df791db8175360650828febf98785909ea8d67044b71923339fb9a6d10843ecd107063e0c4df53ee640d77c01dbaf01c8d9240a21d158d967ce33c3407aca41a21dcc16494d339e598b0355bc75", 0x99, 0xe2, 0x0, 0x3, r5}, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x7, 0x3, r5, &(0x7f0000000d00)="89ba2c2ace21d5dd5f7c5433843c034d51a5866dd1e7ed34ca52af209170d4daac0453e6906545f72e2b59da03e0c8c5373b3591976db80aef405ac5f8c6eade75e65e5a659a5fa3c794a92b6241b52a74f4e8", 0x53, 0xfe2}]) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x1}, 0x8) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x114, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000890}, 0xe2c430d111630455) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="200c961316e7080003000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) write$binfmt_script(r9, &(0x7f0000000440)={'#! ', './file0', [{0x20, '/dev/sr0\x00'}, {0x20, '/dev/sr0\x00'}], 0xa, "84773e42aada2e4f21d08b5b6b3b54ec3550aef914f2e8c82523d0eedb02263fbceb43c760a8d1d3633ff12bfc39ff7e6d265ccb84c6f26db4d16cf52945ac505c4222f102730a353cae124c0264cd7e8dfc7bb206a17c9d0fda468830b93da479ea8753e0bc8f588dd64adcba0f9bf2984497e28676400bd2959176f22b61d4bdd2dc"}, 0xa2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x86b, 0x0, &(0x7f0000000040)=[r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r6, r8]}, 0x7) 06:37:58 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x54000000}}], 0x1, 0x0) 06:37:58 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xdaffffff, 0x0, 0x0}) 06:37:58 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:37:58 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x7000000, 0x0, 0x0) [ 2304.797660] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2304.800253] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2304.801517] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2304.803595] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:37:58 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) 06:37:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x60000000}}], 0x1, 0x0) 06:37:58 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:37:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r3}, 0x14}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 06:37:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) [ 2305.016507] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2305.018561] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2305.019687] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2305.021639] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:38:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xe7ffffff, 0x0, 0x0}) 06:38:16 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:38:16 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x20b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000080)={0x5, 0x100, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x50}, 0xd0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 06:38:16 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:38:16 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000, 0x0, 0x0) 06:38:16 executing program 6: ioctl$SG_IO(0xffffffffffffffff, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x6, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0}) 06:38:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xdc050000}}], 0x1, 0x0) 06:38:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0xffff}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:38:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xe8030000}}], 0x1, 0x0) 06:38:16 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x202, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x53, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x3f, 0x1, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x0, 0x97, 0x4}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x4, 0x8, 0x8, 0x20, 0x1}, 0x4e, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f4e0005071002080c7f002010fbffffffffffffff01000700000000c000000f3f00003f0000000000000003100b141004015e3a3b0bca3a9665913469f2aeae53210b1001026400ff4207000819686c93ebfb6437643268b8602ecbf607817a0855ab8137dc8e19a501104257610ea9a1b8df1ce324071d117487d7fcbba191ad1c6672bc675909531098a2ebca1ed1c16a2fba3dc2c8c1125e7aa429b95b"], 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c09}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000380)=0x6e) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000480)=0x1) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0x4b, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) read(r2, &(0x7f0000000400)=""/68, 0x44) timer_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:38:16 executing program 6: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.id\x00') r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, @scatter={0x7, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/127, 0x7f}, {&(0x7f00000000c0)=""/75, 0x4b}, {&(0x7f0000000140)=""/194, 0xc2}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000400)=""/208, 0xd0}]}, 0x0, 0x0, 0x0, 0x10010, 0xfffffffe, 0x0}) fdatasync(r0) 06:38:16 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 06:38:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:38:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0}) 06:38:16 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 06:38:16 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2323.375246] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2323.377304] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2323.378404] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2323.380200] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2323.396344] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 06:38:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x0) 06:38:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0) 06:38:17 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_setup(0xa06, &(0x7f0000000000)=0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000180)={@loopback, @local}, 0x8) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x800, r2, &(0x7f0000000080)="cef1e71e1d73d14794668253e2f2710881df1aa71e5ea40f9998e18dfacf34e1d36432d57b01e5bfda2870a239e915e6a23ec7a39604e1b8d0423fbf7c6d4e17eb7805960b6dd8c1817575ee094c120ef017db1cde03a54f04484eef1bc856b65be03cf3ad2a6892277c0286ef970b50d18b075859", 0x75, 0x10000, 0x0, 0x3}, &(0x7f0000000140)) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:38:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x4, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:38:17 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xf5ffffff, 0x0, 0x0}) 06:38:17 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:38:17 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) [ 2323.767401] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2323.769592] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2323.770773] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2323.772717] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2323.774248] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 06:38:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xf, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:38:32 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x14, 0x33, 0x4, 0x70bd2c, 0x25dfdbfc, {0x2}}, 0x14}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800000070f5a41b3220b00a754c5ecb40beab9b54667b49db577bc4f758d4400f80b197d4a08413c0974b82a94f4a3b560984007f170b4fe06a41362feb6a7331303a6e9d017fc0184e9e7c3e1356aa2bc6e4a3cb77ce34a7d07832221979e3daff9d4b1a3dfa298565f105e86121b59353a6"], 0x24}}, 0x0) r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x101, 0xaaaaaaaaaaaad45, &(0x7f0000000840)=[{&(0x7f0000000580)="cc0e794fed0d443326e9aa477e02ba020000e1fe8c15ce4cb75d04d4de4c5cd342de3225c7b763ddbe535ba6063eabc3a980fb9e18b65cc0817adee205ca3b2f7f33f43946042225e4bcca95502d2098ce9a49c3a0cac5b047bbbdc99aa19a66955fca8ff1b6afd78f8736c8ee13629a9eeb326d9ee8e1b9b359415cf6c093a43c2d77cbbaa0ad1a926bfbc7e239ed69976a7737d29c", 0xa0, 0xfffffffffffffff8}, {&(0x7f0000000640)="9b7d5fb2a75da6769bbe4c1432b5b3fb217fd4bab5659d4efe5dfddc67942e2ccb7eb7d1ea5a9fce6174036e2c868a0e79590f4b934537285c3f562f987cc9c5af34ad4bca618c3395", 0x49, 0x200}, {&(0x7f0000000280)="65d8415e2440d0c870ed75824bb0c9c52f12efe114936d1e65c666849cc859ba71d337136797b1a7793777ecc8f1b383ce385ac7", 0x34, 0xf20}, {&(0x7f00000004c0)="45bba35a5ca82926995c0663dcceaad1f41c542d8311c06fe1cd826f366f080bef45b3b70fa9ecb3a01a9f3ffc75ff", 0x2f, 0x2}], 0x20, &(0x7f0000000b80)={[], [{@permit_directio}, {@fowner_lt}, {@smackfsdef={'smackfsdef', 0x3d, 'fsuuid'}}]}) openat(r2, &(0x7f0000000b40)='.\x00', 0x1c0000, 0x108) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="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"]) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r4, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) read(r3, &(0x7f00000006c0)=""/135, 0x87) r5 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x800, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000300)={0x20000008}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x82) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:38:32 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:38:32 executing program 6: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x4, 0x4}, 0x5}}, 0x18) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) 06:38:32 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) 06:38:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf4010000}}], 0x1, 0x0) 06:38:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) 06:38:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2338.565906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2338.586286] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2338.588362] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2338.589483] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2338.591412] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:38:32 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x60000000, 0x0, 0x0) [ 2338.621448] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 06:38:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) [ 2338.707083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2338.708678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2338.711332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:38:32 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3b3) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:38:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xffefffff, 0x0, 0x0}) 06:38:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 2339.395111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:38:47 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:38:47 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xdc050000, 0x0, 0x0) 06:38:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfffff000}}], 0x1, 0x0) 06:38:47 executing program 6: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r1, r2) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r0, r3) keyctl$link(0x8, r3, 0xfffffffffffffffa) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x19d000, 0x0) ioctl$SG_IO(r4, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='syz', r3) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r5) 06:38:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x10, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:38:47 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:38:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xffffefff, 0x0, 0x0}) 06:38:47 executing program 5: getpgid(0xffffffffffffffff) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x0, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(r0, 0x8, r1) pwrite64(r0, &(0x7f0000001d80)="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", 0x1000, 0xfc00000000000000) r2 = pidfd_open(0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) fcntl$setflags(r3, 0x2, 0x1) ioprio_set$pid(0x3, 0x0, 0x0) splice(r2, &(0x7f0000000040)=0x8, r0, &(0x7f0000000080)=0xffffffff, 0x1, 0x7) 06:38:47 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff, 0x0, 0x0) [ 2354.257587] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2354.260540] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2354.261823] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2354.263915] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2354.292750] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 06:38:47 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @scatter={0x2, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000100)}]}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0xffff, 0x800}, {0x3, 0x8}]}, 0x14, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xd0000000}) dup2(r0, r1) 06:38:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x0) 06:39:00 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000140)=[{}, {&(0x7f0000000040)=""/234, 0xea}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:39:00 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:39:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) 06:39:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000080)='system_u:object_r:lirc_device_t:s0\x00', 0x23, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000089aa985053e6c0800e1870000000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c008) r5 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x9, 0x6d, 0x0, 0x6, 0x0, 0x400, 0x400, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x9692, 0x1}, 0x8600, 0x3, 0x33, 0x0, 0x80000000, 0x7ff, 0x5, 0x0, 0x8, 0x0, 0x81}, 0x0, 0x3, 0xffffffffffffffff, 0x9) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x96, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="dd26bc0440cbea2ffc48a829030482acba4d6b0736d7d8acceee1a5f196f4086aecdc01c9fca6a4e633c1028fbe608785dd20373f8701b76adc0a0e262fe3687c435853f29f95b19c584a6a38ca4be3db8b40c8cd966e82d37a59cffdd9cf485c625c7eb956e95fc5990eff4c5def40fa0529f1af301eab3d82380da7197926f8a82dc211b21c770d310697f352bb2c69ce36f3e3db83ffb0f335613b55686f2eb5409a52cb6f9df6c00f9b1201099aa9f612ab36d344c4d3e5cb7a4c2", @ANYBLOB="65700b74933c7931ebe7f218d65e1bfa8c49b7c9319997e70d8e5d877bbaeda6eabfe26c5b4f7ae12d26359573f98dda6d8ab9249091ea1044bc8b391bee8a0a8ef66c93ada81aa9f1a98f7458d6acd184a7861d6de2c81c3a783368803fa2080bf2a89d4f5e11725039ce15652db8958c4a5f50685292cb5dd1d7c621d2ed741bb2fca6ec697d1f4ce4f768df8bfe7198f95b1bf5bdb98f10ad9575930aae6361dba41f1c417e77f816dcbef3a46dd273c931be64a3834355f9ce0bdf064619f24df65d0a045fe69d3e28a941a0535ab8934526b418a289b0a00522", @ANYRES16=r5], 0x1c}}, 0x1000c010) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r6) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1040}}, 0x0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) unshare(0x48020200) 06:39:00 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x69, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:39:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}) 06:39:00 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xfe800000, 0x0, 0x0) [ 2367.107227] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2367.108385] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2367.108996] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2367.109972] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2367.122624] audit: type=1400 audit(1757399940.740:124): avc: denied { relabelto } for pid=12451 comm="syz-executor.5" name="NETLINK" dev="sockfs" ino=40892 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:lirc_device_t:s0 tclass=netlink_audit_socket permissive=1 [ 2367.127289] netlink: 3304 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2367.156926] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 06:39:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x3000000000000}}], 0x1, 0x0) 06:39:00 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:39:00 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xff020000, 0x0, 0x0) [ 2367.208359] netlink: 3304 bytes leftover after parsing attributes in process `syz-executor.5'. 06:39:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xffffffda, 0x0, 0x0}) 06:39:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x4}, 0x55}) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:39:00 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_writev(0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/218, 0xda}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000180)=""/16, 0x10}], 0x4, &(0x7f0000000280)=[{&(0x7f0000000200)=""/79, 0x4f}], 0x1, 0x0) 06:39:00 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 06:39:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) 06:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x2, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) [ 2367.353728] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2367.355975] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2367.357259] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2367.359247] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:39:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f, 0x0, 0x0) 06:39:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x4}, 0x55}) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:39:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x5, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:39:17 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 06:39:17 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:39:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x40030000000000}}], 0x1, 0x0) 06:39:17 executing program 6: clock_gettime(0x0, &(0x7f0000005cc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005b00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000180)=""/168, 0xa8}], 0x3, &(0x7f0000000280)=""/235, 0xeb}, 0x6}, {{&(0x7f0000000380)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/215, 0xd7}], 0x3, &(0x7f0000000680)=""/84, 0x54}, 0x2}, {{&(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000800)=""/228, 0xe4}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000900)=""/68, 0x44}, {&(0x7f0000000980)=""/50, 0x32}], 0x5, &(0x7f0000000a40)=""/243, 0xf3}, 0xfffffffd}, {{&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/146, 0x92}, {&(0x7f0000002d40)=""/79, 0x4f}, {&(0x7f0000002dc0)=""/87, 0x57}, {&(0x7f0000000bc0)=""/46, 0x2e}], 0x5, &(0x7f0000002ec0)}, 0x10000}, {{&(0x7f0000002f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004600)=[{&(0x7f0000002f80)=""/220, 0xdc}, {&(0x7f0000003080)=""/69, 0x45}, {&(0x7f0000003100)=""/71, 0x47}, {&(0x7f0000003180)=""/7, 0x7}, {&(0x7f00000031c0)=""/196, 0xc4}, {&(0x7f00000032c0)=""/225, 0xe1}, {&(0x7f00000033c0)=""/229, 0xe5}, {&(0x7f00000034c0)=""/215, 0xd7}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x9, &(0x7f00000046c0)=""/115, 0x73}, 0x8}, {{&(0x7f0000004740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004900)=[{&(0x7f00000047c0)=""/107, 0x6b}, {&(0x7f0000004840)=""/135, 0x87}], 0x2, &(0x7f0000004940)=""/4096, 0x1000}, 0xac30}, {{&(0x7f0000005940)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005a00)=[{&(0x7f00000059c0)=""/48, 0x30}], 0x1, &(0x7f0000005a40)=""/169, 0xa9}, 0x2}], 0x7, 0x2, &(0x7f0000005d00)={r0, r1+60000000}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000006ec0)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006e80)={&(0x7f0000005d80)={0x10ec, 0x20, 0x400, 0x70bd2b, 0x25dfdbfd, {0x20}, [@typed={0x8, 0x52, 0x0, 0x0, @fd=r3}, @generic="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", @generic="22a764e2aa6b00ffc998ac931a723fff58768adede443336d5f43d04b3019b6d379475b01f6c97a961d0e71f5741fab5ed038497e7e8c9cb5aca62420eafba32836e09c866a2db93b26b657d2bdd1fb705c99f10c490f7b80d7aba39a3c3f4a17c417edd94c4974706980f9a4a88cfe0da138f741b649cd5301147c399ddfb588e69677604800c617729542e55801520187daa46a0265916d7a0cf4fce6e255abb98fb7d38d6d03b944593c99e184b6234adedb8dc67b9591b3aba9e1453a27f42a2a5574e351bf0d45652eb0ceb6d64"]}, 0x10ec}, 0x1, 0x0, 0x0, 0x4004}, 0x48844) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:39:17 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xffffffe7, 0x0, 0x0}) 06:39:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xfffffff5, 0x0, 0x0) [ 2383.888271] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2383.889884] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2383.890754] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2383.892125] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:39:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf0ffffffffffff}}], 0x1, 0x0) 06:39:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000, 0x0, 0x0) 06:39:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0) 06:39:34 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x10000000000000, 0x0, 0x0) 06:39:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xfffffff2, 0x0, 0x0}) 06:39:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x4}, 0x55}) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:39:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x6, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:39:34 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 06:39:34 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8) 06:39:34 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:39:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x0) 06:39:34 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 06:39:34 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) 06:39:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0xfffffff5, 0x0, 0x0}) 06:39:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x300000000000000}}], 0x1, 0x0) 06:39:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x8, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:39:34 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:39:34 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x53, 0x0, 0x0, 0x0, @scatter={0x9, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/177, 0xb1}, {&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/101, 0xfffffffffffffdc3}, {&(0x7f00000006c0)=""/228, 0xdc}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/49, 0x31}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2401.428090] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2401.430291] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2401.431480] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2401.433424] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2401.436263] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 06:39:49 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:39:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x4}, 0x55}) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:39:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x400000000000000}}], 0x1, 0x0) 06:39:49 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80180, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:39:49 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 06:39:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x9, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:39:49 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:39:49 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) [ 2416.112244] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2416.113704] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2416.114480] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2416.115737] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:39:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x600000000000000}}], 0x1, 0x0) 06:39:49 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x2, 0x0}) 06:39:49 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) 06:39:49 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:39:49 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 06:39:49 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd=r2, 0x7ff, &(0x7f0000000040)="6c7aa3f2c091cd6146d760978bc09d3f4a925a864ee00f3bf6e047aac23b0f0c094b6071907a43", 0x27, 0xa, 0x0, {0x0, r6}}, 0xfffffffc) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) write$binfmt_elf64(r8, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x0, 0x80, 0x2, 0x3, 0x3, 0x2, 0x81, 0x40, 0xd4, 0x714, 0x1, 0x38, 0x2, 0x3fcd, 0x7, 0x4e2}, [{0x2, 0x1e0c, 0x7f, 0x8, 0x401, 0x4, 0x1800000000000000, 0x5}], "653abc5d9a322f33f021bf0f73e4d9cfdab2e1d6c8ab57cc8db232d822733c16f313ca83002ec08ba2babd711b3ab48a8b6eeb90cf3fac1df5c46b535e8cadac6dafb36fd01524d0e71a0c44d1eda6d5259a09f78fc2ca417afbad9ccc5ab1d1ced43d2146a144da59399f62b3b5961ede0845299aa6a3afb6e195d381b791cb122297a6f9e4d1927977299457c6e8112ff9fb607f0d299d554c1abc9921ccf828e41a7025d2346c568ca4200c987e22b01bd14ab941cc71fe2ecf0eb9cd4f9dba9f20426b040e9ee18d19565070590575a0c1a2d64e095d626cf70adf804310e7451af762e702e3db27c1797eb2ae83ed51ee84", ['\x00', '\x00']}, 0x36c) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x0, @private}}) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r9, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r11 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='./\x00\x00\x00\x00\x00\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r10}}, './file0\x00'}) 06:39:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x700000000000000}}], 0x1, 0x0) [ 2416.351345] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2416.353961] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2416.355360] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2416.357641] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:39:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xa, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:39:50 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x8, 0x0}) 06:40:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x800000000000000}}], 0x1, 0x0) 06:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x4}, 0x55}) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xb, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:40:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x7f00, 0x0}) 06:40:07 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x300000000000000, 0x0, 0x0) 06:40:07 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:07 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 06:40:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x9aacfa29c8591ce6, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$SG_IO(r1, 0x40081271, &(0x7f0000000c00)={0x0, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0}) 06:40:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xc00000000000000}}], 0x1, 0x0) [ 2433.815444] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2433.817549] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2433.818656] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2433.820481] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x4}, 0x55}) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:07 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000000000000, 0x0, 0x0) 06:40:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x80000, 0x0}) 06:40:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x10, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:40:07 executing program 6: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:40:07 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 06:40:07 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xe00000000000000}}], 0x1, 0x0) 06:40:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x4}, 0x55}) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2434.204032] netlink: 'syz-executor.4': attribute type 16 has an invalid length. 06:40:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x1100000000000000}}], 0x1, 0x0) 06:40:07 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x1000000, 0x0}) 06:40:08 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0) 06:40:08 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:08 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) [ 2434.607258] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2434.609703] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2434.611108] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2434.613234] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:40:25 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) 06:40:25 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:25 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x2000000, 0x0}) 06:40:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000500)='veth1_to_bridge\x00', 0x0, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x11, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:40:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x3000000000000000}}], 0x1, 0x0) 06:40:25 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x600000000000000, 0x0, 0x0) 06:40:25 executing program 6: openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x0, 0x3, @buffer={0x0, 0x1c, 0x0}, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0}) 06:40:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x3200000000000000}}], 0x1, 0x0) [ 2451.822668] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2451.823905] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2451.824573] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2451.825665] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:40:43 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:43 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x700000000000000, 0x0, 0x0) 06:40:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:43 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0xb062, 0x400800) fcntl$getflags(r1, 0x3) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x16, @multicast2, 0x4e20, 0x4, 'wrr\x00', 0x0, 0x7, 0x2f}, 0x2c) 06:40:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x69, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:40:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x3e00000000000000}}], 0x1, 0x0) 06:40:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x7f000000, 0x0}) 06:40:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) [ 2470.410529] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2470.412807] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2470.414013] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2470.416149] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:40:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x5400000000000000}}], 0x1, 0x0) 06:40:44 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) 06:40:44 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:44 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xdaffffff, 0x0}) 06:40:44 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 06:40:44 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = socket$inet(0x2, 0x4, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0xbbaaf966fbd8ed7c, r2, 0xe75f0000) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:40:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x6000000000000000}}], 0x1, 0x0) 06:40:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x117, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) [ 2470.737603] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2470.739988] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2470.741179] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2470.743284] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:40:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xdc05000000000000}}], 0x1, 0x0) 06:40:44 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2471.058845] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2471.060846] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2471.061933] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2471.063675] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:40:59 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000000, 0x0, 0x0) 06:40:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x129, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:40:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xe7ffffff, 0x0}) 06:40:59 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 06:40:59 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002dc0)={0x0, 0xfffffffffffffffe, 0x1000, 0x1, @scatter={0x2, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002c00)=""/217, 0xd9}, {&(0x7f0000003600)=""/4096, 0x1000}]}, &(0x7f0000004600)="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", &(0x7f0000002d00)=""/91, 0x3f, 0x12, 0x3, &(0x7f0000002d80)}) recvmmsg(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/89, 0x59}], 0x1, &(0x7f0000000140)=""/40, 0x28}}, {{&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000580)=""/7, 0x7}, {&(0x7f00000005c0)=""/107, 0x6b}], 0x7, &(0x7f00000006c0)=""/120, 0x78}, 0x5}, {{&(0x7f0000000740)=@hci, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0xffff}, {{&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000000b00)=""/140, 0x8c}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000bc0)=""/34, 0x22}, {&(0x7f0000000d40)=""/143, 0x8f}, {&(0x7f0000000e00)=""/209, 0xd1}, {&(0x7f0000000f00)=""/247, 0xf7}], 0x8, &(0x7f0000001080)=""/104, 0x68}}, {{&(0x7f0000001100)=@nl=@proc, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/198, 0xc6}], 0x1, &(0x7f00000012c0)=""/50, 0x32}, 0x8}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/22, 0x16}, {&(0x7f0000001340)=""/164, 0xa4}, {&(0x7f0000001400)=""/67, 0x43}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4, &(0x7f0000001540)=""/4096, 0x1000}, 0x20}, {{&(0x7f0000002540)=@generic, 0x80, &(0x7f0000002700)=[{&(0x7f00000025c0)=""/31, 0x1f}, {&(0x7f0000002600)=""/128, 0x80}, {&(0x7f0000002680)=""/99, 0x63}], 0x3, &(0x7f0000002740)=""/203, 0xcb}, 0x5}, {{&(0x7f0000002840)=@tipc, 0x80, &(0x7f00000028c0), 0x0, &(0x7f0000002900)=""/160, 0xa0}, 0x6}], 0x8, 0x10002, &(0x7f0000002bc0)={0x0, 0x989680}) 06:40:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xe803000000000000}}], 0x1, 0x0) 06:40:59 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x0) 06:40:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:59 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 06:40:59 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 06:40:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x1001, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:40:59 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:40:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xf2ffffff, 0x0}) 06:40:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:40:59 executing program 6: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs\x00', 0x1ff) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:40:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf401000000000000}}], 0x1, 0x0) [ 2486.275196] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2486.276431] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2486.277092] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2486.278158] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:41:13 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) 06:41:13 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xf5ffffff, 0x0}) 06:41:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3801, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 06:41:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:41:14 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:41:14 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @scatter={0x5, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f00000003c0)=""/39, 0x27}, {&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000000240)=""/236, 0xec}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:41:14 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) 06:41:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xf7ffff7f00000000}}], 0x1, 0x0) 06:41:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) 06:41:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:41:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x3}]}, 0x24}}, 0x0) 06:41:14 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) 06:41:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 06:41:14 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) 06:41:14 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2500.653999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2500.799016] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2500.800318] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2500.801019] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2500.802159] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:41:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:41:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x1, 0x0) 06:41:33 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x6000000000000000, 0x0, 0x0) 06:41:33 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xffefffff, 0x0}) 06:41:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x4}]}, 0x24}}, 0x0) 06:41:33 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:41:33 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) 06:41:33 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/94}, {&(0x7f0000000080)=""/174}, {&(0x7f0000000440)=""/222}, {&(0x7f0000000c80)=""/4096}, {&(0x7f0000000240)=""/156}, {&(0x7f0000000300)=""/20}, {&(0x7f0000000340)=""/126}]}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}) 06:41:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0xfffffffffffff000}}], 0x1, 0x0) 06:41:33 executing program 6: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0xc0, 0x95, 0x1, 0xdc, 0x3f, 0x3, 0x3, 0x5, 0x29a, 0x40, 0x3, 0x20, 0x3, 0x38, 0x1, 0x7f, 0x7, 0xfff8}, [{0x6, 0x9, 0x40, 0x8, 0x1, 0x4, 0x100000001, 0x3}, {0x60000000, 0x8, 0x400, 0x3, 0x786, 0x8, 0x25, 0x2}], "8e6de37509a4a9148813f6ba681ac37cdd901a108b640ef04a4fc3ebb92fb767c2bbf9fbf09aceffb7486b6cf10da7d768eaa2692ed92c0d0a4dc73d98e824f02df233e2b380a4", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5f7) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3e, @scatter={0x1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/49, 0x31}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2519.879079] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 06:41:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:41:33 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 06:41:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0xf}]}, 0x24}}, 0x0) 06:41:33 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xffffefff, 0x0}) 06:41:33 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:41:33 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xdc05000000000000, 0x0, 0x0) 06:41:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "c88e3060e0e6bb56e4d0c434bd7dbf327f6a74a708edd3688c7a044c655113fee4485afc4b15f433f6f4cd2fccb74f29353511d23b33a41a28b9115e4ebbd83132e85e5d62b30e47be1a34c931c38066"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:41:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0) [ 2520.246189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2520.256342] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2520.258507] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2520.259601] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2520.261418] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:41:49 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:41:49 executing program 6: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x110, 0xffffffffffffffff, 0x81217000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:41:49 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 06:41:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x1, 0x0) 06:41:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x10}]}, 0x24}}, 0x0) 06:41:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:41:49 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) 06:41:49 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2535.934656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2535.944636] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2535.946992] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2535.948284] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2535.950345] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:41:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 06:41:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x69}]}, 0x24}}, 0x0) [ 2536.162041] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:42:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:05 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:42:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xf}]}, 0x24}}, 0x0) 06:42:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x1, 0x0) 06:42:05 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xfe80000000000000, 0x0, 0x0) 06:42:05 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:42:05 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x5c1802, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0x2b83e000) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:42:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xffffffda, 0x0}) 06:42:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x1, 0x0) 06:42:05 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x468740, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:42:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2551.669386] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2551.671581] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2551.672781] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2551.674740] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:42:05 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:42:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0x28}]}, 0x24}}, 0x0) 06:42:05 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:42:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xffffffe7, 0x0}) 06:42:05 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xff02000000000000, 0x0, 0x0) 06:42:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:05 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x40081271, &(0x7f0000000000)={0x53, 0x0, 0x0, 0xff, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:42:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0) [ 2551.907512] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2551.908797] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2551.909489] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2551.910793] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:42:05 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x1, 0x0) 06:42:28 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:42:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x1, 0x0) 06:42:28 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:28 executing program 6: r0 = syz_io_uring_setup(0x13b7, &(0x7f0000000000)={0x0, 0x7ec7, 0x1, 0x3, 0x2e0}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x1010, r1, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x100010, r0, 0x10000000) r4 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(r8, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x8, 0x5, 0x80, 0x2, 0x3e, 0x4, 0x2da, 0x40, 0x39, 0x9, 0x4, 0x38, 0x1, 0x2, 0x2, 0x12}, [{0x1, 0x9b, 0x902, 0x10, 0x9, 0x5, 0x1f, 0x400}, {0x3, 0x5, 0x1f, 0x40, 0x3, 0xffffffffffffa2f7, 0xfffffffffffffc01, 0x80000001}], "cd71cf0ce034a0c9f66e3326fd2b47d496a49c998b7772c158d8f8f302a6589a50228e9c3511bb642866340c5ae693be02c77a695fc171dd6d537069c22b58b5d4081af2960ee507fda1f2888258eaa977dce132dd3458f8b421bcc0870c6b2598c208d893365e50b4da28c8c9f5f95d8f853b202dfdab5cbee8d892e11774323032204e36bafa5c8e3f293a20bcb5b6cb90a48c452157f192f1e6e811be88cad38083ffcea10f58f136f5a446a459f11a9080e6bbb5df53136314dc5a06784e2fd54b5094025a72578b5a94a48255", ['\x00', '\x00']}, 0x37f) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r7}}, 0x8001) 06:42:28 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xfffffff2, 0x0}) 06:42:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0x117}]}, 0x24}}, 0x0) 06:42:28 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:42:28 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffff7f00000000, 0x0, 0x0) 06:42:28 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}], 0x1, 0x0) 06:42:28 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1006, &(0x7f0000001d80)=""/4102}, &(0x7f00000009c0)="2f4f77d4095e472c3e93e7f6490318975d", 0x0, 0x7ff, 0x20, 0x0, 0x0}) r1 = mq_open(&(0x7f0000000000)='\x00', 0x800, 0x4, &(0x7f0000000040)={0x6, 0xffffffffffffff80, 0x7593, 0x8000}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x40081271, &(0x7f0000000c00)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:42:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0x129}]}, 0x24}}, 0x0) 06:42:43 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000180)={{}, "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"}) pkey_alloc(0x0, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[]) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 06:42:43 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:42:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0xfffffff5, 0x0}) 06:42:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 06:42:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0) 06:42:43 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 06:42:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}], 0x1, 0x0) 06:42:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 06:42:43 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000180)={{}, "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"}) pkey_alloc(0x0, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[]) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 06:42:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:42:43 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:42:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xf}}, 0x0) 06:42:43 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 06:42:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}}], 0x1, 0x0) 06:42:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:42:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 2590.315752] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2590.317996] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) 