0000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:02:53 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xfd, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0xff3}, 0x42, 0x0, 0x960, 0x2, 0x0, 0x4, 0x101, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:02:53 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:02:53 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:02:53 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000000c0)) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=""/212, 0xd4}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) r7 = fcntl$dupfd(r6, 0x0, r6) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000e106648775aa387469e0226abdb07da893020ec9baa2392de6023b688176ac2798d5eb37e9b1daaf9e0741548ad0a0961f41c7dcfdcaa896ff8b13a3bc2c3bb5f2f93f414d59ff3c14add51a48796b1bc477848805f8ff68325bbfdd7e9110e83feaa0ad3964a905a9255bf89460f6368466573f120ceb14ca445210bbfe824bbafb064664c0658581b1fbfa0960a32270c35c0e5e267525abaebb7fbf920ccdc526f5464daaf280f3b2199c88ac12734553343353afb5d494f3150be3b0e5328116522e2169cc805957a25de5e8028fcbb106c779de", @ANYRES32=r2, @ANYBLOB="00000000050000002e2f66696c653000"]) accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0x6e) 01:02:53 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:02:53 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, 0x0, 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x101400) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, r1, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xbdc6, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0xffffffffffffffff, r2, r0, r5, r0], 0x5, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00210c0000000000000000040002000000268000002300", @ANYRES32=r3, @ANYBLOB="14840a9ce33aa85e"], 0x1c}}, 0x0) 01:02:53 executing program 6: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x8, &(0x7f0000000180)={[0x1f]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x19, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x40000, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x741000, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x6}, 0x1000000, 0x2, 0x3, 0xc, 0x5e9e}, 0x20) unshare(0x48020200) [ 767.365787] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.365787] program syz-executor.0 not setting count and/or reply_len properly 01:02:53 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 767.409869] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.409869] program syz-executor.5 not setting count and/or reply_len properly 01:02:53 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 767.458974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 01:02:53 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xfd, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0xff3}, 0x42, 0x0, 0x960, 0x2, 0x0, 0x4, 0x101, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 767.489784] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.489784] program syz-executor.0 not setting count and/or reply_len properly 01:02:53 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:02:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = creat(0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x20000, 0x81, 0x10}, 0x18) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={{r0}, 0x6, 0x7, 0x3}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x92004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 767.568956] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.568956] program syz-executor.5 not setting count and/or reply_len properly 01:02:53 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:02:53 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) [ 767.653133] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.653133] program syz-executor.5 not setting count and/or reply_len properly 01:02:53 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:02:53 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:02:53 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:02:53 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:02:53 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xfd, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0xff3}, 0x42, 0x0, 0x960, 0x2, 0x0, 0x4, 0x101, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:02:53 executing program 7: r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x38) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x9, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x0, 0x5, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="bceb420ef627470f5027b656f1e5ae8a41bd66c1781867db2cfa44ce4b763e8335c76370632ad4b3dfcaa7bc24810757539973f4e31d0e13f202e7b3f1ff9425d0d41fad41d6490bb2c72d4607e699e87b8d59231b12da91846ee35632d2372f96f9959ec07f57d9f4b04a77cffb6b91a3dfeb12a7", @ANYRES64]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={'trans=virtio,', {[{@aname={'aname', 0x3d, '\x00'}}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@mmap}], [{@euid_lt={'euid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x61, 0x33, 0x63, 0x55, 0x33, 0x34, 0x37], 0x2d, [0x64, 0x39, 0x35, 0x63], 0x2d, [0x38, 0x61, 0x61, 0x34], 0x2d, [0x65, 0x36, 0x32, 0x39], 0x2d, [0x64, 0x63, 0x35, 0x62, 0x0, 0x63, 0x33]}}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/loop#\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0xb0980) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000002c0)={0x1, 0x0, 0x1000, 0xba, &(0x7f0000000200)="21b6a5bd67cab40e61db95e3c1f786f6c7a79cf0185897c34fe2c14959f53b96433f236ceeeb75a0e17b744d0583bcec6640c09e5dad351065d468cbc1dd05da1458264ddbb19a24ef85d238927bccd919a7809e4caf6516e4b717316c7f0a4cb94b91b126c194b35382c6725079ec6cc669b17465589e941e5b50c691e93cae38595d82381ca34853a972959eb7efc46e8b53c5865d4ecd0805381b7a26e537dcc43fa2ba0f07d0c57219dc5eaa0ff9e68d42299489099e2c85", 0x31, 0x0, &(0x7f0000000100)="689788b89c4a9d3bf23e7f15b4196cdab808dd042c0bbac881697af6082d87867490b48411000bc8d9122b61da51c74b9a"}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x8) [ 767.809246] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.809246] program syz-executor.5 not setting count and/or reply_len properly [ 767.825813] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.825813] program syz-executor.6 not setting count and/or reply_len properly [ 767.849853] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.849853] program syz-executor.0 not setting count and/or reply_len properly 01:02:53 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:02:53 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 767.906469] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.906469] program syz-executor.5 not setting count and/or reply_len properly 01:02:53 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:02:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x14001, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r0, 0x0, r2, 0x0, 0xa1, 0x600000000000000) 01:02:53 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:02:53 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:02:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0xffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x6b3fb000) openat(r0, &(0x7f0000000100)='./file0\x00', 0x270f01, 0x49) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x105140, 0x42) unlinkat(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x5, 0x42, 0x7, 0x3f}) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000200)) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) perf_event_open(0x0, 0x0, 0xc, r2, 0x0) openat(r2, &(0x7f0000000180)='./file2\x00', 0x381000, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0x1b2) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 767.998877] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 767.998877] program syz-executor.5 not setting count and/or reply_len properly 01:03:06 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:03:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x10001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x113) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) io_submit(0x0, 0x5, &(0x7f0000002440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x21, r1, &(0x7f0000000140)="a6ff14e69ff5769c51ccdd510f2c1f6caec575d89463e0bb6cb4895c638c29d45a08246327bd38e6fb26e2180f3f19e70a89a97261f22107d419c26b97bfb928daa46c106b6d87fdc80901b46ddeaa6151c2d82897dfd0032829fbce274471c8047dd4e7b5a99a5ea1524ac314cb4227f2bbfedd4c0925c20f6c47407d2b6f70d754637f0cdfc967b983b43cc912d6ede1bd1ce2ddcbb4bd4a25225e5cbee38c5343e16dbb1d314ade9c875ca101f4fb04d51811ac9c4512b140f5a87696546bfcad3f36a4d513878df0f2a2c3161d98673aff695ae03d6a785bd1a281e063900933194e7db10fd48e1679713ee115", 0xef, 0x7, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x13e, r4, &(0x7f0000000240)="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", 0x1000, 0x1, 0x0, 0x2, r0}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x800, r5, &(0x7f0000001240)="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", 