06:42:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2590.319239] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2590.321413] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:42:44 executing program 6: prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffffd) poll(0x0, 0x0, 0x200) 06:43:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:43:00 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:43:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x80010, r1, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r3}}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x400, 0x30) mknod$loop(0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r4) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000300)={'trans=unix,', {[{@cache_mmap}, {@msize={'msize', 0x3d, 0x1000}}, {@access_any}, {@cache_none}, {@access_uid}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfsroot}, {@subj_type={'subj_type', 0x3d, ']\xce$*'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0xe5de8c5e5e477b94}, 0x0, 0x0, 0x6, 0x5, 0x0, 0x3, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000140)=0x1c) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) finit_module(r7, &(0x7f0000000240)='trans=unix,', 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) 06:43:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x14}}, 0x0) 06:43:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x54}}], 0x1, 0x0) 06:43:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:43:00 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) 06:43:00 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) [ 2606.879982] 9pnet: p9_fd_create_unix (13317): problem connecting socket: ./file0: -111 [ 2606.888032] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2606.889744] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2606.890603] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2606.891938] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:43:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x0) 06:43:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2606.940003] 9pnet: p9_fd_create_unix (13326): problem connecting socket: ./file0: -111 06:43:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:43:00 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:43:00 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 06:43:00 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3) 06:43:00 executing program 6: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = dup(r1) setns(r2, 0x2020000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000040)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) fsync(r3) accept(r3, 0x0, 0x0) [ 2607.219189] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2607.221705] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2607.223032] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2607.225202] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:43:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xc0}}, 0x0) 06:43:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:43:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:43:14 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 06:43:14 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4) 06:43:14 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:43:14 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) 06:43:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}], 0x1, 0x0) 06:43:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:43:14 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000003cd9c6642f5189519687441d5ce79dd6ab55caad51741fba456b49cfd99ad6361bcc1cc0978cca5885191116140330d62bd9d3d43e21538594b58e82d55aedbfbd9d9c7e79fe51974c04594054dd5acd"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000780)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1538d445b62bac158972108909911fdc10b48ba3fce1c37442e647d85ca5765147ff0a2b90b34015dbd98122e48195dd8a2490aabea7b1cf3a4e8f7d6394dbcddaf1121e48e64c498ff2c131818761989ec29669e6273ff8aeb05d1e96f1e3f99612244df071ef3eb1b1063e03261cd2802095f3d5d3cb48857c4365f3e133fff"]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x82000, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f00000005c0)=""/174, 0xae}], 0x3, 0x7fff, 0x240d4dfd) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) read(0xffffffffffffffff, &(0x7f0000000900)=""/60, 0x3c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/33, 0x21}], 0x1, 0xffff57e8, 0x8001) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:43:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}], 0x1, 0x0) 06:43:14 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5) 06:43:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:43:14 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:43:14 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 06:43:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xec0}}, 0x0) [ 2621.054275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:43:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2621.073511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2621.075338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2621.079720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2621.085986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:43:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}], 0x1, 0x0) [ 2621.180316] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2621.182555] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2621.183698] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2621.185533] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:43:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x33fe0}}, 0x0) 06:43:32 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) 06:43:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 06:43:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:43:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:43:32 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:43:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x1, 0x0) 06:43:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000180)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) lseek(r4, 0x0, 0x4) openat(0xffffffffffffffff, 0x0, 0x36400, 0x0) signalfd(r2, &(0x7f0000000040)={[0x7ff]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd_index=0x6, 0x7, 0x0, 0x0, 0x13, 0x1}, 0x99a2) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x12040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) [ 2638.462805] audit: type=1400 audit(1757400212.081:125): avc: denied { tracepoint } for pid=13431 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 06:43:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2638.490911] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2638.492388] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2638.493201] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2638.494511] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:43:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5dc}}], 0x1, 0x0) 06:43:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) 06:43:32 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2638.692821] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2638.694203] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2638.694953] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2638.696161] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:43:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x200004a4}}, 0x0) 06:43:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:43:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:43:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002d80)=[{{&(0x7f0000001000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 06:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7ffff000}}, 0x0) 06:43:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:43:47 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:43:47 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7) 06:43:47 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) 06:43:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x1, 0x0) 06:43:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2653.808340] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2653.810494] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2653.811621] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2653.813635] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:43:47 executing program 6: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="aee4fd5c2a653020"]) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) kcmp(r1, 0x0, 0x0, r2, r3) capset(&(0x7f0000000200)={0x19980330, r1}, &(0x7f00000001c0)={0x3, 0x7, 0x1, 0x80000001, 0x4, 0x8001}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x8, 0x4, 0x1, 0x3ff, r1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xb0046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffd6a, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="d40100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf5d75d7cd4231a4f4b3c640c1dbbbc09db75b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e566a7295ccb9e3144ec2dc0415ca7675b3273044eedb9ec1ce975219396f16ca47f602c2994a96ca9f36998faca94189ae395b4a7f81bdf27d90eb63a1eb91920eeb5b7f82250d5ff58eae9ed21b4788739828ded9abdef5e7eb4784c02506f1c60fa73502a5b24c962a8b20742360d5b70e7ec327087b5b3fc93aa702b7d89295dece8ace2ce525c7967fcad178cb069d088d213394ab003022ce4cbf2f", @ANYRES16, @ANYBLOB="b53c248718be40aefb6777b42655337de0da5bde01008edf6a4147ad694e4099be9302ed38c259478fed6a3d053e55cf27d101cb0fbc96be6d252d0f15053719ad892bbff5d46ddbc9f47089465bccbfb4030e82a3376da59b262dc6f43f7720bf6a4aad8054e503cb1458fd8b2c367e3a200c311e0491de3eccc043c7feca4bfb78e1c83c9f5bcd479beaa0056b61e14c429052194eb9c4bd6224747ba38991716262b429f7c60d93504ce7d543033251f75c23c36ca47b06a1b037dd433d8d1ec6080000006401010014001000fe8000000000000000000000000000bb08000a00ac1e000100000000", @ANYRESHEX, @ANYRES64=r6, @ANYRESDEC, @ANYRESDEC=r0], 0x1d4}}, 0x0) 06:43:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0) 06:43:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:43:47 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) 06:43:47 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2653.973896] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.6'. 06:43:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2654.026381] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2654.028801] CPU: 0 PID: 13510 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 2654.030492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2654.032415] Call Trace: [ 2654.033026] dump_stack+0x107/0x167 [ 2654.033874] sysfs_warn_dup.cold+0x1c/0x29 [ 2654.034851] sysfs_do_create_link_sd+0x122/0x140 [ 2654.035956] sysfs_create_link+0x5f/0xc0 [ 2654.037063] device_add+0x703/0x1c50 [ 2654.037932] ? devlink_add_symlinks+0x970/0x970 [ 2654.039012] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2654.040251] wiphy_register+0x1da6/0x2850 [ 2654.041226] ? wiphy_unregister+0xb90/0xb90 [ 2654.042236] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2654.043470] ieee80211_register_hw+0x23c5/0x38b0 [ 2654.044591] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2654.045694] ? net_generic+0xdb/0x2b0 [ 2654.046581] ? lockdep_init_map_type+0x2c7/0x780 [ 2654.047682] ? memset+0x20/0x50 [ 2654.048457] ? __hrtimer_init+0x12c/0x270 [ 2654.049422] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2654.050596] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2654.051666] ? hwsim_new_radio_nl+0x967/0x1080 [ 2654.052746] ? memcpy+0x39/0x60 [ 2654.053523] hwsim_new_radio_nl+0x991/0x1080 [ 2654.054554] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2654.055808] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2654.057341] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2654.058864] genl_family_rcv_msg_doit+0x22d/0x330 [ 2654.059998] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2654.061533] ? cap_capable+0x1cd/0x230 [ 2654.062458] ? ns_capable+0xe2/0x110 [ 2654.063333] genl_rcv_msg+0x36a/0x5a0 [ 2654.064279] ? genl_get_cmd+0x480/0x480 [ 2654.065214] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2654.066421] ? lock_release+0x680/0x680 [ 2654.067344] ? netlink_deliver_tap+0xf4/0xcc0 [ 2654.068401] netlink_rcv_skb+0x14b/0x430 [ 2654.069349] ? genl_get_cmd+0x480/0x480 [ 2654.070276] ? netlink_ack+0xab0/0xab0 [ 2654.071194] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2654.072267] ? is_vmalloc_addr+0x7b/0xb0 [ 2654.073217] genl_rcv+0x24/0x40 [ 2654.073984] netlink_unicast+0x6ce/0xa00 [ 2654.074937] ? netlink_attachskb+0xab0/0xab0 [ 2654.075984] netlink_sendmsg+0x90f/0xe00 [ 2654.076938] ? netlink_unicast+0xa00/0xa00 [ 2654.077937] ? netlink_unicast+0xa00/0xa00 [ 2654.078923] __sock_sendmsg+0x154/0x190 [ 2654.079858] ____sys_sendmsg+0x70d/0x870 [ 2654.080807] ? sock_write_iter+0x3d0/0x3d0 [ 2654.081788] ? do_recvmmsg+0x6d0/0x6d0 [ 2654.082698] ? SOFTIRQ_verbose+0x10/0x10 [ 2654.083660] ___sys_sendmsg+0xf3/0x170 [ 2654.084585] ? sendmsg_copy_msghdr+0x160/0x160 [ 2654.085652] ? __fget_files+0x2cf/0x520 [ 2654.086577] ? lock_downgrade+0x6d0/0x6d0 [ 2654.087550] ? clockevents_program_event+0x14b/0x360 [ 2654.088747] ? __fget_files+0x2f8/0x520 [ 2654.089684] ? __fget_light+0xea/0x290 [ 2654.090602] __sys_sendmsg+0xe5/0x1b0 [ 2654.091489] ? __sys_sendmsg_sock+0x40/0x40 [ 2654.092525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2654.093745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2654.094941] ? trace_hardirqs_on+0x5b/0x180 [ 2654.095957] do_syscall_64+0x33/0x40 [ 2654.096824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2654.098021] RIP: 0033:0x7f7600b12b19 [ 2654.098887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2654.103184] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2654.104978] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 2654.106639] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2654.108309] RBP: 00007f7600b6cf6d R08: 0000000000000000 R09: 0000000000000000 [ 2654.109965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2654.111624] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:43:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xfffffdef}}, 0x0) 06:43:47 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 06:43:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}], 0x1, 0x0) [ 2654.156958] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2654.165114] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2654.167251] CPU: 0 PID: 13510 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 2654.168974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2654.170906] Call Trace: [ 2654.171532] dump_stack+0x107/0x167 [ 2654.172429] sysfs_warn_dup.cold+0x1c/0x29 [ 2654.173429] sysfs_do_create_link_sd+0x122/0x140 [ 2654.174544] sysfs_create_link+0x5f/0xc0 [ 2654.175499] device_add+0x703/0x1c50 [ 2654.176389] ? devlink_add_symlinks+0x970/0x970 [ 2654.177484] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2654.178724] wiphy_register+0x1da6/0x2850 [ 2654.179724] ? wiphy_unregister+0xb90/0xb90 [ 2654.180762] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2654.182026] ieee80211_register_hw+0x23c5/0x38b0 [ 2654.183171] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2654.184310] ? net_generic+0xdb/0x2b0 [ 2654.185215] ? lockdep_init_map_type+0x2c7/0x780 [ 2654.186330] ? memset+0x20/0x50 [ 2654.187109] ? __hrtimer_init+0x12c/0x270 [ 2654.188102] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2654.189309] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2654.190405] ? hwsim_new_radio_nl+0x967/0x1080 [ 2654.191485] ? memcpy+0x39/0x60 [ 2654.192277] hwsim_new_radio_nl+0x991/0x1080 [ 2654.193326] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2654.194570] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2654.196134] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2654.197682] genl_family_rcv_msg_doit+0x22d/0x330 [ 2654.198830] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2654.200351] ? cap_capable+0x1cd/0x230 [ 2654.201262] ? ns_capable+0xe2/0x110 [ 2654.202107] genl_rcv_msg+0x36a/0x5a0 [ 2654.203008] ? genl_get_cmd+0x480/0x480 [ 2654.203966] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2654.205188] ? lock_release+0x680/0x680 [ 2654.206131] ? netlink_deliver_tap+0xf4/0xcc0 [ 2654.207200] netlink_rcv_skb+0x14b/0x430 [ 2654.208172] ? genl_get_cmd+0x480/0x480 [ 2654.209115] ? netlink_ack+0xab0/0xab0 [ 2654.210053] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2654.211136] ? is_vmalloc_addr+0x7b/0xb0 [ 2654.212110] genl_rcv+0x24/0x40 [ 2654.212886] netlink_unicast+0x6ce/0xa00 [ 2654.213852] ? netlink_attachskb+0xab0/0xab0 [ 2654.214903] netlink_sendmsg+0x90f/0xe00 [ 2654.215877] ? netlink_unicast+0xa00/0xa00 [ 2654.216889] ? netlink_unicast+0xa00/0xa00 [ 2654.217884] __sock_sendmsg+0x154/0x190 [ 2654.218820] ____sys_sendmsg+0x70d/0x870 [ 2654.219790] ? sock_write_iter+0x3d0/0x3d0 [ 2654.220783] ? do_recvmmsg+0x6d0/0x6d0 [ 2654.221705] ? SOFTIRQ_verbose+0x10/0x10 [ 2654.222677] ___sys_sendmsg+0xf3/0x170 [ 2654.223597] ? sendmsg_copy_msghdr+0x160/0x160 [ 2654.224688] ? __fget_files+0x2cf/0x520 [ 2654.225622] ? lock_downgrade+0x6d0/0x6d0 [ 2654.226596] ? SOFTIRQ_verbose+0x10/0x10 [ 2654.227559] ? futex_exit_release+0x220/0x220 [ 2654.228633] ? __fget_files+0x2f8/0x520 [ 2654.229582] ? __fget_light+0xea/0x290 [ 2654.230515] __sys_sendmsg+0xe5/0x1b0 [ 2654.231412] ? __sys_sendmsg_sock+0x40/0x40 [ 2654.232430] ? __do_sys_futex+0x2bb/0x480 [ 2654.233427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2654.234658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2654.235874] ? trace_hardirqs_on+0x5b/0x180 [ 2654.236891] do_syscall_64+0x33/0x40 [ 2654.237767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2654.238970] RIP: 0033:0x7f7600b12b19 [ 2654.239857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2654.244179] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2654.245962] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 2654.247802] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2654.249480] RBP: 00007f7600b6cf6d R08: 0000000000000000 R09: 0000000000000000 [ 2654.251151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2654.252829] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 2654.293801] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2654.296208] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2654.297558] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2654.299769] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:43:47 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:43:47 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2654.613834] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2654.615688] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2654.616676] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2654.618298] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:44:02 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10) 06:44:02 executing program 6: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="aee4fd5c2a653020"]) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) kcmp(r1, 0x0, 0x0, r2, r3) capset(&(0x7f0000000200)={0x19980330, r1}, &(0x7f00000001c0)={0x3, 0x7, 0x1, 0x80000001, 0x4, 0x8001}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x8, 0x4, 0x1, 0x3ff, r1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xb0046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffd6a, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="d40100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf5d75d7cd4231a4f4b3c640c1dbbbc09db75b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e566a7295ccb9e3144ec2dc0415ca7675b3273044eedb9ec1ce975219396f16ca47f602c2994a96ca9f36998faca94189ae395b4a7f81bdf27d90eb63a1eb91920eeb5b7f82250d5ff58eae9ed21b4788739828ded9abdef5e7eb4784c02506f1c60fa73502a5b24c962a8b20742360d5b70e7ec327087b5b3fc93aa702b7d89295dece8ace2ce525c7967fcad178cb069d088d213394ab003022ce4cbf2f", @ANYRES16, @ANYBLOB="b53c248718be40aefb6777b42655337de0da5bde01008edf6a4147ad694e4099be9302ed38c259478fed6a3d053e55cf27d101cb0fbc96be6d252d0f15053719ad892bbff5d46ddbc9f47089465bccbfb4030e82a3376da59b262dc6f43f7720bf6a4aad8054e503cb1458fd8b2c367e3a200c311e0491de3eccc043c7feca4bfb78e1c83c9f5bcd479beaa0056b61e14c429052194eb9c4bd6224747ba38991716262b429f7c60d93504ce7d543033251f75c23c36ca47b06a1b037dd433d8d1ec6080000006401010014001000fe8000000000000000000000000000bb08000a00ac1e000100000000", @ANYRESHEX, @ANYRES64=r6, @ANYRESDEC, @ANYRESDEC=r0], 0x1d4}}, 0x0) 06:44:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x8}, 0x0) 06:44:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) 06:44:02 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 06:44:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:44:02 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2669.227698] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2669.257923] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2669.259271] CPU: 0 PID: 13562 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 2669.260356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2669.261631] Call Trace: [ 2669.262042] dump_stack+0x107/0x167 [ 2669.262604] sysfs_warn_dup.cold+0x1c/0x29 [ 2669.263260] sysfs_do_create_link_sd+0x122/0x140 [ 2669.263991] sysfs_create_link+0x5f/0xc0 [ 2669.264634] device_add+0x703/0x1c50 [ 2669.265213] ? ieee80211_set_bitrate_flags+0x378/0x620 [ 2669.266017] ? devlink_add_symlinks+0x970/0x970 [ 2669.266727] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2669.267534] wiphy_register+0x1da6/0x2850 [ 2669.268178] ? wiphy_unregister+0xb90/0xb90 [ 2669.268846] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2669.269648] ieee80211_register_hw+0x23c5/0x38b0 [ 2669.270397] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2669.271127] ? net_generic+0xdb/0x2b0 [ 2669.271713] ? lockdep_init_map_type+0x2c7/0x780 [ 2669.272452] ? memset+0x20/0x50 [ 2669.272963] ? __hrtimer_init+0x12c/0x270 [ 2669.273590] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2669.274366] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2669.275071] ? hwsim_new_radio_nl+0x967/0x1080 [ 2669.275765] ? memcpy+0x39/0x60 [ 2669.276292] hwsim_new_radio_nl+0x991/0x1080 [ 2669.276973] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2669.277782] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2669.278786] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2669.279803] genl_family_rcv_msg_doit+0x22d/0x330 [ 2669.280550] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2669.281553] ? cap_capable+0x1cd/0x230 [ 2669.282165] ? ns_capable+0xe2/0x110 [ 2669.282734] genl_rcv_msg+0x36a/0x5a0 [ 2669.283325] ? genl_get_cmd+0x480/0x480 [ 2669.283941] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2669.284731] ? lock_release+0x680/0x680 [ 2669.285334] ? netlink_deliver_tap+0xf4/0xcc0 [ 2669.286126] netlink_rcv_skb+0x14b/0x430 [ 2669.286823] ? genl_get_cmd+0x480/0x480 [ 2669.287415] ? netlink_ack+0xab0/0xab0 [ 2669.288026] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2669.288735] ? is_vmalloc_addr+0x7b/0xb0 [ 2669.289354] genl_rcv+0x24/0x40 [ 2669.289853] netlink_unicast+0x6ce/0xa00 [ 2669.290487] ? netlink_attachskb+0xab0/0xab0 [ 2669.291168] netlink_sendmsg+0x90f/0xe00 [ 2669.291789] ? netlink_unicast+0xa00/0xa00 [ 2669.292444] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2669.293282] ? netlink_unicast+0xa00/0xa00 [ 2669.293916] __sock_sendmsg+0x154/0x190 [ 2669.294520] ____sys_sendmsg+0x70d/0x870 [ 2669.295147] ? sock_write_iter+0x3d0/0x3d0 [ 2669.295792] ? do_recvmmsg+0x6d0/0x6d0 [ 2669.296392] ? SOFTIRQ_verbose+0x10/0x10 [ 2669.297025] ___sys_sendmsg+0xf3/0x170 [ 2669.297613] ? sendmsg_copy_msghdr+0x160/0x160 [ 2669.298311] ? __fget_files+0x2cf/0x520 [ 2669.298913] ? lock_downgrade+0x6d0/0x6d0 [ 2669.299560] ? __fget_files+0x2f8/0x520 [ 2669.300176] ? __fget_light+0xea/0x290 [ 2669.300780] __sys_sendmsg+0xe5/0x1b0 [ 2669.301365] ? __sys_sendmsg_sock+0x40/0x40 [ 2669.302021] ? io_schedule_timeout+0x140/0x140 [ 2669.302722] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2669.303523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.304315] ? trace_hardirqs_on+0x5b/0x180 [ 2669.304956] do_syscall_64+0x33/0x40 [ 2669.305499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2669.306241] RIP: 0033:0x7f7600b12b19 [ 2669.306779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.309448] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2669.310548] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 2669.311581] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2669.312614] RBP: 00007f7600b6cf6d R08: 0000000000000000 R09: 0000000000000000 [ 2669.313650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2669.314683] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:44:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60) 06:44:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0xf}, 0x0) 06:44:17 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 06:44:17 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:44:17 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:44:17 executing program 6: r0 = mq_open(&(0x7f0000000340)='@\x00', 0x40, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000000)="f1003c34288be4c26f4d82aca22b104e1247d9133c1fa16f6844b06183fcb6ee2d854150a32bf623b8ce4342134b41e33052380610d1e699dd3c313271eb8f64ec751359b06b9dfbb52294df4e4c60006e3c6f5d99b11c0bfe4ac04d5efdc81823f0c41f0206734129011bbf40eb49e65c927972bd97216235179bf0c533cf02f5cc3fb56b26132ac9e054e2abac53c7d7002105f176a6b6c5de0c00f639c0acf263b6ad79b7c2c028a14fb28a742d70a3ef04f7fe4d890533d4c3cfa4c9c0ef5e5819d7da2c9315242577", 0xcb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) mq_timedsend(r1, &(0x7f00000001c0)="82c7ee5cf2825138d653e04c7a09c9eef54668bca972f182d9e0b46a7bcaae54db864666fe02bf2c9451a225b1306f119d99e13d7065862c97f5c9ea62a549c18b40210f6d3f250d81fe1cacfa61ee4df749ad49d62824be1e58d2e92cbbf63f762bc1a52905571b60345b8b74d15a9737b9b9", 0x73, 0x3ff, &(0x7f0000000240)={0x77359400}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000380)="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", 0x1000, 0x6, &(0x7f0000000180)={r2, r3+60000000}) 06:44:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}}], 0x1, 0x0) 06:44:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}}], 0x1, 0x0) 06:44:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2ff) 06:44:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3200}}], 0x1, 0x0) 06:44:17 executing program 6: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x2038, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0xfffe}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x3}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x40, 0xff, 0x48, 0x0, 0x5, 0x4810, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x7, 0x2876b593, 0x3, 0x6, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) fchmodat(r0, &(0x7f0000000180)='./file0\x00', 0x100) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) close(r1) 06:44:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:17 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:44:17 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) 06:44:17 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 06:44:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x69}, 0x0) 06:44:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00}}], 0x1, 0x0) 06:44:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300) [ 2683.963038] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2683.965250] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2683.966453] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2683.968383] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:44:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:32 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500) 06:44:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x300}, 0x0) 06:44:32 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d2420000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31313435383439333100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003700000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010f00)="2000000064e828b364e828b300000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f00"/160, 0xa0, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000400000000200000004000000420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f00"/160, 0xa0, 0x1700}, {&(0x7f0000011200)="c041000000300000ddf4655fddf4655fddf4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1e00}, {&(0x7f0000011300)="20000000000000000000000000000000ddf4655f00"/32, 0x20, 0x1e80}, {&(0x7f0000011400)="ed41000000040000ddf4655fddf4655fddf4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000e736ebb30000000000000000000000000000000000000000000000002000000064e828b364e828b364e828b3ddf4655f64e828b30000000000000000", 0xa0, 0x1f00}, {&(0x7f0000011500)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000006000000000000000000000000000000000000000000000000000000000000000000000000000000068cf8b090000000000000000000000000000000000000000000000002000000064e828b364e828b364e828b3ddf4655f64e828b30000000000000000", 0xa0, 0x2000}, {&(0x7f0000011600)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3131343538343933312f66696c65302f66696c653000000000000000000000000000000000000000000000b6c73cca0000000000000000000000000000000000000000000000002000000064e828b364e828b364e828b3ddf4655f64e828b30000000000000000", 0xa0, 0x2100}, {&(0x7f0000011700)="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", 0x1a0, 0x2200}, {&(0x7f0000011900)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001002000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000802240f70000000000000000000000000000000000000000000000002000000064e828b364e828b364e828b3ddf4655f64e828b30000000000000000", 0xa0, 0x2400}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011b00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xc000}, {&(0x7f0000012800)="0200"/32, 0x20, 0xc400}, {&(0x7f0000012900)="0300"/32, 0x20, 0xc800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0xcc00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0xd000}, {&(0x7f0000012c00)="000000000000000001000000000000000000000032ed2fbf0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0xd400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x10000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x10400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x10800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x10c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x11000}, {&(0x7f0000013200)="000000000000000001000000000000000000000032ed2fbf0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0x11400}, {&(0x7f0000013300)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000013400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000013900)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x24000}], 0x0, &(0x7f0000013b00)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x9, 0x4) 06:44:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:44:32 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:44:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5400}}], 0x1, 0x0) 06:44:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) [ 2698.590573] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2698.591900] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2698.592618] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2698.593764] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2698.597435] loop6: detected capacity change from 0 to 524288 06:44:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2698.618143] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 06:44:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x1, 0x0) 06:44:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)) r3 = creat(0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfdef) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x8, 0x2) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) creat(0x0, 0x111) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8c) fallocate(r0, 0x0, 0x0, 0x1000002) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776600f6bde5", @ANYRESHEX, @ANYBLOB=',access=any,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',uid>', @ANYRESDEC, @ANYBLOB=',smackksdef=,}}7permit_directio,dont_measure,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,subj_type=\x00,smackfstransmute=\x00,']) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 06:44:32 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:44:32 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) 06:44:32 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:44:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x2}, 0x0) [ 2698.813749] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2698.817046] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2698.818815] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2698.821722] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2698.834949] 9pnet: Insufficient options for proto=fd 06:44:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:32 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5dc) 06:44:32 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2699.020155] 9pnet: Insufficient options for proto=fd [ 2699.126561] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2699.129302] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2699.130797] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2699.133234] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:44:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xdc05}}], 0x1, 0x0) 06:44:50 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600) 06:44:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x342, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e22, @broadcast}, 0x24d, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='wg2\x00', 0x2, 0x2, 0xff}) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r3, 0x0) dup2(r3, r2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x9, 0x3, 0x5, 0x11d46e6, 0x3, 0x3, 0x8, 0x3c7, 0x40, 0xba, 0x6, 0xf58d, 0x38, 0x1, 0x9, 0x8, 0x4}, [{0x6474e551, 0x1fe, 0x0, 0x8, 0xbd, 0x739e, 0x2, 0x7}], "6753008df981fa701c030a1a38da914f0701bdbe953bf6130440a82a57c1037227adbba52340b3d38e29cf8d126e14fb6ee49423b167f6fac72822c2b1ec5a6e65f80c9cfe3a71efde9562b1b0a8a1cc55633df871ec4171846b86bdc1f2a9d7e4a4732405ea86fa63e1f39a1d02f7e0d2012ee0251ecf9b1d5ec98b40d0f3cd33de5095a0719bca7b15f873b6c5f75b1a78cac82625d457b1387ac3c867a8e7d7"}, 0x119) fallocate(r2, 0x3, 0x0, 0x30000000000) r4 = inotify_init() ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000007c0)={0xff, {0x22, 0x0, 0x100, 0x7, 0x5552}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0) dup(r4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x34000) 06:44:50 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:44:50 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) 06:44:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x3}, 0x0) 06:44:50 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:44:51 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create(0x0) sendfile(r2, r0, &(0x7f00000000c0)=0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0xb0000, 0x0) write$P9_RATTACH(r3, &(0x7f00000001c0)={0x14, 0x69, 0x2, {0x4, 0x2, 0x7}}, 0x14) signalfd4(r3, 0x0, 0x0, 0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0xffff) ioctl$RTC_AIE_ON(r1, 0x7002) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 06:44:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:44:51 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x1, 0x0) [ 2717.640992] loop6: detected capacity change from 0 to 16776704 [ 2717.680255] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 2717.680255] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2717.680255] [ 2717.720023] EXT4-fs (loop6): mounted filesystem without journal. Opts: noacl,,errors=continue 06:45:09 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:09 executing program 6: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) syz_io_uring_setup(0xb9f, &(0x7f0000000080)={0x0, 0xabd7, 0x0, 0x0, 0x36a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000340)) r7 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r8 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000580)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0dda022018000004", @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) syz_io_uring_submit(r6, r9, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r8, 0x10000000) syz_io_uring_submit(r2, r10, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) 06:45:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}], 0x1, 0x0) 06:45:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x4}, 0x0) 06:45:09 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 06:45:09 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) 06:45:09 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x700) 06:45:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2736.206022] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2736.208621] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2736.209770] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2736.211582] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:45:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}}], 0x1, 0x0) 06:45:10 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:45:10 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:10 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:45:10 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 06:45:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x5}, 0x0) 06:45:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x0) [ 2736.663665] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2736.665884] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2736.667067] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2736.669035] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:45:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}], 0x1, 0x0) 06:45:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:27 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:45:27 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:45:27 executing program 6: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x5, 0x40, 0x0, 0x0, 0x6, 0x20151, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x1d}, 0x10, 0x5, 0x81, 0x9, 0x32d28f08, 0x0, 0x8, 0x0, 0x3, 0x0, 0x1e98}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x8000000) 06:45:27 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) 06:45:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x6}, 0x0) 06:45:27 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) 06:45:27 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 06:45:27 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 06:45:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="b266176313fc38b4ff1b21fd0ab7886c50f7"]) 06:45:27 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x7}, 0x0) 06:45:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:27 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:45:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}], 0x1, 0x0) [ 2754.309174] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2754.311374] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2754.312562] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2754.314496] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:45:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}], 0x1, 0x0) [ 2754.370345] 9pnet: Insufficient options for proto=fd 06:45:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:41 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:45:41 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000) 06:45:41 executing program 6: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x4, 0x1000, 0x1}, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf0000620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca1628869983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d83ef5a2aca13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f00002fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b6d0000000000000000000000000000a66bb57f5b15744fda59d4ac6f1dcbaaf58941d6ec90c86d6899b5f5243ba5a00dbcb2598050ddafc1de1925225f26a927087298cde3f7a45134b64d9e57fb525ee2b6b63012a8ea00c72278de1abb5aafeedcdc4df20cb90ad9e80d8276cd9e7afd718fb5cab1b96252db936fcf4c6a92c1dfa6e26bfc5450586de8c660fb5fc72d1791f806e5314635ad22832a9cfb5301253ad96980df5e153f83cc82e2256b3db8c2a026658d0f12693fc1829b48e214e5739fc841cfcc79925dfe4c944d39842ac02c9466784f1c853a18cca60d1c6739caec"], 0x508}, 0x1, 0x0, 0x0, 0x40080}, 0x48804) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, '\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:45:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x8}, 0x0) 06:45:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 06:45:41 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) [ 2767.927935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:45:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:41 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 2768.007316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.008197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.009154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:45:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) 06:45:41 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x9}, 0x0) 06:45:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) [ 2768.046034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2768.230146] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2768.232822] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2768.234294] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2768.236634] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:45:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf}, 0x0) 06:45:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:55 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:55 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80fe) 06:45:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}], 0x1, 0x0) 06:45:55 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) 06:45:55 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 06:45:55 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)=ANY=[@ANYBLOB="240000001000010000000000000000965dc749058ee200000900050000804800eaff0000000000000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x20, 0x3, 0x56, 0x5, 0x0, 0xffff, 0x20, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x453364a0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x84e0, 0x5, 0x9, 0x8, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x7b83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000006c0)="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") openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000001240)=""/54, 0xffffffffffffff93}], 0x33) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000440)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) 06:45:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2781.733396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2781.745939] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2781.748516] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2781.749918] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2781.752212] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:45:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:45:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) 06:45:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2781.885838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2781.886770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2781.887773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:45:55 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:45:55 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 06:45:55 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 06:45:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf0}, 0x0) 06:45:55 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xdc05) 06:46:10 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:10 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}) 06:46:10 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfe80) 06:46:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x14) write$binfmt_elf64(r1, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], 0x13b0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4, 0x3, 0xfffffffc, 0x2, 0x3, 0x400, 0xfffe, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x6cc200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="04000000000000002e2f66696c65300075840f1d5bef283f9f4c948920e0eb517fa106e505d00599ea17e01488002a1e6b2fe1080dbd3b18a2d65a90a0554e0988bd"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) sendfile(0xffffffffffffffff, r2, 0x0, 0x3) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r5, &(0x7f00000000c0)="04", 0x1, 0x3ff03) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000001e40)={0x6c, {{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}}}, 0x88) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x43000, 0x3, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x2, 0x1, 0xd6c, 0x76d4, 0x4, 0x10001}, {0x1000000, 0x8, 0x0, 0x3, 0xffffffffffffffff, 0x80}], ['\x00', '\x00', '\x00', '\x00']}) r7 = accept$unix(r5, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) sendfile(r1, r0, 0x0, 0xffffffff000) 06:46:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:10 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) 06:46:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x18b}, 0x0) 06:46:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x0) [ 2797.378809] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2797.380974] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2797.382174] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2797.384130] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:46:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0) 06:46:11 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:11 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff02) 