0xfa, 0x2, 0x0, 0x2}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000001380)="35720aed22ecc751", 0x8, 0x0, 0x0, 0x1, r0}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x1, 0x9, r6, &(0x7f0000001400)="7a18af9b664a19fd42e6f31e6489472fff4b613051103031414f871813715c9be3bbcc62392a708461c3362e064416eae899d4a8ff7f0616d1f10e370ca804615bd1d55c8c5fd7ab5fb26477a0ca1caaee919fd451e61ea21065dc1a8d6fce8530a71bdf0ec64ad5250506d66a8a0583ff852d0802e1a6d970098b2a3edc6d8d7929a88f81eaff4313d3563e74851783c4904386b045e5ad88780ce972e238952caba0b914257a9331583518d967c0a3d0e13c78f1f37bd58150c3ab8be8fe067638c2eebd57132fb8cb216e409e511f96acc6762d473b5247ee3b862c2d597566832b85ade9ef2137b7005639144b8deee3b852b4efbde8bdd497cf0912bd0bb8a9accf2260f805a0e1eec0d9ec13cb39c20a7430ff768ee35a4b25f9854e471f852a11710208dd8463616814eb972aa1699418025f2feb56ee53ebda77130df7e630ee9b05e17860168367510bbe7cce2c2015e8f87b4fede210f5d261529f67b9fb2d4d71ae4c3d254bf9201fa3c4b5b16a633bdab1411611c23ef70826d534e75fa13353dd381dcca4b9c9750caa9b1c746bf452ec266cdc720431eb45ab8a76dcbb76cec9abb318eff218f6c4c21655da319c9c657d34428ef55e1fc93a5d04f373afeeed0940e86461a87e8812afd45d5168f1645a074abcacb91270c8a4e926a69afc7a6568e0157415d2197ed9f55a92f1d9681a930c055911a0b51c130039b8c48abc0a5856042d7468ce5d842675f53572e3e60c905a7af2d3c113a97c378fa249954f7cf3fcd3438fc4175b7996dce15281b43e06cadae6b183b8a1a98e59795005fdb7b7cd1d44658d41b78ff9b6ee49fc5d936cbd5e53b87439947dc8865f02f5be35e100747e199051ebc8ea4d3d7da2f09bc43d5e6a7dbb87808113a48eac5e12054d40c8820ef30f6f08905f203969af292c03b161cdd7687b707901cbccfe4bd8d05413cf4d96333d2a4a2da29570da118f327d62e67cf4693234e8f7e7718a823b19f87f63a2c9c08a0df55456c75d13cc12a23e150b023c5764de3b6734782d5e883132d0953458e770d7eb80a902dd74ca87574d6846297aaf6fb86b6c9a72c924dfc1d14485fd50782bac3f5f3e5b1c028f15736f44954615324d49a29cb12dfe9b1843f257bf6ff264d7dd9bdd3eb77929009d052b9a87ff44c5d074b86b3f5c03ee313f719b59fb43483739c3d24e86d730017146ea645f1b17e64f9d3f822c964a6684adfc9ff2f986d591d9198007fafacd61b0d715da5b4f455a2753fd2c514a02a75cf0149a1604bd98b50058381a3f951bebf59ff62b6501b2cac5ad9354bc204aa5959c8562f9461beb2de8c5267422ecfeed3957989f51e1adff5c89539d06ab31a5d4956fc3a828889c44791001a638d6b1202b4048328ee52ab785dc184ac0a71eb0c35931278da054a063b91c777c20aa34a3e6a5b52b5d1bcd67e27d1b0f7e9b04ab4b0b1de8a1dd01be83fe8b0ca189f0c328199949a026bf7daa0e9e851e19f3977d24b1a3aae66ddab8ad890c9640e6158d61514304bd532c8efc1a1bdf21f519f01d2eeb07c571996da4a34d5371d511c0ce05429119d67bfb3ffe5ef56c605a958dfacc5b2d99fc1e690c792d29332f94431b250dcc15544a89bee4bc2a6ef2bbadd1fa992d1dd71203cdba48067f6d14670abb4f6dce767c7fcdd6d37bee56e574625e4536820be70d305ade235d22e564ef0551cd2d5d44400574d7c6d786951542417d713cbbf3d1588d2bb3b979241b22ba2ed5dc0cfc1ef4b5a7df41804b7ab2e1b8112d69e7aaf0b23c1798b28e2630726670a9b33307b3abba4af562457c168f3ded4e4bc9c9fa1079b1cfeca2337ca76addf6fa3ee6a154cc2c97e6177fe1f75c6c3961bcc019a0c2757ed2d3e5582ad1086e9e0c8843bd647eb0be010d0b54207988db83dc64604559d064d15b8ac95ed1ea515a3fe8284ba3ea00bd002d439dae1b66906fae43f43c8293a7de2f967d882c3414625b63399d1c980672dff864c4453f55e78eea7e4329b2b88c218a65d88921c544423e56a101c2b64ba0cd8d9df4a5a67ef013c138da0a6dccc4ff9dc76218564d91de567e1556a9baf5c91ed2d4275711a1b54beda033d6da7069947a9e8e05f678b57e3f4dd07de1b3d7bb860df74c9139e0ab47d66de54c2c7ca665a5812508f49547d89dfaabd5411ca04e36d02855f4b199f3a18d02965dc38f9976a1e8d0742bb54e473fb04b5c0544ae5706fbe51e7806ed58d72f490ec72114f2157a0780c1bf7339d704fb73f97e716b28bb8405636899219764b6396870ede06a599fece3fb4a041c70ef432ca65f906d4fe54b8ab23c67131a5749ce6a5c2bc6742ef5cc5de7d400b75982da7deb63e4e29e6ef1a320b2a9f958b6e3b6b8f1d43b6f036d0b735d19d0e677294fd772f7c5699295b02bb3c190bc8e32e76318efe5a5dce68021926f9767981f2d37c3808162c7bf078aadaa99c4e0039533271fb116f65edfb9e05ce1a7d40a96b152b191d2b0c1bbfdad6237879c034589fd8a761a680d5b999dbbe247ab71b229718c8f5662d3b8a5fb825f9bda93e9cdac7a102dc9cc78707a36a345d7db35cb546a72415d9fde6fc86b5bd2068ada21bb5325f09ac657476da351e12ac6d84e7dd9bf6bb9bdd85725c7fd346dd96a28259f306e30c0ad5dfc67137a467655be38aa3353af6694cb37a74fed97ad0a9c59cf53f13a18b649237e92fb4ea53ba3bee8868ecfb742dbb9a7e5108354e2ec896f6d255bd37054dfb4b704add65c3e9374b09fcf49c6dbd82e745bafd5fa3a28cc37ad92de389a2b70c2beff2be003c9a95f94e9d12303b5394ec7fe16a8596cd8e3ddc6015c2322b41d78bd44c7db737c073f0074a1086c98e802323ae320d218f5d3100763bcc064aed85529a0392fa409672d2a4536a40a87a64749381442c8da2134b851cefba43d5564f866bef5038cb2e315ba19a4501113ae6b56d35a5960ebf6dbdf2c3f464c0fa9c111e81808e55fd0460d2db453f07d5dd12c7ed0a2e1b30001967652d19c3f500e28a0f84df4241fc9b34feafffe713ed510cc60217aa87f64b5db0be7f2abf2db5c61a354b4726940060e2152c8a0c270b92db939ef074f8e2a7bb3bda2580902c64e1444f47389c36d91ec436af06d1dc43da9ed139c82cb94cbf8481eb88756348ba778b18338441aa0ae45c70b8d6a870cc93dd8546046b9f7036c93d1a17b010b3d4e7651ce69210fcd1b0dd35c74fcb8afaeec0bad0ce8fe223c7e602c8211551898818869c033167e50203c0a3c8db9291449e64eae4cd7a53b7220c57480fb95c42ba1e03c42ff7895691e58fa2c8ddda61a8210c2ce9a7585f8e61e451da885eb2c11adb1d98c8e76cde912ee4b0e728e224e6c2ce0abe9979b9cee10fb9d0b5ff94486b9a791f9b16d77d33adcd41b087bbef1983a2e868d44d54d73a06436d362d8475dd37d4666b9f836ccfc17b4c9454f38c08773b27233f3679bbe360779a4a9c428e65043b0f21032742aebed45b32533372169f900bdb067c3dcfde7dd40c2031796cb724736b56691f38e5afb69ec9cee8e3d1e404116b1c80d46f450cca70ca322729fe87d162584688b7bab74d2253ebe00c38420baa9b9b3902d604ebc5473e8c12d97972e3627bc3a224f451466a25b5f86410f2067eb40566288a833b771b10111f40371376ecdedd478a1f1a33d5f65b3950e276220d69f0ae4e61af7b1cb3b325e882a200166f0c17abf3c18116e99f03c4f2312b3287ab37bf65078b16284b5713de2e527253d66e5802dfdd888a2363607d26f39f8d1d8a8bb5ed3abb1de7e97a1f241a347fbbe96bf58b3278a12c3937663b947b415209a28159546ee3cc6a2f091c5931a8fd9e82da5ab5a9e3821e0f0431f5a152239e269d3eee7870b69f771fb85778f3c1e6285bf27b8f2a1b264f32891c2f397e20e6dd22ca2fdaf90e7e104866bf5c67fe4571b35361fd53042418718ebd37cd0701efe9592d0aa442e758ed86ef65c7d41fdd187e93fe00a4c4f1f856ab264b2d4d37d59814209a54e4c9c8aeff709943adc09797069b46da4c5a5ed39790b3b4aca705bc54d2d81c1686b9b5fd9864ef6ef9326e0b0ed77b1beb4ad32577e88430328fd4c27ecea117959609f6c518efc6245fec48908c0289203576623ba01918761693fd700389f555fcd9cc7d578f22bcb21a2462764777dc0385f4ccce7eaa76c0a8db31989917c8952055627a442e8944275f1d8d3623edfa2c03125efd22db35e52ec97ea8e57c37dfb2f312bb5a05b6b29150d99adcdbf6f26dcc510813acd1dfb3539086b5c29f58edaa860285da693b415af22c4da489f45a2fc40238d1c431b876385235373fb42d7c0c283955135b7fccaaa01dfdc51b46cde39bd0300e91db4b1274001b6b178f80c5f1bc06f6ce7be614ae664fe649835ec5a60e1e8ad9be3099deabbeb2a55c4f5b6b01cf0ae19c611b2a17b12244fef06e79db244070ea2de840fe0f4dc696c79cece5769cb59abae2df932e045a0f6ced9372f19b7b0c59bfcc499c9712553f733a2822a9fc9a58b9647c6b780a33cd1ba5e0d227decdd7985eca19ec29e500d47a627c07d7826a456d8b48f3c7a7f09a39a926046a4faa74911452406c7fe970b70002a8ce7f522cef160c7fc76cd07d9e61474071c0793a53ba00f62b6219a5ccfdaeef4a80ef8cc7fce1671a9a3fa42883df3ed81f0dc5213559fdbb9d47be56dc83876e154a843756673cd106511a22b568338bcc265c11cfd6454e0f18a40bf7d2bb8dcbf66151b699379a40fdb1acdeeec1169974f482beaea695a5fb5d1b17c171fcc71144cdf71d3d7fdd29465d5aeb2837fc40a3f273053811bac6c48e46f3a2d46efac2ad42f655f8ece1e4da24cb0eb0d6250fd7a96bcd03caa8a09b640a98a2165333fc1698603eb308f41fe13ddefecf6264cffb26217592a8bc8aaf234032eda552a44a14fd1191dd8504acf240ca56410b6cf32142fa9cb0e0605df9125d0acbad0db149c8a2a81ff2892d1696a63e72dc223512e64c44c45fa05b135164d436c0a23fbd86eae820985033ce47ba7c298894809211bc7d1473d2a1d8068de5ac43f91f2f8600cdfc44e1220278a62793e379b39e36efd4190c74387c1ac4dc95c128fdb6c8b30a5020c7a8c9a26ee15c8d272445e22534d6f03787481a02719b91323738a2f0c569fd85ecdbf33a62ff737a0526d16aebe9418fa26e4697f4a6f0b1f048108edf9e52a4ce55858e1f716ed2c8be1dd589a2e3a0e11b897a96ead376179fb55052904ebeb9eed456d2a031efaac94dbc8e0e73f5eeec1f7b5fda8c8c811d7b2076011297beef943a50c5f650a387db83d93eca7a7b49a7eb854920ae8b077b52577a445361f9741ea6ba87e69a585c1de21b5a2abbd70330fef7d7489dad1d1a09606a407272f22f4c6c958acc2bd77bebcc9afacc4ba5ca14c18703ed7459b9ad174e2cf8b64246286a3d584b6f9bf5ea3ea344f3cad0e7f8547309862365a3b041b77dbb78edeb4e16f98b39e3e22adcb01d2e668804335e7e248a188b607c54e8ff8416b610391046ccd69c34e4404883c0ca19744a1874f736d9d13207d7bc061c06e7d5fa02ce50b8c09845961fa7839a4a8779e3417480d3156c00486ec34b5fb29fa23222ff9b6d8224ce355b4bafab66702bebab68277e290ce8391ae5d45bcee107241bcbf3dd0f81c92f25e74a8f698b51c4032523734946f980b865ce18ef3589fa8e008", 0x1000, 0xee, 0x0, 0x6, r0}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r7, 0x0, 0x20d315) 01:03:06 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:06 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:06 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, 0x28, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="99dcbea99e"]}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000), 0x4) 01:03:06 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:03:06 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:03:06 executing