06:46:11 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 06:46:11 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) 06:46:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x300}, 0x0) 06:46:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) [ 2797.654316] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2797.655503] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2797.656112] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2797.657145] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:46:30 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 06:46:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) 06:46:30 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x20004d4f, &(0x7f0000000080)={0x0, 0xacd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x351001, 0x0) r2 = syz_io_uring_complete(r0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="3b96f07472616e733d666c2c7266646e6f9ff86a48a6afc915e01c7ac585919e2610fbac7d1afab1a30797e9dc998231e7387e66f7eed71cc7138a663008fff1bbbc1ed1b251ef00e137cb0d5760fd2c57c938d152f231a618d0caa171d812815ecbb4d61bf814db5121b6d5bd1133713819de56914757e5f921daecfc816288e2c3d9f57adef1f673931f7610d60d9770d9972c956b7e5649b5fe15dd55449358ade0a3b7b10a3b580439f27ff00aea223c4c97c58e1aee21ffb32017af5f2ae710872eb720e4f0d5d4df1a85235db5fed89cb8769544859da7b75032859eb2", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d6d6d61702c2dbd2c76650b4d517273696f6e3d3970323030302e4c2c70726976706f72742c00"/54]) 06:46:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x500}, 0x0) 06:46:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:30 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) 06:46:30 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000) 06:46:30 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}}], 0x1, 0x0) [ 2817.236787] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2817.237936] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2817.238558] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2817.239721] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:46:30 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 06:46:30 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:30 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 06:46:30 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) 06:46:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x600}, 0x0) 06:46:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}], 0x1, 0x0) [ 2817.507287] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2817.508453] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2817.509037] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2817.510073] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:46:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x32}, 0x33}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x700}, 0x0) 06:46:44 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000) 06:46:44 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 06:46:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) clone3(&(0x7f0000000740)={0x404d2340, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x34}, &(0x7f0000000540)=""/201, 0xc9, 0x0, &(0x7f0000001800)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4896, &(0x7f00000018c0)={0x0, 0xc91c, 0x1, 0x3, 0x2b0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000700), &(0x7f00000007c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010006000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="0200042c9a49a563e3773f7110cd134f00a9514fadd023baa13ed46ba00ad13d7c2546258ace158d321010e924e3add8bd1d586f6c2d3917342d00", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000500000000002000040000000000"], 0x84, 0x3) io_uring_enter(0xffffffffffffffff, 0x2b9d, 0xc5a9, 0x2, &(0x7f0000000640)={[0xacb]}, 0x8) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000040000000c000180080001000bb881c3aaade1342557d1c9c7169fa31d5521cbab03fc974cd5a130c94262a80bea64f81e028513f3b5f6b58c9e6a1083a974fe55bc88157190437be294edea67c553eabb990bdf299a648a231e7ee2c72c62e9c9ef0102bb9544971d62b7f80629f5e53fd6a0b2507484dc5291940b4128ecad22999e0925b5aef435d4bc8f25a1a340297b60594e3f958f95979f6ae314e8083972ca80a0f45148d8f760dfe385b723141e69a6c09317d123d5561b5a46d37643bd437a4b337e", @ANYRES32=0x0, @ANYBLOB="6bdeb34d1c4713096982d9c6d46b307058ab895276d4106d436c496a9cd882e2452f"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x2f, 0xc3, 0x3f, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x40, 0x80000003, 0x4}}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x40, 0x20000}, {0x8000000, 0x3}]}, 0x14, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x8001, 0x2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000800)={{}, "b94f80e5794fb3013735c0360d45855d27d6d91d57f5d03049b8e8ae37922b2282af2dde0800f8dc7b93b1de66793f9b51df63172db5a14ad8a1ba35279f9b97c3c548c591e766aa966c37cdd7457b28f16bf454487b02047d91b3ad2a48c7914b8805dd199259b7bfca96684800afb6ff7edac84353e4e4a711a2de6f82dc2440a5a7187d5cdea22d043cf5a3cd20183a25c5765e057a9db819ba826ad5c0a88dd9b6376fcbb461c40e6b3eaffd5ad34a2e31387942746e66f40f271297934422ec7e3db5a2fcfaea27f005a8eaa681621375e30b38922cb396fd6c5d4d74a60df9bd353f80433ef9c23f0872b8cc2beb3b7c223017f53c86eae5eef7b2512ec1a59c575c19c44d53db4f9197843fa1b74f409eff986d471c63afb9a056ec34273db6f6971c7b62ce6fc9e35ab5ac25d326b7c5c8e4997a0d62cb2f455d67da2dffe2ee7d5ebea03b945ed806d9f08a98a5fd13d2e84763d7ed356f9e2938adcf0a3cbff5ba531486dc5c67834640db6d9daabbb2d7a48d29f8e474beda47079bf99fb4b540d4466c89d47bd4ea61cd1ab338c78f8e32ec3a9eded42139399e6f83dbc38c3c5abf3111c79a262187cbe4e5def02aeebcbe4be64bb7d6748c74c26c2de55890f1d4984e059656c9b77734f7c15d573bc55aafe8ff8dbe1e7feb07ffbb2d343ebe30de9fef3e1d91972b58adc0e48eb9aafaef7cc84b56c4924afd63a3f473817ca9b7ad7b820767196f60ef7f6b3f4bc5abd725493d9b89d54e76a9644c38d750dcd69eab063d49d4279d2547501c056d8b581bf987d7fcd994b945e27b102a84cf38720aa14fa7e970fcb5ecf80fbb2f76c42d4283f54955a9da198a776386e97f99972343b524876083a92794b4c6ea9dcd6f8a94faae68c28a9b7cb3bcaab31f20dad74aedfd7698e7ff10cc6a568aade826befb1b6f8125926279c9aff538c859716cb5199d622a0a63d8233e8e41d850e4bef2e2edb3d254e9c2f88384a67c89e24e94b8852b8bf29c3571383d7499e63b2c751932eef71cdc103fba36ddf35fecdda35bde37b911cc761a32afdb774a99225913de3a25050ee42fb0431a6e095abb7748b197dd782e9c1d36e8f0e39dc6d58e199aab3c5cde2c350d3c46afd3c72af228410a3762eb8d7084cb040472d30a0953b1efe2215b5b87d16043674e98246c40a428c5cf3667139206660ab91e600154a1d6ab15980d4812d408825114bfd90734eb0df91ab7890fd1ce06e34951c499a158af9d39a0bfb12f29b90c9652e549a6d43ce8426044975525c182ec091ca855d8a398caed8e2b28f7c64146ffc5d50cfa19ca90764bb2f7590fb68fe00bdf514a31354722cddd92a3c7b5ad4c423823c8216fffa475cf2711d0746e560d6e008dc7849251eab10d84e122bab7015f7aff08ab54a49fcdec2217923dc0ffdd947da63dec8f03568d6e0d881234487b9aa91f0ae3ff0f1e6c016654551291ecd4255a49a614f5ad28bd8931a25d2c57d112e0331e3c8471d396f598d355e811a72d12371e18c1ae43fce3a36112289bebdd478fe23fea407b5a32e316e37a30d2ee2529732ada950eaf1eb834a068696e10369a95044c94d87fdfa89b525a62dd8361b75e66f06160ada4a58e4f8e0d6ec9f5d4e58abcc41fba81d4061e29e1233a8d81cbbd706e1c255d348c8e59c391c5d45984c2fc495a9ebbf383c9f50e2ab6d4325507d9d29b77f2a7dad2962f66b1cedb5cdbd694c8307136404146f1a1e553bcecb2601f834732aa4bb8440be49874c6955fbc413cba6c08e1b6d370e0a0926a241e549506b57b88fef3d99d40bf88091510ce929866bef1460417352f6dfd08cddb8293c4e88b48a2e9ca17186018f77e174c3222c1a3c45e17765e45c92ebc445df6bb4fc7f6e27676b1c748613edeae394b718aba467cc5ba2506d610e2557412ef2d5be9648d9e8e2c2bc8af6754c59061c285f14ce48ec2ba0314aa6d14c7cb1289da8752a7d28d7a9c6d15e64d45cfebbc65641f78b097a240fc50eb50306c5c1c0786091af9735ece0ae80ac3e8df4f76d526df7c958ee3fa993ddb6d66cdd5d151dcf0d0b25cd129f938afeeeade17aaa0a25a3cf99e6c3888154f087b1c8d05bd813d0889258bedc5ddce951c304ab64545c91eb4686099e388313eb4238ae43802fbb208a78bdf6afa6a23e070d04bef166c0b6909d22be871f4cf2ce3ee6135601b6c3e883c3afe50ddfdad42aaaaa4945df99fb057caa4dfe4ab4869c959b603e45e7c5f77f05e4e748361e42ae3de665933a275544645ee9e2b6eb18fd9df974258b00e35bfb0f51ac55583305b2fc13eb99f307a005122f90e69ba3e89800f23ef41ba1a8b15f4de8b514c3ce51fcf2025fdbb9e22c97f4c0465067e2fb84908808ad8338d1d43dfcd901aacd8773a6a1ffd73a331bc30117eeec3745e26f3df131cfef7510ad0d87071b361ad5131858b220dbfaead5bf00e55db4077584447e98b88acda027dea349237e1acc03f564326b307af28535f9a538d9e66dca37a56ac0e2cf25fb8e1b601b16de483f3f67f7bfdb6b6953e2dbf2bba426cc3e2be46dd003939ddb64c51ab0377b691a7975cae8579dd20510cc9af0e622ef1d63fa9b2e3bc3c6319a67a0a05aa0614220cc6144fcf5890f1b899a2b57a31995aef57267c139405cdf8b43b3c4328409e89895dc743652cadfee8a1d716f544ba0ae1a26a4793616a1a7726b5ed614b23d48107b819605444b123e847088cac16b1969cae82e783085efb3db17808eaffc5ce3bafdf099dff9953df7f4807c2dbc709ae2a9f6be12485d70f5086fa5072d86dd6d6010cfc77e49f3c833c3b35a3d857189ca92dc493a835dd4097a6dc77bcf7812ec8a92bedce1ba0ef53e933ca594fb68581119733164879a204748dbb1f0fe59008c52f3a254883d782bfc174c4a9dc4d27b0ef452d189e4265e20f1e1eb7e44a39c14f2cbec86e39083537ceaf20813a723fbbeee729f9f9c5a773baf5f411137d9fc495585a9e94e9e20810d5146d9f2e3a52fb1499097300694705655961f9a7fb06fa9d2597299e79885c0ac712990241b509aaab2a4b81bb8aa1b4a991fa35eb72461562e1ef0fa365308150e17ea977aec9c81207132be6f30649540cf1f4c7d62233ccadcd8b57a02c5876dc716f8ffeb8c5efd70fdb77c900956739282bf18eda32ee924ed9060973621a28f1621601db0236ec79695c0b55c9d512b7be73ad10980e3c5b7050efe4f847d0b4bbe5ec0aba5e364dc7ca239ee957c35ab63e41a9b2050bed012a676ccf3b0edde1139607ab97fbe584d3f046ffe6b69bfcd40bdf5382f3debabd265707aa3f91253b3f3a6051ff4fe5c9748d12d6d488e99b921a883ab6985fa14aed11a2023d05dc57a64b590b0b796dd6fe8f51122356c4787fba40544be0c44c054b435a9b3385b2534c49280fe02f211fb8b84d8b772293c2d25aba8d7a7392c94b678d4d36990519c01f678bf523c671f695a0b1d6396967626ac78144c440e25e70d01f86fa95cfd76f09f0f5cbf629b6b53e20d69c3dfca066c6ee051f32d3e137d180bc8c5ba85258a37faf2529ddf569d24152b75ab3feeb7ef5051672bdec6684959f427b0b0cd6bfb4645a4fb4b233f6afbd59e5865e9ade7e5489a6eba7978162c59762c780c15592e7519d3fdaa5120fe9de8b7ba7e71b3821ba77c99e18835fc9c068b31431c38a849634e34e88d8083a50280e55004052391993cedcc95b559980cea96302ddbb0cec5c6afdf6320b0335177defcf308dca3ae29aa76b9e39d34509a6985882b92defe26bbd308d935c82b1711bba82314417fed14039f2bfcb32107bebcc537f35ed2e87be5c7a0bedfb2e5d745eb4516dfe339c866435cfeb29357e016bddc8eb8cc9a63cbf6a781b8df433f46e99a86a7e2701f1c84f40628ba6e8a8cbb248a98fc1e77d7332066c2fd2700b3348b3231455ab2ed6e87bb8018023c505fea9dbf81cbc12f858785d7564afd8b9a44a0c0487a72b8fa4663ebc12aa7536aab9f61e8a3b52e0c0ac53547295b512102f98f1c4ff5a02977525ebba8eb1946084942d10419fb1d041d276d101c1518c33da737b2d2a1f3d94ee275ae36c8b4d081c5db77d259f231293db2980ae6eefdfe573592ba60bd3141e993cc214ebb5b561bb80e1805e079a0edf245c288b373c765446ea15fdc1b2cf9cbc11c21b0a68fab8a410a714c1dc5a5d4d99b6a264b2217fdb3f2ac19a80e845a27ab77f6a2dbf43fdc3ed98888b9364a9efbe55b6be8c379114e9975b9dfdcee1407d1c7d79d78b9de0ba3e54c662f54e784262592cbc3c580c4e0bc1699f7148929073be3ed6ea864c41ce88beb52268e28d8d87426d1cdb7a2ce318de72f3443b1ee2aa9a16022d3d5d69af7b027bb8b3103c24afd929f26c7324617d38aefcc4ee5992bf54c2ceba692c43e92c809eb8792f89659b06eafca723466f844e81ddd88105f08d2a282e6021cefaedd3aeb97e4b0aa292c3485f15a702e9aaf6a2aa420401d73083b333d1b91abdf2a915e4aa2f23d670d8851ffa04bdd15a7792398deb16bbd3ab379573ed05fb03f8aa1212036d43828e8681d903695b5c2906b09b935d709f7dead8365ccd9eb5ffc2914ae70d3468a1dea42f8bd15cd19c0a4148400fe4ad6fa24f45772bb71faf3ffdfbff4dc190d65cdd19acfe1ff97370394595e28e19eac41769c916ae64cecfbcf145c52c3c0a860cb0769d73e8eaa06a4e6b5672ce37c2183a965c346c672638aab88a14183e031f05acaa1106a863617fc385cd3e9b1070dfa52bcdac0b1f07f7360cb5d4aa6efd9051a8fceaaca364be77d8645eb7c3fcf5ff9ca3e4e9fd5a967ccc12f514d253bd05870cb6007e24ef280500c11cfe9b40d653553d1c8c58bc52339ac9f5820d36682e40a9ad38c6780ab4b803801a25d0ca4690472b78548a1a1ff12f4ed861b4b081f3235edb179e5f0b8aa03a0cac21fd16fd3786aab51f8b7343e4f8a990e30971eb37f2c2d77dff9d6ff0e8835f033726e03bf5f933cc807d8638f359b74c0629fa53dcc001180568487a35e604f1db89597d470c26dca948030ef529eed90349fef30748863c5b72847039cd73a4380231d891da5ec00529e3a9604babaf95345a024da7a455283162a0b61ebd5e5a730c065421a5c3d8ef420a97a75f7ba10ecb3ff49eb07ab674e39f5af6afcb18105d1e538f31f246ba46813932f0df0dde0e9729251b3c4016e21423522fbd6c8089886fb48f6114d7df29b38871bfa1538c043ae07ab14e12885d98afec397a515ac14865b1f502704fbfee7dc148163acadec90950d6900bad1b577d398382ab6fc7d1175a62a9029d4de999215323e6c0f4da31edba2163a3c7972c7a49fec763954cd66c07a0d50d4776087e63c0088157ce2f871fe33c51316f89cca452022cf2feefd2048548ead601b7c0075b37e58283f8a8ba3a1ae881f8cd5f4ba6a1fefeb699926e4990da264edefcff7695d3cde2d2239fcfe9d7524caf9022da4d5309414aa2a3a2eac238fd93376a5c796d80778e663ba566092cceaf1128914f73990eb18ff540e3b0ee2566a626698cf848bfbddd9d48b8897d43516c863b424a76bd62cfd4c7552f21184258dc677d8731ebd03352e6e2167a3a236816ea6eff972442d8b0be04e632cb95403de2763c0665ad2428ce67cf0782ea73c1e5ba1fb3db239fcda2a200c2eeab3a3f0a8f626f46f5078267a9c3ba4b84d9f8"}) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 06:46:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}}], 0x1, 0x0) 06:46:44 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 06:46:44 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000}}], 0x1, 0x0) [ 2831.003063] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2831.004475] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2831.005199] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2831.006466] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:46:44 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) 06:46:59 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) 06:46:59 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:59 executing program 6: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2076, 0x5, 0x801, 0x1a, "fca4de4c499d1af33897d144960da5d1af3120"}) 06:46:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x32000000}}], 0x1, 0x0) 06:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x900}, 0x0) 06:46:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 06:46:59 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 06:46:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000}}], 0x1, 0x0) [ 2846.259481] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2846.261551] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2846.262683] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2846.264698] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:46:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:46:59 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:46:59 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}) 06:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf00}, 0x0) 06:47:00 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) 06:47:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000}}], 0x1, 0x0) 06:47:00 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3000000) [ 2846.483742] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2846.485805] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2846.486931] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2846.488733] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:47:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="b4d49a433af1bdf0a2a23ad73f35718b561e4129f2576bd117806491b5b2364dfe13caeb73f21a7d67fa3d58546797a77d2adca38590ececb5ae8c4d3c2f9f567370c68feaf1249a06", 0x49}, {&(0x7f00000001c0)="63046f7c543a69c6bc6469017486032cc9b831", 0x13}, {&(0x7f0000000400)="8b50201119b466255d1f3543426d8c0773b55b27aafc03cf603fa8aefd338d404c1c949d94b7f7ecbb2d60cc481f2b59f1837547d9ec99114c0e95c80494730fe1bc05c6d0221cab2ffd0d160581a72759bf9d66649f8e86869de2669537e03b86189f42c7a33b7bd96d7c2aaacc4a7283b8c4db996a77ba8ca07501a0b42bbb3736f54f68cc6a18ae659bcc29c2e546d069810d7ee38cd2e621637602c6f91d2f4627ea1040718080fa96aa8e46db1407c0f65af92d65b30186829711e34623148da654c5e320908d72d57c0d9431c75606c0fd72334e1245db8bf0a03dad5c26352ceabca59376", 0xe8}], 0x3}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:47:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}], 0x1, 0x0) 06:47:00 executing program 6: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd, 0x8, 0xe3, 0x31, 0x1, 0x1, {0x1}}, 0x3) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x84000, 0x89) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 06:47:00 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:47:00 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) [ 2846.806262] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2846.808497] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2846.809607] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2846.811442] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:47:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x8b01}, 0x0) 06:47:15 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffefff}) 06:47:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:47:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3f74, &(0x7f00000000c0)={0x0, 0x70b7, 0x8, 0x2, 0x3b3, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000180)) connect$802154_dgram(r1, &(0x7f0000000080), 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="4b920000", @ANYRES32=r0, @ANYBLOB="01000000000000002e2f66696c653000"]) 06:47:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 06:47:15 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:47:15 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 06:47:15 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000) 06:47:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xdc050000}}], 0x1, 0x0) 06:47:15 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 06:47:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:47:33 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) 06:47:33 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x2000000000000000}, 0x19810, 0x84b, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fee000/0x4000)=nil, 0x4000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r1) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, 0xffffffffffffffff) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) r3 = pkey_alloc(0x0, 0xaf1df5ee8a62c0d0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r3) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, r3) fallocate(r2, 0x52, 0x1, 0x0) 06:47:33 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 06:47:33 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:47:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf000}, 0x0) 06:47:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x1, 0x0) 06:47:33 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) [ 2879.665530] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2879.667800] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2879.668997] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2879.670966] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:47:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x0) 06:47:33 executing program 6: listen(0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@local}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote}) openat(r0, 0x0, 0x183000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10000, 0xdc) bind(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0xa, 0x4e23, 0xffff9322, @private1, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)="46172801334f60b9f2697968cfa7062f7314373f06b1a85c857710e92c661038fc8b0db4fe70007091f007375acd822c73922968e5ef4b6ac463f34883e92fcc412f0c1ddfaf72a949ddf9986ab7068b20b8e71618d22471de137de15278cd0d1234b1224892553aab2f27ea008623ab9a82325a9d07382da63568c6507549d87896044507f14adc4763ed0b1bcf18c10ce8d1a4d36b7939cb69b21edbf026214f68dd57537cf389fed02978e802c4dc2d06e5fab754682bdc78", 0xba}, {&(0x7f0000000280)="4e6285a492a3b566f3312f8985a1f529f0f073bd00583dda072296f560133749a850d3d4d87832d34c6430cc404c4270afa5d12baf7362684375f8cf239ec0ad88e2cf421f57c941f74d7e6135b56294b59b497ed4e397282ea496f2e9f8a9c2629d09e2bcec704f50ed3145e9f073ac5859f7f831cee9e4cd4ecef2a099e0795e1ce3040bb73f613baf73bfdf27ad654cccfc19fdb503e6dd5d3808bc182d1109e56cd90882e870714b", 0xaa}, {&(0x7f0000000140)="46fa5641921b36d59f9840255c9e1c796ef3257527b3efd3a212a40ce6cac1cf3b597f36", 0x24}, {&(0x7f0000000340)="e3dd42de4f54e3bea2dae7f05647b5054e", 0x11}], 0x4}, 0x4804) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0xf3, 0x7, 0x6, 0x8, 0x1}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001d003f0000000000000000000400020014001180d6562a54c2778844f5b741809801a7b0c7dba09475f251", @ANYRES32=r3, @ANYBLOB="14000000feffff00dd9a53b68035f3d1f713e2259514"], 0x48}}, 0x0) lseek(r1, 0xfff, 0x0) 06:47:33 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) 06:47:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x30000}, 0x0) 06:47:33 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) 06:47:33 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:47:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000}}], 0x1, 0x0) [ 2879.855378] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2879.953743] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2879.969960] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2879.972232] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2879.973453] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2879.975455] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:47:33 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000000) 06:47:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:47:50 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) 06:47:50 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7000000) 06:47:50 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, r0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4, 0x1) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r3, 0xbcc94000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0xffffffff, 0x1, 0x0, 0xffff, 0x45, 0x5}) r4 = fcntl$getown(r2, 0x9) capset(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f00000003c0)={0x7, 0x5, 0x1000, 0x8, 0xa8, 0x401}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:47:50 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) 06:47:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x0) 06:47:50 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:47:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x80000}, 0x0) 06:47:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}}], 0x1, 0x0) 06:47:50 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 06:47:50 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) 06:47:50 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:47:50 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 06:47:50 executing program 6: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) 06:47:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf0ffff}, 0x0) 06:47:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x0) [ 2897.425387] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2897.426831] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2897.427595] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2897.428836] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:48:08 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 06:48:08 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:48:08 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:08 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000) 06:48:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x4000050) 06:48:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x1000000}, 0x0) 06:48:08 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x5c, 0x0, 0x0, 0x204044, 0x0) r0 = clone3(&(0x7f0000000580)={0x501040400, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340), {0x13}, &(0x7f00000004c0)=""/70, 0x46, &(0x7f0000000380)=""/25, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x20, 0x1, 0x40, 0x3f, 0x0, 0x8001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xff}, 0x4006, 0xfffffffffffffeff, 0x0, 0x5, 0x81, 0x4, 0x3, 0x0, 0x2, 0x0, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) fsmount(r1, 0x0, 0xfc) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4bc4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1000002, 0x2a6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="3d8442864e3f7bed02f144167e765e620d7b9efedac1cdc13d1ce2b279699d1830e4db5f935c9382e2ca978f4c7ce2eb70f4d1eda3d79dcce534860f5ac1b80dd253c0957796c89a20de14574ee12901ea3cfa502af0d70a11ba638367452b6b5e639aab7e5df2c8dd0b44c9db1bd072f402ac8b0c298dbbb128e6b6e60257a54277b6983dd8f0592fe327dfea848cd76942956c", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,\x00']) 06:48:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x0) [ 2915.150167] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2915.152420] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2915.153679] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2915.155745] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:48:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000}}], 0x1, 0x0) [ 2915.200417] 9pnet: Insufficient options for proto=fd 06:48:08 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x5c, 0x0, 0x0, 0x204044, 0x0) r0 = clone3(&(0x7f0000000580)={0x501040400, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340), {0x13}, &(0x7f00000004c0)=""/70, 0x46, &(0x7f0000000380)=""/25, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x20, 0x1, 0x40, 0x3f, 0x0, 0x8001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xff}, 0x4006, 0xfffffffffffffeff, 0x0, 0x5, 0x81, 0x4, 0x3, 0x0, 0x2, 0x0, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) fsmount(r1, 0x0, 0xfc) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4bc4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1000002, 0x2a6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="3d8442864e3f7bed02f144167e765e620d7b9efedac1cdc13d1ce2b279699d1830e4db5f935c9382e2ca978f4c7ce2eb70f4d1eda3d79dcce534860f5ac1b80dd253c0957796c89a20de14574ee12901ea3cfa502af0d70a11ba638367452b6b5e639aab7e5df2c8dd0b44c9db1bd072f402ac8b0c298dbbb128e6b6e60257a54277b6983dd8f0592fe327dfea848cd76942956c", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,\x00']) 06:48:08 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:48:08 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0) 06:48:08 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 06:48:08 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x20200, 0x0) io_uring_enter(r1, 0x2dd5, 0x83b9, 0x0, &(0x7f0000000480)={[0x707c]}, 0x8) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000c80)=""/4096, &(0x7f0000000400)=0x1000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @scatter={0x5, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000080)=""/189, 0xbd}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/197, 0xc5}]}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x20000000, 0x0, 0x0, 0x0}) 06:48:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x2000000}, 0x0) [ 2915.423967] 9pnet: Insufficient options for proto=fd [ 2915.448232] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2915.449707] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2915.450452] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2915.451694] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:48:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}], 0x1, 0x0) 06:48:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x4000050) 06:48:25 executing program 7: linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) dup(r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80101, 0x16) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000000c0)) 06:48:25 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:25 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}}, 0x0) 06:48:25 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) 06:48:25 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:48:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x3000000}, 0x0) 06:48:25 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x800) creat(&(0x7f0000000080)='./file1\x00', 0x21) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000280)=""/46, 0x2e) getdents64(r2, &(0x7f00000001c0)=""/76, 0x4c) r3 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x9, 0x2, 0x7f, 0x1f, 0x0, 0xfffffffffffffeff, 0x180, 0x1e, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100)}, 0x3043, 0x0, 0x5, 0x0, 0x40, 0x7fffffff, 0xffff, 0x0, 0x7f, 0x0, 0x80000000}, r3, 0x10, r1, 0x2) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x80186803, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000080)={0x0, 0x0}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) 06:48:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}], 0x1, 0x0) 06:48:25 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) r2 = creat(0x0, 0x0) pwrite64(r2, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x802073, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)=0x3, 0x9, 0x0) gettid() sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) fallocate(0xffffffffffffffff, 0x3, 0x52, 0x6) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000000200), 0x0, 0x0, 0x1000}, 0x9) 06:48:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x4000000}, 0x0) 06:48:25 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d4070018befa1c", 0x0, 0x0, 0x4, 0x0, 0x0}) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x202, &(0x7f0000000440)={&(0x7f0000000380)=""/151, 0x97}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/23, 0x17}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000200)=""/46, 0x2e}], 0x5, 0x9, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x2) 06:48:25 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) 06:48:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0) 06:48:25 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) [ 2932.054641] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2932.056400] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2932.057537] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2932.059401] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2932.107101] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2932.156225] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2932.176000] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2932.182338] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2932.242589] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2932.246295] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. 06:48:40 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x4000050) 06:48:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x5000000}, 0x0) 06:48:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x0) 06:48:40 executing program 7: ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffb, 0xa, 0x0, @scatter={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, r0, 0x2) 06:48:40 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) 06:48:40 executing program 6: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x98014, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000004200210e0000000000000000000800002d22c6d6947f3484506585df7477168c97e38aea71de46b187e5e5d6031d272cbab62f67459f5fce897dbf31a96442044a8a3b1fd334094703fbff3171e09fc5d0e5cc1d039751e401557244859590113c5b07b40dbbd206a7fb83101fd356"], 0x14}}, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000004c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYRES64=r4], 0x110) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f00000001c0)=0xd7df, 0x4) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r6, 0x0) unshare(0x48020200) 06:48:40 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x60000000) [ 2946.607762] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2946.609131] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2946.609874] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2946.611077] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:48:40 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}], 0x1, 0x0) 06:48:40 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x7, 0x7, 0xfffffffc, 0x9}, 0x10) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0x4, 0x8}, {0x4, 0x5}], r1}, 0x18, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fchdir(r3) 06:48:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x6000000}, 0x0) [ 2946.786344] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2946.787735] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2946.788633] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2946.790160] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:48:40 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 06:48:40 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:40 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xdc050000) 06:48:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}], 0x1, 0x0) 06:48:40 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r0, &(0x7f0000000400)=[{0x0}], 0x1, 0x63, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f00000007c0), &(0x7f0000000340)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) r3 = dup2(0xffffffffffffffff, r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0200003ed00000ff2e2f66696c653000"]) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0xc, 0x3, 0x4, 0x8, 0x0, 0x4, 0x8842, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x57d, 0x400}, 0x1000, 0x4, 0x9, 0x7, 0x3, 0x3e, 0x1, 0x0, 0x6, 0x0, 0x2b}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:48:40 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder-control\x00', 0x400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80400) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000140)="90f049470a82d65dd117b47cdd79813e6150ff27f910de2c1931fe8ac9bb559f97980c4b657fe47d6fc87546c5dd52fa2cb31813a4932b2c93e68d4eb13c07d5f26fec422eec9ac8e37e6878f10787ddbb51218e7cb49f6098b6fb919bf150ce5a720a486219746b25b286e1f9ef63b3f7485db935cb6e0d74fb2bc33908ac4755fe66e5cc28d70d4b6fb539859882298ad481262c146ccc630ad73159e0a1cd9245945c78", 0xa5}, {&(0x7f0000000200)="71cce8c008bd339c13961ae5737db0e850bc655bbf55b693641331131b6acf2df7c877e1c60f5d11cfb0347b7366d0742589a0b965b1bab326896c49428eddf79c3d7c79ca083837fa1c1c022fb0d47c9f3c60a756b849d063bacbbfa6d13e724db71344d6d9d4be382679a78dc266f6508ba25f8fc573a912147ab5d25665215920eb7c56276a12bdfa989ce29bcefc45524bb9ae0b008c0bc1113812b7aa95e299e879c1378d73092541082b6d15b53d2d9b82bf9d4709c86c9faa56fd2a8d3decf631a53c78e802f4ea07", 0xcc}], 0x2, &(0x7f00000003c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3, 0xffffffffffffffff]}}], 0x30, 0x8840}, 0x20000040) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xca002, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2947.028489] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2947.031176] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2947.032681] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2947.034991] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2947.117780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2947.191620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2947.193482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2947.195383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2947.251113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:48:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}], 0x1, 0x0) 06:48:55 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:55 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 06:48:55 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff) 06:48:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x4000050) 06:48:55 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) 06:48:55 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xffffffffffffff8e, 0x0, @scatter={0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/144, 0x90}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000100)=""/143, 0x8f}]}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:48:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x7000000}, 0x0) 06:48:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x1, 0x0) [ 2961.512180] audit: type=1326 audit(1757400535.131:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.519758] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2961.520625] audit: type=1326 audit(1757400535.131:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.521316] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2961.527074] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2961.528258] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2961.539570] audit: type=1326 audit(1757400535.133:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.545082] audit: type=1326 audit(1757400535.133:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.565064] audit: type=1326 audit(1757400535.133:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.576291] audit: type=1326 audit(1757400535.133:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.596518] audit: type=1326 audit(1757400535.133:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:48:55 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x5b, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000200000000000000", @ANYRES32=r2, @ANYBLOB="1b00000001000800e4c542657c2e2f66696c653000"]) 06:48:55 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2961.649307] audit: type=1326 audit(1757400535.135:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.678693] audit: type=1326 audit(1757400535.135:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.690105] audit: type=1326 audit(1757400535.135:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14632 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2961.730751] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2961.733106] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2961.734380] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2961.736467] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:48:55 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfe800000) 06:48:55 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}) 06:48:55 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) 06:48:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x1, 0x0) 06:48:55 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:48:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x9000000}, 0x0) 06:48:55 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) [ 2961.978410] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2961.979569] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2961.980133] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2961.981113] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:49:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}}], 0x1, 0x0) 06:49:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0), 0x0, 0x4000050) 06:49:09 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100345f7ef70000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) openat(r3, &(0x7f0000000140)='./file0\x00', 0x400600, 0x140) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000080)={0x3, 0x85, "82acc29ce027e7a61d0483807133a6b3c87a5142a919d21e1a7204ac89e7a84daea187cb1f5f9526659abe4a6bbe2ca74c73c4517c539008e669af1c6a451a97e74cc23163de62d8e63834c90c7401915e0cd49cb4d2ea44cf14587f04980f2da725aca7e29f9ccc1b5c17edf6e091f84d7fbca3233698307fdda689ba919c2502937f64eb"}) 06:49:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf000000}, 0x0) 06:49:09 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) 06:49:09 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff020000) 06:49:09 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) 06:49:09 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2975.636931] kauditd_printk_skb: 72 callbacks suppressed [ 2975.636942] audit: type=1326 audit(1757400549.256:208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2975.642324] audit: type=1326 audit(1757400549.256:209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2975.650718] audit: type=1326 audit(1757400549.260:210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2975.656163] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2975.657536] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2975.658307] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2975.659477] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:49:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}], 0x1, 0x0) [ 2975.667507] audit: type=1326 audit(1757400549.261:211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2975.684599] audit: type=1326 audit(1757400549.261:212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2975.699256] audit: type=1326 audit(1757400549.264:213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2975.726989] audit: type=1326 audit(1757400549.264:214): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:49:09 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) [ 2975.738920] audit: type=1326 audit(1757400549.265:215): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2975.759806] audit: type=1326 audit(1757400549.266:216): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:49:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}}], 0x1, 0x0) [ 2975.774837] audit: type=1326 audit(1757400549.266:217): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14701 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:49:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0), 0x0, 0x4000050) 06:49:25 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:49:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}}], 0x1, 0x0) 06:49:25 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffff7f) 06:49:25 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) 06:49:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x8b010000}, 0x0) 06:49:25 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x79}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIOCLEX(r1, 0x5451) 06:49:25 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 06:49:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3200000000000000}}], 0x1, 0x0) [ 2992.328645] kauditd_printk_skb: 47 callbacks suppressed [ 2992.328675] audit: type=1326 audit(1757400565.947:265): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2992.340225] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2992.341622] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2992.342238] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2992.343478] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 2992.356288] audit: type=1326 audit(1757400565.967:266): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2992.412620] audit: type=1326 audit(1757400565.971:267): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2992.419025] audit: type=1326 audit(1757400565.973:268): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:49:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x9effffff}, 0x0) 06:49:26 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_free(0xffffffffffffffff) [ 2992.438656] audit: type=1326 audit(1757400565.992:269): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2992.445303] audit: type=1326 audit(1757400565.992:270): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:49:26 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffff5) 06:49:26 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:49:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00000000000000}}], 0x1, 0x0) [ 2992.468710] audit: type=1326 audit(1757400565.993:271): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2992.471438] audit: type=1326 audit(1757400565.993:272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2992.474526] audit: type=1326 audit(1757400565.993:273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 2992.477708] audit: type=1326 audit(1757400565.993:274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14744 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:49:26 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 06:49:26 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) fdatasync(r1) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 2992.687328] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 2992.689510] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 2992.690648] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 2992.692547] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:49:43 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:49:43 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r4 = pidfd_open(r3, 0x0) r5 = dup(r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r5, r1, 0x0) pkey_free(0xffffffffffffffff) 06:49:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0), 0x0, 0x4000050) 06:49:43 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0x1e, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="9d48e8c65f652587d97458b9fb115f9c7718be89c100fe0036f7768b9223", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:49:43 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 06:49:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5400000000000000}}], 0x1, 0x0) 06:49:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf0ffffff}, 0x0) 06:49:43 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000) [ 3010.314691] kauditd_printk_skb: 37 callbacks suppressed [ 3010.314705] audit: type=1326 audit(1757400583.933:312): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.320827] audit: type=1326 audit(1757400583.934:313): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.327734] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3010.330259] sr 1:0:0:0: [sr0] tag#0 CDB: Service action bidirectional, sa=0x8 [ 3010.331988] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 9d 48 e8 c6 5f 65 25 87 d9 74 58 b9 fb 11 5f 9c [ 3010.334213] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 77 18 be 89 c1 00 fe 00 36 f7 76 8b 92 23 [ 3010.341584] audit: type=1326 audit(1757400583.939:314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.365347] audit: type=1326 audit(1757400583.940:315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.377801] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3010.379904] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3010.381099] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3010.383320] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:49:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}], 0x1, 0x0) [ 3010.397004] audit: type=1326 audit(1757400583.940:316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.414530] audit: type=1326 audit(1757400583.946:317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.418805] audit: type=1326 audit(1757400583.946:318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.423406] audit: type=1326 audit(1757400583.946:319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.429821] audit: type=1326 audit(1757400583.959:320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3010.442467] audit: type=1326 audit(1757400583.959:321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14802 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:49:44 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}) 06:49:44 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r3 = pidfd_open(r2, 0x0) dup(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_free(0xffffffffffffffff) 06:49:44 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:49:44 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410400, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:49:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xdc05000000000000}}], 0x1, 0x0) 06:49:44 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x10000000000000) 06:49:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xfffff000}, 0x0) [ 3010.684808] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3010.686539] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3010.687400] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3010.689150] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:49:44 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r3 = pidfd_open(r2, 0x0) dup(r3) pkey_free(0xffffffffffffffff) 06:49:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000}}], 0x1, 0x0) 06:50:01 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 06:50:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000050) 06:50:01 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffefff}) 06:50:01 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:01 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) pidfd_open(r2, 0x0) pkey_free(0xffffffffffffffff) 06:50:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xffffff7f}, 0x0) 06:50:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x0) 06:50:01 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r3, 0x80000) [ 3027.966137] kauditd_printk_skb: 49 callbacks suppressed [ 3027.966156] audit: type=1326 audit(1757400601.585:371): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3027.981325] audit: type=1326 audit(1757400601.585:372): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3027.991098] audit: type=1326 audit(1757400601.585:373): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3028.003638] audit: type=1326 audit(1757400601.585:374): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3028.011354] audit: type=1326 audit(1757400601.585:375): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3028.018740] audit: type=1326 audit(1757400601.585:376): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3028.027284] audit: type=1326 audit(1757400601.585:377): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3028.035500] audit: type=1326 audit(1757400601.587:378): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:50:01 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)) pkey_free(0xffffffffffffffff) [ 3028.042135] audit: type=1326 audit(1757400601.587:379): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:50:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000}}], 0x1, 0x0) [ 3028.048326] audit: type=1326 audit(1757400601.587:380): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:50:01 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:01 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000) 06:50:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xffffff9e}, 0x0) 06:50:01 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 06:50:01 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x665d, &(0x7f0000000080)={0x0, 0xa5ec, 0x8, 0x0, 0xb8, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="f7ffffff000000002e2f66696c65308aaa1e296751006baf88998500"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) [ 3028.278605] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3028.281074] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3028.282412] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3028.284601] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:50:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f00000000}}], 0x1, 0x0) 06:50:01 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 06:50:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:50:16 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xfffffff0}, 0x0) 06:50:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x0) 06:50:16 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) 06:50:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) 06:50:16 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) socket$unix(0x1, 0x1, 0x0) pkey_free(0xffffffffffffffff) 06:50:16 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3f, 0x7, 0x2, @loopback, @remote, 0x700, 0x7820, 0x3, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', r2, 0x2f, 0x1, 0x80, 0x2d, 0xa, @mcast1, @private1, 0x40, 0x700, 0x1f, 0x5}}) [ 3043.117130] kauditd_printk_skb: 26 callbacks suppressed [ 3043.117143] audit: type=1326 audit(1757400616.735:407): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3043.123769] audit: type=1326 audit(1757400616.735:408): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3043.133944] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3043.135514] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3043.136237] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3043.137478] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3043.137830] audit: type=1326 audit(1757400616.741:409): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3043.176781] audit: type=1326 audit(1757400616.742:410): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:50:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x1, 0x0) [ 3043.215299] audit: type=1326 audit(1757400616.742:411): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:50:16 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x300000000000000) [ 3043.233865] audit: type=1326 audit(1757400616.743:412): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3043.243493] audit: type=1326 audit(1757400616.743:413): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3043.253040] audit: type=1326 audit(1757400616.743:414): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14940 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:50:16 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:50:16 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:16 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) 06:50:16 executing program 7: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x216004d, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x20}}, {@common=@cache_loose}], [{@appraise}, {@euid_lt={'euid<', r1}}]}}) [ 3043.356639] audit: type=1326 audit(1757400616.975:415): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14965 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3043.360158] audit: type=1326 audit(1757400616.976:416): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14965 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:50:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x3000000000000}, 0x0) 06:50:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}}], 0x1, 0x0) [ 3043.436467] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3043.438955] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3043.440248] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3043.442591] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:50:31 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:31 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) 06:50:31 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) 06:50:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:50:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x8000000000000}, 0x0) 06:50:31 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x0, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_io_uring_setup(0x1f14, &(0x7f0000000040)={0x0, 0x85b3, 0x0, 0x1, 0x182}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x6382c17a4cbcb105, 0x2007, @fd_index=0x2, 0xffffffff, 0x1, 0x6, 0xd, 0x1, {0x1}}, 0xe8) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) 06:50:31 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000000000000) 06:50:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x30, 0x0, "c9ea3e1cf2399f3df3106e38ce8cd5124d237810418a761d0bb7d0949425a2160f4bf53d6302394e8a19e3ef5a543c9f54eace811e1852a25089a6a1438c3139909e5f882cade397984bae47f89924f0"}, 0xd8) sendmsg$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:50:31 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) [ 3057.701533] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3057.703629] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3057.704758] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3057.706620] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:50:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0) 06:50:31 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:31 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) 06:50:31 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 06:50:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 06:50:31 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xa8f00, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="fe83bcd31373149d48ac47d62a692d98ee49d0efb17ac9d68955351b533fc8a571bcc19f7a1d892438ab3db2d2f06b2254ba9e5afafaa2b9bb670dbaf37387b3140d94469875275d00507482a2c69a0e9647b4406239a7543816d236fa0da309adfe5d88ee32d3940889e524baf8544dfb99990e4e32667ec8455806f217c0b2047f6dd518ed729b4db338e59eac14e02e334b62", 0x94}, {&(0x7f00000000c0)="da0fbd5afab5328eeee2936076d886d243ead2b4142255bd82514fd6785e02340f9a256d231b7f30c6dbe6b1da12348f8abd23fdc08d5b0e008ee11d8aaeb577bff8277196503960451602cb4685cb572d0e33bd68d1c29b7beefd95e9e5be4aec48c4deb0dd005b1ade6e60c30bd0d2a079e8b9c3a2272d72bc1f388ffde99fab22e5525919b533464964bbc13df8a5a6e009f15cd95298da134323daf7b8b62eb1beff1936318527679607e81bbae9564193c36d8b99f058c296b2d72fb51f85ca3b005790413ea786e5", 0xcb}], 0x2) 06:50:31 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000) [ 3057.994473] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3057.996850] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3057.998149] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3058.000255] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:50:45 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:45 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_free(0xffffffffffffffff) 06:50:45 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x10000000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f0000000040)={0x100, 0x1e7, 0x18}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r8}}, 0x8) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f0000006e00)=[{{&(0x7f0000000240)=@nl=@proc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f00000002c0)=""/158, 0xfffffffffffffeef}, {&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000004c0)=""/234, 0xea}], 0x6, &(0x7f0000000640)=""/91, 0x5b}, 0x1}, {{&(0x7f00000006c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000740)=""/236, 0xec}], 0x1, &(0x7f0000000880)=""/57, 0x39}, 0x7f}, {{&(0x7f00000008c0)=@l2, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000a00)=""/226, 0xe2}, {&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/158, 0x9e}, {&(0x7f0000000c80)=""/46, 0x2e}, {&(0x7f0000002d80)=""/253, 0xfd}, {&(0x7f0000006f80)=""/153, 0x99}], 0x8, &(0x7f0000002f00)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/92, 0x5c}], 0x1, &(0x7f00000030c0)=""/109, 0x6d}, 0x8000}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003140)=""/72, 0x48}, {&(0x7f00000031c0)=""/146, 0x92}, {&(0x7f0000003280)=""/160, 0xa0}, {&(0x7f0000003340)=""/4, 0x4}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000003380)=""/89, 0x59}, {&(0x7f0000003400)=""/34, 0x22}, {&(0x7f0000003440)=""/215, 0xd7}, {&(0x7f0000005b00)=""/217, 0xd9}], 0x9, &(0x7f00000057c0)=""/224, 0xe0}, 0x1}, {{&(0x7f0000003540)=@qipcrtr, 0x80, &(0x7f0000006d00)=[{&(0x7f00000058c0)=""/101, 0x65}, {&(0x7f0000005940)=""/85, 0x55}, {&(0x7f00000059c0)=""/1, 0x1}, {&(0x7f0000005a00)=""/215, 0xd7}, {&(0x7f0000007040)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/98, 0x62}, {&(0x7f0000006b80)=""/142, 0x8e}, {&(0x7f0000006c40)=""/148, 0x94}], 0x8, &(0x7f0000006d80)=""/95, 0x5f}, 0x9}], 0x6, 0x40000043, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000002e2f66696c65fb00"]) 06:50:45 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:50:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x100000000000000}, 0x0) 06:50:45 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x600000000000000) 06:50:45 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:50:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x1, 0x0) [ 3072.123802] kauditd_printk_skb: 1 callbacks suppressed [ 3072.123824] audit: type=1326 audit(1757400645.742:418): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3072.131515] audit: type=1326 audit(1757400645.747:419): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3072.138188] audit: type=1326 audit(1757400645.747:420): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3072.144327] audit: type=1326 audit(1757400645.747:421): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3072.149599] audit: type=1326 audit(1757400645.748:422): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3072.156334] audit: type=1326 audit(1757400645.748:423): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:50:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) [ 3072.163610] audit: type=1326 audit(1757400645.748:424): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:50:45 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3072.186551] audit: type=1326 audit(1757400645.748:425): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:50:45 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_free(0xffffffffffffffff) [ 3072.193153] audit: type=1326 audit(1757400645.748:426): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3072.203946] audit: type=1326 audit(1757400645.748:427): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15063 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:50:45 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x700000000000000) 06:50:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x200000000000000}, 0x0) 06:50:45 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:50:45 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 06:50:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x1, 0x0) 06:50:45 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffff6d8, 0x34020) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x3) [ 3072.509505] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3072.512164] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3072.513705] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3072.516168] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:51:00 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) 06:51:00 executing program 7: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x8}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x10201, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x30, r0, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000180)='./file0\x00', 0x42, 0x40, 0x23456}, 0x46) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/164, 0xa4}, {&(0x7f00000000c0)=""/49, 0x31}], 0x2) 06:51:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x300000000000000}, 0x0) 06:51:00 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_free(0xffffffffffffffff) 06:51:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 06:51:00 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:51:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x1, 0x0) 06:51:00 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3086.677853] kauditd_printk_skb: 43 callbacks suppressed [ 3086.677900] audit: type=1326 audit(1757400660.296:471): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3086.687261] audit: type=1326 audit(1757400660.297:472): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3086.713890] audit: type=1326 audit(1757400660.305:473): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3086.719565] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3086.719639] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3086.719665] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3086.719685] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:51:00 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) 06:51:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0) 06:51:00 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup2(r0, r0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x6918, &(0x7f0000000000)={0x0, 0x5819, 0x20, 0x3, 0x20e, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x10000}, 0x8001) syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9a, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r7, 0x8, 0xffffffffffffff7f, 0x99}) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x10010, r1, 0x10000000) syz_io_uring_submit(r5, r8, &(0x7f0000000140), 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x7fff) [ 3086.834594] audit: type=1326 audit(1757400660.305:474): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:00 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r4 = pidfd_open(r3, 0x0) r5 = dup(r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r5, r1, 0x0) pkey_free(0xffffffffffffffff) [ 3086.885225] audit: type=1326 audit(1757400660.306:475): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3086.891135] audit: type=1326 audit(1757400660.306:476): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3086.897754] audit: type=1326 audit(1757400660.306:477): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3086.903045] audit: type=1326 audit(1757400660.306:478): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:00 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:51:00 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3086.909729] audit: type=1326 audit(1757400660.313:479): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3086.914938] audit: type=1326 audit(1757400660.316:480): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15124 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x400000000000000}, 0x0) 06:51:00 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000000) 06:51:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x1, 0x0) [ 3087.180181] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3087.182220] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3087.183321] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3087.185121] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:51:14 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 06:51:14 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) 06:51:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x500000000000000}, 0x0) 06:51:14 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r3 = pidfd_open(r2, 0x0) dup(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pkey_free(0xffffffffffffffff) 06:51:14 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:51:14 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:51:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x1, 0x0) 06:51:14 executing program 7: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0xc, 0xe4, {0xe4, 0xa, "afb41a25faed359b97823f3bfddc3310146425eae6af206792d990fd7a8b50665ca30872715b3546d48aaa4c0c55f2223bc2938fc7d9d447f9120812374aeca5c54b531041fc8b9bf16d1db57448be807f9ef8bf56c18bf79243e4f2958e21bbd7e0b31d7cfe77905dc23627ef3413e473368db68fe78af0fc1502572c21743bc884fcde9c9de760f0a17fd37d51d78e025e36292c975807e66de5e0a6e366bf6638e07c79d3376dbc57867e77ac3fc217a098cc7306d1cd17b86d07542256759895e50387c842df74754b78c9412d31d5a291f19db507cbe47703f2eb6fa13c194f"}}, &(0x7f0000000140)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "a5bdc6080d4dc4535762ff0275d7d97f75b92868a899bd97de8dd420b885562cb16a874d53043f1a1533604268ecc54fc19d2cd1e19b034f42712929107d6f8725c3a6c797b0337c6ace6bad1d4d11eb86169dbd1155490725e472efdc43e5ed61d177a43b7b15ca7b1a216818"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x40, 0x16, 0x9, "d534f1ebad9d17a5b4"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000002c0)={0x20, 0x0, 0x5e, {0x5c, "1e7df3b39635841248188bd6daa50b023f6d160b6d868b7a6c7bca5bea5e6d85dd727387ae40cdf75c77a5337d6c0da4151b54c45dcd65434cf9785cecba6316f473fb4d5b0608dad89ff3b0b66a5b1d68dfb3f999113a12ab1fc785"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x2}}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000440)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x200, 0x0, 0x0, 0x0}) [ 3101.404254] kauditd_printk_skb: 52 callbacks suppressed [ 3101.404272] audit: type=1326 audit(1757400675.023:533): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.413987] audit: type=1326 audit(1757400675.029:534): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.419330] audit: type=1326 audit(1757400675.030:535): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.424297] audit: type=1326 audit(1757400675.030:536): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.430862] audit: type=1326 audit(1757400675.030:537): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.436269] audit: type=1326 audit(1757400675.031:538): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.441668] audit: type=1326 audit(1757400675.031:539): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.448140] audit: type=1326 audit(1757400675.034:540): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.453243] audit: type=1326 audit(1757400675.034:541): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.458588] audit: type=1326 audit(1757400675.035:542): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15188 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3101.465712] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3101.467965] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3101.469169] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3101.471133] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:51:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}], 0x1, 0x0) 06:51:15 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 06:51:15 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r3 = pidfd_open(r2, 0x0) dup(r3) pkey_free(0xffffffffffffffff) 06:51:15 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:51:15 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:51:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x600000000000000}, 0x0) 06:51:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0) 06:51:15 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000) [ 3101.784661] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3101.786812] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3101.787916] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3101.789741] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:51:15 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:51:15 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)={0x0, 0x0}) pidfd_open(r2, 0x0) pkey_free(0xffffffffffffffff) 06:51:15 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 06:51:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}], 0x1, 0x0) 06:51:15 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3102.101538] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3102.103750] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3102.104939] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3102.106891] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:51:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x700000000000000}, 0x0) 06:51:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}}], 0x1, 0x0) 06:51:34 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x22, 0x80000, 0x23456, {0x0, r4}}, 0x1) 06:51:34 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:51:34 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000009c0)) pkey_free(0xffffffffffffffff) 06:51:34 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) 06:51:34 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}) 06:51:34 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3120.817822] kauditd_printk_skb: 47 callbacks suppressed [ 3120.817835] audit: type=1326 audit(1757400694.436:590): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.822855] audit: type=1326 audit(1757400694.441:591): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.827840] audit: type=1326 audit(1757400694.447:592): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.832184] audit: type=1326 audit(1757400694.447:593): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.835355] audit: type=1326 audit(1757400694.450:594): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.845579] audit: type=1326 audit(1757400694.450:595): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.849195] audit: type=1326 audit(1757400694.451:596): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.864784] audit: type=1326 audit(1757400694.454:597): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.873467] audit: type=1326 audit(1757400694.454:598): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3120.885452] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3120.887713] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3120.889016] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3120.890979] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3120.898761] audit: type=1326 audit(1757400694.454:599): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15263 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:48 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) 06:51:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x900000000000000}, 0x0) 06:51:48 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdaffffff}) 06:51:48 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6000000000000000) 06:51:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}}], 0x1, 0x0) 06:51:48 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:51:48 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_free(0xffffffffffffffff) [ 3135.283861] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3135.285291] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3135.286061] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3135.287287] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3135.304482] kauditd_printk_skb: 8 callbacks suppressed [ 3135.304503] audit: type=1326 audit(1757400708.923:608): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15294 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3135.326390] audit: type=1326 audit(1757400708.936:609): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15294 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3135.352148] audit: type=1326 audit(1757400708.944:610): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15294 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3135.364627] audit: type=1326 audit(1757400708.945:611): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15294 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:48 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3135.378816] audit: type=1326 audit(1757400708.945:612): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15294 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:49 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_free(0xffffffffffffffff) [ 3135.398714] audit: type=1326 audit(1757400708.945:613): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15294 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf00000000000000}, 0x0) [ 3135.413601] audit: type=1326 audit(1757400708.945:614): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15294 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:51:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}], 0x1, 0x0) 06:51:49 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) socket$unix(0x1, 0x1, 0x0) pkey_free(0xffffffffffffffff) 06:51:49 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff}) [ 3135.496348] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3135.498627] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3135.499855] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3135.501892] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:51:49 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xdc05000000000000) 06:51:49 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:51:49 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_free(0xffffffffffffffff) [ 3135.614755] audit: type=1326 audit(1757400709.233:615): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15323 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3135.618675] audit: type=1326 audit(1757400709.233:616): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15323 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3135.626030] audit: type=1326 audit(1757400709.234:617): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15323 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3135.738700] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3135.739904] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3135.740547] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3135.741609] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:52:05 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 06:52:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}], 0x1, 0x0) 06:52:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x8b01000000000000}, 0x0) 06:52:05 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:52:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff}) 06:52:05 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:52:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_free(0xffffffffffffffff) 06:52:05 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001d80)={{r2}, r3, 0x4, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0x3, 0x6, {0x1e, 0x1, 0x7fff, 0x9}, [0x1f, 0x1, 0x8]}}, @devid}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@private1, 0x0}, &(0x7f0000000300)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000340)={r5, 0x1, 0x6}, 0x10) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="5bb3723b9561d819ec7657190399d708f12d5f5cd3d981f16fd54cace787eeca7e0995f0dd18ae554ab5303f09f7de83bee8c5cec0727c4e284d15284f44a1e1b55a1f357ad4312bdc9a6af91bad5cbb03a409c9cb16bcea63012241e0e2d46d593fc500b96f09515a4d4a2a6e62658afb873d9bc33bf83eb294c0a10236f72c") ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) fallocate(r1, 0x10, 0x3f, 0x4) [ 3151.850819] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3151.853609] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3151.855128] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3151.857578] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3151.861084] kauditd_printk_skb: 2 callbacks suppressed [ 3151.861105] audit: type=1326 audit(1757400725.481:620): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15355 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3151.873786] audit: type=1326 audit(1757400725.488:621): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15355 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:52:05 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfe80000000000000) [ 3151.911630] audit: type=1326 audit(1757400725.488:622): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15355 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:52:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_free(0xffffffffffffffff) [ 3151.942708] audit: type=1326 audit(1757400725.488:623): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15355 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:52:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4}}], 0x1, 0x0) 06:52:05 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) 06:52:05 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:52:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x9effffff00000000}, 0x0) 06:52:05 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}) 06:52:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_free(0xffffffffffffffff) 06:52:05 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x100010, r1, 0x95506000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x4c2302, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) dup2(r2, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) [ 3152.216313] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3152.218204] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3152.219218] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3152.220857] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:52:21 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:52:21 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x3) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r1, 0x3, 0x158, 0x9}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000073d0da46002e2f66696c653000"]) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x0, 0x0, 0xa, 0x0, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000001c80)=""/4105, 0x1009}]}, &(0x7f00000009c0)="2f4f77d45d1b58be89c1", 0x0, 0x0, 0x23, 0x0, 0x0}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)) sendmsg$SOCK_DESTROY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x15, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2b, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x43, 0x1, "f77da23b874f8444da7d0063e2767df2300eacf4da345ec5e2fec711444fde940821178339e90b3b2edcf071f509b76f32d224225855e8ab738fb23faca915"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008011}, 0x8846) 06:52:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xf0ffffff00000000}, 0x0) 06:52:21 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xff02000000000000) 06:52:21 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 06:52:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_free(0xffffffffffffffff) 06:52:21 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) 06:52:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}], 0x1, 0x0) 06:52:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}}], 0x1, 0x0) 06:52:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_free(0xffffffffffffffff) 06:52:21 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_free(0xffffffffffffffff) [ 3167.942026] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3167.944481] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3167.945684] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3167.947542] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:52:21 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r4 = memfd_create(&(0x7f0000000300)='/dev/sr0\x00', 0x4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000005c0)) io_submit(0x0, 0x5, &(0x7f0000000580)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000040)="b253701dbd607e16ef68a36f3a0f404897667c9bf9690d1ee1293b8b", 0x1c, 0x10000, 0x0, 0x1, r2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x1fbf, r0, &(0x7f00000000c0)="2232a39279f71e6747add8338757efbf8cdbc414c5c78e3a4030a545e36d6d3679fcd2b6d9380b994c2e9e91395d226d42771ab31e4516c99b214894a62f622ccf029a0df60d909d205cf3d6d7909f1f856519f3d55e451b07145eeb93b31c98f6b93d955cbb0873ea0a8da18670cb72d781b2b0f5f580f1297dd6338194d7d5e547037a71bbe820f8fec71f7afcf69d0ceb1b6ffabf8088270cd9", 0x9b, 0x1, 0x0, 0x7}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2, r3, &(0x7f00000001c0)="3e8c7ee4bc123d179bff363e956a1a30eebd9b31450d73b5704ded74d0764f91d66a94260a8540ad60a624344d3c68f24a66f942f4fe6277a82e12e974f71cc9e4ad51fabdbd562a35b00d503de15ae24fcbe9ad1b860cf16316fe14723a9e2a22df1e594f91a7b5a8a067b979ca7e8b3f2e6bf0aa94451fdcb1351468debd6400f23f40cea8737a483e06b982b0c6eb36d70456f512e33ee29abe0a9c3d5feefb23fae8a16efa92e4e974d857edf8954cb5971bda0571b9b8180694be73eb65e61c3ac6c81143818bcef3c9084d4c6b2eacccb1db05c357d570fb716f172472c8b417f96cc43964d7", 0xe9, 0x36e91d84, 0x0, 0x0, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x3, r4, &(0x7f0000000340)="ae406db09b4fcba6ecaa12d6bc31a80680b11328225db19e2e2aaf5f049f45f0ae842c4b864f8a9a407b7dcd118213de09c3fc39e90c6f628ece5a52f75f4e572d3b3d2f2f2873a82df3744fe229785d051481001bd22d93c76d7ed3fbf270e468bc2f5962ee34b52e211b208e3bad193ec0ca29530cfd1669b4b26d899a26b50560ebca55531b61babcf364d38c18b685dc81d5", 0x94, 0x6e2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000440)="aa5d8cd0a7e5407e5def28ca1fb4db33b14be1422d1d7b96b2e0128de6ef1ad4ce4f613f607b102e6e85edbd62278e1b58b44662efada54b2009be72b0507264ac07ae7fad1ed42da06475d3c9d682b3d8eb4458da9242ed9062b7916d10bb6e27b18f974281186822c87e16414bdd7b2a4e6fc77d2e1761513bdf909cf1e45be783a873f857655cb9164113530ead8363df7cb305cf0efb449184de33143f7855ca2f5eb13d970da53d9fc5aaa21288367169bfa1643ebc0fa9668696eeeefcddba081269026b8a0e6bf434ef0e3d2241d2821fe68a61d07b5236", 0xdb, 0x1, 0x0, 0x1, r0}]) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:52:21 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:52:21 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}) [ 3168.305496] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3168.307699] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3168.308880] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3168.310816] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:52:37 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_free(0xffffffffffffffff) 06:52:37 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:52:37 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffefff}) 06:52:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xffffff7f00000000}, 0x0) 06:52:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:52:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dc}}], 0x1, 0x0) 06:52:37 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffff7f00000000) 06:52:37 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x8001) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'geneve0\x00', @ifru_map}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x8000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x2, 0x0, 0x0, 0x0}) 06:52:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x1, 0x0) [ 3183.640185] audit: type=1326 audit(1757400757.259:624): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15464 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3183.648302] audit: type=1326 audit(1757400757.264:625): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15464 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3183.659600] audit: type=1326 audit(1757400757.265:626): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15464 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:52:37 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3183.671148] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3183.672699] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3183.673382] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3183.674581] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:52:37 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:52:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0) 06:52:37 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x6, 0x4000010, r0, 0x97109000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xffffffffffffffff, 0xb, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="ca2e4a444173bf8039a9f6", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3) 06:52:37 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) [ 3183.842564] audit: type=1326 audit(1757400757.461:627): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15492 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3183.858076] audit: type=1326 audit(1757400757.477:628): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15492 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3183.868789] audit: type=1326 audit(1757400757.483:629): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15492 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:52:37 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000300)=""/8, 0x8}], 0x4, &(0x7f00000005c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x40000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x20010, r2, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd=r1, 0x9f, 0x9, 0x5, 0x0, 0x0, {0x3}}, 0xc68e) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x30, r0, 0x0) r5 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7ff) r10 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0xb5) 06:52:37 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:52:37 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 06:53:01 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) 06:53:01 executing program 7: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x629, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x64}}, 0x4000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) sendto$inet(r1, &(0x7f0000000040)="747ff723236013ab503226ebe1136b9c30edf8a5c05bdd4a95ddd1db3900579f4248771cbae1ae5bd22d7ae86beccfda8f", 0x31, 0x8001, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:53:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:53:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}], 0x1, 0x0) 06:53:01 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) r0 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:53:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0xfffffffffffff000}, 0x0) 06:53:01 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x8e, 0x1, @scatter={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000000)="2f4f77d418ad99860d9a997f945d58d722ec6ab67486149e7c41ff74458b0d8753e164f28389afef3690ba08a89f03c7b8bf542f13020000000000000006e95f0fee321fbdaa2698b55f98481d4f16bd304ac2d40e38ce748dd8734503b5a01ecaf77f45cbc856f1554f203c738340d28cce9ab3a2e281bd54c716e8181707c9a0725bb6549548bce27b6863bec8", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:53:01 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda}) [ 3208.271757] audit: type=1326 audit(1757400781.890:630): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15526 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3208.276925] audit: type=1326 audit(1757400781.895:631): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15526 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3208.289567] audit: type=1326 audit(1757400781.895:632): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15526 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:53:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) 06:53:01 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:53:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) pkey_free(0xffffffffffffffff) 06:53:01 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000080)="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", 0xfb, 0x3}, {&(0x7f0000000180)="e8a2637d15dbe4c65c243751d9931a7285a56f14dc252cd1dc7ac2c06a614efe9c3303ebe5c1038cb22933a5645a9765ca51c4566c37b130a473f3e71b349ee210f049729fb5e7b634831d0d935e1ff1cbb943806e378e304055389e25f00538ad491079e16979080659ddec591eb54cd02ad834be426422904ae75b9864fa27cd2455d19104b22f2093599b1a823bb0b73e6ad2df330d440efc8728d4", 0x9d, 0x5}, {&(0x7f0000000240)="bd4c985a553a3330842ec0153c131e3c3912f96dcb5059f31bdad805d8ff474818d8a5ae9aab11e8d8c8e8c2727e80dcc74f9e0009a626fe363fc8d01391dfe98a062de9c503502ad7057182e6f5cb90abd2ae24d782e58bdfb3b7a009526649dcdcb94fd2e124991dc60b8ddf0b7ca247dbcf06bdc61bc88fe74cf3d5510056c7d3d78f8810f1b58321127e08ca5d0d4ea376241ffeb9ab3ddc8f9c5a5cb46e72cce32605e69bf9fe8b924a00feaeca861ed3811b6c005e08e88ea37b2bab14c0e7ceffd192e0a92acc4fb065c972ace9", 0xd1, 0x5}, {&(0x7f0000000340)="1d0d055f501e2148e609adfca1b89143bbbb5e6144719bd84013e2b49c37e72ba5ded77dd15117c95c854ec36497ef04ae15b05d1b221d57179f671025d7f720f8d95929929387cbc38ac70a54d0497ba6cc8b4379fa3579cecd11cc1b66eb05d9", 0x61, 0x2}], 0x101082, &(0x7f0000000440)={[{@dmode={'dmode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x1}}, {@nocompress}, {@utf8}, {@check_strict}], [{@appraise}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/sr0\x00'}}, {@smackfsdef}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3208.416613] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3208.418115] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3208.418970] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 18 ad 99 86 0d 9a 99 7f 94 5d 58 d7 [ 3208.420311] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 22 ec 6a b6 74 86 14 9e 7c 41 ff 74 45 8b 0d 87 [ 3208.421641] sr 1:0:0:0: [sr0] tag#0 CDB[20]: 53 e1 64 f2 83 89 af ef 36 90 ba 08 a8 9f 03 c7 [ 3208.422979] sr 1:0:0:0: [sr0] tag#0 CDB[30]: b8 bf 54 2f 13 02 00 00 00 00 00 00 00 06 e9 5f [ 3208.424304] sr 1:0:0:0: [sr0] tag#0 CDB[40]: 0f ee 32 1f bd aa 26 98 b5 5f 98 48 1d 4f 16 bd [ 3208.425613] sr 1:0:0:0: [sr0] tag#0 CDB[50]: 30 4a c2 d4 0e 38 ce 74 8d d8 73 45 03 b5 a0 1e [ 3208.426946] sr 1:0:0:0: [sr0] tag#0 CDB[60]: ca f7 7f 45 cb c8 56 f1 55 4f 20 3c 73 83 40 d2 [ 3208.428267] sr 1:0:0:0: [sr0] tag#0 CDB[70]: 8c ce 9a b3 a2 e2 81 bd 54 c7 16 e8 18 17 07 c9 [ 3208.429574] sr 1:0:0:0: [sr0] tag#0 CDB[80]: a0 72 5b b6 54 95 48 bc e2 7b 68 63 be c8 06:53:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x2}, 0x0) [ 3208.443062] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3208.444526] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3208.445290] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 18 ad 99 86 0d 9a 99 7f 94 5d 58 d7 [ 3208.446611] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 22 ec 6a b6 74 86 14 9e 7c 41 ff 74 45 8b 0d 87 [ 3208.447924] sr 1:0:0:0: [sr0] tag#0 CDB[20]: 53 e1 64 f2 83 89 af ef 36 90 ba 08 a8 9f 03 c7 [ 3208.449223] sr 1:0:0:0: [sr0] tag#0 CDB[30]: b8 bf 54 2f 13 02 00 00 00 00 00 00 00 06 e9 5f [ 3208.450533] sr 1:0:0:0: [sr0] tag#0 CDB[40]: 0f ee 32 1f bd aa 26 98 b5 5f 98 48 1d 4f 16 bd [ 3208.451817] sr 1:0:0:0: [sr0] tag#0 CDB[50]: 30 4a c2 d4 0e 38 ce 74 8d d8 73 45 03 b5 a0 1e [ 3208.453122] sr 1:0:0:0: [sr0] tag#0 CDB[60]: ca f7 7f 45 cb c8 56 f1 55 4f 20 3c 73 83 40 d2 [ 3208.454420] sr 1:0:0:0: [sr0] tag#0 CDB[70]: 8c ce 9a b3 a2 e2 81 bd 54 c7 16 e8 18 17 07 c9 [ 3208.455723] sr 1:0:0:0: [sr0] tag#0 CDB[80]: a0 72 5b b6 54 95 48 bc e2 7b 68 63 be c8 06:53:02 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:53:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7}) 06:53:02 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffb, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x8800, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3e8, 0x10, 0x300, 0x70bd2d, 0x25dfdbfd, {0x1c}, [@generic="16733e0a6f7c343f1df809847e341fc785a609041d121a166505d105080cb63797d225dbcbd2f4586df2b525aa21adcefeef83dc4880d951efed43b23b9134d75d0fac5a2a106a242a51c8a059ad4ade370d369c825cf59acbfb5cb4919e388109c15ecf23ad5f0184cb7a", @nested={0x2bd, 0x5f, 0x0, 0x1, [@typed={0xb7, 0x29, 0x0, 0x0, @binary="fe37c549c5d5677ec2d639e768556c3515a811806bf58319456b8f5e611897c3c695234ca3541d25e45ffa8d3322198ad1f873282de61bb3d7c0d37d36eddb49040e5c971346fae0e199086ae894ec800ed0872b89eade88ee294f86527b409e40b37e840ec7d736a8e4f223a7c1b7db80a21e482e9840b2767a44110f1dfc831175994b0100ff2a26713a1f280173c8bff49ea7a6fecd5307d74c05d608caa37cffd978a87955e516c2d2997eb36b8b16a750"}, @generic="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", @generic="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", @typed={0x8, 0x48, 0x0, 0x0, @fd=r1}]}, @generic="96b925269328ce88238d9dbf86be6fb5bbed43abf3489a685119547483010aaff486e16f24512a73b341296b6b74366b290d13975515b558ed0b7dc643223ed9c6077cdd467920aab08292aec61fbbc70b65c7fa2d79d76a804b79354230ac366da65e3d97482d566aae101de4c555338656b50628426ce31659479489c1c9046aaed96fbd801637ccb5052a9240d974e06772e70aaf20e7a82b73695d0de06475e026ad44dba6"]}, 0x3e8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) 06:53:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}}], 0x1, 0x0) [ 3208.540662] audit: type=1326 audit(1757400782.159:633): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15550 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3208.547523] audit: type=1326 audit(1757400782.164:634): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15550 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3208.560734] audit: type=1326 audit(1757400782.164:635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15550 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3208.575713] audit: type=1326 audit(1757400782.171:636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15551 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x0 06:53:02 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) pkey_alloc(0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3208.703083] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3208.704393] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3208.705082] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3208.706228] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:53:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}}], 0x1, 0x0) 06:53:02 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040), 0x2) [ 3208.748661] audit: type=1326 audit(1757400782.367:637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15572 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3208.758712] audit: type=1326 audit(1757400782.367:638): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15572 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:53:02 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}) [ 3208.777285] audit: type=1326 audit(1757400782.376:639): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15572 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:53:02 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696c6530202b7d26202f6465762f73723000205d2d253a202f6465762f73723000202f6465762f73723000202f6465762f737230000a4a3c4acf0ee2decc9d61f0dd744694aaf0297aed637bc3a66be430a553bdd9f2235a1349eb3f8839ecb9ab7993524b0b78cbece468b4576dedc807e91a40f2bcb572d0b114748d7f9839526f959fac775a9d6e528de43b8d27ca1638b9447b8ac5cfa23615d28600eab68f189c3514f4b44d5da62b9bfec090a76d6a03c4513fae252a546bc7460e28ac57553c2ce1e0a1f35967cfcbc77d81fc315f"], 0xd8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:53:02 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:53:02 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r3 = gettid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x350, 0x17, 0x10, 0x70bd28, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x35, 0x0, 0x0, @pid=r3}, @generic="9c56a7f06f74210656384c3e889a473f879988c590ae594be9add50f7ed4614964a1fe201d8658c9856da5691d06a274c278a91dd2299aab667f01308e7486a828bd758b06c3fe52accf2c631bcda5bcefbd2870752bae42b502e957dd34b9d178dbb46ed1d673c6ecfc1fa6e270d4412836babb9ca1bb5f643c", @nested={0x140, 0x39, 0x0, 0x1, [@generic, @typed={0x8, 0x68, 0x0, 0x0, @uid=r4}, @generic="7c2f866297d9fccb17dd309e18bd4c65d1a7bed609f6dcaf6fb53f527262e9492aaefa697cd2b9cd9a1e954ac8e7ae4a9318f4e6d5f98723852f4697463a9b01fca8b38651c85423881d2bedfda8333009021e86ccecf2465c6f5d8c3241e9a75f633d0425fd24198f3a55a633ca948546f1541836d5", @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="f5d7b2847f798a1818f96360d110f465089bb3174a2ae7afe41834bb9341c51985ca507743685b70609844e9e019a2b2967e2dc9fa4c8670300fab81dd5cc056c957f8b171a62b92a3e3b8e008f6234cff4a8d5ddb93d3b8a20976daaecb265f3d51aa06be0932a3c473fbcbda3088d847bcec901e49fb46076ef41424b95dc53875ca8336bbd86c00f85c0c9b521e18f059228f914be88b99474fb1504cd3089afd662d7e66a152410ca8746acc", @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x8, 0x7a, 0x0, 0x0, @fd=r1}, @nested={0x16e, 0x78, 0x0, 0x1, [@typed={0xc, 0x7f, 0x0, 0x0, @u64=0x7}, @generic="9d1f93d5304741ae368cf919ab7918e8101a7d6a04487155d726117aecc928de13055a0647f32a9ecbc698b4cd0fcd277f90ea8ea628473834416acbfdad5ed340b5dc7141e7b76396ffed5fa7a34f7472e5ae92a3cd08b4f205cb61fdc3d43d07325fb3e16eeed592591017ed7b715a33f374a233c28f3ed616b3129852dc9ee82e3cd799d8720a9f68f3681c947e", @generic="98e583727b60e23a2f07f35aa9a6d259dee5baffb1bd0abb6a5619cef8fff418118922fe0f99980e77f3ab2f042d7f1e210aa7682251cf88fbc7360d8208844f94a05ee7a7d544c804e45d0649f83efb09584cf258732f3e142a38550c2f9e58fd1803ee0c275f412614dd2b330747efd5ca4091f606a48966284cb2e4ff44a20c426931c6e91b068bfc1c851e439627caaab226d3cd82583a3c6f17a1ac37a59685126c6ed4d5ad67e5fc62814aaf9cfa5092b4ac1c7f5fa92e9ef38586a30b0a98090af8262e", @typed={0x8, 0x4f, 0x0, 0x0, @uid}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x54}, 0x840) 06:53:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200}}], 0x1, 0x0) 06:53:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x3}, 0x0) [ 3208.953485] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3208.955693] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3208.956885] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3208.959021] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:53:17 executing program 5: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:53:17 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 06:53:17 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0xf35, &(0x7f00000004c0)={0x0, 0x836a, 0x20, 0x3, 0x21}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) r5 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1f) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x6, 0x80) r11 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1, 0x1}, 0x4) syz_io_uring_submit(r10, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x3}, 0x0) r16 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r16, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:53:17 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) dup3(r1, r2, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:53:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00}}], 0x1, 0x0) 06:53:17 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffc, 0x11, 0x3f, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x37, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20004041) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) 06:53:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x4}, 0x0) 06:53:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) pkey_free(0xffffffffffffffff) [ 3224.225126] kauditd_printk_skb: 7 callbacks suppressed [ 3224.225145] audit: type=1326 audit(1757400797.844:647): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15622 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3224.237865] audit: type=1326 audit(1757400797.851:648): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15622 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3224.253693] audit: type=1326 audit(1757400797.851:649): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15622 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3224.257648] audit: type=1326 audit(1757400797.852:650): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15622 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3224.261584] audit: type=1326 audit(1757400797.872:651): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15625 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x0 06:53:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400}}], 0x1, 0x0) [ 3224.285467] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3224.287261] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3224.288107] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3224.289529] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:53:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:53:36 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x25}, {r0, 0x401}, {r0, 0x2312}, {r0, 0x20}, {r2, 0x4000}, {r3, 0x609e}, {r4, 0x9}, {r5, 0x404}, {r0}, {r0, 0x103}], 0xa, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000200)={[0x2]}, 0x8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup3(0xffffffffffffffff, r6, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000008100000022abd7000fedbdf250f00000008003300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40c0080) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003700000825bd7000fbdbdf25050000000d0095002f6465762f7372300000000008008c0006d71e74288ed66cf23a6fe40d2f23934e3070675abe4311918da25540380007e77d7b4893ab6794f4567d3416ef30b60bdb501082e1b06585a84a22eee9e3edc00477acdd85b8db432297065d072b94e55f4497e59f05027134926ddbd2455cdcea0696bfa3a24cb5", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20004850) 06:53:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) pkey_free(0xffffffffffffffff) 06:53:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x5}, 0x0) 06:53:36 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x68b42, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000400)="36ac5ccda109c20cef767ef6ec11461a62fbfda16dbba1fa4290f16593c859b2aca8ec7c40aa2a5f31ce4f996a1a8541b52112645805129b16c3367919b220c4d2c2e98337d70698e7a6e576295809afb8b3b47bf6b77f8826ffadfe825e27086c01234ffda06e67deecfdfeb374c88a2e5f8819c99edbf8f3f885", 0x7b) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x80010, r0, 0x10000000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x220480, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) r7 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x80, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) readv(r8, &(0x7f0000000380)=[{&(0x7f0000000080)=""/109, 0x6d}, {&(0x7f0000000100)=""/243, 0xf3}, {&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000280)=""/226, 0xe2}], 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x2, 0x3, 0x1, {0x0, r5, r7}}, 0x7fffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:53:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x1, 0x0) 06:53:36 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) dup2(r2, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x321483, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x400) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2ff877d45b1b18be89c109000000d81b00", 0x0, 0x7ff, 0x4, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x20, 0x4, 0xff, 0x0, 0x0, 0x25, 0x400, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x6, 0xea}, 0x4c012, 0x742897e1, 0x8d, 0x6, 0x10000, 0x40, 0xf94c, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x2, r4, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:53:36 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3243.328725] audit: type=1326 audit(1757400816.947:652): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15660 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x0 [ 3243.344208] audit: type=1326 audit(1757400816.954:653): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15659 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3243.378149] audit: type=1326 audit(1757400816.955:654): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15659 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3243.401127] audit: type=1326 audit(1757400816.960:655): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15659 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3243.406061] audit: type=1326 audit(1757400816.963:656): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15659 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3243.411813] audit: type=1326 audit(1757400816.963:657): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15659 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:53:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_free(0xffffffffffffffff) [ 3243.580621] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3243.582853] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3243.584238] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3243.586220] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:53:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x6}, 0x0) 06:53:52 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'btrfs.', '/dev/sr0\x00'}, &(0x7f0000000040), 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x880) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:53:52 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x1d, 0x8, 0x9, 0x7}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:53:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_free(0xffffffffffffffff) 06:53:52 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x40) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10) 06:53:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc05}}], 0x1, 0x0) 06:53:52 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x849, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = pidfd_open(r4, 0x0) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r6, r2, 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_free(0xffffffffffffffff) 06:53:52 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x735f, &(0x7f0000000440)={0x0, 0x8b7e, 0x20, 0x2, 0x394, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x439b, &(0x7f0000000180)={0x0, 0xebad, 0x2, 0x3, 0xe2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000003c0)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x10000000) r7 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x4, 0x1, 0x0, 0xe54, 0x1, 0x0, {0x0, r10}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x3, 0x2003, @fd_index=0x1, 0x68, &(0x7f0000000040)="fba049acd54402cce69196c760e7b9ea7dc856f87ee59abd1e2d8b73ca1e0fd758c5881da105c305847e8a653585d65cc9cce9fd4851ac3529c23810c6b5a304d651266ccab5f985554a603a8c1a859a2635d5f84481d0270a", 0x59, 0x9, 0x1}, 0x2299) [ 3258.890053] audit: type=1326 audit(1757400832.509:658): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.895091] audit: type=1326 audit(1757400832.513:659): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.906026] audit: type=1326 audit(1757400832.514:660): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.915771] audit: type=1326 audit(1757400832.521:661): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.929035] audit: type=1326 audit(1757400832.521:662): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:53:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pkey_free(0xffffffffffffffff) [ 3258.939530] audit: type=1326 audit(1757400832.525:663): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.951899] audit: type=1326 audit(1757400832.533:664): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.958660] audit: type=1326 audit(1757400832.535:665): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.963206] audit: type=1326 audit(1757400832.535:666): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3258.966317] audit: type=1326 audit(1757400832.541:667): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15696 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:53:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803}}], 0x1, 0x0) 06:53:52 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x100010, r0, 0x8000000) r4 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0x1, 0x0, 0x7, 0x0, 0x0, {0x0, r7}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x30, r0, 0x0) r10 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x20) syz_io_uring_submit(r11, r12, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r13, 0x0, 0x0}, 0x0) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0x0) syz_io_uring_submit(r14, r12, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r9, r12, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)="e5165fb22991845ec0951dfeb181d5e8ee80f9b457959f0ba073b1c614e8a9fa8f5749ac7977644ab377b14f310979501c18e92f2e376775fcb5f5a22f8879a0f89809a52fd6faf43be235baee87eeacf9aed97bdf062c72c0a736ceeb7f727d562f9635d0e3f1efc9091f4ce9e51399ce614928ce9071c11e118d47b407ed2cd1f40cfd4e96c7bacf6c5520ae38f2dea5a7e5b7b744ed375af941e1eed848c4858cb153e078a3a9176d1765dff42c927a24b62980c9", 0xb6}, 0x9) fsmount(r13, 0x1, 0x4) r15 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r15, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:53:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 1) 06:53:52 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0xff, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:53:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}}], 0x1, 0x0) 06:53:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_free(0xffffffffffffffff) 06:53:52 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r4) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x2278e98baf7cf08f) r5 = openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000000)) 06:53:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x7}, 0x0) 06:53:52 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0x4c080) signalfd4(r0, &(0x7f0000000740)={[0x5]}, 0x8, 0x800) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x468bc2, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000000)=""/193, 0xc1}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000580)=""/23, 0x17}, {&(0x7f00000005c0)=""/166, 0xa6}], 0xa) [ 3259.218649] FAULT_INJECTION: forcing a failure. [ 3259.218649] name failslab, interval 1, probability 0, space 0, times 0 [ 3259.220152] CPU: 1 PID: 15733 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3259.221022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3259.222023] Call Trace: [ 3259.222362] dump_stack+0x107/0x167 [ 3259.222823] should_fail.cold+0x5/0xa [ 3259.223297] ? audit_log_start.part.0+0x27e/0x730 [ 3259.223898] should_failslab+0x5/0x20 [ 3259.224372] kmem_cache_alloc+0x5b/0x310 [ 3259.224877] audit_log_start.part.0+0x27e/0x730 [ 3259.225465] ? audit_log_task_context+0x170/0x170 [ 3259.226050] ? audit_filter+0x5d6/0xb10 [ 3259.226554] ? __bpf_prog_run64+0xe0/0xe0 [ 3259.227088] ? audit_compare_dname_path+0x120/0x120 [ 3259.227710] ? find_held_lock+0x2c/0x110 [ 3259.228208] audit_log_start+0x5f/0x90 [ 3259.228699] audit_seccomp+0x5d/0x200 [ 3259.229160] ? lock_downgrade+0x6d0/0x6d0 [ 3259.229676] __seccomp_filter+0x669/0x1530 [ 3259.230204] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3259.230783] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3259.231388] ? wait_for_completion_io+0x270/0x270 [ 3259.231990] ? fput_many+0x2f/0x1a0 [ 3259.232439] ? ksys_write+0x1a9/0x260 [ 3259.232922] __secure_computing+0x191/0x2f0 [ 3259.233461] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3259.234122] do_syscall_64+0xf/0x40 [ 3259.234579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3259.235220] RIP: 0033:0x7f7600b12b19 [ 3259.235681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3259.237961] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3259.238907] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3259.239802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3259.240686] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3259.241568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3259.242453] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:53:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 2) 06:53:52 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x2, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x20, 0x0, 0x0}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2000, @fd=r0, 0x2, &(0x7f0000000040)=""/167, 0xa7, 0x14, 0x1}, 0x8) pwrite64(r1, &(0x7f0000000100)="f8a22d63824f9a65d8eec904c7053efaf54b", 0x12, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000003c0)) [ 3259.382958] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3259.384085] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3259.384871] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3259.385617] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 3259.386474] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 06:53:53 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3259.420700] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 3259.421882] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 3259.422658] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 3259.423415] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 3259.424256] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 3259.425379] Buffer I/O error on dev sr0, logical block 0, async page read [ 3259.426181] Buffer I/O error on dev sr0, logical block 1, async page read [ 3259.426977] Buffer I/O error on dev sr0, logical block 2, async page read [ 3259.427784] Buffer I/O error on dev sr0, logical block 3, async page read [ 3259.428583] Buffer I/O error on dev sr0, logical block 4, async page read [ 3259.429361] Buffer I/O error on dev sr0, logical block 5, async page read [ 3259.430160] Buffer I/O error on dev sr0, logical block 6, async page read [ 3259.430960] Buffer I/O error on dev sr0, logical block 7, async page read [ 3259.431929] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3259.434549] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3259.435967] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3259.438249] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3259.480631] FAULT_INJECTION: forcing a failure. [ 3259.480631] name failslab, interval 1, probability 0, space 0, times 0 [ 3259.482204] CPU: 1 PID: 15752 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3259.482999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3259.484110] Call Trace: [ 3259.484469] dump_stack+0x107/0x167 [ 3259.485005] should_fail.cold+0x5/0xa [ 3259.485451] ? create_object.isra.0+0x3a/0xa30 [ 3259.485977] should_failslab+0x5/0x20 [ 3259.486418] kmem_cache_alloc+0x5b/0x310 [ 3259.486883] ? auditd_test_task+0x11e/0x300 [ 3259.487395] create_object.isra.0+0x3a/0xa30 [ 3259.487898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3259.488552] kmem_cache_alloc+0x159/0x310 [ 3259.489154] audit_log_start.part.0+0x27e/0x730 [ 3259.489690] ? audit_log_task_context+0x170/0x170 [ 3259.490238] ? audit_filter+0x5d6/0xb10 [ 3259.490698] ? __bpf_prog_run64+0xe0/0xe0 [ 3259.491185] ? audit_compare_dname_path+0x120/0x120 [ 3259.491754] ? find_held_lock+0x2c/0x110 [ 3259.492225] audit_log_start+0x5f/0x90 [ 3259.492672] audit_seccomp+0x5d/0x200 [ 3259.493105] ? lock_downgrade+0x6d0/0x6d0 [ 3259.493581] __seccomp_filter+0x669/0x1530 [ 3259.494084] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3259.494711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3259.495360] ? wait_for_completion_io+0x270/0x270 [ 3259.495915] ? fput_many+0x2f/0x1a0 [ 3259.496332] ? ksys_write+0x1a9/0x260 [ 3259.496770] __secure_computing+0x191/0x2f0 [ 3259.497291] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3259.498066] do_syscall_64+0xf/0x40 [ 3259.498526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3259.499130] RIP: 0033:0x7f7600b12b19 [ 3259.499558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3259.501645] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3259.502520] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3259.503346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3259.504157] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3259.504972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3259.505904] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:53:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_free(0xffffffffffffffff) 06:54:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pkey_free(0xffffffffffffffff) 06:54:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401}}], 0x1, 0x0) 06:54:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x8}, 0x0) 06:54:06 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x1d4, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_TX_RATES={0x154, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x8, 0x4, 0x8, 0x0, 0x7ff, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x2}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x5}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x3}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0x8}, {0x4, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x4, 0x8}, {0x0, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x4, 0xa}, {0x1}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x7}, {0x3}, {0x5, 0x9}, {0x2, 0x3}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {}, {0x1, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x1}, {0x7, 0x9}, {0x3, 0x4}, {0x3}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x4}, {0x1}, {0x1}, {0x0, 0x4}, {0x5, 0x8}, {0x1, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x7}, {0x5, 0x1}, {0x4, 0x7}, {0x6, 0x6}, {0x1}, {0x0, 0x5}, {0x7, 0x5}, {0x5}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x8}, {0x2, 0x2}, {}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xffff, 0x4, 0x3, 0x2, 0xddea, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x63d3, 0x4, 0x6, 0x400, 0x2, 0x9, 0x80, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x2}, {0x3, 0x7}, {0x7, 0x5}, {0x4, 0x8}, {0x3, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x5}, {0x2, 0x9}, {0x2, 0xa}, {0x5, 0xa}, {0x5, 0x5}, {0x5, 0x4}, {0x1, 0x8}, {0x1}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x9}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0xa}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x3}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x5, 0x8}, {0x5}, {0x5, 0x9}, {0x7, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x8}, {0x1, 0x4}, {0x5, 0x2}, {0x5, 0x9}, {0x2, 0x2}, {0x1, 0x2}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x9}, {0x3}, {0x0, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x200, 0x3, 0x6, 0x7, 0x2, 0x1ff]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x1, 0x8, 0x9, 0x2d, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x5, 0x9688, 0x800, 0x1, 0x61be, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x3, 0x2c, 0xc, 0x0, 0x9, 0x30, 0x4, 0xc, 0x3b, 0x2, 0x3, 0x2, 0x48, 0x18, 0x1, 0x12, 0x0, 0x30, 0x18]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x104, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x30, 0x48, 0x9, 0x18, 0x4, 0xc, 0x1b, 0xb, 0x3, 0x36, 0x19, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x1f, 0x400, 0x9c, 0x8, 0x40, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x2, 0x40, 0x8, 0x1, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x1, 0x7}, {0x6, 0x4}, {0x4, 0xa}, {0x7, 0x8}, {0x6}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x9}, {}, {0x4, 0x2}, {0x4, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x6, 0x1, 0x17, 0x1, 0x3, 0x2, 0x36, 0x16, 0x1b, 0x24, 0xc, 0x2, 0x6c, 0x4, 0x1, 0x5, 0x30, 0x6, 0x16, 0x6, 0xc, 0x48, 0x4]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x2}, {0x6, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x6, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x5}]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0xb}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x38}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x87}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xadef}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004084}, 0x4000) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000c00)={0x0, 0xfffffffffffffffc, 0x11, 0xff, @buffer={0x0, 0x2a, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:54:06 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendto(r3, &(0x7f0000000040)="f584aba79f64e089c4a5e4af92cc40aaab6c33dce8fa39587edfd021d9e379e6224bc70c", 0x24, 0x4881, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x3, 0x4, 0x0, {0xa, 0x4e21, 0x40, @mcast1, 0x9}}}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2efd2c4cc0b052a0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x1, 0x7f, 0x3, "d92f6126a174de922fbd2cc8c6f9169a53d0fbb17d7456eaaac804e176a93f0199877c9e9f8f021dac0d0abe7cff24486e4f62ab48c940fcc48f6247912e3f", 0x5}}, 0xc492) 06:54:06 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7f}, 0x0, 0x0, 0xb4, 0x2}, 0x0, 0x2, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000000)='./file0\x00', 0x189000, 0xc) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:54:06 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 06:54:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 3) [ 3272.853843] kauditd_printk_skb: 29 callbacks suppressed [ 3272.853864] audit: type=1326 audit(1757400846.473:695): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3272.863615] FAULT_INJECTION: forcing a failure. [ 3272.863615] name failslab, interval 1, probability 0, space 0, times 0 [ 3272.867083] CPU: 0 PID: 15784 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3272.869041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3272.871348] Call Trace: [ 3272.872083] dump_stack+0x107/0x167 [ 3272.873102] should_fail.cold+0x5/0xa [ 3272.874169] ? __alloc_skb+0x6d/0x5b0 [ 3272.875263] should_failslab+0x5/0x20 [ 3272.876347] kmem_cache_alloc_node+0x55/0x330 [ 3272.877601] ? trace_hardirqs_on+0x5b/0x180 [ 3272.878811] __alloc_skb+0x6d/0x5b0 [ 3272.879846] audit_log_start.part.0+0x2a3/0x730 [ 3272.881029] ? audit_log_task_context+0x170/0x170 [ 3272.882205] ? audit_filter+0x5d6/0xb10 [ 3272.883179] ? __bpf_prog_run64+0xe0/0xe0 [ 3272.884195] ? audit_compare_dname_path+0x120/0x120 [ 3272.885401] ? find_held_lock+0x2c/0x110 [ 3272.886405] audit_log_start+0x5f/0x90 [ 3272.887369] audit_seccomp+0x5d/0x200 [ 3272.888304] ? lock_downgrade+0x6d0/0x6d0 [ 3272.889314] __seccomp_filter+0x669/0x1530 [ 3272.890354] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3272.891498] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3272.892681] ? wait_for_completion_io+0x270/0x270 [ 3272.893860] ? fput_many+0x2f/0x1a0 [ 3272.894747] ? ksys_write+0x1a9/0x260 [ 3272.895684] __secure_computing+0x191/0x2f0 [ 3272.895741] audit: type=1326 audit(1757400846.481:696): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3272.896735] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3272.896758] do_syscall_64+0xf/0x40 [ 3272.901303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3272.902550] RIP: 0033:0x7f7600b12b19 [ 3272.903470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3272.907815] audit: type=1326 audit(1757400846.482:697): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3272.907948] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3272.912169] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3272.913913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3272.915671] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3272.917407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3272.919169] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3272.921145] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 06:54:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0x0) 06:54:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_free(0xffffffffffffffff) 06:54:06 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3272.923068] audit: out of memory in audit_log_start [ 3272.930476] audit: type=1326 audit(1757400846.548:698): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7600ac569c code=0x7ffc0000 [ 3272.933969] audit: type=1326 audit(1757400846.548:699): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3272.939861] audit: type=1326 audit(1757400846.549:700): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7600ac572b code=0x7ffc0000 [ 3272.943627] audit: type=1326 audit(1757400846.549:701): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3272.947022] audit: type=1326 audit(1757400846.551:702): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15775 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:54:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 4) 06:54:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x9}, 0x0) [ 3273.094740] FAULT_INJECTION: forcing a failure. [ 3273.094740] name failslab, interval 1, probability 0, space 0, times 0 [ 3273.097383] CPU: 0 PID: 15803 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3273.098892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3273.100670] Call Trace: [ 3273.101235] dump_stack+0x107/0x167 [ 3273.102015] should_fail.cold+0x5/0xa [ 3273.102835] ? create_object.isra.0+0x3a/0xa30 [ 3273.103819] should_failslab+0x5/0x20 [ 3273.104633] kmem_cache_alloc+0x5b/0x310 [ 3273.105499] ? kmem_cache_alloc+0x159/0x310 [ 3273.106430] create_object.isra.0+0x3a/0xa30 [ 3273.107379] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3273.108482] kmem_cache_alloc_node+0x169/0x330 [ 3273.109461] __alloc_skb+0x6d/0x5b0 [ 3273.110254] audit_log_start.part.0+0x2a3/0x730 [ 3273.111259] ? audit_log_task_context+0x170/0x170 [ 3273.112295] ? audit_filter+0x5d6/0xb10 [ 3273.113164] ? __bpf_prog_run64+0xe0/0xe0 [ 3273.114060] ? audit_compare_dname_path+0x120/0x120 06:54:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_free(0xffffffffffffffff) [ 3273.115141] ? find_held_lock+0x2c/0x110 [ 3273.116157] audit_log_start+0x5f/0x90 06:54:06 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3273.116999] audit_seccomp+0x5d/0x200 [ 3273.117859] __seccomp_filter+0x669/0x1530 [ 3273.118805] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3273.119832] ? __switch_to_asm+0x3a/0x60 [ 3273.120705] ? __switch_to_asm+0x34/0x60 [ 3273.121584] ? __schedule+0x82c/0x1ea0 [ 3273.122448] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3273.123452] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3273.124638] ? ksys_write+0x1a9/0x260 [ 3273.125473] __secure_computing+0x191/0x2f0 [ 3273.126429] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3273.127605] do_syscall_64+0xf/0x40 [ 3273.128403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3273.129517] RIP: 0033:0x7f7600b12b19 [ 3273.130333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3273.134338] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3273.136009] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3273.137561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3273.139121] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3273.140689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3273.142239] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:54:06 executing program 7: sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000008000100000000000000000700ffff060002408847000006000240888400000600024088480000060002406004000014000480080006400000000308000940000000080600024088be0000dafe34689678b7376aff792f61776f014c60ed3ed14277dc8a614695921c7b33eeb1ecc1ae38f178dae758f1fcbc04d409484d1903703a97efe7af38fc6cb8a8333510b66257a438341b291f01002f"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) sendto(r0, &(0x7f0000000c80)="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", 0x1000, 0x48880, &(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3f, 0x7f, 0x81, 0x3d, 0x3, 0x3, 0x2, 0x65, 0x40, 0x6f, 0x7fffffff, 0x8000, 0x38, 0x202, 0x6, 0x80, 0x8}, [{0x2, 0x5, 0x1, 0x4, 0x5, 0x9e, 0x7, 0x1}, {0x4, 0x8, 0x5, 0x3ff, 0x3, 0x100000000, 0x1, 0xffffffffffffff73}], "90f9914f571556cac9b527119f5197f5218a69891a3066730e09a1aaa9ec318dfb9f221cb0100ded6807581ac882acfad8af4523f26e46c9fc7dce0c0fa2a7d97fe9582fadf31f5bf7e582bc14e9b6e7a0fa8fb112c322b3f5007017cd31327b8fb7b8be156a73a982f4a5e24d0af516ab8fc0396e36dbd72c78fbf76faf9dcaba1cbb86a93477b1c17c9c3bd16a63cb18e548826219e9ae4122c211c9dae82515668dc29083197c5bf06299e7289ef829bda299083e70501b61b51f71f617aaf08bc6f8d07c66c58e16535bd04ba36dea83f4baf5f537a2fb59e9140a9b56aca2", ['\x00']}, 0x291) r2 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x2, 0x3, 0x1, 0xb8e, 0x0, 0x59f6}, {0x40004, 0x1f, 0x401, 0xb, 0x20, 0x5}], ['\x00', '\x00', '\x00', '\x00']}) 06:54:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}], 0x1, 0x0) 06:54:24 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9123}}, './file0\x00'}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x200, 0x0) 06:54:24 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0x6b, 0x0, @scatter={0x5, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/210, 0xd2}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/220, 0xdc}, {&(0x7f0000000000)=""/209, 0xd1}, {&(0x7f00000003c0)}]}, &(0x7f00000002c0)="e089be21f25de47d8ab79ddbae7474c999f12e15172e285fb726569855c30bd6af754939202a6effa75d4d6f6aa99e49089906de6a3935f4e2abf45fd32565f45a84455631db3dce570a9cda348cdaa9bb8479b64efe06883ea1886b581ae5cb5d0ae7c4f7d9acb96022f1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:54:24 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x5, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000e, 0x4010, r4, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:54:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 5) 06:54:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0xf}, 0x0) 06:54:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_free(0xffffffffffffffff) 06:54:24 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f1000000071080000c10a3d3ab1d8a61b", 0x0, 0xfffffffd, 0x0, 0x0, 0x0}) [ 3291.058335] kauditd_printk_skb: 9 callbacks suppressed [ 3291.058354] audit: type=1326 audit(1757400864.677:712): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3291.073572] audit: type=1326 audit(1757400864.687:713): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3291.078916] FAULT_INJECTION: forcing a failure. [ 3291.078916] name failslab, interval 1, probability 0, space 0, times 0 [ 3291.081997] CPU: 0 PID: 15844 Comm: syz-executor.6 Not tainted 5.10.242 #1 06:54:24 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3291.083753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3291.085951] Call Trace: [ 3291.086624] dump_stack+0x107/0x167 [ 3291.087545] should_fail.cold+0x5/0xa [ 3291.088505] should_failslab+0x5/0x20 [ 3291.089469] __kmalloc_node_track_caller+0x74/0x3b0 [ 3291.090712] ? audit_log_start.part.0+0x2a3/0x730 [ 3291.091931] audit: type=1326 audit(1757400864.698:714): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3291.091951] __alloc_skb+0xb1/0x5b0 [ 3291.091978] audit_log_start.part.0+0x2a3/0x730 [ 3291.098015] ? audit_log_task_context+0x170/0x170 [ 3291.099190] ? audit_filter+0x5d6/0xb10 [ 3291.100165] ? __bpf_prog_run64+0xe0/0xe0 [ 3291.101178] ? audit_compare_dname_path+0x120/0x120 [ 3291.102384] ? find_held_lock+0x2c/0x110 [ 3291.103389] audit_log_start+0x5f/0x90 [ 3291.104331] audit_seccomp+0x5d/0x200 [ 3291.105271] ? lock_downgrade+0x6d0/0x6d0 [ 3291.106291] __seccomp_filter+0x669/0x1530 [ 3291.107319] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3291.108476] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3291.109674] ? wait_for_completion_io+0x270/0x270 [ 3291.110868] ? copy_kernel_to_fpregs+0x9e/0xe0 06:54:24 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) bind(r5, &(0x7f0000000040)=@can, 0x80) [ 3291.112010] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3291.113400] ? ksys_write+0x1a9/0x260 [ 3291.114343] __secure_computing+0x191/0x2f0 [ 3291.115409] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3291.116737] do_syscall_64+0xf/0x40 [ 3291.117648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3291.118906] RIP: 0033:0x7f7600b12b19 [ 3291.119837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3291.124351] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3291.126226] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3291.128001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3291.129762] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3291.131528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3291.133285] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3291.135640] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 3291.137560] audit: out of memory in audit_log_start 06:54:24 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 3291.147513] audit: type=1326 audit(1757400864.766:715): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7600ac569c code=0x7ffc0000 [ 3291.153332] audit: type=1326 audit(1757400864.766:716): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3291.157823] audit: type=1326 audit(1757400864.766:717): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7600ac572b code=0x7ffc0000 [ 3291.163253] audit: type=1326 audit(1757400864.766:718): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3291.168896] audit: type=1326 audit(1757400864.766:719): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15834 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:54:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0) 06:54:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 6) [ 3291.235445] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3291.237244] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3291.238210] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3291.239814] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3291.301830] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3291.303554] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3291.304470] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3291.305954] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:54:24 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)) 06:54:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0xf0}, 0x0) 06:54:25 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x0, 0xfffffffffffffffe, 0x11, 0x0, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/148, 0x94}]}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x381400, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={0x20ac, 0x32, 0x400, 0x70bd27, 