program 7: r0 = syz_io_uring_setup(0x44ae, &(0x7f0000000100), &(0x7f0000000000/0x12000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000)=0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0x3, 0x3) syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r2}, &(0x7f0000002000/0x3000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r1, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x5d42, 0x0, 0x0, &(0x7f0000000200), 0x8) [ 780.848064] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 780.851910] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 780.857412] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 780.896326] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 780.916087] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 780.916087] program syz-executor.0 not setting count and/or reply_len properly 01:03:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x8010}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0xc5, 0x7, 0x3f, 0x0, 0x8, 0x40100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x8}, 0x5000, 0x4dc0000000000000, 0xc4, 0x8, 0x1, 0x800, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x6, r0, 0x8) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) creat(0x0, 0x5b) 01:03:06 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 780.973599] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 780.973599] program syz-executor.5 not setting count and/or reply_len properly 01:03:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04", 0x66, 0x400}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401", 0x16, 0x560}], 0x1100000, &(0x7f0000010f60)) 01:03:06 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:03:06 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 781.100364] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 781.100364] program syz-executor.0 not setting count and/or reply_len properly 01:03:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) r5 = fcntl$dupfd(r2, 0x0, r3) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000001c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000340)="ed41000000080000dff46552e0f4655fe0f4655f000000df0727e7d3c2", 0x1d, 0x2100}], 0x0, &(0x7f00000006c0)=ANY=[]) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0x40286608, &(0x7f0000000140)=ANY=[@ANYRES32=r4]) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r7) write$bt_hci(r5, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x800, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r8, 0x8932, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) 01:03:20 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:03:20 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:20 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:20 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:20 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = fsmount(r0, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x8) fsmount(r2, 0x1, 0x4) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0xbe, 0x1f, 0x16, 0x0, 0x7f, 0x41, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x7, 0x5}, 0x2728, 0x8, 0x2, 0x9, 0x20cea358, 0x7fffffff, 0x8, 0x0, 0x5, 0x0, 0xec}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {@clone_children}, {@subsystem='hugetlb'}], [{@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@obj_role={'obj_role', 0x3d, '^('}}]}) 01:03:20 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:03:20 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 794.487055] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 794.487055] program syz-executor.0 not setting count and/or reply_len properly [ 794.506000] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 794.506000] program syz-executor.7 not setting count and/or reply_len properly [ 794.653293] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 794.763271] cgroup: Invalid name [ 794.827424] cgroup: Invalid name 01:03:34 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:03:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc69de45660031e8d}, {@in=@empty, 0x0, 0x32}, @in=@multicast1, {}, {}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x80, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x2, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x2002) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2001200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@updsa={0x124, 0x1a, 0x2, 0x70bd2a, 0x25dfdbff, {{@in6=@mcast1, @in6=@empty, 0x4e22, 0x5, 0x4e23, 0xffff, 0x4, 0x80, 0xe0, 0x0, 0x0, r1}, {@in=@loopback, 0x4d4, 0x38}, @in6=@remote, {0x3, 0x5, 0x8, 0x7f, 0x9, 0x0, 0x8bc, 0xa7}, {0x0, 0x10001, 0x3, 0x10001}, {0x7fffffff, 0x3, 0x81}, 0x70bd2b, 0x3501, 0x2, 0x3, 0x40}, [@user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0xa}}, @proto={0x5, 0x19, 0x3c}]}, 0x124}, 0x1, 0x0, 0x0, 0x20001}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) r3 = msgget(0x3, 0x202) msgrcv(r3, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x0, 0x3000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000200)) msgsnd(r3, &(0x7f0000000100)={0x3, "3f180579abb2e295f6e3ac21afd162f1d00e0c27d3f31fda314e07ce358d619cc7eb5a8367e19589ddbeae23d828025728212779bc2acbd2ec76c2685a79ab1f0120b1dfa2269dd3382c61c9cf92f4714c2e5a839fff1429cc6cc0893ee1ecb4b4f31edb9428d192fdffb37cabf6a382a973aa0cf0d09e79fae4ea9404861e3bddbc1fa380272b3afa526982aff50a1665c2fef91fe5c75edc3f771350962f504b9d333813d214774459b495aadf408f089948f4b1b9da4e7f96998106e44c9ab90ccaf60c7e58151413a4a1c873c6ecea99ad54303d301f93a7ced72fc05532ad95d8"}, 0xeb, 0x800) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x400, 0x7fff, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:03:34 executing program 2: fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:03:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200), 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pnp', 0x402c1, 0xc6) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) accept$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="520844b5f8c0d54ee207b04412d75d84b7698dc284e59996e5d602b43a36e7e0fc0ae513e7316518ef8a1f5db6228d1fb87f7445382af01502082e58c1171d63cbfd272a7d2da1650355e0c64c60729619bb11b7b68ebcc5cd7bbb122ea9e6513a2f39a9400e13453fb12dca90ddb49877103a95c7f78a575ca35c62fc483742f1f42071c14e4173b2338706ed647b5ef9b0b0d1703ea7d2fa", 0x99}, {&(0x7f0000000300)="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", 0xfa}, {&(0x7f00000001c0)="ae0c27678bb58795", 0x8}], 0x3, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x30}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x70}, 0x4000000) 01:03:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f00000001c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000a5ffe1f737f46dff00000000000b00000000010bf48f", 0x5d, 0x400}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="91ce4f6fc82f139fb8543eafda00"]) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB="746d2d2a4ba0e444e0782c706f73693861636c2c00"]) rmdir(&(0x7f0000000040)='./file0\x00') 01:03:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:03:34 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 808.726690] EXT4-fs (loop6): Unrecognized mount option "‘ÎOoÈ/Ÿ¸T>¯Ú" or missing value [ 808.767803] 9pnet_virtio: no channels available for device ./file0 01:03:34 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001480)=ANY=[@ANYBLOB="5300000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3ad00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f703e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000065ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000712aab3c3994e91372d6d0972fd00a7958d813d8a9df04ee7b1c1440cb2c916a21373aa5023e0d44f4c259c21183f78dd67032e47d44bdbed67f73807b30958125f155e0f6"]) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) fcntl$dupfd(r1, 0x0, r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000900)={0x101000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x25}, &(0x7f0000000300)=""/95, 0x5f, &(0x7f00000003c0)=""/192, &(0x7f0000000880)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000380)={0x800006, 0x8001, 0x8000, 0x0, 0xfffffffb}) signalfd(0xffffffffffffffff, &(0x7f0000000640)={[0x2]}, 0x8) setxattr$security_evm(&(0x7f0000001180)='./file1\x00', &(0x7f00000011c0), &(0x7f00000013c0)=@md5={0x1, "7e86f3938c510067bcca74e9652fe30b"}, 0x11, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) [ 808.823864] EXT4-fs (loop6): Unrecognized mount option "‘ÎOoÈ/Ÿ¸T>¯Ú" or missing value [ 808.848887] 9pnet_virtio: no channels available for device ./file0 [ 808.861309] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 808.861309] program syz-executor.5 not setting count and/or reply_len properly 01:03:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:03:34 executing program 6: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x420140, 0x110) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x103080, 0x99) getxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'osx.', 'vfat\x00'}, &(0x7f0000000380)=""/39, 0x27) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xa000, 0x188) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000001c0)=0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r3, &(0x7f0000000480)='./file1\x00', 0x101002, 0x10) sendfile(r1, r5, 0x0, 0x80000001) chdir(&(0x7f0000000440)='./file0\x00') 01:03:34 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 808.986998] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 808.986998] program syz-executor.5 not setting count and/or reply_len properly [ 809.000214] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 809.040565] netlink: 'syz-executor.7': attribute type 2 has an invalid length. 01:03:34 executing program 2: fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:03:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) [ 809.203871] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 809.203871] program syz-executor.0 not setting count and/or reply_len properly 01:03:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 809.267421] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 809.267421] program syz-executor.5 not setting count and/or reply_len properly 01:03:35 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 809.353773] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 809.384383] netlink: 'syz-executor.7': attribute type 2 has an invalid length. 01:03:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001480)=ANY=[@ANYBLOB="5300000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3ad00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f703e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000065ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000712aab3c3994e91372d6d0972fd00a7958d813d8a9df04ee7b1c1440cb2c916a21373aa5023e0d44f4c259c21183f78dd67032e47d44bdbed67f73807b30958125f155e0f6"]) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) fcntl$dupfd(r1, 0x0, r2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000900)={0x101000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x25}, &(0x7f0000000300)=""/95, 0x5f, &(0x7f00000003c0)=""/192, &(0x7f0000000880)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000380)={0x800006, 0x8001, 0x8000, 0x0, 0xfffffffb}) signalfd(0xffffffffffffffff, &(0x7f0000000640)={[0x2]}, 0x8) setxattr$security_evm(&(0x7f0000001180)='./file1\x00', &(0x7f00000011c0), &(0x7f00000013c0)=@md5={0x1, "7e86f3938c510067bcca74e9652fe30b"}, 0x11, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 01:03:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:03:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000180)='/dev/ptmx\x00', 0xa, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x62040, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x600, 0xfffffffffffffffd, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 01:03:49 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:03:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:49 executing program 2: fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:03:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) tee(0xffffffffffffffff, r0, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYRES16], 0x2e8}}, 0x5000) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={0x0, 0x3ff}, 0x1, 0x0, 0x0, 0x4008085}, 0x4008894) [ 823.795302] audit: type=1400 audit(1697850229.536:162): avc: denied { relabelto } for pid=7912 comm="syz-executor.3" name="file0" dev="sda" ino=16045 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 823.800823] audit: type=1400 audit(1697850229.537:163): avc: denied { ioctl } for pid=7912 comm="syz-executor.3" path="/syzkaller-testdir790691579/syzkaller.FdCzmF/79/file0" dev="sda" ino=16045 ioctlcmd=0x6611 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 01:03:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:03:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:03:49 executing program 3: r0 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0, @ANYBLOB="c868b63932e48873f2fd06658d3b842e8adab3b5395b654728f15a8a82d394e8df37f01f67fb05a8826575137d1fa5ce82d9b898995747ed9a943720540fe91fd79ce0d2f96ec5bdc2c9cbe25cd95e4114bf7d2eb8d00992635763cd3d21f8307d7e5c5dc63764a4f66cc55101f315adec72624fea0c17428b999440ed7efd5e124f3d4a922ef035afb855c4a5fdfb40ee5ea0af0eab607c4e197f8852b050fca8e8c32d19cabec35ced1a2e53bd54162400785a4c85744acd21de6338abf7386fdadb43eb5ee2e0bed4dd39b1f6"], 0x34}}, 0x801) [ 823.826582] audit: type=1400 audit(1697850229.558:164): avc: denied { write } for pid=7912 comm="syz-executor.3" name="file0" dev="sda" ino=16045 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 01:03:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x280000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x28b}}]}}) [ 823.826686] audit: type=1400 audit(1697850229.560:165): avc: denied { open } for pid=7912 comm="syz-executor.3" path="/syzkaller-testdir790691579/syzkaller.FdCzmF/79/file0" dev="sda" ino=16045 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 823.826787] audit: type=1400 audit(1697850229.567:166): avc: denied { relabelfrom } for pid=7912 comm="syz-executor.3" name="file0" dev="sda" ino=16045 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 823.828933] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 823.828933] program syz-executor.0 not setting count and/or reply_len properly [ 823.834218] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 823.837156] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 823.837156] program syz-executor.5 not setting count and/or reply_len properly [ 823.859040] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 823.881279] audit: type=1400 audit(1697850229.623:167): avc: denied { getattr } for pid=292 comm="syz-executor.3" path="/syzkaller-testdir790691579/syzkaller.FdCzmF/79/file0" dev="sda" ino=16045 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 823.881387] audit: type=1400 audit(1697850229.623:168): avc: denied { unlink } for pid=292 comm="syz-executor.3" name="file0" dev="sda" ino=16045 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1 [ 823.977417] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 823.977417] program syz-executor.0 not setting count and/or reply_len properly [ 824.011503] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 824.011503] program syz-executor.5 not setting count and/or reply_len properly 01:04:04 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:04:04 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:04 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0x3000000}, 0x10, 0x0}}], 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 01:04:04 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:04 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:04:04 executing program 3: ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x6, 'geneve1\x00', {0x40}, 0xe08}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x30f5, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x20004884) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000040)={0x2, 0xd, 0x3, 0x0, @msf={0x9, 0x7, 0x20}, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0xa1a, 0x20, 0x3, 0xa4, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0001000000000000000000000000000d00000000efe589624f96527d6a7332a49f4b399353042795d9ba28f898335f81e108a316e9b89f119944802eb96507a829d7be9732b60406a6753b26f1e4ac3079eb1b0f5230bf8c", @ANYRES32=0x0, @ANYBLOB="ad01f4dccf30b67bf160d4c452a0ca06a4c7ae2fe4ff030000a4a30e047f8134cd1840a635525a022b262061fc913e4c7cde23201f02cb69601e9e37774b42505fe8b0743197da8efac7c9689244e0e4ac7b9f0e6c81c88fdeaa92c5b57719b9d0c16812ea1a510600000088ea372a316ccb9b52f12189"], 0x102c}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001400150000000000001800008014000200fc0000000000000000000091530000000000000050ff967ba93024f67e379e131bd7615195b74c20e3464b651566"], 0x2c}}, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=@sha1={0x1, "7387073cd79404996cac57f8c706d5dbca94bc58"}, 0x15, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) close(0xffffffffffffffff) 01:04:04 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000180)='/dev/ptmx\x00', 0xa, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x62040, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x600, 0xfffffffffffffffd, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 838.417090] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 838.417090] program syz-executor.0 not setting count and/or reply_len properly [ 838.452064] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 838.452064] program syz-executor.5 not setting count and/or reply_len properly 01:04:04 executing program 7: semtimedop(0xffffffffffffffff, &(0x7f0000000040)=[{0x4, 0x7, 0x1000}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002800274e00000000000000dcbea99e00"/36], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000100)=""/156, 0x9c) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 01:04:04 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:04 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 838.562044] netlink: 'syz-executor.7': attribute type 2 has an invalid length. 