0x25dfdbfe, {0x17}, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="6bd0bf114826f908aaeac504356ea8bc60b741f33b9f7d61bda6cba33cd9ca4485436604b5ad07eba6c689fb9a19d8201ca0aeb81cf7cea8", @generic="588f95eacee41ddf133fb467b44609e67f7c0967a1b6d720cdd574de9da02c16b7caac27637ab4d01270a11444763f35af5880b2067aefebee08c8fdb5908e2bb66f71a450546b4784d4e40985515a862ad4a5546f088e4ee36e4b820cfed4f332dda25e2131a013217ec42e62c4ce09f7edc7b1901463cff72f0d90defe0f19bf21cbf713a63371c3d562edd96940ed213eb7c2041e87d4e7aca13ec9f40384ea693763c548c79056042a1940bccfdc8b6601a2924deda53a9cf6d1591db652462f4388fcd00388ddce9000ba8f86a0c829cc379f63fac03da42724351e8fc4ff317ebb08a7376e303acace728aafe1817ce04823fc9705fe800edc20d392c0649f3d769f5e803a7cc68622d88cf7a49342ae01bf247a796bc16d3d7d9db32a48f5fae459cb44c95f01b384f95f1d093ca39c9a9c9b6aea860e7854fddf912840ca27416f46a5f69c0c74ef4c9fc2bd76158625ed0d283b3c2c26cd824090bd57345407855ad017d283b7699dab880703a87b24198bf4b0a0decccafa9f3bc3541b6014de95d13a262f78886eca84d274a60749fa278cc4ad1cfcd496b569cb13d5a8121f65dc7a7afea967500282e67ce0974402eaa4594dcafe174d45725a7d16894d39994ad533bcc72352568ae0fdf8946cd1ba0e97db67164355bb92b8e08c59e1db9e47579c036fb308e747ac1266d6c5c42db95a65270557ee43de0fe53410fdf05f1efbd74f2de067135643627ba55487806f5625f65d47c078e321b59cdde76d8fe38cc191bb75e76863b85fb79db645100d3804ff7e1542a02ac146156ee020e0026e9f331564fac4698cc35aa2475e10f55e1394db1cdc3f211b4d0b0055090aed3b7af094db138c27103a609bf6bd5c7a9dec4761540acac13fd1afcfdf9fce5b072042f211403ad4eb1bd4cd668fce80c042ef2d2d19fdf63b41e54a579d656e109992258226f13b949fb929171aaeb3c0e9c681b66525f5b5c31e3eb976a2fec6d712f860db1b4f6a4845c71a629d694104414ca621626f4901c8f0a813052bd26d3e55efac95a8b4f6974e5e0063732e043d4139a80b6c311549c99c0e8cbd0f5e8f404513bd206975e6d6a34add045998ce2087fe1d659c73a504a2248b094c25b5f618d74719ab4a82d37d4a674f2130e9b6f094762d62e9de72a55e7d7e3e72cfcdf1a0f181ac3e265e92dcb7e600eeae1036388d84ce2b01d042a5de4a722599b7b4a9d3e3b45dfb0dc079838458fde82d1278c7b670053445f5c10226da9e9fcb5bb427d3fee36e4a6c7a09b9e1169996f0f0d16315b542163dad35c51dcdb7de79ccdbba6c51c80a3765c6a1aa3dbf5fa8c3b6ae93c8f4c0af72ebc58643a02f1f61ed2cf95d3f4358446a529fa4a4dcf30017dfa385a95aa5af34d78f707dcabb71a635e3ef0812ebcf9fcad9ee6912eca51661bc899faa6ec3dcddee2dada5923c2af2e812ad8dcc86b3e50bd95ca78e8a85189d80ff340f3d95b2381560f173dd88fd62950712d65c3222e5b33bf94bd369fff938a463af1b91beec24a09dbfd8db233fc8c0a437d317d7e4657726bb347e0066e14e244ff1fbb3bd501c8f78498ed0e649d15557c314356f6883e0772c8cf499503ae37a4f5d0f45eab85e147adb801628a2eb8a06ce3a2bd91db40dfcdfe91914524f6b4c7c7859152cfe91b45a5d266f588a744da394d8b1a8d4bbb8edf60878521d144252021c9bd29b7334eac6e9f364ea7e0ced89b2cea5f539e9232dfea92c1ee3279f7273e196b51c2dd402fa775310e97430f41a7e9daae3b867e276c93a60b0513eb0636b14eb38dde0aa0176b3b7c41d779cc7b4af630ab832dfb6075166036e8479bd1dd2bd83aadaef61e3481996ada6d6b77a620713d64cd2ff2b85af25dc88059023082ba6e07c1ef690870263128fc0c22a66da45cb440d3888925db3c491273573a5bc397954e8764db7f26f2df6544b8b70a38e96af2a438c4e7379e3cc615b255e9cb7bf46383f1b24b72de19f7e402fa0a9f38ba83e69f59a484a07840cacfaa70e54ff7d8b274072e42b23337d67072662361e392889283f9a30529815b971685c7d8e9ca2540486129698c7aa0004c8e4133aeb5bcb1e385aac8032c728519901aa61bc21116cf49998ede181880d7886a6ed91e9b73d8d90be1f394dc2d15d1777bf73d4343ed372c576f2e9ee23cbbdafee8c7373f5376229b0e3fee068e4cec5f8e42b3cf54baaaa6ec1241d62f9c6be9a897d750a3deec9cb84364735441d78b90b30c2073e707fc5a661f3fa35f4d0bc4139a8953bf6c640f07dee70cff91670bd2c20e5155ee466aa9c01921b3347be91f2687581c72f04e02e69ab7ce481169412c04b9f24d0ac06b214971ea97021bf3f70e37fd3d3bfa08ba3e0cc5f81ceaee7062a99d21c61de687124206342d3ffe46c7564c2d626d6f0cd83979eacc5ee1f725b7d975e4488087d3d52e089098235f28fe70061f3a70c94b863dd5fefba01836e09c3607bba5ea04506a7fd894ad53564bb5fe615653a97b40b093b004bb75810c702de61b311fe6ba518d065b67b4d865ce8b518780e84c0be3ef299b57567d8e0b56e163995cc855e1eb7e825e2d569132ed24ae03505b31715f4929d83f4c91a2662f9bf9eb5e5df28d5e09c81f9fd67eec1bd760acd08e66ed2b16742af5b4cff143ddcb7329dd3d9b1494f7333714c19cc69df67b9d3509fdd21aef2d5b08f1874d6da97a8cbb390bacde9933d45fbc50158b196d51dc3c58aec3fb5d0f8e6e2e6637f62b509bb122ac5dbe76f98874d96ad8914dc17e15adc96bb76322467d3efcc7b227c3e2725345bef32acc0cff77a2ba6e42ddcd9099fcf41c251164714e20071e83c35625669072d24f71eb753cae588675848535ba67b157215a849e7821992cc42bd1641287428d5df98aaf75476776c8267c822a76d070a7fd398f2807cc378134ca5d279ddf58093a0328d36a0de62e766860880740a374fc903ac1cb3cb68427e3abd03857c55c1825ad8459b46827013fd57e749b4d0c0cd6f2d64b4a7652e98c5955c5e25db38e7bd75b0f73cbd1f166b99d296748c687f1cf6878e8dfcc9b3990e3a669f24fd129f58e3f90c22cdede82b4ac5feac9a7bb67a8ba8b9a5900b129382cc25e84a0beeac23d6e06dd28403d282e8f1fbcd85f76bb340498aa7f84b29196e8824ecb3ec97d7cffbe4cef922a83cc96db07d4be59fa380ddba7b4c86492b5e0fb2a6d0ea1ad3828c15c90895e32418ee344e91f1d3b5a94dfa8b79ab962ea65f82e77a6a1f0e59096050d95cc20616949a305d30093cdd7ef5aad447512c29a3fa9967d4f9e628895831762a04c234df79ef9d639208f0fe7fa7ed0d8491ca493f9b0a28e9c282ed631d4d8875be4f3cd5658884383af9ac45ed162bcdbd9dc401561db52546ddc22b26ecd6b82f12d48cb3199c2c8ce98d08427e352382f7794af67cadee4168c392b0e1c88da1d7ea93ed17390152a397c107ad15be0be647f8a90269783801b286ae7679e444e90fd543970b03ea008d130aa65eb51bd25b256d199fc4d492a8035ef797294ac8615ed57bcc606db267a4af8189dd76255caaf67811e6f75417b2d83e1111356b14e0aa8cb3d07d53e4411f841ac0a800ff5ecdd6de87803ebe2a116cd3872dea1d91a64f4d59eb897b869e78ff911ef648405bff54ab34e2c1acd183dee7216eecf411e07bb6fa5810c58d93cd930cef58d697a6f12e77905857c7fb49b4ffa63d5fe7e4f1ab02554e3020348fb0e9e6241c6e1080d9afb1652fadb539d23bc4a744d5ef0f35a10956d577cbbf50952493682ce5a6d2cd6b4c746ec986b5978c2ec813f928caa20dd00611eb9fcc121d2cab1647f07f9c982508d50504fc07bfb708c51930ce2ddf67e11f740bd6436ac448bc010dbbfa27bdad2a7640304c905ec4a58a102652618f72b6f806d190e9ec5e7074d4af597ad5349198acd3a375d2f726acf39c8eb1faa7bdead294dd5b535feb9939d6a65ec0b7c622569da89afccde4c44191c8cac965235c96ecf6b60f094592e72529e76d497fc1203b5a8ba7c68c409ef72c129d3df958cc0a46312092c4fbfb4f38876dd9ce2377f2abfb24a7678979a7d7c58ae3d17291775b5f2824d9520300040cb59f0a7df796c67d8154799e19bdb72ea60f04f50765fcdebf41aba9e9f55e2a61884ca2d08184749d82069078aec3cceaf3627c4e1780e1cbcad33be2ea4c9070ee5399605d1b4ff391349b802a7849de131e00d3c19accc10e257b3e76acef0a8ecdf62c3ae817f67861592d99a5882f002b5f99c228c5da55405278518e16f43f537f85a7a97a7dda76aa752652f13bdde1a757b8baea6d7bfa90252c9e4138a81e37cf177dec3197f6f79d24d63472cb5e24d8726f04c06ae68388162371ce275cba85e0b55714e48511f355d8908b1dca099e9761b7369d3e9d27964c43c4757c0b6902755b11cb1f78cc79a21dc88c5ee9e31ff2ab5af27d4511fae696f09b50a5fabe6278f1cf7427acef897f925417090e158d0fbedc53cd494ea079db7893e3dc29d3e9d2d022275fe34d6ef0ef1c1935dc71dc4a3528f7bef03e1c23b2eeab314dbebd40b3aec5e7e5409bc09122e3494a43406c61a1b57530dcde798bc857d30e86411197fd35b1e07f02c5825a8d46c15f7b80235d072cfb05f1fd9dcab114304e578ded4f691d1a5e5f1c062bf24c98c5d5269422662912bf78f911e2e6a35f7871f332942a5f520b0523571c290d13814235ee9803b3984b93e29c429e552403cec865f4f7aadb78b3e3841f628c15caa1b5845959c14dcfadc51cb677dc420c33ae5d4a323ab64846eb82604e9f475ec8bafd65584e73d763d48fafb5868bbaef783eb6bfd6d9c4affb13f8e692f074718136615c4dd5d6f7c91215384568a134d54b1df2c475603db6d4d05fed235af47b97cc1d77986bbb48be12930be1d89584b1bea29e96b6c900f5247f238cace6e21a06b2c5ebf1f53bca0e197910c8c594e5ffbb722c5f82ee7e80d0bcd0ec4683bd41e62a0f0be18b12252a0eca36fdfd86b3d6b6f0c7efe55f1a18c994111a216129315469abce4d709f8b5067e8b8675b30a391a15c9d8b1711b5a73e2c3a8018aed3a00b421693f04d4964f52b78ba9648c69d58207b940dfbdb617de9dd2309b86d4839f26df33704a50a3590487c2b2ecf80143e0b8aa6c30d2f972c7aafa9ed705ed8f880ef09b930651d34905fb0f4027d25a84a2f33b48728f6907a595fc23fd6fa4b92d658ce7ec747478856064854b125666114931bb4d0a720d7d114e9448911b925b332df3962627e6cc09a0f999619b53447a6a8f5b2fe8d328702f7cf9c842ca665509a1f3e86059db55742b2a24e6b834952d41c2e062087a1e8b2490912a53afa81615df990b9bf16a5e5a0ca787dfbd0a72c5b077fa78033267e72c6f50ceaa1d30b4b65875252ced026101794056b5f7053e9d694a854190810a5d36d80d629546ee5c32e7f3dd17d4d5fb3200e0899ed7e940ac371ab9b189d74c1a24a1d195ebf100cb0d477cb7273d588a7990e731e2a503ecf0bb7dd9e9258e2408d381c6c8c676da70920ad44d34cc26add1bd80c32c643e65f697ef8b4a89ac8b98ae671d209ac2bc458e04e566d1b4fad2f17f6bb5b9492e8fd0db0600aa280d22b7ecb0af8f6dddbce341b4623fad158a4a714817f81c12b386a25f35e0c6e7d89c3f65c2e816ded06703ec2cda9613427ba5d372c0fb2f786d417b3", @nested={0x104c, 0x73, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x401}, @typed={0xd, 0x7, 0x0, 0x0, @str='/dev/sr0\x00'}, @typed={0xc, 0x54, 0x0, 0x0, @binary="8a40366d89cdf99f"}, @typed={0x8, 0x75, 0x0, 0x0, @fd=r0}, @generic="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", @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@remote}]}]}, 0x20ac}, 0x1, 0x0, 0x0, 0x20000040}, 0x2405c800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3291.416911] FAULT_INJECTION: forcing a failure. [ 3291.416911] name failslab, interval 1, probability 0, space 0, times 0 [ 3291.418880] CPU: 1 PID: 15870 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3291.420021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3291.421374] Call Trace: [ 3291.421808] dump_stack+0x107/0x167 [ 3291.422403] should_fail.cold+0x5/0xa [ 3291.423025] ? create_object.isra.0+0x3a/0xa30 [ 3291.423777] should_failslab+0x5/0x20 [ 3291.424398] kmem_cache_alloc+0x5b/0x310 [ 3291.425062] create_object.isra.0+0x3a/0xa30 [ 3291.425776] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3291.426604] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3291.427435] ? audit_log_start.part.0+0x2a3/0x730 [ 3291.428241] __alloc_skb+0xb1/0x5b0 [ 3291.428844] audit_log_start.part.0+0x2a3/0x730 [ 3291.429603] ? audit_log_task_context+0x170/0x170 [ 3291.430386] ? audit_filter+0x5d6/0xb10 [ 3291.431042] ? __bpf_prog_run64+0xe0/0xe0 [ 3291.431734] ? audit_compare_dname_path+0x120/0x120 [ 3291.432547] ? find_held_lock+0x2c/0x110 [ 3291.433220] audit_log_start+0x5f/0x90 [ 3291.433850] audit_seccomp+0x5d/0x200 [ 3291.434469] ? lock_downgrade+0x6d0/0x6d0 [ 3291.435140] __seccomp_filter+0x669/0x1530 [ 3291.435832] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3291.436584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3291.437361] ? wait_for_completion_io+0x270/0x270 [ 3291.438157] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3291.438905] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3291.439789] ? ksys_write+0x1a9/0x260 [ 3291.440408] __secure_computing+0x191/0x2f0 [ 3291.441111] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3291.441975] do_syscall_64+0xf/0x40 [ 3291.442576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3291.443403] RIP: 0033:0x7f7600b12b19 [ 3291.444019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3291.446994] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3291.448237] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3291.449393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3291.450540] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3291.451699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3291.452853] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:54:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:54:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x18b}, 0x0) 06:54:38 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0xfffffffe, 0x0}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000300), 0xe5e4, 0x284000) io_submit(0x0, 0x4, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000000)="4c4feca12dfcb0ecdb5babb640db3a2818ef635de1c852053f3d403f204665286077a1baaaa862a30b22d63d6d8581f8b433eb7b36357f4332264300577eab075ef8ef1e7dfe378b826695d3b9503da89d29d73145ce290a07e45e41f2ba", 0x5e, 0xa9, 0x0, 0x2, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x2, r1, &(0x7f00000000c0)="ba4e20ba035df97fd471353aa3a59c907a28a00d552c3c6b2ce20c64684fefcd99d08fc83912a157f9024426b330078e4de319101f04d2b5406a2650278a24108439ecaf662ef3956a8a8f8854c710a6a715597102d74b0d1e5224365ad8c03e91104fe19db679225ea6c9a019a291dd9e5270a0acd0778c5cb79ef850040256acf8216c78f12ab922563b9f753d7767a46bdb07529321ee3b2f7d7700ec0c4f381d819e321a95f80662d3111e8de2e923fd1d7154aa869da749363b7fa7c2c081b29cf6071013ed56b4fb7738e1b11c10b972db7c8e30cf1a1340266f92c7adbdd6e7", 0xe3, 0x4, 0x0, 0x0, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x3, r4, &(0x7f0000000200)="22b655d7de9b12b75536723fb957bbe8b747fc1cfb26b12eba92b6225989106c59f8b35277f771eb5d725141efe55e264a70dd56192ca6ce5b088ff0c2474e6bb9936845c737bee4bd0813953a74a27158ac85c30ef83e484216f8c14d783ad8448cbc444577c03594ab96642e9622bc03296e14", 0x74, 0x8, 0x0, 0x0, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3ff, r6, &(0x7f0000000340)="451e79e6ffe22629af9052cb07620f6b1033ff9b0cd3c9e65f500354f691649d6683a491d6b89b464516b38f74efb04017927a4e929801916087c500ce0d807e16a92ab0f104926b53cb14172337bf31fdd2902f1ff87329f07aee31228905123af09545a2238d2478e1c74dcecb61fe850c", 0x72, 0xfff, 0x0, 0x1}]) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:54:38 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000080)={0x0, 0xf2bf, 0xa, 0x2, 0x8}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:54:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}], 0x1, 0x0) 06:54:38 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = epoll_create1(0x80000) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x7e, 0x6}, {0x1000, 0x4}]}, 0x14, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @scatter={0x3, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/158, 0x9e}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f00000003c0)=""/189, 0xbd}]}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000080)={{0x27255eda, 0x4}, 0x100, './file0\x00'}) 06:54:38 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/208, 0xd0}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/119, 0x77}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/46, 0x2e}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000780)=""/240, 0xf0}], 0x3, &(0x7f0000000a00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000b40)=""/176, 0xb0}, {&(0x7f0000000c80)=""/132, 0x84}, {&(0x7f0000000940)=""/2, 0x2}, {&(0x7f0000001d80)=""/75, 0x4b}, {&(0x7f0000001e00)=""/100, 0x64}, {&(0x7f0000000980)=""/57, 0x39}], 0x6, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002040)=""/134, 0x86}, {&(0x7f0000000d40)=""/17, 0x11}, {&(0x7f0000002100)=""/57, 0x39}, {&(0x7f0000002140)=""/165, 0xa5}, {&(0x7f0000002200)=""/17, 0x11}, {&(0x7f0000002240)=""/64, 0x40}, {&(0x7f0000002280)=""/158, 0x9e}, {&(0x7f0000002340)=""/151, 0x97}, {&(0x7f0000002400)=""/105, 0x69}, {&(0x7f0000002480)=""/159, 0x9f}], 0xa, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f00000026c0), 0x0, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002740)}, {&(0x7f0000002780)=""/1, 0x1}, {&(0x7f00000027c0)=""/5, 0x5}], 0x3, &(0x7f0000002840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000002a00), 0x0, &(0x7f0000002a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000002a80), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/111, 0x6f}], 0x2, &(0x7f0000002bc0)}}], 0x9, 0x10042, &(0x7f0000002e40)) r3 = getpgid(r1) perf_event_open(&(0x7f0000002fc0)={0x2, 0x80, 0x1, 0xea, 0x7, 0x1, 0x0, 0x7, 0x30012, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffeffff, 0x4, @perf_config_ext={0x0, 0x794b}, 0x40200, 0x4b6, 0x7, 0x9, 0xfff, 0x0, 0xb3, 0x0, 0x8, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2011000, &(0x7f0000002e80)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@access_client}, {@access_uid={'access', 0x3d, r2}}, {@access_user}, {@cachetag={'cachetag', 0x3d, 't#),{%[/\\#(.(.'}}, {@posixacl}, {@mmap}, {@fscache}, {@access_user}, {@version_u}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/sr0\x00'}}, {@appraise}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:54:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 7) [ 3305.126580] kauditd_printk_skb: 9 callbacks suppressed [ 3305.126601] audit: type=1326 audit(1757400878.745:729): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3305.140308] FAULT_INJECTION: forcing a failure. [ 3305.140308] name failslab, interval 1, probability 0, space 0, times 0 [ 3305.143648] CPU: 1 PID: 15900 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3305.145617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3305.147796] Call Trace: [ 3305.148489] dump_stack+0x107/0x167 [ 3305.149452] should_fail.cold+0x5/0xa [ 3305.150452] should_failslab+0x5/0x20 [ 3305.151440] __kmalloc_track_caller+0x79/0x370 [ 3305.151527] audit: type=1326 audit(1757400878.755:730): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3305.152535] ? sidtab_sid2str_get+0x17e/0x720 [ 3305.156111] audit: type=1326 audit(1757400878.758:731): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3305.156487] kmemdup+0x23/0x50 [ 3305.156515] sidtab_sid2str_get+0x17e/0x720 [ 3305.161029] ? audit_log_format+0xca/0x120 [ 3305.161973] sidtab_entry_to_string+0x33/0x110 [ 3305.162956] security_sid_to_context_core+0x33c/0x5d0 [ 3305.164106] security_secid_to_secctx+0x72/0xc0 [ 3305.165213] audit_log_task_context+0xf0/0x170 [ 3305.166632] ? audit_log_format+0x120/0x120 [ 3305.167746] ? from_kuid+0x85/0xc0 [ 3305.168534] audit_log_task+0x1cd/0x310 [ 3305.169398] ? __audit_log_nfcfg+0x210/0x210 [ 3305.170385] audit_seccomp+0x76/0x200 [ 3305.171227] __seccomp_filter+0x669/0x1530 [ 3305.172157] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3305.173153] ? __switch_to_asm+0x3a/0x60 [ 3305.174033] ? __switch_to_asm+0x34/0x60 [ 3305.174933] ? __schedule+0x82c/0x1ea0 [ 3305.175817] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3305.176844] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3305.178018] ? ksys_write+0x1a9/0x260 [ 3305.178872] __secure_computing+0x191/0x2f0 [ 3305.179843] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3305.181014] do_syscall_64+0xf/0x40 [ 3305.181803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3305.182945] RIP: 0033:0x7f7600b12b19 [ 3305.183779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3305.187848] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3305.189518] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3305.191080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3305.192702] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3305.194346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3305.195927] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3305.197770] audit: error in audit_log_task_context 06:54:38 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0), &(0x7f0000000040)='./file0\x00', 0x20, 0x2000, 0x1, {0x0, r8}}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3305.211819] audit: type=1326 audit(1757400878.759:732): auid=0 uid=0 gid=0 ses=4 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3305.217006] audit: type=1326 audit(1757400878.823:733): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7600ac569c code=0x7ffc0000 [ 3305.225529] audit: type=1326 audit(1757400878.823:734): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3305.233089] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3305.235186] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3305.236304] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3305.238155] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:54:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) 06:54:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 8) [ 3305.259712] audit: type=1326 audit(1757400878.823:735): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7600ac572b code=0x7ffc0000 [ 3305.269381] audit: type=1326 audit(1757400878.823:736): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:54:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}], 0x1, 0x0) [ 3305.273551] audit: type=1326 audit(1757400878.824:737): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15892 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:54:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x300}, 0x0) [ 3305.431297] FAULT_INJECTION: forcing a failure. [ 3305.431297] name failslab, interval 1, probability 0, space 0, times 0 [ 3305.432790] CPU: 0 PID: 15927 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3305.433684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3305.434733] Call Trace: [ 3305.435079] dump_stack+0x107/0x167 [ 3305.435545] should_fail.cold+0x5/0xa [ 3305.436045] ? create_object.isra.0+0x3a/0xa30 [ 3305.436623] should_failslab+0x5/0x20 [ 3305.437122] kmem_cache_alloc+0x5b/0x310 [ 3305.437642] ? sidtab_sid2str_get+0x65/0x720 [ 3305.438201] create_object.isra.0+0x3a/0xa30 [ 3305.438751] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3305.439392] __kmalloc_track_caller+0x177/0x370 [ 3305.439996] ? sidtab_sid2str_get+0x17e/0x720 [ 3305.440565] kmemdup+0x23/0x50 [ 3305.440981] sidtab_sid2str_get+0x17e/0x720 [ 3305.441528] ? audit_log_format+0xca/0x120 [ 3305.442066] sidtab_entry_to_string+0x33/0x110 [ 3305.442645] security_sid_to_context_core+0x33c/0x5d0 [ 3305.443305] security_secid_to_secctx+0x72/0xc0 [ 3305.443905] audit_log_task_context+0xf0/0x170 [ 3305.444488] ? audit_log_format+0x120/0x120 [ 3305.445043] ? from_kuid+0x85/0xc0 [ 3305.445507] audit_log_task+0x1cd/0x310 [ 3305.446012] ? __audit_log_nfcfg+0x210/0x210 [ 3305.446575] audit_seccomp+0x76/0x200 [ 3305.447067] ? lock_downgrade+0x6d0/0x6d0 [ 3305.447599] __seccomp_filter+0x669/0x1530 [ 3305.448145] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3305.448750] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3305.449368] ? wait_for_completion_io+0x270/0x270 [ 3305.449999] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3305.450583] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3305.451287] ? ksys_write+0x1a9/0x260 [ 3305.451775] __secure_computing+0x191/0x2f0 [ 3305.452331] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3305.453012] do_syscall_64+0xf/0x40 [ 3305.453488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3305.454127] RIP: 0033:0x7f7600b12b19 [ 3305.454600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3305.456928] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3305.457880] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3305.458776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3305.459676] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3305.460568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3305.461466] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:54:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x500}, 0x0) 06:54:53 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)={0x11}) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f0000000880)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r3, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0x80, 0x7}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="b4455c64d969899ed1ca3c711921f080a70fd88f89bcd4651f6991edf57c9ffc4c204f8d0780272f19fac405ac93fb3448eb68abd0f2258a9d31f10147eb03528e586e1df69bddbdc2d1caabf3fa9776e4b54233b4a51d5faec6dd4d5e317fca9cf1c646d8ec0fa723aa74442ee48d3921cb5cd9a44c136485d9c91518e30d346ed725d3dc0ed6ba790fd4ecd6085515", 0x90}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f00000000c0)="c061feeb70da05da5cfb2bb9699d7f71cee2decd303b643e6104c0354b2b11fe88cbd87c", 0x24}, {&(0x7f0000000580)="7b40bcb4b64515a069f456c74a0f9d945ecb91cd523497ddcabdcdfb6ebc4f60cb88e8f202475e2641b4b08c24b1add4a439c69046376bdbfc097119e01c65178ebd31aa85e8a0a0fc728c8d1258104e6b34c92c8525dc2b6aa59b2cdcdc89fba46530e2dfd608f2d4d1fa73ef99a7c3a1ec7e01a18377457231e690783f8a50657f79455b97d43745d8918e164e6f8a38cc65b344a7aebca5c9b5d7a47e5bc6ddd0f3b01e2b61acfcd4d44c767cc6ee2158e5c297f7744e5b040be62b945109d4acae69a93c08fa886c0d576df8", 0xce}, {&(0x7f0000000680)="59975b4900775f3c6517e1bd4e54978726b753a4e7f36217bf9d1ec0bd3a85f9d4f3720f6eacd13316eb428d940e89c26fe1cf5d271172eaea9873fc2643f5fd60cdf5d581a1ee44b607ba4c23d8b3ad42d8c53b2a596ab9d99488757d913b36d3defedf45466f4210485d12ef5847b3ac7b272d2bbf35ae6f6514e5600156f43e27435142c908018fc659f72caf92cb4878038d9e171c3cee", 0x99}, {&(0x7f0000000740)="f66db811587a763d2d54ed983f24a5a02f4dd0a8d62c085bc89b0432267b2bda4dc17ff738ab9e2f763c21d4cc6067076516ab42344b00532e09d9d36e99670e5db878095f800e6de9aaaf230623015f89ecd287a5ea2e360d1ac44e189d1ff8baed243e271057a30b242adb4d9116ae69250a44c505ffb736a47fb9a0cc2cfd209e0f5ba7909d58ec0a5eaec5644fa93cc5717b3ac5dc0dcf3ff408b4231601a9733d9830ccfd87caa8fd58113e9662141309902461e20489ed14e09bd6241de2641367ae586849814a7d2a1bd780f84f836b9832fe97677dc4b73d24ef168d4e54", 0xe2}], 0x6}, 0x0, 0x890, 0x1}, 0x8000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:54:53 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @scatter={0x6, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000240)}]}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:54:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) 06:54:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) pkey_free(0xffffffffffffffff) 06:54:53 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200001, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="2dcadbce1e98ace8da0b4dfec1f216461337bcd377ae8319be7dd63193f293a9864d5901d97776f5aea393a769f386f38fdcf7b5cae7ca2d1efcf542964995b5ec193128d1578333cb4d78d81441041bc4cbc14e5e8a001ccada686954329b7ec11f6967b95ff93274f1fdec7205b0f379bca9e23c137f904794ddacb808b5844bf86ac331e67c3bd6c1036702a1e873350d52d3a48437a0a395d0f1c34f6a71aedc6a2fb40409d04523d5a010cda5"], 0x100}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="087ad55d", @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250b000000080005009aa8ffff0c00028005000d0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:54:53 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:tetex_data_t:s0\x00', 0x22, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:54:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 9) [ 3320.050489] kauditd_printk_skb: 8 callbacks suppressed [ 3320.050509] audit: type=1326 audit(1757400893.669:746): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15942 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x0 [ 3320.061603] FAULT_INJECTION: forcing a failure. [ 3320.061603] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.064706] CPU: 0 PID: 15955 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3320.066485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.068528] Call Trace: [ 3320.069172] dump_stack+0x107/0x167 [ 3320.070065] should_fail.cold+0x5/0xa [ 3320.071018] ? audit_log_d_path+0xce/0x190 [ 3320.072088] should_failslab+0x5/0x20 [ 3320.073027] kmem_cache_alloc_trace+0x55/0x320 [ 3320.074153] audit_log_d_path+0xce/0x190 [ 3320.075140] audit_log_d_path_exe+0x40/0x70 [ 3320.076189] audit_log_task+0x278/0x310 [ 3320.077156] ? __audit_log_nfcfg+0x210/0x210 [ 3320.078249] audit_seccomp+0x76/0x200 [ 3320.079186] ? lock_downgrade+0x6d0/0x6d0 [ 3320.080211] __seccomp_filter+0x669/0x1530 [ 3320.081260] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3320.082393] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3320.083602] ? wait_for_completion_io+0x270/0x270 [ 3320.084825] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3320.085928] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3320.087242] ? ksys_write+0x1a9/0x260 [ 3320.088186] __secure_computing+0x191/0x2f0 [ 3320.089246] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3320.090591] do_syscall_64+0xf/0x40 [ 3320.091507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.092809] RIP: 0033:0x7f7600b12b19 [ 3320.093720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3320.098316] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3320.100236] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3320.101984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3320.103771] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3320.105572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3320.107353] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:54:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) [ 3320.126039] audit: type=1326 audit(1757400893.678:747): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3320.140651] audit: type=1326 audit(1757400893.679:748): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3320.158162] audit: type=1326 audit(1757400893.680:749): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 06:54:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x600}, 0x0) [ 3320.177610] audit: type=1326 audit(1757400893.681:750): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:54:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 10) [ 3320.207075] audit: type=1326 audit(1757400893.799:751): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7600ac569c code=0x7ffc0000 [ 3320.233781] audit: type=1326 audit(1757400893.799:752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 06:54:53 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x10, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x80, 0x2a, 0x10}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}, 0x9892) [ 3320.258188] audit: type=1326 audit(1757400893.799:753): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7600ac572b code=0x7ffc0000 06:54:53 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r0}}, '.\x00'}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x4, 0x8, 0x16, 0x0, 0xe6, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0x2, 0xffffffffffffff80, 0x8000, 0x2, 0x3, 0x7, 0x1, 0x0, 0x10001, 0x0, 0x1f}, r1, 0xd, r2, 0x8) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000040)={"25f9671a765c18e458e02f78354eec37", 0x0, r4, {0x4, 0x5}, {0xfff, 0x9}, 0x3f, [0x1fffc000, 0x401, 0x5, 0x3, 0x20, 0x5, 0x7f, 0x100, 0xff14, 0x100000001, 0x7, 0x4, 0x9, 0x1f, 0x6, 0x20]}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:54:53 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000000240)="dbd1048f059be2a4310869531b9a6f97c2e64cc7e83ffa514bc17e4c0fafa8f039fac463e5f5d576435c79f5737433bc70197cac98e0bf8f33dacdfee3db4e716bd06d30ae28180d5cd22d8faa7547d706bf5a6a3e2b29e18799c7da62c5aeaf1b18d3785eabe12469608ca23166dd439226debe55a72549acb7a0e766dd3f5e52b40025940167dafbc8fe7a98b87b8624ecc75d", 0x94, 0x401, 0x0, 0x7, r0}]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup(r0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) finit_module(r2, &(0x7f0000000000)=',\a\x00', 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 3320.265083] audit: type=1326 audit(1757400893.799:754): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3320.271346] audit: type=1326 audit(1757400893.799:755): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15946 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:54:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}], 0x1, 0x0) 06:54:53 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x80, 0x7, 0xfffffffc, {{0x6, 0x4, 0x2, 0x3b, 0x18, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @local, {[@end]}}}}}) [ 3320.326149] FAULT_INJECTION: forcing a failure. [ 3320.326149] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.329296] CPU: 0 PID: 15976 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3320.331036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.333109] Call Trace: [ 3320.333758] dump_stack+0x107/0x167 [ 3320.334652] should_fail.cold+0x5/0xa [ 3320.335588] ? create_object.isra.0+0x3a/0xa30 [ 3320.336710] should_failslab+0x5/0x20 [ 3320.337636] kmem_cache_alloc+0x5b/0x310 [ 3320.338632] ? audit_log_format+0xca/0x120 [ 3320.339677] create_object.isra.0+0x3a/0xa30 [ 3320.340781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3320.342060] kmem_cache_alloc_trace+0x151/0x320 [ 3320.343225] audit_log_d_path+0xce/0x190 [ 3320.344226] audit_log_d_path_exe+0x40/0x70 [ 3320.345323] audit_log_task+0x278/0x310 [ 3320.346297] ? __audit_log_nfcfg+0x210/0x210 [ 3320.347403] audit_seccomp+0x76/0x200 [ 3320.348372] ? lock_downgrade+0x6d0/0x6d0 [ 3320.349442] __seccomp_filter+0x669/0x1530 [ 3320.350479] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3320.351640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3320.352856] ? wait_for_completion_io+0x270/0x270 [ 3320.354088] ? fput_many+0x2f/0x1a0 [ 3320.355016] ? ksys_write+0x1a9/0x260 [ 3320.355960] __secure_computing+0x191/0x2f0 [ 3320.357023] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3320.358352] do_syscall_64+0xf/0x40 [ 3320.359268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.360532] RIP: 0033:0x7f7600b12b19 [ 3320.361451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3320.365976] RSP: 002b:00007f75fe088188 EFLAGS: 00000246 ORIG_RAX: 000000000000014b [ 3320.367853] RAX: ffffffffffffffda RBX: 00007f7600c25f60 RCX: 00007f7600b12b19 [ 3320.369664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 3320.371436] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3320.373195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3320.374965] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3320.508315] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3320.510681] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3320.512148] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3320.514218] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:55:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) pkey_free(0xffffffffffffffff) 06:55:10 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb, 0x30, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:55:10 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x88, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x40044) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x0) 06:55:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x700}, 0x0) 06:55:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 11) 06:55:10 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = fsopen(&(0x7f0000000000)='logfs\x00', 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x52000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000c80)={{r2}, "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"}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0x8, 0x0, @buffer={0x0, 0x20, 0x0}, &(0x7f00000009c0)="2f4f77d418be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:55:10 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x0, 0x1f, 0x3, 0x0, 0x9, 0x21061, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1b, 0x4, @perf_config_ext={0x100000000, 0x3}, 0x14040, 0xf62, 0x7, 0x3, 0x200, 0x101, 0x2, 0x0, 0x9}, r0, 0xf, 0xffffffffffffffff, 0x1) ptrace(0x11, r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="080100001b0001002dbd7000fe5bdf2504000000d0136632b92a8d8823a3ac3c9821651775c201589fedb88970facd33d712a7f30f18708e005b925f85f94a65ef1fcfa3b419ab46f7c30cddba48b0a8025dd32de3ce5a64d4b346fefc99f16d1722fd1af03edc0ce2ace6cb6929981c895314037d22f5a9bceae1bfb6ddaa86385d7c4073b38bd27f5e37c863a6660f692f7b6bb830699b53a7c3b6d1e23f2e16fb583a40cc0e5767974d4111d5c004c5d587ccc92287ffc387d14d281ae10e2671b0f31afb63e990721ce8a2a2daf6e3f57907bb262c6f98e99bb63ff5cba3f260d5e10ab058d163e3d011b6faf8babafc3ce407e9ed34175a9ca5b2ebef11cbe39ffd54a619bc"], 0x108}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 3336.822334] kauditd_printk_skb: 9 callbacks suppressed [ 3336.822355] audit: type=1326 audit(1757400910.441:765): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16003 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x0 [ 3336.837336] audit: type=1326 audit(1757400910.455:766): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16008 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3336.839103] FAULT_INJECTION: forcing a failure. [ 3336.839103] name failslab, interval 1, probability 0, space 0, times 0 [ 3336.843715] audit: type=1326 audit(1757400910.455:767): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16008 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3336.844974] CPU: 0 PID: 16014 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3336.850009] audit: type=1326 audit(1757400910.456:768): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16008 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3336.850721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3336.850726] Call Trace: [ 3336.850746] dump_stack+0x107/0x167 [ 3336.850763] should_fail.cold+0x5/0xa [ 3336.850785] ? audit_log_start.part.0+0x27e/0x730 [ 3336.855615] audit: type=1326 audit(1757400910.456:769): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16008 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3336.856715] should_failslab+0x5/0x20 [ 3336.856730] kmem_cache_alloc+0x5b/0x310 [ 3336.856748] audit_log_start.part.0+0x27e/0x730 [ 3336.856763] ? audit_log_task_context+0x170/0x170 [ 3336.856781] ? audit_filter+0x5d6/0xb10 [ 3336.857549] audit: type=1326 audit(1757400910.456:770): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16008 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3336.857914] ? __bpf_prog_run64+0xe0/0xe0 [ 3336.870122] ? audit_compare_dname_path+0x120/0x120 [ 3336.870940] audit_log_start+0x5f/0x90 [ 3336.871568] audit_seccomp+0x5d/0x200 [ 3336.872189] __seccomp_filter+0x669/0x1530 [ 3336.872864] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3336.873605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3336.874383] ? downgrade_write+0x3a0/0x3a0 [ 3336.875049] ? down_write_killable+0x180/0x180 [ 3336.875781] ? ksys_write+0x1a9/0x260 [ 3336.876407] __secure_computing+0x191/0x2f0 [ 3336.877098] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3336.877935] do_syscall_64+0xf/0x40 [ 3336.878512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3336.879322] RIP: 0033:0x7f7600ac569c [ 3336.879907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3336.882814] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3336.884039] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3336.885168] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3336.886282] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3336.887419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3336.888552] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3336.889771] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 3336.890859] audit: out of memory in audit_log_start [ 3336.915493] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3336.917109] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3336.918086] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3336.919547] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:55:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x0) [ 3336.951536] audit: type=1326 audit(1757400910.570:771): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16008 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3336.971193] audit: type=1326 audit(1757400910.570:772): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16008 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7600ac572b code=0x7ffc0000 06:55:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 12) 06:55:10 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x0) syz_io_uring_setup(0x3cab, &(0x7f0000000000)={0x0, 0xba98, 0x20, 0x2, 0x164}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd=r0, 0x73420d93, 0x7ff, 0x100, 0x9}, 0x7c6c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:10 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400841, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:55:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x84, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4044805) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:55:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0) [ 3337.097537] FAULT_INJECTION: forcing a failure. [ 3337.097537] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.099217] CPU: 0 PID: 16036 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3337.100197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3337.101356] Call Trace: [ 3337.101736] dump_stack+0x107/0x167 [ 3337.102256] should_fail.cold+0x5/0xa [ 3337.102791] ? create_object.isra.0+0x3a/0xa30 [ 3337.103431] should_failslab+0x5/0x20 [ 3337.103962] kmem_cache_alloc+0x5b/0x310 [ 3337.104544] ? auditd_test_task+0x11e/0x300 [ 3337.105146] create_object.isra.0+0x3a/0xa30 [ 3337.105754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3337.106465] kmem_cache_alloc+0x159/0x310 [ 3337.107049] audit_log_start.part.0+0x27e/0x730 [ 3337.107704] ? audit_log_task_context+0x170/0x170 [ 3337.108387] ? audit_filter+0x5d6/0xb10 [ 3337.108947] ? __bpf_prog_run64+0xe0/0xe0 [ 3337.109531] ? audit_compare_dname_path+0x120/0x120 [ 3337.110231] audit_log_start+0x5f/0x90 [ 3337.110771] audit_seccomp+0x5d/0x200 [ 3337.111306] __seccomp_filter+0x669/0x1530 [ 3337.111905] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3337.112562] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3337.113245] ? downgrade_write+0x3a0/0x3a0 [ 3337.113826] ? down_write_killable+0x180/0x180 [ 3337.114470] ? ksys_write+0x1a9/0x260 [ 3337.115000] __secure_computing+0x191/0x2f0 [ 3337.115605] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3337.116360] do_syscall_64+0xf/0x40 [ 3337.116869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3337.117579] RIP: 0033:0x7f7600ac569c [ 3337.118095] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3337.120663] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3337.121744] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3337.122838] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3337.123827] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3337.124827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3337.125819] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:55:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x900}, 0x0) 06:55:10 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x1, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x460) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x40010, r1, 0x8000000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f00000006c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000100)="8ae6bf380d7e245c882423407e69fea77618e98ac728e5f069ee6238aadde40baa5b4a51b136947344d7ae0ccc20f76fac977a", 0x33}, {&(0x7f0000000300)="acd648aa86dd8d21e98f83918376b47a4ef8136b577042a08fd44227c42727ac2d", 0x21}, {&(0x7f0000000340)="062a6fa473401de0e2a0b0899ea9bc22621adacff06c77420c795209f25f82fe8b0520a8875310b670c6c2b96c5c6d582e836a9103747004de8bcbd98db1be960352234b1f4360a2539a0d6ec8f2379dfdf350a07a2d1bd1bc89525a07f461e2110f52c5759e1f204e8d58b2134f0546c747cd29f8688b4ddc3a2144774bb87f00f78ee809b6d3b5361ba7f4f12f26307b5421e7a1639694991078d72c9030e4ea2270064ac1814d52bfbbf4fcb7ae30b1372e83db10ad5ee149396779c32f046e2234f77d1e313bfa6b996808ea3254bee1fde27752e589f51f8d6a2be786c50d3da8856c128f3f", 0xe8}, {&(0x7f0000000440)="07f7cf8b15ab5b292e1a1ae42035b3fec428c9f5261cb38341013ae27894a7aefbbd1f0d60d16a40eb5e4ce1addf8ac5b27dae6c6e0bc84ecec4e468b73d261df29af278ed9ec8a7107297972f9734a8382a46f17fc21e5be39374925c5af38ec40e29f56898931a877a1731892c8cae80f8018c514f4056b787662c2f9561e3eaa68ccff2b3d42e9d6ae8f242d3db0e829b8fa275dc6f4155f111bbddac5d03bbe16d1ecbf494b88ba3ba753c7caf31f9db0df9ca56216a211bde66f3312cdf748089ac972c4956d429a2e7f995c1b6c8c23c0aedf2c2307a91369fc3433f68f114071bba50", 0xe6}, {&(0x7f0000000540)="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", 0xfc}], 0x5}, 0x40080c4) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000a, 0x20010, r4, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r0, 0x8001, 0x0, 0x9, 0x5}, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0f47207a240000929d2622c7fbb2ffffb7", @ANYRES16=r6, @ANYBLOB="00012abdca00fadbdf257c008c428504e52c59ad000063000000"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x101, 0x3f, 0x10001, 0xffff, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r7, &(0x7f00000000c0)={[0x3ff]}, 0x8) [ 3337.232839] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3337.234108] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3337.234818] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3337.235929] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:55:25 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018f80000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000440)=""/119, 0x77}], 0x8, &(0x7f0000002000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00cc0e6c00010000a71900000000000000000000c106ed8779e3f586f522b59316e2f7b61b168c606393fb90e9f7ec323d36d60495dda3ceb796141c5777770b9fb9758f520685c45f25f56eb0a198ded5532270957143063b0c344a57db1377eaa216627e37f673b43807581451ecdad0c610ce9d2568328d94d9c8843091ba07fe86f3ae8ee219a8d47bd51a1ddd8f422adf6568a076b137ddb8ec94407804f6d2383f4ed482a1b36e738b48a6697966851c48b37527", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x108}, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) syz_mount_image$iso9660(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x7, 0x5, &(0x7f0000000900)=[{&(0x7f0000000740)="e2d92a0e8182178603e6e1b0b14f83124d1fcaba01067bbcc50799832ea7d32f44a5ec04b74cb4f2de12e5c34ec60fb2a059c5a5acfe53cf8a1df8bff1b939384c2c28", 0x43, 0x1f}, {&(0x7f00000007c0)="b631433b8acb4043fa6ab91b1c6fd7d57ea4c36444317586ab35d555e9c147ff06d0c00be22fc1b23de9937e0aef76678b7332e892bc8cb01b0a52791df4b487ea039551727a6e5bc777518fafa2b55036a1d2a95814a8b34ff02143bfa0416db79d660116947f126ebf6908357950e9d7d4d249b2f77cc046775523ae1da01922fac1260d5f883f0fdd890a864a2d4de0dcd89968c27a1122ec627d2cac7f1dfb2b86dea776d6109769cd02a414df0b975b00ba0ec1a7510905b8bca8d32e64f63f7ad4961319dbc797432c17f8e59e4231849cae580503820a1809898d53ac1484480672278f7bf6b78a0e0a318d63911c", 0xf2, 0x2}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f00000008c0)="4d4186643e43726aee03a52db96f0a72640ee8c40d708bf0", 0x18}, {&(0x7f0000000a00)="254f6b131d157c6ec23ee79d79fbdae68a205ca249d3d00057d9a8282b2026ecfe4d76379cf84c1e10426f1de414085309689dacf3a96f9339664bd883c6655f34305303c6b71e17769e5d129ab724e2455542cc666bd47fabff29bff4c0d3469d90f89022aabc4b12032e47f40cfb7f795fca86bc88ac348d4ad5bc58c0e3c2ea48e36eb93af65578d04ffc8017626d7bcd6cee02e6645b67eca31cc9d29fd788326051aee1a246d98401180d807837460b4224c55e1913e80a781d345a95d5ac84a7", 0xc3, 0x2}], 0x4000, &(0x7f0000000b00)={[{@hide}, {@block={'block', 0x3d, 0x400}}, {@dmode={'dmode', 0x3d, 0x2}}], [{@uid_eq={'uid', 0x3d, r1}}, {@seclabel}, {@smackfshat}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r4 = syz_io_uring_setup(0x5bec, &(0x7f0000001c80)={0x0, 0x5649, 0x1, 0x2, 0xe8, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001d00), &(0x7f0000001d40)) r5 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000001500)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1000400, &(0x7f00000016c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid}, {@cache_mmap}, {@uname={'uname', 0x3d, 'ext4\x00'}}], [{@dont_appraise}, {@uid_lt={'uid<', r9}}, {@smackfsdef={'smackfsdef', 0x3d, '@-'}}, {@fowner_lt={'fowner<', r9}}]}}) syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./file1\x00', 0xb1cf406, 0x2, &(0x7f0000001f40)=[{&(0x7f0000001e40)="60ee967693f11139e264c0b1252f6e52e5a6e9d2327a0b19bcf9292875a6013519846256772302", 0x27, 0x3}, {&(0x7f0000001e80)="698aad677fb89aea0514bc9911aa58154e4f91b52edc8f4e77e07117a956e6177229451b8f261269e4aacc67b9dce0bdd44da43074fd94e1c87d013d34653d489e5988094c22b67f55a0a2418fc460000064e548ceabe18b81113b72f76de51aea7e58ae5d5e62b7fbea3624a08df01884f387e54598bbf7e5f1a19164e6d03d8e6ff00db4570b2ce4066c1da3e917c4d2829849f6a74c2c9d93d5580349c5c29f202c05d3199ac48ed33fec714edf362bb78e6f8f7b6ff880", 0xb9, 0x9}], 0x8, &(0x7f0000001f80)={[{@uni_xlate}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0xa9a5}}, {@obj_user={'obj_user', 0x3d, 'MAY_READ'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r9}}]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r10, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) syz_io_uring_submit(r11, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r7, &(0x7f0000000980)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64}, 0x8) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = pidfd_getfd(r3, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4010, r12, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r12, 0x80189439, &(0x7f0000001d80)) openat(r2, &(0x7f0000000bc0)='./file0\x00', 0x400, 0x8) 06:55:25 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x4, 0x2, 0x2, 0x0, 0x100, 0xc000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x1804, 0x5, 0x9b, 0x1, 0x3, 0x6, 0x40, 0x0, 0x20, 0x0, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x6f5c50ed433e7ec8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:55:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) pkey_free(0xffffffffffffffff) 06:55:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 13) 06:55:25 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r0, 0x0, 0x5) r1 = socket$inet(0x2, 0x5, 0xfff) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x22, 0x0, @buffer={0x0, 0xff9, &(0x7f0000000d80)=""/4089}, &(0x7f0000000040)="001b0000000000000000000094153a89a87eaff311dd9d4b7fe47b9ee90000000000", 0x0, 0x7ff, 0x0, 0x1, 0x0}) sendfile(r1, r2, &(0x7f0000000000)=0xfffffffffffffffc, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:25 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x0) r5 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r13}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd=r0, 0x3, &(0x7f0000000040)=[{&(0x7f00000003c0)="038adae72f247c20d065b51fa1bb3797bd9b3bf89b4154072e983bd0797cfb957587339e472b4827515e3056d58db8258aafaf6adceb63b6c37662e144370273e00c61d80a5fb77e1fa3cd3aca558b36b98659d224c29c6e9d1df6458f2b4acec734dcb6ca3d1639953c826109ae62ddd5ca4dd7b73518898521d4178eb76d94523a4784b7851b11f3ad3846c4622c2871c1455e6cdef2cb2098b58b1d654faa353003cf5824ad18aaaeda3a343187076fa20d97455e3a6d3341595b9c5e0f895672007a66e99c819b8a2e98c9cbfd352d40791db8870ce68520ec03c3f8ff7c87f079715317a816c8a657b01b1c45957dba", 