01:04:04 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 838.579240] netlink: 'syz-executor.7': attribute type 2 has an invalid length. 01:04:04 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:04 executing program 6: ftruncate(0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x20044000) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff8001}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:04:04 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x2, 0x0, 0x0, 0x1081802, 0x0) mount(0x0, 0x0, &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) syz_io_uring_setup(0x255b, &(0x7f0000000000)={0x0, 0x246b, 0x4, 0x2, 0x280}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r5, 0x0, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000700)=""/211, 0xd3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001800)=""/251, 0xfb}], 0xa, &(0x7f00000019c0)=""/234, 0xea}, 0x0, 0x1000, 0x1, {0x3}}, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) [ 838.683136] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 838.683136] program syz-executor.5 not setting count and/or reply_len properly [ 838.744005] perf: interrupt took too long (4992 > 4957), lowering kernel.perf_event_max_sample_rate to 40000 [ 838.776122] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 838.776122] program syz-executor.0 not setting count and/or reply_len properly 01:04:04 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:04:04 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x940}, 0x44, 0x3, 0x0, 0x0, 0x100000001, 0x9, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/61}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x49d}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000380)) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e23, 0x50, @remote, 0x10000}, 0x1c) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000001c0)={0x10000000}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x40203, 0x0) dup(r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000180)) r6 = epoll_create(0x100) io_submit(0x0, 0x7, &(0x7f0000000940)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000400)="65ed7f0d709a98c8d69be4db4055ddcae0a8db4e4da6c158df1047cc5c1d9a9a5284646cd74103ae272df2b200c4698b012f0104c71f3d0f7f968d87ad35f253c5e6651fd09b5ef36597d768e80fd1e6a11d5de36eaf5dcb6428020351fd", 0x5e, 0x2, 0x0, 0x6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6a8b, r1, &(0x7f00000004c0)='5', 0x1, 0x0, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000580)="ca20e59cfd72f32d7755a70ebfdf172fbe5ef8f92d76667922f1195380", 0x1d, 0x7, 0x0, 0x3, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x3f, r4, &(0x7f0000000c00)="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", 0x1000, 0x10001, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x7, r5, &(0x7f0000000680)="672621de5bd06f4031cd5b659d955013611a184b9bddb85db4bdf650824016e90bbc8b3b57177dd180214dd3fd41446d314dbb76c366bea8ae2c40fd08f9d583a5d6d7ddc9c9d535a74285d9b4543bde39c67aa7828ee11b60af37672b583ed9d5c9909c40a6436d05a5fc91d77509e56a308335e0b23b81a0a23f72407e8f71e948305559500d6654aafa4023398ec560275b1ec97a84b63292070cbc6bd5d50fe62d3e1db4617244be376977ff", 0xae, 0x100000001}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x40, r6, &(0x7f0000000780)="4a9eb7a181f232f4b8ea945a20271b269455166a726600b49a4d5df6d137a6550b0ef03b7f5a373b4602254d646eb7eb6d22f85f6bb725c1cf23af1f74138333741bf8a8f149f6d84c93a45edcf4af5c68526facaf1c18dc5b9249e11e11ee9da460a4f2129598f392ccbfb8fe65233ae1eeeaa56db0730da918168c6a7a69727e236096e305323243927f38bd22a03fc99564320a5aa44359c1c6c55f8dde1ee63dff47f0171cc6ca492dcffa9ea89aab2848be92af398cd47927ca417dcf0220819db572112b05fdecf410accd636d505e3fbb027a0f6cce34dc", 0xdb, 0x74db, 0x0, 0x3, r2}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f00000008c0)="53c0271578b771dbeb00e45398dec0e8924d04c2afa0f94a0410184b10184c84dc898a000000000000000000", 0x2c, 0x3, 0x0, 0x3, r2}]) 01:04:04 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:04 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:04 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:04 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 838.959631] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 838.959631] program syz-executor.0 not setting count and/or reply_len properly 01:04:04 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:04:04 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) clone3(&(0x7f0000000140)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x40000) sendto(r1, &(0x7f00000001c0)="66861bf9c4f4ab52d7559ecd", 0xc, 0x0, &(0x7f0000000200)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x80) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0x3, 0x3) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000280)=0xce) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6d6d61702c006782a3553e7ee2b3aa2e9ad33fc52933ffe5f2fb8b1d4b2a9814faa7c3c023b648141afd55e6eedabd2beee571797a193ed286c01d359d58235d813ff100f09a7eacbf5470bb2494db7a7a4b23ce79f3ed17fd5050a6c6c70518a8802ec0accd4f960ef9d5a51eec"]) 01:04:04 executing program 7: perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x8, 0xff, 0x0, 0x3, 0x20010, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x3ff, 0x62a}, 0x1604, 0xc8e, 0x7f, 0x3, 0x800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5bc00000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpgid(r2, r2) ptrace(0x420e, r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400010000000000000000000500000075a0bcceaaf3c54c80a81800008014000200fc0100000000"], 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) 01:04:04 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:04 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 839.119190] perf: interrupt took too long (6271 > 6240), lowering kernel.perf_event_max_sample_rate to 31000 01:04:04 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) [ 839.184827] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 839.205753] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 839.205753] program syz-executor.0 not setting count and/or reply_len properly 01:04:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xa8}, 0x24040050) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) dup2(r1, r0) [ 839.262141] netlink: 'syz-executor.7': attribute type 2 has an invalid length. 01:04:20 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:20 executing program 6: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4082) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) 01:04:20 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:04:20 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000000c0)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x81, 0x0, 0xfffffffe}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0xfdef) fallocate(r1, 0x3, 0xe3ff, 0x8000) recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000200)=""/10, 0xa}], 0x3, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0x3, 0x3) r5 = fspick(r0, &(0x7f0000000400)='./file0\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r1, &(0x7f0000000440)={r3, r5, 0x3ff}) 01:04:20 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:04:20 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:20 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:21 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x40, 0x95, 0x3f, 0x0, 0xdf0, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x7f, 0x20}, 0x40, 0x0, 0xffff, 0x9, 0x8, 0x2, 0x6, 0x0, 0x400, 0x0, 0x3}, 0x0, 0x10, r2, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000001c0)) [ 855.282575] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 855.282575] program syz-executor.0 not setting count and/or reply_len properly [ 855.316906] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 855.316906] program syz-executor.4 not setting count and/or reply_len properly 01:04:21 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:21 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:21 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) flock(r0, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) [ 855.452848] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 855.452848] program syz-executor.0 not setting count and/or reply_len properly [ 855.536930] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 855.536930] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 855.536930] [ 855.585183] EXT4-fs (loop7): mounted filesystem without journal. Opts: noacl,,errors=continue [ 855.596598] audit: type=1326 audit(1697850261.337:169): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.601132] audit: type=1326 audit(1697850261.337:170): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.610922] audit: type=1326 