0xf2}], 0x1, 0x4, 0x0, {0x2, r13}}, 0x4) r15 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r15, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:55:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) 06:55:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0xf00}, 0x0) [ 3352.153941] kauditd_printk_skb: 11 callbacks suppressed [ 3352.153952] audit: type=1326 audit(1757400925.773:784): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16065 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x0 [ 3352.171508] audit: type=1326 audit(1757400925.790:785): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3352.174716] audit: type=1326 audit(1757400925.791:786): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3352.177200] FAULT_INJECTION: forcing a failure. [ 3352.177200] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.179867] audit: type=1326 audit(1757400925.794:787): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3352.180927] CPU: 0 PID: 16080 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3352.183443] audit: type=1326 audit(1757400925.794:788): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3352.184377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.184384] Call Trace: [ 3352.184411] dump_stack+0x107/0x167 [ 3352.184434] should_fail.cold+0x5/0xa [ 3352.189576] audit: type=1326 audit(1757400925.794:789): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3352.190392] ? __alloc_skb+0x6d/0x5b0 [ 3352.190413] should_failslab+0x5/0x20 [ 3352.190437] kmem_cache_alloc_node+0x55/0x330 [ 3352.198955] ? trace_hardirqs_on+0x5b/0x180 [ 3352.199973] __alloc_skb+0x6d/0x5b0 [ 3352.200913] audit_log_start.part.0+0x2a3/0x730 [ 3352.202017] ? audit_log_task_context+0x170/0x170 [ 3352.203223] ? audit_filter+0x5d6/0xb10 [ 3352.204280] ? __bpf_prog_run64+0xe0/0xe0 [ 3352.205282] ? audit_compare_dname_path+0x120/0x120 [ 3352.206457] ? perf_trace_lock+0xac/0x490 [ 3352.207497] audit_log_start+0x5f/0x90 [ 3352.208427] audit_seccomp+0x5d/0x200 [ 3352.209372] __seccomp_filter+0x669/0x1530 [ 3352.210358] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3352.211507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3352.212673] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3352.213753] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3352.215087] ? downgrade_write+0x3a0/0x3a0 [ 3352.216087] ? ksys_write+0x1a9/0x260 [ 3352.216998] __secure_computing+0x191/0x2f0 [ 3352.218077] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3352.219355] do_syscall_64+0xf/0x40 [ 3352.220251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.221528] RIP: 0033:0x7f7600ac569c [ 3352.222441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3352.226836] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3352.228737] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3352.230419] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3352.232183] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3352.233852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3352.235592] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3352.237648] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 3352.239467] audit: out of memory in audit_log_start [ 3352.242578] audit: type=1326 audit(1757400925.861:790): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3352.245972] loop7: detected capacity change from 0 to 4096 [ 3352.246195] audit: type=1326 audit(1757400925.861:791): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16068 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7600ac572b code=0x7ffc0000 06:55:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}}], 0x1, 0x0) 06:55:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 14) [ 3352.314755] 9pnet: Insufficient options for proto=fd 06:55:25 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x4010, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3352.341162] loop7: detected capacity change from 0 to 135266304 [ 3352.364378] FAT-fs (loop7): Unrecognized mount option "mask=^MAY_EXEC" or missing value 06:55:26 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfe, 0x7, 0x40, 0x1f, 0x0, 0xe2e, 0x1000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4a000, 0x80000000, 0x9, 0x2, 0x203, 0xffff, 0x20, 0x0, 0x9, 0x0, 0x30c}, 0x0, 0xd, r1, 0x2) 06:55:26 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = syz_io_uring_setup(0x804ebb, &(0x7f0000000340)={0x0, 0x1b9b, 0x10, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r5, 0x80, &(0x7f0000000040)=@generic={0x11, "7a768bb0b05cf5248e4b4369bf8279b6af15d83f28ae09b9e199b3d80ba90ce6751d108aeafaf13234aa8e04e65a08b775a1364aa5fe1940c64d7251157fc2a0000ad006f08c28f5897d706a701ff7ba73fe96c1266e46da7571fdf9a3ebc771690eca2d2f075c6012a82230376ea035200f007d7ea043eb01dfc65e8926"}}, 0x3) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x8b01}, 0x0) [ 3352.416125] FAULT_INJECTION: forcing a failure. [ 3352.416125] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.419211] CPU: 0 PID: 16099 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3352.421004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.422900] Call Trace: [ 3352.423568] dump_stack+0x107/0x167 [ 3352.424465] should_fail.cold+0x5/0xa [ 3352.425400] ? create_object.isra.0+0x3a/0xa30 [ 3352.426489] should_failslab+0x5/0x20 [ 3352.427409] kmem_cache_alloc+0x5b/0x310 [ 3352.428398] ? kmem_cache_alloc+0x159/0x310 [ 3352.429443] create_object.isra.0+0x3a/0xa30 [ 3352.430502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3352.431737] kmem_cache_alloc_node+0x169/0x330 [ 3352.432863] __alloc_skb+0x6d/0x5b0 [ 3352.433786] audit_log_start.part.0+0x2a3/0x730 [ 3352.434899] ? audit_log_task_context+0x170/0x170 [ 3352.436050] ? audit_filter+0x5d6/0xb10 [ 3352.436976] ? __bpf_prog_run64+0xe0/0xe0 [ 3352.437982] ? audit_compare_dname_path+0x120/0x120 [ 3352.439122] audit_log_start+0x5f/0x90 [ 3352.440088] audit_seccomp+0x5d/0x200 [ 3352.441029] __seccomp_filter+0x669/0x1530 [ 3352.442064] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3352.443205] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3352.444431] ? downgrade_write+0x3a0/0x3a0 [ 3352.445409] ? down_write_killable+0x180/0x180 [ 3352.446544] ? ksys_write+0x1a9/0x260 [ 3352.447438] __secure_computing+0x191/0x2f0 [ 3352.448523] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3352.449809] do_syscall_64+0xf/0x40 [ 3352.450687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.451880] RIP: 0033:0x7f7600ac569c [ 3352.452780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3352.457189] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3352.459093] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3352.460854] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3352.462630] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3352.464411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3352.466176] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3352.500374] 9pnet: Insufficient options for proto=fd [ 3352.514358] loop7: detected capacity change from 0 to 4096 06:55:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 15) 06:55:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}], 0x1, 0x0) [ 3352.646183] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3352.648697] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3352.650084] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3352.652365] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3352.664568] FAULT_INJECTION: forcing a failure. [ 3352.664568] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.667345] CPU: 0 PID: 16118 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3352.668979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.670951] Call Trace: [ 3352.671624] dump_stack+0x107/0x167 [ 3352.672493] should_fail.cold+0x5/0xa [ 3352.673437] ? create_object.isra.0+0x3a/0xa30 [ 3352.674516] should_failslab+0x5/0x20 [ 3352.675442] kmem_cache_alloc+0x5b/0x310 [ 3352.676403] ? kmem_cache_alloc+0x159/0x310 [ 3352.677450] create_object.isra.0+0x3a/0xa30 [ 3352.678518] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3352.679749] kmem_cache_alloc_node+0x169/0x330 [ 3352.680880] __alloc_skb+0x6d/0x5b0 [ 3352.681734] audit_log_start.part.0+0x2a3/0x730 [ 3352.682875] ? audit_log_task_context+0x170/0x170 [ 3352.684045] ? audit_filter+0x5d6/0xb10 [ 3352.685021] ? __bpf_prog_run64+0xe0/0xe0 [ 3352.686043] ? audit_compare_dname_path+0x120/0x120 [ 3352.687269] audit_log_start+0x5f/0x90 [ 3352.688211] audit_seccomp+0x5d/0x200 [ 3352.689166] __seccomp_filter+0x669/0x1530 [ 3352.690181] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3352.691309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3352.692530] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3352.693674] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3352.694977] ? downgrade_write+0x3a0/0x3a0 [ 3352.695933] ? ksys_write+0x1a9/0x260 [ 3352.696857] __secure_computing+0x191/0x2f0 [ 3352.697942] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3352.699271] do_syscall_64+0xf/0x40 [ 3352.700160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.701440] RIP: 0033:0x7f7600ac569c [ 3352.702351] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3352.706929] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3352.708819] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3352.710586] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3352.712355] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3352.714118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3352.715889] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:55:26 executing program 0: r0 = syz_io_uring_setup(0x620c, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:55:26 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) accept$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000440)=0x1c) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3ff, 0x600102) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x10010, r0, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x110, r2, 0x10000000) r9 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r10 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r9, &(0x7f0000000380)={0x40000000}, r10}, 0x8001) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x7c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x5}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x3, 0x8}}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x7c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="e90427bd7000fcdbdf255a0000000c00880023000000190000004efd023ec7c82e4ffcfc89e7b42a490d5927f4ebac0e3ecce067e83225e5c8973a185c1c38303e19b33f4062552043ab32c821903237a38237f30c3aea2f546ed42f5325eaca8d57"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000200)={0x53, 0xfffffffffffffffe, 0x3, 0x20, @buffer={0x0, 0x13, &(0x7f0000000040)=""/19}, &(0x7f0000000080)="aaf76f", &(0x7f00000000c0)=""/203, 0x0, 0x21, 0x3, &(0x7f00000001c0)}) [ 3352.793849] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3352.796362] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3352.797670] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3352.799869] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:55:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}}], 0x1, 0x0) 06:55:41 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 16) 06:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0xf000}, 0x0) 06:55:41 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x5a4d, &(0x7f0000000100)={0x0, 0xaea9, 0x1, 0x0, 0x2f3, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20045050) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:41 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) syz_io_uring_setup(0x6c4e, &(0x7f0000000080)={0x0, 0x5533, 0x4, 0x0, 0x352, 0x0, r5}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x5a74, &(0x7f00000003c0)={0x0, 0xfb69, 0x10, 0x3, 0x216, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000480)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x8, 0x8, 0x0, 0xfffffeff}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r5, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:55:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 1) 06:55:41 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x0, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="3f4f77d45d1b18be89c1", 0x0, 0x0, 0x30, 0x0, 0x0}) [ 3367.894527] kauditd_printk_skb: 20 callbacks suppressed 06:55:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x19, 0x0, @buffer={0x0, 0xec, &(0x7f00000004c0)=""/236}, &(0x7f0000000280)="2f4ff7d40080ffffffffffffff00"/25, 0x0, 0xffffffff, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x19dd, &(0x7f0000000000)={0x0, 0xbb0c, 0x4, 0x3, 0x222, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x2010, r0, 0x10000000) r4 = syz_io_uring_setup(0x4d53, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x9, 0x9, 0x0, 0x6af, 0x0, 0x1, {0x0, r7}}, 0x8001) [ 3367.894544] audit: type=1326 audit(1757400941.513:812): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16144 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3367.911132] FAULT_INJECTION: forcing a failure. [ 3367.911132] name failslab, interval 1, probability 0, space 0, times 0 [ 3367.911967] audit: type=1326 audit(1757400941.527:813): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16144 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3367.913595] CPU: 1 PID: 16150 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3367.919777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3367.921449] audit: type=1326 audit(1757400941.529:814): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16144 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3367.921538] Call Trace: [ 3367.921570] dump_stack+0x107/0x167 [ 3367.927612] should_fail.cold+0x5/0xa [ 3367.928159] audit: type=1326 audit(1757400941.530:815): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16144 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3367.928439] ? create_object.isra.0+0x3a/0xa30 [ 3367.928457] should_failslab+0x5/0x20 [ 3367.928485] kmem_cache_alloc+0x5b/0x310 [ 3367.935886] create_object.isra.0+0x3a/0xa30 [ 3367.936839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3367.938086] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3367.939311] ? audit_log_start.part.0+0x2a3/0x730 [ 3367.940565] __alloc_skb+0xb1/0x5b0 [ 3367.941461] audit_log_start.part.0+0x2a3/0x730 [ 3367.942525] ? audit_log_task_context+0x170/0x170 [ 3367.943566] ? audit_filter+0x5d6/0xb10 [ 3367.944424] ? __bpf_prog_run64+0xe0/0xe0 [ 3367.945304] ? audit_compare_dname_path+0x120/0x120 [ 3367.946383] audit_log_start+0x5f/0x90 [ 3367.947451] audit_seccomp+0x5d/0x200 [ 3367.948355] __seccomp_filter+0x669/0x1530 [ 3367.949280] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3367.950412] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3367.951609] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3367.952853] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3367.954036] ? downgrade_write+0x3a0/0x3a0 [ 3367.954943] ? ksys_write+0x1a9/0x260 [ 3367.955757] __secure_computing+0x191/0x2f0 [ 3367.956683] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3367.957820] do_syscall_64+0xf/0x40 [ 3367.958608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3367.959701] RIP: 0033:0x7f7600ac569c [ 3367.960508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3367.964882] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3367.966501] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3367.968180] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3367.970036] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3367.971704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3367.973236] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3367.989607] audit: type=1326 audit(1757400941.602:817): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16148 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3368.032286] audit: type=1326 audit(1757400941.603:818): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16148 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 [ 3368.038117] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3368.040257] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3368.041371] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3368.043174] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b 06:55:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000}}], 0x1, 0x0) 06:55:41 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) [ 3368.071651] audit: type=1326 audit(1757400941.605:819): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16148 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f681ac38a04 code=0x7ffc0000 [ 3368.099690] audit: type=1326 audit(1757400941.606:820): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16148 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f681ac385ff code=0x7ffc0000 [ 3368.111612] audit: type=1326 audit(1757400941.606:821): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16148 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f681ac385ff code=0x7ffc0000 [ 3368.133606] audit: type=1326 audit(1757400941.606:822): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16148 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f681ac85b19 code=0x7ffc0000 06:55:41 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x19, 0x2, {0xffffffffffffffff, 0x1, 0x100000, 0x2, 0x9}, 0x1}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xecb03, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) 06:55:41 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 17) 06:55:41 executing program 0: r0 = syz_io_uring_setup(0x620e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b", 0x7}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000400)={0x0, @hci={0x1f, 0x0, 0x3}, @can={0x1d, 0x0}, @phonet={0x23, 0x80, 0x1f, 0xd2}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)='veth0_macvtap\x00', 0xa9f7, 0x6, 0x6}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x62, r5}) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:55:41 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0x11, 0x0, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/171, 0xab}]}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5d0000000000000003000000f4f47c0e7fd5c59bda62883303c6f21459300974b4c72670fc69babd57c7efc66adf6b64042f1267cf0da9053524ce959dc9045ec8fe22ba02ebbe4ffccbce544a26e0f5594fec07d775d353c7f05c8041c827b82ef2"]) 06:55:41 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xff, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24000804}, 0x48050) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendfile(r4, r1, &(0x7f0000000200)=0x1ff, 0x8000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x174, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53f1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x400}, 0x10) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x30000}, 0x0) 06:55:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32000000}}], 0x1, 0x0) [ 3368.371679] FAULT_INJECTION: forcing a failure. [ 3368.371679] name failslab, interval 1, probability 0, space 0, times 0 [ 3368.374246] CPU: 1 PID: 16182 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3368.375731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3368.377537] Call Trace: [ 3368.378112] dump_stack+0x107/0x167 [ 3368.378905] should_fail.cold+0x5/0xa [ 3368.379735] should_failslab+0x5/0x20 [ 3368.380560] __kmalloc_track_caller+0x79/0x370 [ 3368.381549] ? sidtab_sid2str_get+0x17e/0x720 [ 3368.382518] kmemdup+0x23/0x50 [ 3368.383206] sidtab_sid2str_get+0x17e/0x720 [ 3368.384116] ? audit_log_format+0xca/0x120 [ 3368.385040] sidtab_entry_to_string+0x33/0x110 [ 3368.386220] security_sid_to_context_core+0x33c/0x5d0 [ 3368.387565] security_secid_to_secctx+0x72/0xc0 [ 3368.388637] audit_log_task_context+0xf0/0x170 [ 3368.389632] ? audit_log_format+0x120/0x120 [ 3368.390541] ? from_kuid+0x85/0xc0 [ 3368.391304] audit_log_task+0x1cd/0x310 [ 3368.392159] ? __audit_log_nfcfg+0x210/0x210 [ 3368.393242] audit_seccomp+0x76/0x200 [ 3368.394205] __seccomp_filter+0x669/0x1530 [ 3368.395332] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3368.396335] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3368.397398] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3368.398390] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3368.399570] ? downgrade_write+0x3a0/0x3a0 [ 3368.400574] ? ksys_write+0x1a9/0x260 [ 3368.401531] __secure_computing+0x191/0x2f0 [ 3368.402683] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3368.403820] do_syscall_64+0xf/0x40 [ 3368.404603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3368.405716] RIP: 0033:0x7f7600ac569c [ 3368.406515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3368.411023] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3368.412660] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3368.414174] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3368.415715] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3368.417427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3368.419292] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 [ 3368.429101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16186 comm=syz-executor.3 [ 3368.637045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16186 comm=syz-executor.3 06:55:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000}}], 0x1, 0x0) 06:55:56 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fedbdf250a00000008000100706369833a000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x50) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:55:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2, 0x0, 0x3, 0x7ffc0000}]}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) pkey_free(0xffffffffffffffff) 06:55:56 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x27, 0x0, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0xffffffffffffffdc) 06:55:56 executing program 0: r0 = syz_io_uring_setup(0xf3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4bf0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000d80)=""/4096}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x7ff, 0x0, 0x0, 0x0}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000000040), 0x0, 0x0, 0x80800, 0x1, {0x0, r5}}, 0x80000001) r7 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x2, 0x0, 0xc7, 0x1, 0x0, 0xfffffffffffffffe, 0x19841, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffd, 0x200cceda}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x400, 0x804, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = epoll_create(0x8000) r9 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f00000000c0)={0x20000300}) epoll_wait(r8, &(0x7f0000000000)=[{}], 0x1, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:55:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x80000}, 0x0) 06:55:56 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7, 0x307ace83, 0x1000, 0x4, 0xffffffff}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0x0, 0xa, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c1", 0x0, 0x0, 0x0, 0x0, 0x0}) 06:55:56 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 18) [ 3383.278513] kauditd_printk_skb: 17 callbacks suppressed [ 3383.278526] audit: type=1326 audit(1757400956.897:838): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3383.283935] audit: type=1326 audit(1757400956.898:839): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3383.286704] FAULT_INJECTION: forcing a failure. [ 3383.286704] name failslab, interval 1, probability 0, space 0, times 0 [ 3383.286734] CPU: 0 PID: 16223 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3383.286750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3383.286762] Call Trace: [ 3383.289821] audit: type=1326 audit(1757400956.902:840): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7600ac5a04 code=0x7ffc0000 [ 3383.289869] dump_stack+0x107/0x167 [ 3383.291653] audit: type=1326 audit(1757400956.903:841): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3383.296337] should_fail.cold+0x5/0xa [ 3383.296362] ? create_object.isra.0+0x3a/0xa30 [ 3383.296381] should_failslab+0x5/0x20 [ 3383.296973] audit: type=1326 audit(1757400956.903:842): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=331 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3383.301632] kmem_cache_alloc+0x5b/0x310 [ 3383.301656] ? sidtab_sid2str_get+0x65/0x720 [ 3383.301682] create_object.isra.0+0x3a/0xa30 [ 3383.311704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3383.312878] __kmalloc_track_caller+0x177/0x370 [ 3383.313943] ? sidtab_sid2str_get+0x17e/0x720 [ 3383.314965] kmemdup+0x23/0x50 [ 3383.315701] sidtab_sid2str_get+0x17e/0x720 [ 3383.316701] ? audit_log_format+0xca/0x120 [ 3383.317667] sidtab_entry_to_string+0x33/0x110 [ 3383.318709] security_sid_to_context_core+0x33c/0x5d0 [ 3383.319891] security_secid_to_secctx+0x72/0xc0 [ 3383.320954] audit_log_task_context+0xf0/0x170 [ 3383.321987] ? audit_log_format+0x120/0x120 [ 3383.322965] ? from_kuid+0x85/0xc0 [ 3383.323788] audit_log_task+0x1cd/0x310 [ 3383.324704] ? __audit_log_nfcfg+0x210/0x210 [ 3383.325722] audit_seccomp+0x76/0x200 [ 3383.326595] __seccomp_filter+0x669/0x1530 [ 3383.327565] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3383.328645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3383.329769] ? downgrade_write+0x3a0/0x3a0 [ 3383.330731] ? down_write_killable+0x180/0x180 [ 3383.331773] ? ksys_write+0x1a9/0x260 [ 3383.332659] __secure_computing+0x191/0x2f0 [ 3383.333651] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3383.334870] do_syscall_64+0xf/0x40 [ 3383.335711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3383.336886] RIP: 0033:0x7f7600ac569c [ 3383.337736] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3383.341940] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3383.343678] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3383.345311] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3383.346940] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3383.348572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3383.350187] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:55:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pkey_free(0xffffffffffffffff) 06:55:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000}}], 0x1, 0x0) [ 3383.367164] audit: type=1326 audit(1757400956.903:843): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7600ac569c code=0x7ffc0000 [ 3383.370874] audit: type=1326 audit(1757400956.986:844): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7600ac55ff code=0x7ffc0000 [ 3383.374060] audit: type=1326 audit(1757400956.986:845): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7600ac572b code=0x7ffc0000 [ 3383.384154] audit: type=1326 audit(1757400956.986:846): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 [ 3383.410972] audit: type=1326 audit(1757400956.986:847): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16213 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7600b12b19 code=0x7ffc0000 06:55:57 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) pkey_free(0xffffffffffffffff) (fail_nth: 19) 06:55:57 executing program 3: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0) syz_io_uring_setup(0x8c7, &(0x7f0000000000)={0x0, 0xbe4f, 0x20, 0x2, 0xf9, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cgroups\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x4d53, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0xaaa0, &(0x7f0000000140)=[r3], 0x1, 0x0, 0x0, {0x0, r7}}, 0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffe, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000009c0)="2f4f77d45d1b18be89c10a3d3ab1d8a61b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 3383.541085] FAULT_INJECTION: forcing a failure. [ 3383.541085] name failslab, interval 1, probability 0, space 0, times 0 [ 3383.542807] CPU: 1 PID: 16240 Comm: syz-executor.6 Not tainted 5.10.242 #1 [ 3383.543775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3383.544761] Call Trace: [ 3383.545088] dump_stack+0x107/0x167 [ 3383.545518] should_fail.cold+0x5/0xa [ 3383.545974] ? audit_log_d_path+0xce/0x190 [ 3383.546475] should_failslab+0x5/0x20 [ 3383.546923] kmem_cache_alloc_trace+0x55/0x320 [ 3383.547460] audit_log_d_path+0xce/0x190 [ 3383.547933] audit_log_d_path_exe+0x40/0x70 [ 3383.548436] audit_log_task+0x278/0x310 [ 3383.548913] ? __audit_log_nfcfg+0x210/0x210 [ 3383.549441] audit_seccomp+0x76/0x200 [ 3383.549902] __seccomp_filter+0x669/0x1530 [ 3383.550400] ? seccomp_notify_ioctl+0xda0/0xda0 [ 3383.550956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3383.551538] ? downgrade_write+0x3a0/0x3a0 [ 3383.552035] ? down_write_killable+0x180/0x180 [ 3383.552576] ? ksys_write+0x1a9/0x260 [ 3383.553025] __secure_computing+0x191/0x2f0 [ 3383.553535] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 3383.554161] do_syscall_64+0xf/0x40 [ 3383.554588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3383.555191] RIP: 0033:0x7f7600ac569c [ 3383.555630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3383.557783] RSP: 002b:00007f75fe088170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3383.558676] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7600ac569c [ 3383.559510] RDX: 000000000000000f RSI: 00007f75fe0881e0 RDI: 0000000000000003 [ 3383.560344] RBP: 00007f75fe0881d0 R08: 0000000000000000 R09: 0000000000000000 [ 3383.561188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3383.562022] R13: 00007fff4ddd2a0f R14: 00007f75fe088300 R15: 0000000000022000 06:55:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0xf0ffff}, 0x0) 06:55:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}], 0x1, 0x0) [ 3383.631732] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 3383.632880] sr 1:0:0:0: [sr0] tag#0 CDB: Verify(10) [ 3383.633521] sr 1:0:0:0: [sr0] tag#0 CDB[00]: 2f 4f 77 d4 5d 1b 18 be 89 c1 0a 3d 3a b1 d8 a6 [ 3383.634744] sr 1:0:0:0: [sr0] tag#0 CDB[10]: 1b [ 3394.373651] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3394.375170] CPU: 0 PID: 255 Comm: syz-fuzzer Not tainted 5.10.242 #1 [ 3394.375953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3394.376991] Call Trace: [ 3394.377317] dump_stack+0x107/0x167 [ 3394.377769] dump_header+0x107/0x689 [ 3394.378236] oom_kill_process.cold+0x10/0x15 [ 3394.378800] out_of_memory+0x1149/0x1440 [ 3394.379309] ? oom_killer_disable+0x280/0x280 [ 3394.379864] ? mutex_trylock+0x237/0x2b0 [ 3394.380365] ? __alloc_pages_slowpath.constprop.0+0xa8b/0x2310 [ 3394.381117] __alloc_pages_slowpath.constprop.0+0x1c57/0x2310 [ 3394.381845] ? lock_acquire+0x117/0x470 [ 3394.382354] ? warn_alloc+0x190/0x190 [ 3394.382854] __alloc_pages_nodemask+0x51d/0x600 [ 3394.383438] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3394.384186] ? find_get_entry+0x2c8/0x740 [ 3394.384715] alloc_pages_current+0x187/0x280 [ 3394.385275] __page_cache_alloc+0x2d2/0x360 [ 3394.385804] pagecache_get_page+0x2c7/0xc80 [ 3394.386348] filemap_fault+0x177d/0x2210 [ 3394.386864] ? read_cache_page_gfp+0x30/0x30 [ 3394.387421] ? replace_page_cache_page+0x1200/0x1200 [ 3394.388054] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3394.388718] ext4_filemap_fault+0x87/0xc0 [ 3394.389224] __do_fault+0x113/0x410 [ 3394.389667] handle_mm_fault+0x1e53/0x3500 [ 3394.390185] ? _copy_from_user+0xfb/0x1b0 [ 3394.390693] ? __pmd_alloc+0x630/0x630 [ 3394.391171] ? vmacache_find+0x55/0x2a0 [ 3394.391654] ? vmacache_update+0xce/0x140 [ 3394.392165] do_user_addr_fault+0x56e/0xc60 [ 3394.392702] exc_page_fault+0xa2/0x1a0 [ 3394.393176] ? asm_exc_page_fault+0x8/0x30 [ 3394.393702] asm_exc_page_fault+0x1e/0x30 [ 3394.394225] RIP: 0033:0x466533 [ 3394.394615] Code: Unable to access opcode bytes at RIP 0x466509. [ 3394.395349] RSP: 002b:000000c00003fe80 EFLAGS: 00010206 [ 3394.395993] RAX: ffffffffffffff92 RBX: 000000003b9774ee RCX: 0000000000466533 [ 3394.396863] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 3394.397761] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000 [ 3394.398651] R10: 000000c00003feb8 R11: 0000000000000206 R12: 0000000000438880 [ 3394.399549] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 3394.400497] Mem-Info: [ 3394.400819] active_anon:14086 inactive_anon:62620 isolated_anon:0 [ 3394.400819] active_file:21 inactive_file:1 isolated_file:0 [ 3394.400819] unevictable:0 dirty:0 writeback:0 [ 3394.400819] slab_reclaimable:10622 slab_unreclaimable:241796 [ 3394.400819] mapped:69634 shmem:134 pagetables:1999 bounce:0 [ 3394.400819] free:3267 free_pcp:136 free_cma:0 [ 3394.404642] Node 0 active_anon:56344kB inactive_anon:250480kB active_file:84kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:536kB writeback_tmp:0kB kernel_stack:4704kB all_unreclaimable? yes [ 3394.407466] Node 0 DMA free:6504kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3394.410694] lowmem_reserve[]: 0 1616 1616 1616 [ 3394.411291] Node 0 DMA32 free:6564kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:56344kB inactive_anon:250480kB active_file:84kB inactive_file:4kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:7996kB bounce:0kB free_pcp:544kB local_pcp:284kB free_cma:0kB [ 3394.414820] lowmem_reserve[]: 0 0 0 0 [ 3394.415320] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6504kB [ 3394.417097] Node 0 DMA32: 1257*4kB (UM) 141*8kB (UME) 19*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6460kB [ 3394.418772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3394.419821] 149 total pagecache pages [ 3394.420275] 0 pages in swap cache [ 3394.420715] Swap cache stats: add 0, delete 0, find 0/0 [ 3394.421355] Free swap = 0kB [ 3394.421738] Total swap = 0kB [ 3394.422105] 524158 pages RAM [ 3394.422491] 0 pages HighMem/MovableOnly [ 3394.422971] 105069 pages reserved [ 3394.423501] Unreclaimable slab info: [ 3394.424158] Name Used Total [ 3394.424919] pid_3 7KB 7KB [ 3394.425609] pid_2 90KB 90KB [ 3394.426252] IEEE-802.15.4-MAC 63KB 63KB [ 3394.426914] IEEE-802.15.4-RAW 63KB 63KB [ 3394.427581] p9_req_t 8KB 8KB [ 3394.428222] ip6-frags 7KB 7KB [ 3394.428892] fib6_nodes 28KB 28KB [ 3394.429580] ip6_dst_cache 52KB 52KB [ 3394.430246] PINGv6 63KB 63KB [ 3394.430922] RAWv6 346KB 346KB [ 3394.431607] UDPLITEv6 62KB 62KB [ 3394.432264] UDPv6 62KB 62KB [ 3394.432948] tw_sock_TCPv6 15KB 15KB [ 3394.433625] request_sock_TCPv6 7KB 7KB [ 3394.434294] TCPv6 62KB 62KB [ 3394.434978] scsi_sense_cache 8KB 8KB [ 3394.435637] sd_ext_cdb 3KB 3KB [ 3394.436277] virtio_scsi_cmd 16KB 16KB [ 3394.436961] sgpool-128 59KB 59KB [ 3394.437622] sgpool-64 63KB 63KB [ 3394.438260] sgpool-32 94KB 94KB [ 3394.438918] sgpool-16 112KB 112KB [ 3394.439581] sgpool-8 86KB 86KB [ 3394.440226] io_kiocb 62KB 67KB [ 3394.440900] mqueue_inode_cache 62KB 62KB [ 3394.441595] nfs_commit_data 15KB 15KB [ 3394.442258] nfs_write_data 47KB 47KB [ 3394.442927] jbd2_inode 7KB 7KB [ 3394.443612] ext4_system_zone 7KB 7KB [ 3394.444271] ext4_io_end_vec 11KB 11KB [ 3394.444972] ext4_bio_post_read_ctx 15KB 15KB [ 3394.445727] kioctx 31KB 31KB [ 3394.446367] aio_kiocb 7KB 7KB [ 3394.447072] dio 46KB 46KB [ 3394.447736] bio-2 4KB 4KB [ 3394.448384] fasync_cache 7KB 7KB [ 3394.449056] pid_namespace 7KB 7KB [ 3394.449718] posix_timers_cache 15KB 15KB [ 3394.450368] rpc_buffers 31KB 31KB [ 3394.451033] rpc_tasks 3KB 3KB [ 3394.451700] UNIX 176KB 352KB [ 3394.452344] ip4-frags 15KB 15KB [ 3394.453016] UDP-Lite 63KB 63KB [ 3394.453688] tcp_bind_bucket 8KB 8KB [ 3394.454339] inet_peer_cache 4KB 4KB [ 3394.455000] xfrm_state 32KB 32KB [ 3394.455665] ip_fib_trie 8KB 8KB [ 3394.456316] ip_fib_alias 19KB 19KB [ 3394.457006] ip_dst_cache 48KB 48KB [ 3394.457688] PING 62KB 62KB [ 3394.458331] RAW 93KB 93KB [ 3394.458999] UDP 346KB 346KB [ 3394.459665] request_sock_TCP 7KB 7KB [ 3394.460305] TCP 60KB 60KB [ 3394.460974] hugetlbfs_inode_cache 30KB 30KB [ 3394.461685] bio-1 11KB 11KB [ 3394.462329] eventpoll_pwq 23KB 23KB [ 3394.463007] eventpoll_epi 43KB 43KB [ 3394.463688] inotify_inode_mark 46KB 46KB [ 3394.464345] request_queue 60KB 60KB [ 3394.465016] blkdev_ioc 22KB 22KB [ 3394.465686] bio-0 75KB 116KB [ 3394.466341] biovec-max 1211KB 1338KB [ 3394.467005] biovec-64 220KB 299KB [ 3394.467673] biovec-16 48KB 48KB [ 3394.468317] uid_cache 8KB 8KB [ 3394.468987] dmaengine-unmap-2 4KB 4KB [ 3394.469976] audit_buffer 11KB 11KB [ 3394.470678] skbuff_fclone_cache 60KB 75KB [ 3394.471363] skbuff_head_cache 479KB 708KB [ 3394.472030] configfs_dir_cache 4KB 4KB [ 3394.472716] file_lock_cache 55KB 55KB [ 3394.473362] file_lock_ctx 7KB 7KB [ 3394.474027] fsnotify_mark_connector 24KB 24KB [ 3394.474753] net_namespace 172KB 172KB [ 3394.475417] task_delay_info 92KB 119KB [ 3394.476059] taskstats 77KB 77KB [ 3394.476733] proc_dir_entry 381KB 412KB [ 3394.477372] pde_opener 27KB 27KB [ 3394.478036] seq_file 67KB 67KB [ 3394.478704] sigqueue 126KB 126KB [ 3394.479346] shmem_inode_cache 1275KB 1320KB [ 3394.480005] kernfs_iattrs_cache 243KB 243KB [ 3394.480694] kernfs_node_cache 5969KB 5969KB [ 3394.481338] mnt_cache 196KB 220KB [ 3394.482033] filp 673KB 1477KB [ 3394.482695] names_cache 1283KB 1428KB [ 3394.483337] hashtab_node 274KB 274KB [ 3394.483997] ebitmap_node 1149KB 1149KB [ 3394.484667] avtab_node 4976KB 4976KB [ 3394.485320] avc_node 35KB 35KB [ 3394.485996] lsm_inode_cache 3201KB 3296KB [ 3394.486663] lsm_file_cache 187KB 196KB [ 3394.487305] key_jar 47KB 47KB [ 3394.487964] uts_namespace 15KB 15KB [ 3394.488631] nsproxy 11KB 11KB [ 3394.489319] vm_area_struct 1011KB 1400KB [ 3394.489988] fs_cache 55KB 72KB [ 3394.490663] files_cache 206KB 302KB [ 3394.491307] signal_cache 411KB 432KB [ 3394.491967] sighand_cache 358KB 390KB [ 3394.492631] task_struct 1161KB 1627KB [ 3394.493291] cred_jar 134KB 192KB [ 3394.493962] anon_vma_chain 252KB 354KB [ 3394.494636] anon_vma 311KB 322KB [ 3394.495285] pid 77KB 78KB [ 3394.495950] Acpi-Operand 208KB 237KB [ 3394.496615] Acpi-ParseExt 23KB 23KB [ 3394.497274] Acpi-Parse 209KB 225KB [ 3394.497940] Acpi-State 86KB 102KB [ 3394.498605] Acpi-Namespace 20KB 20KB [ 3394.499244] numa_policy 7KB 7KB [ 3394.499910] trace_event_file 176KB 176KB [ 3394.500577] ftrace_event_field 280KB 280KB [ 3394.501234] pool_workqueue 48KB 48KB [ 3394.501896] task_group 16KB 16KB [ 3394.502557] mm_struct 315KB 441KB [ 3394.503199] vmap_area 123KB 149KB [ 3394.503863] page->ptl 315KB 338KB [ 3394.504528] kmemleak_scan_area 114KB 139KB [ 3394.505196] kmemleak_object 746742KB 746742KB [ 3394.505876] kmalloc-8k 4432KB 4608KB [ 3394.506565] kmalloc-4k 5944KB 7904KB [ 3394.507220] kmalloc-2k 4776KB 5312KB [ 3394.507900] kmalloc-1k 3394KB 4800KB [ 3394.508571] kmalloc-512 24440KB 24440KB [ 3394.509231] kmalloc-256 1218KB 1360KB [ 3394.509894] kmalloc-192 928KB 928KB [ 3394.510577] kmalloc-128 535KB 640KB [ 3394.511238] kmalloc-96 351KB 580KB [ 3394.511923] kmalloc-64 906KB 1240KB [ 3394.512584] kmalloc-32 87636KB 87636KB [ 3394.513231] kmalloc-16 376KB 376KB [ 3394.513897] kmalloc-8 337KB 358KB [ 3394.514568] kmem_cache_node 47KB 47KB [ 3394.515211] kmem_cache 75KB 75KB [ 3394.515871] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=255,uid=0 [ 3394.518994] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1240788kB, anon-rss:269104kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:924kB oom_score_adj:0 [ 3396.056105] oom_reaper: reaped process 16225 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3404.968329] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3404.969604] CPU: 1 PID: 16225 Comm: syz-executor.0 Not tainted 5.10.242 #1 [ 3404.970350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3404.971238] Call Trace: [ 3404.971525] dump_stack+0x107/0x167 [ 3404.971916] dump_header+0x107/0x689 [ 3404.972327] oom_kill_process.cold+0x10/0x15 [ 3404.972860] out_of_memory+0x1149/0x1440 [ 3404.973347] ? oom_killer_disable+0x280/0x280 [ 3404.973883] ? mutex_trylock+0x237/0x2b0 [ 3404.974319] ? __alloc_pages_slowpath.constprop.0+0xa8b/0x2310 [ 3404.974951] __alloc_pages_slowpath.constprop.0+0x1c57/0x2310 [ 3404.975582] ? lock_acquire+0x117/0x470 [ 3404.976007] ? warn_alloc+0x190/0x190 [ 3404.976425] __alloc_pages_nodemask+0x51d/0x600 [ 3404.976954] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3404.977671] alloc_pages_current+0x187/0x280 [ 3404.978191] allocate_slab+0x29b/0x380 [ 3404.978619] ___slab_alloc+0x470/0x700 [ 3404.979037] ? io_issue_sqe+0x2492/0x77d0 [ 3404.979529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3404.980143] ? obj_cgroup_charge+0xc6/0x490 [ 3404.980647] ? trace_hardirqs_on+0x5b/0x180 [ 3404.981171] ? io_issue_sqe+0x2492/0x77d0 [ 3404.981665] ? kmem_cache_alloc_trace+0x305/0x320 [ 3404.982238] ? io_issue_sqe+0x2492/0x77d0 [ 3404.982717] kmem_cache_alloc_trace+0x305/0x320 [ 3404.983265] io_issue_sqe+0x2492/0x77d0 [ 3404.983714] ? io_connect+0x610/0x610 [ 3404.984128] ? io_uring_release+0x50/0x50 [ 3404.984568] ? lock_acquire+0x197/0x470 [ 3404.985032] __io_queue_sqe+0x90/0x9d0 [ 3404.985495] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3404.986071] ? trace_hardirqs_on+0x5b/0x180 [ 3404.986581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3404.987163] ? io_issue_sqe+0x77d0/0x77d0 [ 3404.987660] ? __io_queue_sqe+0x198/0x9d0 [ 3404.988134] io_submit_sqes+0x44ab/0x8610 [ 3404.988593] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3404.989130] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3404.989649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3404.990207] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3404.990681] ? trace_hardirqs_on+0x5b/0x180 [ 3404.991142] ? io_submit_sqes+0x8610/0x8610 [ 3404.991601] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3404.992077] ? finish_task_switch+0x126/0x5d0 [ 3404.992553] ? finish_task_switch+0xef/0x5d0 [ 3404.993027] ? __switch_to+0x572/0xf70 [ 3404.993441] ? __switch_to_asm+0x3a/0x60 [ 3404.993908] ? __switch_to_asm+0x34/0x60 [ 3404.994398] ? __schedule+0x82c/0x1ea0 [ 3404.994819] ? io_schedule_timeout+0x140/0x140 [ 3404.995303] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3404.995842] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3404.996476] ? __x64_sys_epoll_ctl+0x147/0x1c0 [ 3404.997024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3404.997646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3404.998253] do_syscall_64+0x33/0x40 [ 3404.998658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3404.999208] RIP: 0033:0x7ff35038bb19 [ 3404.999610] Code: Unable to access opcode bytes at RIP 0x7ff35038baef. [ 3405.000306] RSP: 002b:00007ff34d8e0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3405.001185] RAX: ffffffffffffffda RBX: 00007ff35049f020 RCX: 00007ff35038bb19 [ 3405.002026] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3405.002862] RBP: 00007ff3503e5f6d R08: 0000000000000000 R09: 0000000000000000 [ 3405.003701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3405.004536] R13: 00007ffcd0b3ea4f R14: 00007ff34d8e0300 R15: 0000000000022000 [ 3405.005470] Mem-Info: [ 3405.005772] active_anon:37 inactive_anon:7029 isolated_anon:0 [ 3405.005772] active_file:0 inactive_file:18 isolated_file:0 [ 3405.005772] unevictable:0 dirty:0 writeback:0 [ 3405.005772] slab_reclaimable:7002 slab_unreclaimable:386268 [ 3405.005772] mapped:8706 shmem:76 pagetables:236 bounce:0 [ 3405.005772] free:3234 free_pcp:86 free_cma:0 [ 3405.009144] Node 0 active_anon:148kB inactive_anon:28116kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:0kB writeback:0kB shmem:304kB writeback_tmp:0kB kernel_stack:2816kB all_unreclaimable? yes [ 3405.012447] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3405.012626] syz-executor.0: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 3405.015260] lowmem_reserve[]: 0 1616 1616 [ 3405.016951] ,cpuset=syz0 [ 3405.017463] 1616 [ 3405.017501] ,mems_allowed=0 [ 3405.017779] [ 3405.017784] Node 0 DMA32 free:6452kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:148kB inactive_anon:28116kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:944kB bounce:0kB free_pcp:344kB local_pcp:200kB free_cma:0kB [ 3405.017814] lowmem_reserve[]: 0 0 [ 3405.018259] [ 3405.018620] 0 0 [ 3405.018893] CPU: 0 PID: 16260 Comm: syz-executor.0 Not tainted 5.10.242 #1 [ 3405.022165] [ 3405.022681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3405.022686] Call Trace: [ 3405.022707] dump_stack+0x107/0x167 [ 3405.022725] warn_alloc.cold+0x95/0x18a [ 3405.022913] Node 0 [ 3405.023229] ? zone_watermark_ok_safe+0x260/0x260 [ 3405.024038] DMA: [ 3405.024284] ? schedule_timeout+0x1ce/0x380 [ 3405.025242] 1*4kB [ 3405.025586] ? usleep_range+0x170/0x170 [ 3405.025605] ? __next_timer_interrupt+0x2c0/0x2c0 [ 3405.025984] (U) [ 3405.026591] ? 