audit(1697850261.352:171): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.622571] audit: type=1326 audit(1697850261.352:172): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.627005] audit: type=1326 audit(1697850261.352:173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.634406] audit: type=1326 audit(1697850261.353:174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.639642] audit: type=1326 audit(1697850261.354:175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.644946] audit: type=1326 audit(1697850261.354:176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.653844] audit: type=1326 audit(1697850261.358:178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 855.657020] audit: type=1326 audit(1697850261.358:179): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8056 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b48e43b19 code=0x7ffc0000 [ 868.720371] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 868.720371] program syz-executor.0 not setting count and/or reply_len properly [ 868.737809] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 868.737809] program syz-executor.4 not setting count and/or reply_len properly 01:04:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:34 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x60048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x89c0, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000001c0)=0x4) sendfile(r2, r1, 0x0, 0xf88c) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1a7) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000500)='./file0\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000001140)=""/134, 0x86}], 0x1) pipe2(&(0x7f0000001200), 0x80800) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x23e, 0x4, &(0x7f0000000380)=[{&(0x7f0000001e00)="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", 0x1000, 0x2}, {&(0x7f0000000180)="99", 0x1, 0x1}, {&(0x7f0000000200)="0ab6220c72638eaae33a51096a3ef4c6f23a0c8eccd68a27c97522fb4cbc746a494b35bad2dcd736a0534b1e5a0f6dc05ca963faa2f3e27dd8e5be503eb5760171e21a3a466403c3f16ae55952485c436cfc16ef0df3526ff51af9b2956bad532429b48dcc227c0c787b163e5da6c7c182f3", 0x72, 0x6}, {&(0x7f0000000280)="3a27fe71f8537ab2ff96b0e0f2783abc21750dbb09b5d4b3dcd57bb6e444358ab30b45d9d0d2378649b8c98805822872344c6302829729f3c804dc0b270a160098347228bbfed453c9ef8738ea7fe9194e7bbd840d7d6e87838a7ddf6d0e54523958d56e25f2a5c3b262c04664ec22f17977f8035a9ba974dadcfed59f96d63a4851d9f5919df8973d3e412bcacc565bbf6be965f1d8855629689cced330cd4d0828cb663f94228a0dfa97a73137b4391b10be53633ccc4a9c8f41026065c433bf9981df9327e112f1355b7505f248a712f5ff09a282ce8a54f8f3", 0xdb, 0x80000001}], 0x1, &(0x7f0000000400)={[{@nonumtail}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}], [{@smackfsdef}, {@smackfshat={'smackfshat', 0x3d, '&*'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@dont_appraise}, {@context={'context', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '((#-@@@-\\!@'}}, {@context={'context', 0x3d, 'root'}}]}) 01:04:34 executing program 3: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x5, 0x1800}, {0x0, 0x0, 0x1000}, {0x0, 0x1ff}, {0x4, 0x8, 0x800}], 0x4) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) fork() r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f00000000c0)=""/196) 01:04:34 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:34 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES64]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat2(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='freeze8,\x00']) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x5610c1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018fcad006d5a90a1826f702061672f25000000", @ANYRES32=r4, @ANYBLOB="04000000000000002e2f66696c653000"]) r5 = fsmount(r1, 0x1, 0x71) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) r6 = fsmount(r3, 0x1, 0x4) r7 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052c00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000052e00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000053000)={0x376, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}], 0x6, "5c83c9bf8af498"}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)={[{@name={'name', 0x3d, '/dev/snapshot\x00'}}, {@cpuset_v2_mode}, {}, {@none}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {@clone_children}, {@subsystem='hugetlb'}], [{@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(+-^'}}, {@obj_role={'obj_role', 0x3d, '^('}}]}) syz_open_dev$mouse(&(0x7f00000004c0), 0x1, 0x432000) 01:04:34 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:04:34 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 868.783215] SELinux: duplicate or incompatible mount options 01:04:34 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 868.808105] cgroup: Unknown subsys name 'freeze8' [ 868.814174] SELinux: duplicate or incompatible mount options 01:04:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:34 executing program 7: tgkill(0x0, 0x0, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x802c2, 0x40) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x10140, 0x34) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x81, 0x5, 0x6, 0xf3, 0x0, 0x3ff, 0xe0002, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x1, @perf_config_ext={0x6, 0xed64}, 0x20, 0x3, 0x0, 0x7, 0x3, 0x5e, 0x1, 0x0, 0x954, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) dup2(r4, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) readv(r7, &(0x7f0000001500)=[{&(0x7f0000000040)=""/19, 0x13}], 0x1) sendfile(r5, r3, 0x0, 0x7ffffff9) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x20, 0x9, 0xa9, 0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x40204, 0x8, 0x4, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x40522, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 868.853137] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 868.853137] program syz-executor.4 not setting count and/or reply_len properly [ 868.856424] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 868.856424] program syz-executor.0 not setting count and/or reply_len properly 01:04:34 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:04:34 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 868.910224] cgroup: Unknown subsys name 'freeze8' 01:04:34 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 868.964221] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 868.964221] program syz-executor.0 not setting count and/or reply_len properly 01:04:34 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 868.994215] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 868.994215] program syz-executor.0 not setting count and/or reply_len properly 01:04:34 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 869.018066] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 869.018066] program syz-executor.4 not setting count and/or reply_len properly 01:04:34 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:34 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 869.067311] cgroup: fork rejected by pids controller in /syz1 01:04:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @mcast1, 0x7fff}, 0x1c) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x4040, 0x7fffffff, 0x0, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7fff7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2000200}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 01:04:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) write$binfmt_aout(r0, &(0x7f0000000b00)=ANY=[], 0x742) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 01:04:49 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:49 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:04:49 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:04:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 883.503311] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 883.503311] program syz-executor.4 not setting count and/or reply_len properly 01:04:49 executing program 6: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x27f53b7bb18304ca, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sync_file_range(0xffffffffffffffff, 0x0, 0xffffffffffff0700, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8923, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', r5, 0x29, 0x5, 0x7, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x700, 0xfff, 0x2}}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x190) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) 01:04:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 883.554995] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 883.554995] program syz-executor.7 not setting count and/or reply_len properly [ 883.582041] : renamed from lo 01:04:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:49 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000000c0)) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=""/212, 