0xffffffff81000000 [ 3405.026615] __alloc_pages_slowpath.constprop.0+0x1db0/0x2310 [ 3405.026841] 0*8kB 1*16kB [ 3405.027624] ? lock_acquire+0x117/0x470 [ 3405.027642] ? warn_alloc+0x190/0x190 [ 3405.027854] (U) 0*32kB [ 3405.028527] __alloc_pages_nodemask+0x51d/0x600 [ 3405.028747] 1*64kB (U) [ 3405.029372] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3405.029887] 0*128kB [ 3405.030195] alloc_pages_current+0x187/0x280 [ 3405.030553] 1*256kB [ 3405.031429] allocate_slab+0x29b/0x380 [ 3405.031447] ___slab_alloc+0x470/0x700 [ 3405.031760] (U) 0*512kB [ 3405.032384] ? io_issue_sqe+0x2492/0x77d0 [ 3405.032836] 0*1024kB [ 3405.033228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3405.033776] 1*2048kB [ 3405.034169] ? obj_cgroup_charge+0xc6/0x490 [ 3405.034869] (M) [ 3405.035218] ? trace_hardirqs_on+0x5b/0x180 [ 3405.035233] ? io_issue_sqe+0x2492/0x77d0 [ 3405.035750] 1*4096kB [ 3405.036100] ? kmem_cache_alloc_trace+0x305/0x320 [ 3405.036563] (M) [ 3405.037143] ? io_issue_sqe+0x2492/0x77d0 [ 3405.037159] kmem_cache_alloc_trace+0x305/0x320 [ 3405.037478] = 6484kB [ 3405.038101] io_issue_sqe+0x2492/0x77d0 [ 3405.038363] Node 0 DMA32: [ 3405.039153] ? io_connect+0x610/0x610 [ 3405.039176] ? io_uring_release+0x50/0x50 [ 3405.039431] 1055*4kB [ 3405.040059] ? lock_acquire+0x197/0x470 [ 3405.040074] ? find_held_lock+0x2c/0x110 [ 3405.040293] (UM) 180*8kB [ 3405.040965] __io_queue_sqe+0x90/0x9d0 [ 3405.040984] ? io_issue_sqe+0x77d0/0x77d0 [ 3405.041461] (UM) [ 3405.041829] ? kmem_cache_alloc_bulk+0x182/0x320 [ 3405.042376] 48*16kB (UM) [ 3405.042698] io_submit_sqes+0x44ab/0x8610 [ 3405.043166] 0*32kB 0*64kB [ 3405.043896] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3405.044156] 0*128kB 0*256kB [ 3405.044760] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3405.044780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3405.045109] 0*512kB 0*1024kB [ 3405.045704] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3405.045715] ? trace_hardirqs_on+0x5b/0x180 [ 3405.045729] ? io_submit_sqes+0x8610/0x8610 [ 3405.046199] 0*2048kB 0*4096kB [ 3405.046574] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3405.046586] ? finish_task_switch+0x126/0x5d0 [ 3405.046599] ? finish_task_switch+0xef/0x5d0 [ 3405.047051] = 6428kB [ 3405.047063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.047673] ? __switch_to+0x572/0xf70 [ 3405.047685] ? __switch_to_asm+0x3a/0x60 [ 3405.047698] ? __switch_to_asm+0x34/0x60 [ 3405.048017] 80 total pagecache pages [ 3405.048608] ? __schedule+0x82c/0x1ea0 [ 3405.048627] ? io_schedule_timeout+0x140/0x140 [ 3405.049086] 0 pages in swap cache [ 3405.049395] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3405.049413] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3405.049905] Swap cache stats: add 0, delete 0, find 0/0 [ 3405.049913] Free swap = 0kB [ 3405.050324] ? __x64_sys_epoll_ctl+0x147/0x1c0 [ 3405.050771] Total swap = 0kB [ 3405.051181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3405.051716] 524158 pages RAM [ 3405.052165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3405.052728] 0 pages HighMem/MovableOnly [ 3405.053519] do_syscall_64+0x33/0x40 [ 3405.053535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3405.053887] 105069 pages reserved [ 3405.053928] Unreclaimable slab info: [ 3405.054568] RIP: 0033:0x7ff35038bb19 [ 3405.054585] Code: Unable to access opcode bytes at RIP 0x7ff35038baef. [ 3405.054593] RSP: 002b:00007ff34d89e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3405.054611] RAX: ffffffffffffffda RBX: 00007ff35049f1a0 RCX: 00007ff35038bb19 [ 3405.054619] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3405.055308] Name Used Total [ 3405.055363] pid_3 7KB 7KB [ 3405.055963] RBP: 00007ff3503e5f6d R08: 0000000000000000 R09: 0000000000000000 [ 3405.055972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3405.055984] R13: 00007ffcd0b3ea4f R14: 00007ff34d89e300 R15: 0000000000022000 [ 3405.056355] pid_2 90KB 90KB [ 3405.057072] Mem-Info: [ 3405.057585] IEEE-802.15.4-MAC 63KB 63KB [ 3405.058263] active_anon:37 inactive_anon:7029 isolated_anon:0 [ 3405.058263] active_file:0 inactive_file:18 isolated_file:0 [ 3405.058263] unevictable:0 dirty:0 writeback:0 [ 3405.058263] slab_reclaimable:7002 slab_unreclaimable:386268 [ 3405.058263] mapped:8706 shmem:76 pagetables:236 bounce:0 [ 3405.058263] free:3234 free_pcp:86 free_cma:0 [ 3405.058535] IEEE-802.15.4-RAW 63KB 63KB [ 3405.058546] p9_req_t 8KB 8KB [ 3405.059829] Node 0 active_anon:148kB inactive_anon:28116kB active_file:0kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:0kB writeback:0kB shmem:304kB writeback_tmp:0kB kernel_stack:2816kB all_unreclaimable? yes [ 3405.059837] Node 0 [ 3405.060252] ip6-frags 7KB 7KB [ 3405.060899] DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3405.061320] fib6_nodes 28KB 28KB [ 3405.061892] lowmem_reserve[]: [ 3405.062345] ip6_dst_cache 52KB 52KB [ 3405.063036] 0 [ 3405.063451] PINGv6 63KB 63KB [ 3405.063461] RAWv6 346KB 346KB [ 3405.064118] 1616 1616 [ 3405.064720] UDPLITEv6 62KB 62KB [ 3405.064730] UDPv6 62KB 62KB [ 3405.065519] 1616 [ 3405.065841] tw_sock_TCPv6 15KB 15KB [ 3405.066508] [ 3405.066832] request_sock_TCPv6 7KB 7KB [ 3405.067624] Node 0 [ 3405.067974] TCPv6 62KB 62KB [ 3405.068765] DMA32 free:6452kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:148kB inactive_anon:28116kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:944kB bounce:0kB free_pcp:344kB local_pcp:144kB free_cma:0kB [ 3405.068772] lowmem_reserve[]: [ 3405.069215] scsi_sense_cache 8KB 8KB [ 3405.069786] 0 [ 3405.070390] sd_ext_cdb 3KB 3KB [ 3405.070913] 0 [ 3405.071337] virtio_scsi_cmd 16KB 16KB [ 3405.071895] 0 0 [ 3405.072683] sgpool-128 59KB 59KB [ 3405.073821] [ 3405.073829] Node 0 [ 3405.074677] sgpool-64 63KB 63KB [ 3405.074687] sgpool-32 204KB 204KB [ 3405.075772] DMA: [ 3405.076412] sgpool-16 112KB 112KB [ 3405.076422] sgpool-8 86KB 86KB [ 3405.077211] 1*4kB [ 3405.078066] io_kiocb 62KB 67KB [ 3405.078076] mqueue_inode_cache 62KB 62KB [ 3405.079109] (U) 0*8kB [ 3405.079913] nfs_commit_data 15KB 15KB [ 3405.080673] 1*16kB (U) [ 3405.080949] nfs_write_data 47KB 47KB [ 3405.081728] 0*32kB 1*64kB [ 3405.085003] jbd2_inode 7KB 7KB [ 3405.085788] (U) 0*128kB [ 3405.086411] ext4_system_zone 7KB 7KB [ 3405.086423] ext4_io_end_vec 11KB 11KB [ 3405.089749] 1*256kB (U) [ 3405.090026] ext4_bio_post_read_ctx 15KB 15KB [ 3405.090819] 0*512kB 0*1024kB 1*2048kB [ 3405.094262] kioctx 31KB 31KB [ 3405.095037] (M) 1*4096kB (M) [ 3405.095434] aio_kiocb 7KB 7KB [ 3405.096189] = 6484kB [ 3405.096199] Node 0 [ 3405.096478] dio 46KB 46KB [ 3405.097259] DMA32: 1055*4kB [ 3405.098037] bio-2 4KB 4KB [ 3405.098413] (UM) 180*8kB [ 3405.099048] fasync_cache 7KB 7KB [ 3405.099817] (UM) 48*16kB (UM) 0*32kB [ 3405.100064] pid_namespace 7KB 7KB [ 3405.100842] 0*64kB 0*128kB [ 3405.101033] posix_timers_cache 15KB 15KB [ 3405.101831] 0*256kB 0*512kB [ 3405.102154] rpc_buffers 31KB 31KB [ 3405.102939] 0*1024kB 0*2048kB 0*4096kB [ 3405.106439] rpc_tasks 3KB 3KB [ 3405.106450] UNIX 204KB 320KB [ 3405.106895] = 6428kB [ 3405.106910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.107653] ip4-frags 15KB 15KB [ 3405.107908] 80 total pagecache pages [ 3405.107916] 0 pages in swap cache [ 3405.108584] UDP-Lite 63KB 63KB [ 3405.108845] Swap cache stats: add 0, delete 0, find 0/0 [ 3405.108854] Free swap = 0kB [ 3405.109579] tcp_bind_bucket 8KB 8KB [ 3405.109847] Total swap = 0kB [ 3405.109856] 524158 pages RAM [ 3405.110618] inet_peer_cache 4KB 4KB [ 3405.110847] 0 pages HighMem/MovableOnly [ 3405.110857] 105069 pages reserved [ 3405.111169] xfrm_state 32KB 32KB [ 3405.111984] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 3405.112695] ip_fib_trie 8KB 8KB [ 3405.112985] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 3405.112997] node 0: slabs: 39554, objs: 2531456, free: 0 [ 3405.113763] ip_fib_alias 19KB 19KB [ 3405.143456] ip_dst_cache 48KB 48KB [ 3405.144160] PING 62KB 62KB [ 3405.144892] RAW 93KB 93KB [ 3405.145605] UDP 346KB 346KB [ 3405.146346] request_sock_TCP 7KB 7KB [ 3405.147107] TCP 60KB 60KB [ 3405.147870] hugetlbfs_inode_cache 30KB 30KB [ 3405.148684] bio-1 11KB 11KB [ 3405.149440] eventpoll_pwq 23KB 23KB [ 3405.150164] eventpoll_epi 43KB 43KB [ 3405.150933] inotify_inode_mark 46KB 46KB [ 3405.151697] request_queue 60KB 60KB [ 3405.152274] blkdev_ioc 22KB 22KB [ 3405.153042] bio-0 260KB 260KB [ 3405.153805] biovec-max 1041KB 1041KB [ 3405.154536] biovec-64 262KB 330KB [ 3405.155143] biovec-16 56KB 56KB [ 3405.155891] uid_cache 8KB 8KB [ 3405.156500] dmaengine-unmap-2 4KB 4KB [ 3405.157078] audit_buffer 11KB 11KB [ 3405.157670] skbuff_fclone_cache 60KB 75KB [ 3405.158262] skbuff_head_cache 535KB 555KB [ 3405.158851] configfs_dir_cache 4KB 4KB [ 3405.159446] file_lock_cache 55KB 55KB [ 3405.160016] file_lock_ctx 7KB 7KB [ 3405.160598] fsnotify_mark_connector 24KB 24KB [ 3405.161235] net_namespace 172KB 172KB [ 3405.161894] task_delay_info 89KB 119KB [ 3405.162671] taskstats 77KB 77KB [ 3405.163432] proc_dir_entry 381KB 412KB [ 3405.164168] pde_opener 27KB 27KB [ 3405.164944] seq_file 67KB 67KB [ 3405.165708] sigqueue 126KB 126KB [ 3405.166473] shmem_inode_cache 1278KB 1320KB [ 3405.167217] kernfs_iattrs_cache 243KB 243KB [ 3405.167989] kernfs_node_cache 5735KB 5788KB [ 3405.168616] mnt_cache 196KB 220KB [ 3405.169195] filp 1168KB 1350KB [ 3405.169785] names_cache 7943KB 7943KB [ 3405.170350] hashtab_node 274KB 274KB [ 3405.170945] ebitmap_node 1149KB 1149KB [ 3405.171639] avtab_node 4976KB 4976KB [ 3405.172215] avc_node 35KB 35KB [ 3405.172990] lsm_inode_cache 2525KB 2945KB [ 3405.173755] lsm_file_cache 186KB 196KB [ 3405.174517] key_jar 47KB 47KB [ 3405.175249] uts_namespace 15KB 15KB [ 3405.175994] nsproxy 11KB 11KB [ 3405.176630] vm_area_struct 1047KB 1288KB [ 3405.177213] fs_cache 54KB 68KB [ 3405.177873] files_cache 193KB 302KB [ 3405.178641] signal_cache 406KB 432KB [ 3405.179381] sighand_cache 328KB 390KB [ 3405.180157] task_struct 971KB 1496KB [ 3405.180823] cred_jar 147KB 188KB [ 3405.181600] anon_vma_chain 254KB 315KB [ 3405.182224] anon_vma 161KB 199KB [ 3405.182978] pid 77KB 78KB [ 3405.183747] Acpi-Operand 208KB 237KB [ 3405.184513] Acpi-ParseExt 23KB 23KB [ 3405.185263] Acpi-Parse 209KB 225KB [ 3405.185913] Acpi-State 86KB 102KB [ 3405.186674] Acpi-Namespace 20KB 20KB [ 3405.187291] numa_policy 7KB 7KB [ 3405.188039] trace_event_file 176KB 176KB [ 3405.188634] ftrace_event_field 280KB 280KB [ 3405.189899] pool_workqueue 48KB 48KB [ 3405.191446] task_group 16KB 16KB [ 3405.192913] mm_struct 274KB 441KB [ 3405.194264] vmap_area 121KB 149KB [ 3405.195511] page->ptl 223KB 307KB [ 3405.196728] kmemleak_scan_area 114KB 139KB [ 3405.198155] kmemleak_object 1207884KB 1207884KB [ 3405.199674] kmalloc-8k 3872KB 4128KB [ 3405.201088] kmalloc-4k 7536KB 8576KB [ 3405.202425] kmalloc-2k 4624KB 5312KB [ 3405.203840] kmalloc-1k 2960KB 4352KB [ 3405.205087] kmalloc-512 42112KB 42112KB [ 3405.206321] kmalloc-256 1265KB 1360KB [ 3405.207590] kmalloc-192 922KB 932KB [ 3405.208841] kmalloc-128 502KB 640KB [ 3405.210095] kmalloc-96 335KB 572KB [ 3405.211391] kmalloc-64 809KB 1236KB [ 3405.212793] kmalloc-32 158216KB 158216KB [ 3405.214123] kmalloc-16 376KB 376KB [ 3405.215473] kmalloc-8 335KB 358KB [ 3405.216807] kmem_cache_node 47KB 47KB [ 3405.218139] kmem_cache 75KB 75KB [ 3405.219467] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=16225,uid=0 [ 3405.223784] Out of memory (oom_kill_allocating_task): Killed process 16222 (syz-executor.0) total-vm:93812kB, anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 3405.228431] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 3405.230392] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 3405.232496] node 0: slabs: 39554, objs: 2531456, free: 0 [ 3405.460602] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3405.461862] CPU: 1 PID: 177 Comm: in:imklog Not tainted 5.10.242 #1 [ 3405.462611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3405.463638] Call Trace: [ 3405.464021] dump_stack+0x107/0x167 [ 3405.464474] dump_header+0x107/0x689 [ 3405.464903] oom_kill_process.cold+0x10/0x15 [ 3405.465397] out_of_memory+0x1149/0x1440 [ 3405.465854] ? oom_killer_disable+0x280/0x280 [ 3405.466363] ? mutex_trylock+0x237/0x2b0 [ 3405.466824] ? __alloc_pages_slowpath.constprop.0+0xa8b/0x2310 [ 3405.467486] __alloc_pages_slowpath.constprop.0+0x1c57/0x2310 [ 3405.468144] ? lock_acquire+0x117/0x470 [ 3405.468590] ? warn_alloc+0x190/0x190 [ 3405.469035] __alloc_pages_nodemask+0x51d/0x600 [ 3405.469555] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3405.470227] ? find_get_entry+0x2c8/0x740 [ 3405.470692] alloc_pages_current+0x187/0x280 [ 3405.471180] __page_cache_alloc+0x2d2/0x360 [ 3405.471659] pagecache_get_page+0x2c7/0xc80 [ 3405.472138] filemap_fault+0x177d/0x2210 [ 3405.472593] ? read_cache_page_gfp+0x30/0x30 [ 3405.473087] ? replace_page_cache_page+0x1200/0x1200 [ 3405.473648] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3405.474237] ext4_filemap_fault+0x87/0xc0 [ 3405.474694] __do_fault+0x113/0x410 [ 3405.475101] handle_mm_fault+0x1e53/0x3500 [ 3405.475575] ? __pmd_alloc+0x630/0x630 [ 3405.476009] ? vmacache_find+0x55/0x2a0 [ 3405.476449] ? vmacache_update+0xce/0x140 [ 3405.476919] do_user_addr_fault+0x56e/0xc60 [ 3405.477400] exc_page_fault+0xa2/0x1a0 [ 3405.477829] ? asm_exc_page_fault+0x8/0x30 [ 3405.478295] asm_exc_page_fault+0x1e/0x30 [ 3405.478749] RIP: 0033:0x7fc6cef8a08c [ 3405.479157] Code: Unable to access opcode bytes at RIP 0x7fc6cef8a062. [ 3405.479877] RSP: 002b:00007fc6ce5264d0 EFLAGS: 00010246 [ 3405.480462] RAX: 0000000000001f9d RBX: 0000000000000000 RCX: 00007fc6cef8a08c [ 3405.481252] RDX: 0000000000001fa0 RSI: 00007fc6ce526d00 RDI: 0000000000000005 [ 3405.482038] RBP: 0000564e50e844c0 R08: 0000000000000000 R09: 0000564e50e80e88 [ 3405.482821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6ce526d00 [ 3405.483608] R13: 0000000000001fa0 R14: 00007fc6ce526d00 R15: 00007fc6ce526d77 [ 3405.484475] Mem-Info: [ 3405.484761] active_anon:37 inactive_anon:7029 isolated_anon:0 [ 3405.484761] active_file:4 inactive_file:0 isolated_file:0 [ 3405.484761] unevictable:0 dirty:0 writeback:0 [ 3405.484761] slab_reclaimable:7002 slab_unreclaimable:386285 [ 3405.484761] mapped:8706 shmem:76 pagetables:236 bounce:0 [ 3405.484761] free:3228 free_pcp:84 free_cma:0 [ 3405.488135] Node 0 active_anon:148kB inactive_anon:28116kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:0kB writeback:0kB shmem:304kB writeback_tmp:0kB kernel_stack:2816kB all_unreclaimable? yes [ 3405.490631] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3405.493482] lowmem_reserve[]: 0 1616 1616 1616 [ 3405.494000] Node 0 DMA32 free:6428kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:148kB inactive_anon:28116kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:944kB bounce:0kB free_pcp:336kB local_pcp:192kB free_cma:0kB [ 3405.497105] lowmem_reserve[]: 0 0 0 0 [ 3405.497559] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3405.499031] Node 0 DMA32: 1055*4kB (UM) 180*8kB (UM) 48*16kB (UM) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6428kB [ 3405.500485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.501429] 80 total pagecache pages [ 3405.501832] 0 pages in swap cache [ 3405.502210] Swap cache stats: add 0, delete 0, find 0/0 [ 3405.502806] Free swap = 0kB [ 3405.503135] Total swap = 0kB [ 3405.503482] 524158 pages RAM [ 3405.503813] 0 pages HighMem/MovableOnly [ 3405.504239] 105069 pages reserved [ 3405.504634] Unreclaimable slab info: [ 3405.505042] Name Used Total [ 3405.505658] pid_3 7KB 7KB [ 3405.506236] pid_2 90KB 90KB [ 3405.506835] IEEE-802.15.4-MAC 63KB 63KB [ 3405.507434] IEEE-802.15.4-RAW 63KB 63KB [ 3405.508013] p9_req_t 8KB 8KB [ 3405.508610] ip6-frags 7KB 7KB [ 3405.509200] fib6_nodes 28KB 28KB [ 3405.509796] ip6_dst_cache 52KB 52KB [ 3405.510375] PINGv6 63KB 63KB [ 3405.510973] RAWv6 346KB 346KB [ 3405.511572] UDPLITEv6 62KB 62KB [ 3405.512151] UDPv6 62KB 62KB [ 3405.512749] tw_sock_TCPv6 15KB 15KB [ 3405.513333] request_sock_TCPv6 7KB 7KB [ 3405.513941] TCPv6 62KB 62KB [ 3405.514536] scsi_sense_cache 8KB 8KB [ 3405.515112] sd_ext_cdb 3KB 3KB [ 3405.515458] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 3405.515707] virtio_scsi_cmd 16KB 16KB [ 3405.516637] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 3405.516645] node 0: slabs: 39554, objs: 2531456, free: 0 [ 3405.518827] sgpool-128 59KB 59KB [ 3405.519423] sgpool-64 63KB 63KB [ 3405.520004] sgpool-32 204KB 204KB [ 3405.520609] sgpool-16 112KB 112KB [ 3405.521189] sgpool-8 86KB 86KB [ 3405.521791] io_kiocb 62KB 67KB [ 3405.522366] mqueue_inode_cache 62KB 62KB [ 3405.522966] nfs_commit_data 15KB 15KB [ 3405.523562] nfs_write_data 47KB 47KB [ 3405.524135] jbd2_inode 7KB 7KB [ 3405.524728] ext4_system_zone 7KB 7KB [ 3405.525315] ext4_io_end_vec 11KB 11KB [ 3405.525912] ext4_bio_post_read_ctx 15KB 15KB [ 3405.526553] kioctx 31KB 31KB [ 3405.527133] aio_kiocb 7KB 7KB [ 3405.527726] dio 46KB 46KB [ 3405.528375] bio-2 4KB 4KB [ 3405.528989] fasync_cache 7KB 7KB [ 3405.529592] pid_namespace 7KB 7KB [ 3405.530166] posix_timers_cache 15KB 15KB [ 3405.530777] rpc_buffers 31KB 31KB [ 3405.531353] rpc_tasks 3KB 3KB [ 3405.531940] UNIX 204KB 320KB [ 3405.532536] ip4-frags 15KB 15KB [ 3405.533115] UDP-Lite 63KB 63KB [ 3405.533704] tcp_bind_bucket 8KB 8KB [ 3405.534273] inet_peer_cache 4KB 4KB [ 3405.534862] xfrm_state 32KB 32KB [ 3405.535450] ip_fib_trie 8KB 8KB [ 3405.536022] ip_fib_alias 19KB 19KB [ 3405.536612] ip_dst_cache 48KB 48KB [ 3405.537192] PING 62KB 62KB [ 3405.537780] RAW 93KB 93KB [ 3405.538354] UDP 346KB 346KB [ 3405.538941] request_sock_TCP 7KB 7KB [ 3405.539534] TCP 60KB 60KB [ 3405.540102] hugetlbfs_inode_cache 30KB 30KB [ 3405.540724] bio-1 11KB 11KB [ 3405.541305] eventpoll_pwq 23KB 23KB [ 3405.541899] eventpoll_epi 43KB 43KB [ 3405.542486] inotify_inode_mark 46KB 46KB [ 3405.543068] request_queue 60KB 60KB [ 3405.543655] blkdev_ioc 22KB 22KB [ 3405.544222] bio-0 260KB 260KB [ 3405.544809] biovec-max 1041KB 1041KB [ 3405.545404] biovec-64 262KB 330KB [ 3405.545973] biovec-16 56KB 56KB [ 3405.546564] uid_cache 8KB 8KB [ 3405.547133] dmaengine-unmap-2 4KB 4KB [ 3405.547733] audit_buffer 11KB 11KB [ 3405.548305] skbuff_fclone_cache 60KB 75KB [ 3405.548929] skbuff_head_cache 535KB 555KB [ 3405.549522] configfs_dir_cache 4KB 4KB [ 3405.550098] file_lock_cache 55KB 55KB [ 3405.550684] file_lock_ctx 7KB 7KB [ 3405.551249] fsnotify_mark_connector 24KB 24KB [ 3405.551889] net_namespace 172KB 172KB [ 3405.552472] task_delay_info 89KB 119KB [ 3405.553046] taskstats 77KB 77KB [ 3405.553629] proc_dir_entry 381KB 412KB [ 3405.554194] pde_opener 27KB 27KB [ 3405.554786] seq_file 67KB 67KB [ 3405.555351] sigqueue 126KB 126KB [ 3405.555933] shmem_inode_cache 1278KB 1320KB [ 3405.556514] kernfs_iattrs_cache 243KB 243KB [ 3405.557109] kernfs_node_cache 5735KB 5788KB [ 3405.557694] mnt_cache 196KB 220KB [ 3405.558264] filp 1168KB 1350KB [ 3405.558853] names_cache 7943KB 7943KB [ 3405.559435] hashtab_node 274KB 274KB [ 3405.559998] ebitmap_node 1149KB 1149KB [ 3405.560580] avtab_node 4976KB 4976KB [ 3405.561156] avc_node 35KB 35KB [ 3405.561745] lsm_inode_cache 2525KB 2945KB [ 3405.562308] lsm_file_cache 186KB 196KB [ 3405.562894] key_jar 47KB 47KB [ 3405.563477] uts_namespace 15KB 15KB [ 3405.564041] nsproxy 11KB 11KB [ 3405.564626] vm_area_struct 1047KB 1288KB [ 3405.565203] fs_cache 54KB 68KB [ 3405.565787] files_cache 193KB 302KB [ 3405.566352] signal_cache 406KB 432KB [ 3405.566934] sighand_cache 328KB 390KB [ 3405.567516] task_struct 971KB 1496KB [ 3405.568081] cred_jar 147KB 188KB [ 3405.568664] anon_vma_chain 254KB 315KB [ 3405.569232] anon_vma 161KB 199KB [ 3405.569810] pid 77KB 78KB [ 3405.570375] Acpi-Operand 208KB 237KB [ 3405.570957] Acpi-ParseExt 23KB 23KB [ 3405.571537] Acpi-Parse 209KB 225KB [ 3405.572094] Acpi-State 86KB 102KB [ 3405.572672] Acpi-Namespace 20KB 20KB [ 3405.573243] numa_policy 7KB 7KB [ 3405.573830] trace_event_file 176KB 176KB [ 3405.574409] ftrace_event_field 280KB 280KB [ 3405.574980] pool_workqueue 48KB 48KB [ 3405.575570] task_group 16KB 16KB [ 3405.576130] mm_struct 274KB 441KB [ 3405.576709] vmap_area 121KB 149KB [ 3405.577276] page->ptl 223KB 307KB [ 3405.577862] kmemleak_scan_area 114KB 139KB [ 3405.578459] kmemleak_object 1207888KB 1207888KB [ 3405.579027] kmalloc-8k 3872KB 4128KB [ 3405.579612] kmalloc-4k 7536KB 8576KB [ 3405.580174] kmalloc-2k 4624KB 5312KB [ 3405.580760] kmalloc-1k 2960KB 4352KB [ 3405.581334] kmalloc-512 42116KB 42116KB [ 3405.581918] kmalloc-256 1265KB 1360KB [ 3405.582498] kmalloc-192 922KB 932KB [ 3405.583057] kmalloc-128 502KB 640KB [ 3405.583642] kmalloc-96 335KB 572KB [ 3405.584203] kmalloc-64 809KB 1236KB [ 3405.584779] kmalloc-32 158216KB 158216KB [ 3405.585347] kmalloc-16 376KB 376KB [ 3405.585934] kmalloc-8 335KB 358KB [ 3405.586519] kmem_cache_node 47KB 47KB [ 3405.587088] kmem_cache 75KB 75KB [ 3405.587666] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=177,uid=0 [ 3405.589664] Out of memory (oom_kill_allocating_task): Killed process 172 (rsyslogd) total-vm:220876kB, anon-rss:1128kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 3405.735789] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3405.736879] CPU: 0 PID: 16225 Comm: syz-executor.0 Not tainted 5.10.242 #1 [ 3405.737682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3405.738644] Call Trace: [ 3405.738951] dump_stack+0x107/0x167 [ 3405.739374] dump_header+0x107/0x689 [ 3405.739812] oom_kill_process.cold+0x10/0x15 [ 3405.740329] out_of_memory+0x1149/0x1440 [ 3405.740805] ? oom_killer_disable+0x280/0x280 [ 3405.741336] ? mutex_trylock+0x237/0x2b0 [ 3405.741809] ? __alloc_pages_slowpath.constprop.0+0xa8b/0x2310 [ 3405.742500] __alloc_pages_slowpath.constprop.0+0x1c57/0x2310 [ 3405.743187] ? lock_acquire+0x117/0x470 [ 3405.743652] ? warn_alloc+0x190/0x190 [ 3405.744115] __alloc_pages_nodemask+0x51d/0x600 [ 3405.744660] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3405.745375] alloc_pages_current+0x187/0x280 [ 3405.745889] allocate_slab+0x29b/0x380 [ 3405.746347] ___slab_alloc+0x470/0x700 [ 3405.746809] ? io_issue_sqe+0x2492/0x77d0 [ 3405.747295] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3405.747900] ? obj_cgroup_charge+0xc6/0x490 [ 3405.748404] ? trace_hardirqs_on+0x5b/0x180 [ 3405.748912] ? io_issue_sqe+0x2492/0x77d0 [ 3405.749398] ? kmem_cache_alloc_trace+0x305/0x320 [ 3405.749959] ? io_issue_sqe+0x2492/0x77d0 [ 3405.750444] kmem_cache_alloc_trace+0x305/0x320 [ 3405.750990] io_issue_sqe+0x2492/0x77d0 [ 3405.751467] ? io_connect+0x610/0x610 [ 3405.751927] ? io_uring_release+0x50/0x50 [ 3405.752412] ? lock_acquire+0x197/0x470 [ 3405.752888] __io_queue_sqe+0x90/0x9d0 [ 3405.753343] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3405.753969] ? trace_hardirqs_on+0x5b/0x180 [ 3405.754479] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3405.755109] ? io_issue_sqe+0x77d0/0x77d0 [ 3405.755597] ? __io_queue_sqe+0x198/0x9d0 [ 3405.756085] io_submit_sqes+0x44ab/0x8610 [ 3405.756588] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3405.757178] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3405.757747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3405.758359] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3405.758879] ? trace_hardirqs_on+0x5b/0x180 [ 3405.759382] ? io_submit_sqes+0x8610/0x8610 [ 3405.759880] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3405.760401] ? finish_task_switch+0x126/0x5d0 [ 3405.760928] ? finish_task_switch+0xef/0x5d0 [ 3405.761439] ? __switch_to+0x572/0xf70 [ 3405.761889] ? __switch_to_asm+0x3a/0x60 [ 3405.762359] ? __switch_to_asm+0x34/0x60 [ 3405.762832] ? __schedule+0x82c/0x1ea0 [ 3405.763289] ? io_schedule_timeout+0x140/0x140 [ 3405.763815] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3405.764348] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3405.764991] ? __x64_sys_epoll_ctl+0x147/0x1c0 [ 3405.765528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3405.766136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3405.766737] do_syscall_64+0x33/0x40 [ 3405.767173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3405.767775] RIP: 0033:0x7ff35038bb19 [ 3405.768206] Code: Unable to access opcode bytes at RIP 0x7ff35038baef. [ 3405.768976] RSP: 002b:00007ff34d8e0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3405.769857] RAX: ffffffffffffffda RBX: 00007ff35049f020 RCX: 00007ff35038bb19 [ 3405.770687] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3405.771517] RBP: 00007ff3503e5f6d R08: 0000000000000000 R09: 0000000000000000 [ 3405.772345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3405.773186] R13: 00007ffcd0b3ea4f R14: 00007ff34d8e0300 R15: 0000000000022000 [ 3405.774048] Mem-Info: [ 3405.774346] active_anon:37 inactive_anon:7029 isolated_anon:0 [ 3405.774346] active_file:11 inactive_file:0 isolated_file:0 [ 3405.774346] unevictable:0 dirty:0 writeback:0 [ 3405.774346] slab_reclaimable:7002 slab_unreclaimable:386285 [ 3405.774346] mapped:8706 shmem:76 pagetables:236 bounce:0 [ 3405.774346] free:3228 free_pcp:82 free_cma:0 [ 3405.777971] Node 0 active_anon:148kB inactive_anon:28116kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:0kB writeback:0kB shmem:304kB writeback_tmp:0kB kernel_stack:2720kB all_unreclaimable? yes [ 3405.780600] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3405.783622] lowmem_reserve[]: 0 1616 1616 1616 [ 3405.784173] Node 0 DMA32 free:6428kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:148kB inactive_anon:28116kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:944kB bounce:0kB free_pcp:328kB local_pcp:144kB free_cma:0kB [ 3405.787495] lowmem_reserve[]: 0 0 0 0 [ 3405.787964] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3405.789580] Node 0 DMA32: 1055*4kB (UM) 180*8kB (UM) 48*16kB (UM) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6524kB [ 3405.791218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3405.792237] 80 total pagecache pages [ 3405.792694] 0 pages in swap cache [ 3405.793101] Swap cache stats: add 0, delete 0, find 0/0 [ 3405.793730] Free swap = 0kB [ 3405.794077] Total swap = 0kB [ 3405.794439] 524158 pages RAM [ 3405.794787] 0 pages HighMem/MovableOnly [ 3405.795239] 105069 pages reserved [ 3405.795650] Unreclaimable slab info: [ 3405.796079] Name Used Total [ 3405.796731] pid_3 7KB 7KB [ 3405.797349] pid_2 90KB 90KB [ 3405.797975] IEEE-802.15.4-MAC 63KB 63KB [ 3405.798600] IEEE-802.15.4-RAW 63KB 63KB [ 3405.799210] p9_req_t 8KB 8KB [ 3405.799838] ip6-frags 7KB 7KB [ 3405.800468] fib6_nodes 28KB 28KB [ 3405.801085] ip6_dst_cache 52KB 52KB [ 3405.801710] PINGv6 63KB 63KB [ 3405.802323] RAWv6 346KB 346KB [ 3405.802963] UDPLITEv6 62KB 62KB [ 3405.803618] UDPv6 62KB 62KB [ 3405.804249] tw_sock_TCPv6 15KB 15KB [ 3405.804903] request_sock_TCPv6 7KB 7KB [ 3405.805565] TCPv6 62KB 62KB [ 3405.806199] scsi_sense_cache 8KB 8KB [ 3405.806848] sd_ext_cdb 3KB 3KB [ 3405.807501] virtio_scsi_cmd 16KB 16KB [ 3405.808143] sgpool-128 59KB 59KB [ 3405.808779] sgpool-64 63KB 63KB [ 3405.809438] sgpool-32 204KB 204KB [ 3405.810071] sgpool-16 112KB 112KB [ 3405.810720] sgpool-8 86KB 86KB [ 3405.811356] io_kiocb 62KB 67KB [ 3405.812003] mqueue_inode_cache 62KB 62KB [ 3405.812664] nfs_commit_data 15KB 15KB [ 3405.813308] nfs_write_data 47KB 47KB [ 3405.813959] jbd2_inode 7KB 7KB [ 3405.814611] ext4_system_zone 7KB 7KB [ 3405.815253] ext4_io_end_vec 11KB 11KB [ 3405.815901] ext4_bio_post_read_ctx 15KB 15KB [ 3405.816599] kioctx 31KB 31KB [ 3405.817241] aio_kiocb 7KB 7KB [ 3405.817895] dio 46KB 46KB [ 3405.818525] bio-2 4KB 4KB [ 3405.819137] fasync_cache 7KB 7KB [ 3405.819763] pid_namespace 7KB 7KB [ 3405.820375] posix_timers_cache 15KB 15KB [ 3405.821022] rpc_buffers 31KB 31KB [ 3405.821651] rpc_tasks 3KB 3KB [ 3405.822266] UNIX 204KB 320KB [ 3405.822893] ip4-frags 15KB 15KB [ 3405.823540] UDP-Lite 63KB 63KB [ 3405.824171] tcp_bind_bucket 8KB 8KB [ 3405.824829] inet_peer_cache 4KB 4KB [ 3405.825484] xfrm_state 32KB 32KB [ 3405.826118] ip_fib_trie 8KB 8KB [ 3405.826756] ip_fib_alias 19KB 19KB [ 3405.827405] ip_dst_cache 48KB 48KB [ 3405.828042] PING 62KB 62KB [ 3405.828690] RAW 93KB 93KB [ 3405.829336] UDP 346KB 346KB [ 3405.829992] request_sock_TCP 7KB 7KB [ 3405.830626] TCP 60KB 60KB [ 3405.831253] hugetlbfs_inode_cache 30KB 30KB [ 3405.831941] bio-1 11KB 11KB [ 3405.832594] eventpoll_pwq 23KB 23KB [ 3405.833243] eventpoll_epi 43KB 43KB [ 3405.833902] inotify_inode_mark 46KB 46KB [ 3405.834561] request_queue 60KB 60KB [ 3405.835172] blkdev_ioc 22KB 22KB [ 3405.835803] bio-0 260KB 260KB [ 3405.836435] biovec-max 1041KB 1041KB [ 3405.837099] biovec-64 262KB 330KB [ 3405.837734] biovec-16 56KB 56KB [ 3405.838378] uid_cache 8KB 8KB [ 3405.839019] dmaengine-unmap-2 4KB 4KB [ 3405.839645] audit_buffer 11KB 11KB [ 3405.840257] skbuff_fclone_cache 60KB 75KB [ 3405.840915] skbuff_head_cache 535KB 555KB [ 3405.841551] configfs_dir_cache 4KB 4KB [ 3405.842201] file_lock_cache 55KB 55KB [ 3405.842830] file_lock_ctx 7KB 7KB [ 3405.843456] fsnotify_mark_connector 24KB 24KB [ 3405.844129] net_namespace 172KB 172KB [ 3405.844782] task_delay_info 89KB 119KB [ 3405.845447] taskstats 77KB 77KB [ 3405.846089] proc_dir_entry 381KB 412KB [ 3405.846745] pde_opener 27KB 27KB [ 3405.847404] seq_file 67KB 67KB [ 3405.848048] sigqueue 126KB 126KB [ 3405.848690] shmem_inode_cache 1278KB 1320KB [ 3405.849344] kernfs_iattrs_cache 243KB 243KB [ 3405.850008] kernfs_node_cache 5735KB 5788KB [ 3405.850638] mnt_cache 196KB 220KB [ 3405.851260] filp 1168KB 1350KB [ 3405.851890] names_cache 7943KB 7943KB [ 3405.852520] hashtab_node 274KB 274KB [ 3405.853138] ebitmap_node 1149KB 1149KB [ 3405.853766] avtab_node 4976KB 4976KB [ 3405.854424] avc_node 35KB 35KB [ 3405.855100] lsm_inode_cache 2525KB 2945KB [ 3405.855735] lsm_file_cache 186KB 196KB [ 3405.856348] key_jar 47KB 47KB [ 3405.856980] uts_namespace 15KB 15KB [ 3405.857609] nsproxy 11KB 11KB [ 3405.858246] vm_area_struct 1047KB 1288KB [ 3405.858897] fs_cache 54KB 68KB [ 3405.859552] files_cache 193KB 302KB [ 3405.860191] signal_cache 406KB 432KB [ 3405.860856] sighand_cache 328KB 390KB [ 3405.861511] task_struct 971KB 1496KB [ 3405.862146] cred_jar 147KB 188KB [ 3405.862781] anon_vma_chain 254KB 315KB [ 3405.863433] anon_vma 161KB 199KB [ 3405.864068] pid 77KB 78KB [ 3405.864718] Acpi-Operand 208KB 237KB [ 3405.865362] Acpi-ParseExt 23KB 23KB [ 3405.866013] Acpi-Parse 209KB 225KB [ 3405.866640] Acpi-State 86KB 102KB [ 3405.867251] Acpi-Namespace 20KB 20KB [ 3405.867877] numa_policy 7KB 7KB [ 3405.868504] trace_event_file 176KB 176KB [ 3405.869129] ftrace_event_field 280KB 280KB [ 3405.869769] pool_workqueue 48KB 48KB [ 3405.870384] task_group 16KB 16KB [ 3405.871012] mm_struct 274KB 441KB [ 3405.871641] vmap_area 121KB 149KB [ 3405.872297] page->ptl 223KB 307KB [ 3405.872958] kmemleak_scan_area 114KB 139KB [ 3405.873628] kmemleak_object 1207892KB 1207892KB [ 3405.874278] kmalloc-8k 3872KB 4128KB [ 3405.874922] kmalloc-4k 7536KB 8576KB [ 3405.875567] kmalloc-2k 4624KB 5312KB [ 3405.876199] kmalloc-1k 2960KB 4352KB [ 3405.876836] kmalloc-512 42120KB 42120KB [ 3405.877472] kmalloc-256 1265KB 1360KB [ 3405.878093] kmalloc-192 922KB 932KB [ 3405.878739] kmalloc-128 502KB 640KB [ 3405.879372] kmalloc-96 335KB 572KB [ 3405.880036] kmalloc-64 809KB 1236KB [ 3405.880667] kmalloc-32 158216KB 158216KB [ 3405.881291] kmalloc-16 376KB 376KB [ 3405.881929] kmalloc-8 335KB 358KB [ 3405.882562] kmem_cache_node 47KB 47KB [ 3405.883172] kmem_cache 75KB 75KB [ 3405.883799] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=16225,uid=0 [ 3405.885462] Out of memory (oom_kill_allocating_task): Killed process 16222 (syz-executor.0) total-vm:93812kB, anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 3405.887560] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 3405.888537] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 3405.889603] node 0: slabs: 39554, objs: 2531456, free: 0 [ 3406.060979] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3406.062106] CPU: 0 PID: 16260 Comm: syz-executor.0 Not tainted 5.10.242 #1 [ 3406.062945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3406.063950] Call Trace: [ 3406.064271] dump_stack+0x107/0x167 [ 3406.064716] dump_header+0x107/0x689 [ 3406.065174] oom_kill_process.cold+0x10/0x15 [ 3406.065711] out_of_memory+0x1149/0x1440 [ 3406.066211] ? oom_killer_disable+0x280/0x280 [ 3406.066768] ? mutex_trylock+0x237/0x2b0 [ 3406.067261] ? __alloc_pages_slowpath.constprop.0+0xa8b/0x2310 [ 3406.067962] __alloc_pages_slowpath.constprop.0+0x1c57/0x2310 [ 3406.068673] ? lock_acquire+0x117/0x470 [ 3406.069167] ? warn_alloc+0x190/0x190 [ 3406.069642] __alloc_pages_nodemask+0x51d/0x600 [ 3406.070206] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3406.070947] alloc_pages_current+0x187/0x280 [ 3406.071482] allocate_slab+0x29b/0x380 [ 3406.071956] ___slab_alloc+0x470/0x700 [ 3406.072425] ? io_issue_sqe+0x2492/0x77d0 [ 3406.072917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3406.073527] ? obj_cgroup_charge+0xc6/0x490 [ 3406.074026] ? trace_hardirqs_on+0x5b/0x180 [ 3406.074529] ? io_issue_sqe+0x2492/0x77d0 [ 3406.075012] ? kmem_cache_alloc_trace+0x305/0x320 [ 3406.075571] ? io_issue_sqe+0x2492/0x77d0 [ 3406.076051] kmem_cache_alloc_trace+0x305/0x320 [ 3406.076596] io_issue_sqe+0x2492/0x77d0 [ 3406.077075] ? io_connect+0x610/0x610 [ 3406.077525] ? io_uring_release+0x50/0x50 [ 3406.078008] ? lock_acquire+0x197/0x470 [ 3406.078471] ? find_held_lock+0x2c/0x110 [ 3406.078948] __io_queue_sqe+0x90/0x9d0 [ 3406.079405] ? io_issue_sqe+0x77d0/0x77d0 [ 3406.079896] ? kmem_cache_alloc_bulk+0x182/0x320 [ 3406.080450] io_submit_sqes+0x44ab/0x8610 [ 3406.080963] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 3406.081548] __do_sys_io_uring_enter+0x6b2/0x1890 [ 3406.082114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3406.082719] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3406.083239] ? trace_hardirqs_on+0x5b/0x180 [ 3406.083740] ? io_submit_sqes+0x8610/0x8610 [ 3406.084241] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3406.084763] ? finish_task_switch+0x126/0x5d0 [ 3406.085291] ? finish_task_switch+0xef/0x5d0 [ 3406.085804] ? __switch_to+0x572/0xf70 [ 3406.086257] ? __switch_to_asm+0x3a/0x60 [ 3406.086731] ? __switch_to_asm+0x34/0x60 [ 3406.087206] ? __schedule+0x82c/0x1ea0 [ 3406.087664] ? io_schedule_timeout+0x140/0x140 [ 3406.088199] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 3406.088737] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 3406.089380] ? __x64_sys_epoll_ctl+0x147/0x1c0 [ 3406.089921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3406.090536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3406.091140] do_syscall_64+0x33/0x40 [ 3406.091576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3406.092179] RIP: 0033:0x7ff35038bb19 [ 3406.092608] Code: Unable to access opcode bytes at RIP 0x7ff35038baef. [ 3406.093380] RSP: 002b:00007ff34d89e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3406.094269] RAX: ffffffffffffffda RBX: 00007ff35049f1a0 RCX: 00007ff35038bb19 [ 3406.095099] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3406.095934] RBP: 00007ff3503e5f6d R08: 0000000000000000 R09: 0000000000000000 [ 3406.096777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3406.097613] R13: 00007ffcd0b3ea4f R14: 00007ff34d89e300 R15: 0000000000022000 [ 3406.098514] Mem-Info: [ 3406.098812] active_anon:37 inactive_anon:7029 isolated_anon:0 [ 3406.098812] active_file:0 inactive_file:14 isolated_file:0 [ 3406.098812] unevictable:0 dirty:0 writeback:0 [ 3406.098812] slab_reclaimable:7002 slab_unreclaimable:386285 [ 3406.098812] mapped:8706 shmem:76 pagetables:236 bounce:0 [ 3406.098812] free:3228 free_pcp:81 free_cma:0 [ 3406.102443] Node 0 active_anon:148kB inactive_anon:28116kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:0kB writeback:0kB shmem:304kB writeback_tmp:0kB kernel_stack:2720kB all_unreclaimable? yes [ 3406.105099] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3406.108134] lowmem_reserve[]: 0 1616 1616 1616 [ 3406.108705] Node 0 DMA32 free:6460kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:148kB inactive_anon:28116kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:944kB bounce:0kB free_pcp:324kB local_pcp:144kB free_cma:0kB [ 3406.112057] lowmem_reserve[]: 0 0 0 0 [ 3406.112539] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3406.114117] Node 0 DMA32: 1055*4kB (UM) 180*8kB (UM) 48*16kB (UM) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6524kB [ 3406.115716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3406.116712] 80 total pagecache pages [ 3406.117150] 0 pages in swap cache [ 3406.117567] Swap cache stats: add 0, delete 0, find 0/0 [ 3406.118184] Free swap = 0kB [ 3406.118552] Total swap = 0kB [ 3406.118905] 524158 pages RAM [ 3406.119256] 0 pages HighMem/MovableOnly [ 3406.119731] 105069 pages reserved [ 3406.120131] Unreclaimable slab info: [ 3406.120600] Name Used Total [ 3406.121243] pid_3 7KB 7KB [ 3406.121916] pid_2 90KB 90KB [ 3406.122550] IEEE-802.15.4-MAC 63KB 63KB [ 3406.123168] IEEE-802.15.4-RAW 63KB 63KB [ 3406.123796] p9_req_t 8KB 8KB [ 3406.124427] ip6-frags 7KB 7KB [ 3406.125057] fib6_nodes 28KB 28KB [ 3406.125748] ip6_dst_cache 52KB 52KB [ 3406.126373] PINGv6 63KB 63KB [ 3406.127017] RAWv6 346KB 346KB [ 3406.127652] UDPLITEv6 62KB 62KB [ 3406.128269] UDPv6 62KB 62KB [ 3406.128909] tw_sock_TCPv6 15KB 15KB [ 3406.129543] request_sock_TCPv6 7KB 7KB [ 3406.130168] TCPv6 62KB 62KB [ 3406.130803] scsi_sense_cache 8KB 8KB [ 3406.131436] sd_ext_cdb 3KB 3KB [ 3406.132050] virtio_scsi_cmd 16KB 16KB [ 3406.132708] sgpool-128 59KB 59KB [ 3406.133339] sgpool-64 63KB 63KB [ 3406.133968] sgpool-32 204KB 204KB [ 3406.134598] sgpool-16 112KB 112KB [ 3406.135213] sgpool-8 86KB 86KB [ 3406.135849] io_kiocb 62KB 67KB [ 3406.136481] mqueue_inode_cache 62KB 62KB [ 3406.137116] nfs_commit_data 15KB 15KB [ 3406.137755] nfs_write_data 47KB 47KB [ 3406.138384] jbd2_inode 7KB 7KB [ 3406.139023] ext4_system_zone 7KB 7KB [ 3406.139657] ext4_io_end_vec 11KB 11KB [ 3406.140274] ext4_bio_post_read_ctx 15KB 15KB [ 3406.140966] kioctx 31KB 31KB [ 3406.141605] aio_kiocb 7KB 7KB [ 3406.142220] dio 46KB 46KB [ 3406.142854] bio-2 4KB 4KB [ 3406.143517] fasync_cache 7KB 7KB [ 3406.144134] pid_namespace 7KB 7KB [ 3406.144772] posix_timers_cache 15KB 15KB [ 3406.145420] rpc_buffers 31KB 31KB [ 3406.146036] rpc_tasks 3KB 3KB [ 3406.146670] UNIX 204KB 320KB [ 3406.147286] ip4-frags 15KB 15KB [ 3406.147916] UDP-Lite 63KB 63KB [ 3406.148544] tcp_bind_bucket 8KB 8KB [ 3406.149161] inet_peer_cache 4KB 4KB [ 3406.149787] xfrm_state 32KB 32KB [ 3406.150417] ip_fib_trie 8KB 8KB [ 3406.151030] ip_fib_alias 19KB 19KB [ 3406.151659] ip_dst_cache 48KB 48KB [ 3406.152272] PING 62KB 62KB [ 3406.152906] RAW 93KB 93KB [ 3406.153531] UDP 346KB 346KB [ 3406.154149] request_sock_TCP 7KB 7KB [ 3406.154778] TCP 60KB 60KB [ 3406.155408] hugetlbfs_inode_cache 30KB 30KB [ 3406.156063] bio-1 11KB 11KB [ 3406.156689] eventpoll_pwq 23KB 23KB [ 3406.157317] eventpoll_epi 43KB 43KB [ 3406.157949] inotify_inode_mark 46KB 46KB [ 3406.158596] request_queue 60KB 60KB [ 3406.159213] blkdev_ioc 22KB 22KB [ 3406.159848] bio-0 260KB 260KB [ 3406.160478] biovec-max 1041KB 1041KB [ 3406.161097] biovec-64 262KB 330KB [ 3406.161734] biovec-16 56KB 56KB [ 3406.162348] uid_cache 8KB 8KB [ 3406.162974] dmaengine-unmap-2 4KB 4KB [ 3406.163608] audit_buffer 11KB 11KB [ 3406.164220] skbuff_fclone_cache 60KB 75KB [ 3406.164878] skbuff_head_cache 535KB 555KB [ 3406.165511] configfs_dir_cache 4KB 4KB [ 3406.166136] file_lock_cache 55KB 55KB [ 3406.166772] file_lock_ctx 7KB 7KB [ 3406.167402] fsnotify_mark_connector 24KB 24KB [ 3406.168076] net_namespace 172KB 172KB [ 3406.168707] task_delay_info 89KB 119KB [ 3406.169328] taskstats 77KB 77KB [ 3406.169957] proc_dir_entry 381KB 412KB [ 3406.170592] pde_opener 27KB 27KB [ 3406.171210] seq_file 67KB 67KB [ 3406.171846] sigqueue 126KB 126KB [ 3406.172481] shmem_inode_cache 1278KB 1320KB [ 3406.173104] kernfs_iattrs_cache 243KB 243KB [ 3406.173763] kernfs_node_cache 5735KB 5788KB [ 3406.174375] mnt_cache 196KB 220KB [ 3406.175010] filp 1168KB 1350KB [ 3406.175644] names_cache 7943KB 7943KB [ 3406.176259] hashtab_node 274KB 274KB [ 3406.176890] ebitmap_node 1149KB 1149KB [ 3406.177516] avtab_node 4976KB 4976KB [ 3406.178130] avc_node 35KB 35KB [ 3406.178765] lsm_inode_cache 2525KB 2945KB [ 3406.179378] lsm_file_cache 186KB 196KB [ 3406.180023] key_jar 47KB 47KB [ 3406.180654] uts_namespace 15KB 15KB [ 3406.181277] nsproxy 11KB 11KB [ 3406.181917] vm_area_struct 1047KB 1288KB [ 3406.182545] fs_cache 54KB 68KB [ 3406.183160] files_cache 193KB 302KB [ 3406.183794] signal_cache 406KB 432KB [ 3406.184422] sighand_cache 328KB 390KB [ 3406.185039] task_struct 971KB 1496KB [ 3406.185663] cred_jar 147KB 188KB [ 3406.186272] anon_vma_chain 254KB 315KB [ 3406.186908] anon_vma 161KB 199KB [ 3406.187538] pid 77KB 78KB [ 3406.188159] Acpi-Operand 208KB 237KB [ 3406.188785] Acpi-ParseExt 23KB 23KB [ 3406.189425] Acpi-Parse 209KB 225KB [ 3406.190045] Acpi-State 86KB 102KB [ 3406.190674] Acpi-Namespace 20KB 20KB [ 3406.191292] numa_policy 7KB 7KB [ 3406.191924] trace_event_file 176KB 176KB [ 3406.192553] ftrace_event_field 280KB 280KB [ 3406.193181] pool_workqueue 48KB 48KB [ 3406.193815] task_group 16KB 16KB [ 3406.194448] mm_struct 274KB 441KB [ 3406.195061] vmap_area 121KB 149KB [ 3406.195693] page->ptl 223KB 307KB [ 3406.196303] kmemleak_scan_area 114KB 139KB [ 3406.196949] kmemleak_object 1207892KB 1207892KB [ 3406.197581] kmalloc-8k 3872KB 4128KB [ 3406.198200] kmalloc-4k 7536KB 8576KB [ 3406.198829] kmalloc-2k 4624KB 5312KB [ 3406.199466] kmalloc-1k 2960KB 4352KB [ 3406.200078] kmalloc-512 42124KB 42124KB [ 3406.200709] kmalloc-256 1265KB 1360KB [ 3406.201326] kmalloc-192 922KB 932KB [ 3406.201963] kmalloc-128 502KB 640KB [ 3406.202608] kmalloc-96 335KB 572KB [ 3406.203221] kmalloc-64 809KB 1236KB [ 3406.203847] kmalloc-32 158216KB 158216KB [ 3406.204475] kmalloc-16 376KB 376KB [ 3406.205102] kmalloc-8 335KB 358KB [ 3406.205732] kmem_cache_node 47KB 47KB [ 3406.206352] kmem_cache 75KB 75KB [ 3406.206983] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=16260,uid=0 [ 3406.208640] Out of memory (oom_kill_allocating_task): Killed process 16222 (syz-executor.0) total-vm:93812kB, anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 3406.210634] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 3406.211586] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 3406.212610] node 0: slabs: 39554, objs: 2531456, free: 0 [ 3406.293243] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 3406.295491] CPU: 1 PID: 102 Comm: systemd-journal Not tainted 5.10.242 #1 [ 3406.297087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3406.298812] Call Trace: [ 3406.299371] dump_stack+0x107/0x167 [ 3406.300125] dump_header+0x107/0x689 [ 3406.300916] oom_kill_process.cold+0x10/0x15 [ 3406.301830] out_of_memory+0x1149/0x1440 [ 3406.302684] ? oom_killer_disable+0x280/0x280 [ 3406.303629] ? mutex_trylock+0x237/0x2b0 [ 3406.304621] ? __alloc_pages_slowpath.constprop.0+0xa8b/0x2310 [ 3406.306155] __alloc_pages_slowpath.constprop.0+0x1c57/0x2310 [ 3406.307670] ? lock_acquire+0x117/0x470 [ 3406.308715] ? warn_alloc+0x190/0x190 [ 3406.309727] __alloc_pages_nodemask+0x51d/0x600 [ 3406.310918] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3406.312460] ? find_get_entry+0x2c8/0x740 [ 3406.313365] alloc_pages_current+0x187/0x280 [ 3406.314283] __page_cache_alloc+0x2d2/0x360 [ 3406.315173] pagecache_get_page+0x2c7/0xc80 [ 3406.316064] filemap_fault+0x177d/0x2210 [ 3406.316920] ? read_cache_page_gfp+0x30/0x30 [ 3406.317842] ? replace_page_cache_page+0x1200/0x1200 [ 3406.318903] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3406.320215] ext4_filemap_fault+0x87/0xc0 [ 3406.321098] __do_fault+0x113/0x410 [ 3406.322004] handle_mm_fault+0x1e53/0x3500 [ 3406.322934] ? __pmd_alloc+0x630/0x630 [ 3406.323753] ? vmacache_find+0x55/0x2a0 [ 3406.324601] do_user_addr_fault+0x56e/0xc60 [ 3406.325523] exc_page_fault+0xa2/0x1a0 [ 3406.326329] ? asm_exc_page_fault+0x8/0x30 [ 3406.327198] asm_exc_page_fault+0x1e/0x30 [ 3406.328055] RIP: 0033:0x7faf534d4116 [ 3406.328851] Code: Unable to access opcode bytes at RIP 0x7faf534d40ec. [ 3406.330355] RSP: 002b:00007fffb6208ae0 EFLAGS: 00010293 [ 3406.331717] RAX: 0000000000000001 RBX: 0000560fdaa6a360 RCX: 00007faf534d4116 [ 3406.333282] RDX: 0000000000000014 RSI: 0000560fdaa708e0 RDI: 0000000000000008 [ 3406.334749] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007fffb63f9080 [ 3406.336496] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 3406.338340] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 3406.339901] Mem-Info: [ 3406.340470] active_anon:37 inactive_anon:7029 isolated_anon:0 [ 3406.340470] active_file:0 inactive_file:6 isolated_file:0 [ 3406.340470] unevictable:0 dirty:0 writeback:0 [ 3406.340470] slab_reclaimable:7002 slab_unreclaimable:386289 [ 3406.340470] mapped:8706 shmem:76 pagetables:236 bounce:0 [ 3406.340470] free:3252 free_pcp:80 free_cma:0 [ 3406.347137] Node 0 active_anon:148kB inactive_anon:28116kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:0kB writeback:0kB shmem:304kB writeback_tmp:0kB kernel_stack:2720kB all_unreclaimable? yes [ 3406.351962] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3406.357629] lowmem_reserve[]: 0 1616 1616 1616 [ 3406.358660] Node 0 DMA32 free:6524kB min:13308kB low:14960kB high:16612kB reserved_highatomic:0KB active_anon:148kB inactive_anon:28116kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:944kB bounce:0kB free_pcp:320kB local_pcp:176kB free_cma:0kB [ 3406.364515] lowmem_reserve[]: 0 0 0 0 [ 3406.365368] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3406.368692] Node 0 DMA32: 1055*4kB (UM) 180*8kB (UM) 48*16kB (UM) 3*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6524kB [ 3406.371763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3406.373573] 80 total pagecache pages [ 3406.374365] 0 pages in swap cache [ 3406.375129] Swap cache stats: add 0, delete 0, find 0/0 [ 3406.376421] Free swap = 0kB VM DIAGNOSIS: 06:56:10 Registers: info registers vcpu 0 RAX=0000000080010050 RBX=ffffffff853a1040 RCX=ffffffff81f4b8d4 RDX=00000000000003f6 RSI=ffffffff81f4b8e2 RDI=0000000000000007 RBP=00000000000103f6 RSP=ffff88806ce09d80 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=ffff88800f470008 R13=ffff88800f470180 R14=0000000000000001 R15=ffff88800f474338 RIP=ffffffff81f4b8e6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff34d8e0700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09aac0a618 CR3=0000000047dd0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=157151beda1fd9afd74af3340ed6a51c XMM02=d12871896912de2d00000000000fe740 XMM03=ea899072da79512f00000000000fe9b8 XMM04=544faa8e5b27f20200000000000ae968 XMM05=cb3d5cf5a1825a4200000000004e7e28 XMM06=6098c19552daab490000000000114f68 XMM07=ea899072da79512f00000000000fe9b8 XMM08=d12871896912de2d00000000000fe740 XMM09=00000000000000000000000000000000 XMM10=20202020200000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88801d3e3ec1 RBX=dffffc0000000000 RCX=ffffffff81917623 RDX=1ffff11001d1d10d RSI=ffff888009b937b0 RDI=ffff8880091e0ec8 RBP=ffff88801d3e3ec0 RSP=ffff88804d907778 R8 =0000000000000000 R9 =ffffffff850df5a7 R10=0000000000000001 R11=0000000000000001 R12=ffff8880091e0ec0 R13=ffffed10013726f6 R14=ffff88800e8e8868 R15=ffff888009b937b0 RIP=ffffffff82002649 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007eff51a32e70 CR3=00000000437f2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005576fcba93f000005576fcbc3300 XMM06=00005576fcbbaca00000000000000000 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000