0xd4}) get_robust_list(r1, &(0x7f0000001a80)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000001ac0)=0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) sendmsg$inet6(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x40100}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000280)="7f6dfee4463c6ecb217c62e5a3547cbccb4438b2e593634653a53d8738d47c3c298d1d4d76a606dfa64c5f0e1c379108a30b1868a26239e969ecfb795cdd0aee306b644a4d48c1437ae500fc7dcaf8f87cab13541aae9121b639595168bb3a8505562edbb39518890cf27664e81c3f11ec01520f24c250ccf015fed6787ecc946c06af7b184cb6001c127c542cb146481f72b02fb3fd6677eb1d013c749e6b5be3eb893423a1e19f87b611d29f580e4cf7936d2ba097b670c2f15b542c86ba84c4a2f59813c34678b56c72604600b90ce16044b3c74dc1718ee9063198c08e5690c54f0f99df1555b4", 0xe9}], 0x1}, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="cdb5376071dc48da6e8209fc3f83e406eae747e41531be8c938ad7d8223832a09089289b484b056b57975e672dea07e7260d3e47f3915f07794a32ec532b2390e16dd407a814ca7fe4bb5586dcf997459f062ba29b3e9758bd2744dce964f5b455a6cc77e81188c4c514f278b2fad19b815c2a22a8e3bf0ccc3bc5c589742406cdf2a5166656703fd83cfeb8a94bd48ba1bf569dfe14b4bb353c9f25ef3ff83f6ca2ecdf", 0xa4}, {&(0x7f0000000580)="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", 0x4f5}], 0x2, &(0x7f0000000180)=[@ip_retopts={{0x24, 0x0, 0x7, {[@noop, @end, @noop, @end, @generic={0x0, 0x5, "7bf36e"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}], 0x28}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0x3, 0x3) recvfrom$inet6(r4, &(0x7f0000000a80)=""/4096, 0x1000, 0x2020, 0x0, 0x0) 01:04:49 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 883.669341] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 883.669341] program syz-executor.4 not setting count and/or reply_len properly 01:04:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:04:49 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x100c5, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@uname={'uname', 0x3d, '{'}}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '{{^$'}}, {@uid_gt={'uid>', r1}}, {@euid_lt={'euid<', r1}}, {@hash}, {@permit_directio}, {@appraise}, {@appraise}, {@obj_type={'obj_type', 0x3d, '@&[&'}}]}}) r2 = open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x3) copy_file_range(r2, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) link(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)='./file1\x00') sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x100, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x10, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20008880) 01:04:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:04:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 883.888089] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 883.888089] program syz-executor.4 not setting count and/or reply_len properly [ 883.894531] 9pnet: p9_fd_create_tcp (8385): problem connecting socket to 127.0.0.1 [ 899.239970] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 899.239970] program syz-executor.4 not setting count and/or reply_len properly 01:05:04 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:05:04 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000000040)=0x3, 0x3) syz_io_uring_setup(0x54f9, &(0x7f0000000380)={0x0, 0x97a1, 0x11, 0x3, 0x196, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) 01:05:04 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:04 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 899.255750] netlink: 'syz-executor.7': attribute type 2 has an invalid length. 01:05:04 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:05:04 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:05:04 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x4, 0x0, 0x0, 0x0, 0xc0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2d0d) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20602, 0x11f) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x6, 0xb0, 0x5}) openat$incfs(r2, &(0x7f0000000240)='.pending_reads\x00', 0xf0540, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x40, 0x2, 0x1, 0x0, 0x2, 0x10, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x3}, 0x19008, 0x3, 0x6, 0xe, 0x9, 0xfffffff9, 0x5405, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) sendfile(r0, r1, 0x0, 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x40000) 01:05:04 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) dup2(r0, r1) 01:05:05 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:05:05 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:05 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 899.387108] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 899.404762] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 899.404762] program syz-executor.4 not setting count and/or reply_len properly 01:05:05 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:05:05 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:05 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:05:05 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:05 executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x45ae, 0x0, 0x2, 0x3b2, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000000040)=0x3, 0x3) syz_io_uring_setup(0x54f9, &(0x7f0000000380)={0x0, 0x97a1, 0x11, 0x3, 0x196, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_submit(r4, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) [ 899.592983] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 899.592983] program syz-executor.4 not setting count and/or reply_len properly [ 899.602707] serio: Serial port tty27 01:05:20 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:05:20 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:05:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x40) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) statx(r1, &(0x7f00000001c0)='./file2\x00', 0x2000, 0x1, &(0x7f0000000200)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) r4 = dup2(r3, r0) fsetxattr$security_capability(r3, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0xea}, {0x7, 0x100}]}, 0x14, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000180)='!\\(&u.\x00', 0x0, r3) openat(r0, &(0x7f0000000140)='./file0\x00', 0x12000, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x4e) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000380)={{r5}, 0x0, 0x2, @inherit={0x68, &(0x7f0000001540)=ANY=[@ANYBLOB="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"]}, @name="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"}) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x100000001) 01:05:20 executing program 7: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = accept$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1902}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x3, 0x9}) write$P9_RREADLINK(r2, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)={0x2040, 0x13, 0x5}, 0x18) fcntl$getflags(r2, 0x40a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x4, 0x9c, 0x514580000000000, 0x3, 0x3e, 0x1, 0xd0, 0x40, 0x3f, 0x0, 0x9, 0x38, 0x1, 0x2, 0x400, 0xfff}, [{0x4, 0x7fff, 0x7, 0x1ff, 0x8, 0x4a24, 0x20, 0x400}, {0x3, 0x1, 0x7fffffff, 0xfffffffffffffffa, 0x5585, 0x8000, 0x6, 0xd3b}], "a4e81e3d5922f2ee9cb7943e131cda71e0634a0ca7aa0e18b08e85a20344da6999e1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6d2) syz_io_uring_setup(0x3d2d, &(0x7f00000009c0)={0x0, 0xf9dc, 0x4, 0x0, 0x71, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000ac0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x7) r8 = syz_open_dev$rtc(&(0x7f0000000b00), 0x2, 0x400000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000b40)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r8, 0xfffffffffffff001, 0x0, 0x0, 0x2, 0x0, {0x1, r9}}, 0x9) dup(r3) open_tree(r2, &(0x7f0000000b80)='./file0\x00', 0x100) sendmsg(r1, &(0x7f0000001080)={&(0x7f0000000bc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="057c697315c505615bfefa411e75ab3000e8a70ca0fc4eac24b3e358f5a121536da5b695276686fd520bc25957c149bdb99c90531ad835e83df063e32a69a0822efac0b6b1ed2c9b7578f15214b9eccab35da55f8b08aff69e9ac41c2653af158360d4a04fcd38f3a863f6d020af9b1bed", 0x71}], 0x1, &(0x7f0000000d00)=[{0x50, 0x10c, 0x1402, "e53f4fb3d717415cb94072962eb6573cb1701a04bf84967b8fbf14aa937c3c6795f1ad509f7260c77905f3887f54397861af1617d842fcb03de8ba04c02c"}, {0x108, 0x0, 0x4, "38b59f83af7760a897bde705d2ef4a316c08d7a84a49077e594a1bb3910a07f6316c81ee0331e60dc6072a874b65267180756a25bde11f3e77040cda42833cb67473a38e6ce007e30de2ddafae13107a74591929e48e8f99fa42c3801ff39542f13c7ae88fbe0b02e3cab102d766609d17690466dafa4c3e3f9497f441cec985955e1741cb98234d0f6ee79da12521975005b695c1eba3dbfa151e0030ee749f674f2ff4989f771a8bd1f4360d91be95b9263b6afb7a1d3d8249530974e8f4105cc4418b39fd092f032fddcccf91ee86a3cf99e941544c49d7de7df6c2e670e951e7f9b72ca93314f6858030c89929fbad"}, {0x58, 0x98, 0x8, "7edf536a2ade743959d8060ac1123c59f39b78b0bdf0956bbc1f2da413c49deb74b95d7999df7afe4e7bd1945c7b80519e9d668ebccdd921fc5425439e35936c77ea"}, {0x90, 0x10b, 0x2, "d3414ce8a7ea7fa996e844a885a5581eff0907628d1cefcce2d622f1332131ea2882407c3d66acaa89d16c438332d2eaeacff7a149b9d00ab2d0148cc12534ecfefc241cd96e7a62c6c1d44ae79a126dad54a257f75df1504805452eafb2377b345f9d80ee10e88428b416ad909c2188f1b1d957f4862ee20d67f7c9"}, {0xc8, 0x10e, 0x3, "8885b3f4b1f2a962e72ded60813505773aa9cdaf0a07b54552b82371fc20cbce610ad5d6f612eb79ea9289f07b686a1bf8ed442b715db677ef98cf1f476a83f1758221811b26a974ddc68f588dcb1808460c2cf9582b5d6970cc16748b16f16842ddcdd257dbae6492a9d7592cbe3958a226baa90e95fa27581a99ae26cb21176e39ed04c9bd4a147e706b1d72b9f17e92c9f39e669df2a059ea28070039ce0f0af2fdc8e3e9f85ea97c504ff3c0f1a78b698ba910e3488f"}, {0x50, 0x10b, 0x2, "ebb9b3216f9ed4e3000e779975f3985ff0565bce8cab1b3260439694937245800e530828f861b50ee194fdb5e9f276c27e74f3554128916356ba376f"}], 0x358}, 0x20000000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000010c0)) 01:05:20 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:20 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:20 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:05:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x4, 0x0, 0x0, 0x0, 0xc0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x2d0d) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20602, 0x11f) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x6, 0xb0, 0x5}) openat$incfs(r2, &(0x7f0000000240)='.pending_reads\x00', 0xf0540, 0x88) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x6, 0x40, 0x2, 0x1, 0x0, 0x2, 0x10, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x3}, 0x19008, 0x3, 0x6, 0xe, 0x9, 0xfffffff9, 0x5405, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) sendfile(r0, r1, 0x0, 0x100000001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x40000) 01:05:20 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 914.521841] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 914.521841] program syz-executor.4 not setting count and/or reply_len properly [ 914.547407] netlink: 'syz-executor.6': attribute type 2 has an invalid length. 01:05:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x11200, 0x21) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000100)=""/43, 0x2b}], 0x2) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x6, 0x1, {0x1, @struct={0x1000, 0xe90f}, 0x0, 0x4799, 0xed24, 0x6, 0x5, 0x9, 0x4ec, @struct={0x9}, 0x2, 0x1, [0x4, 0x6, 0x8550, 0x6, 0x10001, 0x81]}, {0xee, @usage=0x2, 0x0, 0x7, 0x9, 0x3f, 0x10000, 0x3, 0x84, @struct={0x3, 0x7}, 0x3, 0x6, [0x6, 0xffffffffffffff2b, 0x3ff, 0x5, 0x2, 0x6]}, {0x2, @struct={0x1}, 0x0, 0x0, 0xdd, 0xffffffffffff8000, 0x7, 0x400000000000, 0x0, @usage=0x1, 0x6, 0x1ff, [0x6, 0x7, 0x6, 0x9, 0x5, 0xffffffffffffff81]}, {0x2, 0x3f, 0x2}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000006c0)={r3, 0x35de, 0x0, [0xd7, 0x1, 0x100000000, 0x5, 0x100000001], [0x401, 0x80, 0xfffffffeffffffff, 0xffffffff80000001, 0x3, 0x7fffffff, 0x1, 0x6, 0xfff, 0x9, 0x7, 0x7, 0x7, 0x8, 0x0, 0xffffffffffffffd1, 0x4, 0x0, 0x7fffffff, 0xfe, 0xff6, 0xffffffff80000000, 0x0, 0xc73, 0x7ff, 0x9, 0x8, 0xf2, 0x3, 0x1, 0x1000, 0x2, 0x3, 0x6, 0xcae, 0x35c, 0x0, 0x8, 0x800, 0x7ff, 0x2, 0x6, 0xd2d1, 0x5, 0x6, 0xfffffffffffffff8, 0x3ed9, 0x3f, 0xfffffffffffffffa, 0x7fffffff, 0xffffffffffff6ff0, 0x1, 0xfb4, 0x40000000, 0x5, 0xded, 0x3, 0x100, 0xfffffffffffffff7, 0x4, 0x5b, 0xf4f, 0x7fbd, 0x0, 0x7f, 0x788, 0x7, 0xffffffff, 0x4b, 0x4, 0x5, 0x7, 0x0, 0xfffffffffffffff9, 0x80, 0x2, 0x61b7, 0x101, 0x0, 0x7fffffff, 0x8, 0x12480000000000, 0x20, 0x6, 0x8de, 0x2, 0x40, 0xeb, 0x2800000, 0x6, 0x1, 0x6, 0x5, 0x4, 0x20, 0x9, 0x9, 0x2c7f, 0x100000000, 0x9, 0x5, 0x10001, 0x1, 0x2, 0xc16, 0x7fff, 0xe0, 0x1bc0, 0x9, 0x8, 0x8, 0xfffffffffffff801, 0x8, 0x10001, 0x2, 0xffffffff, 0x1a2d, 0x7, 0x9, 0x5d3, 0xfffffffffffffe01]}) 01:05:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:05:33 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:05:33 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:33 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:33 executing program 7: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffff00000000000000000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 01:05:33 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:33 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 928.258111] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 928.258111] program syz-executor.4 not setting count and/or reply_len properly [ 928.283902] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 928.311881] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 928.311881] program syz-executor.6 not setting count and/or reply_len properly 01:05:34 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:34 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) [ 928.325202] device veth0_vlan entered promiscuous mode [ 928.432190] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 928.435785] device veth0_vlan entered promiscuous mode 01:05:49 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:05:49 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:49 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x19d4, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r6 = socket$inet(0x2, 0x80000, 0x83) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {}, 0x0, {0x2, 0x0, @broadcast}}) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:05:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000080)={@msf, 0x0, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x3e) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x480c0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x32}, 0x20, 0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="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", 0xff}, {&(0x7f00000000c0)="3a31f51e6b7757fac4f0576c36118816e63d619da5137d52e2", 0x19}], 0x3}}], 0x1, 0x0) dup(r0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000340)=0x22fd, &(0x7f00000003c0)=0x2) syz_io_uring_setup(0x5f3f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffd, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000440)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8001}, 0xe) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000300)={'veth0_to_bond\x00', @ifru_mtu}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x2, 0x7, 0x20, @private0, @mcast2, 0x8, 0x1, 0x6, 0x102}}) 01:05:49 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:05:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe0", 0x4f}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) [ 943.578090] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 943.578090] program syz-executor.7 not setting count and/or reply_len properly [ 943.593828] sg_write: data in/out 33555249/31 bytes for SCSI command 0xfd-- guessing data in; [ 943.593828] program syz-executor.4 not setting count and/or reply_len properly 01:05:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:05:49 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x800001, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'morus640-sse2\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'bridge_slave_1\x00', {0x2, 0x0, @initdev}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"]) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x41, 0x80000001, 0xfffffffffffff74c) read(r0, &(0x7f0000000280)=""/197, 0xc5) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x5, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:05:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) 01:05:49 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:05:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6b23, 0x2) ftruncate(r0, 0x1000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001140)=@abs, 0x6e) sendfile(r1, r0, 0x0, 0xb052) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) dup2(r3, r2) 01:05:49 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe0", 0x4f}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 943.818337] sg_write: data in/out 33555249/31 bytes for SCSI command 0xfd-- guessing data in; 01:05:49 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 943.818337] program syz-executor.4 not setting count and/or reply_len properly 01:05:49 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) 01:06:03 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:06:03 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) 01:06:03 executing program 7: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fe26f08c717172e91d11fcf1d03e37d0a9cdc5246497e6e9be2a52b04fa488404cabd1542cf170e429dd5057d7d5db566fc9e481b1128bce328ef44be2ac02ea82a613a077c2508b07638c2da855795a8523c7986a4979fc9300627bae481812a27b8f03511a4dfbfc9680cf5c993b89f8efb3de820ef8e9bd306955000037976789cf995521a65b9192b2dde0498242f3042690688050b620e188a301b717bf204eb12a7fcd85332358a4e595f838fbe8e29ca7b0315e9f9e74ba8f08031384702d819754"], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)) io_uring_enter(r2, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) recvmmsg(r1, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r4, 0xc8, 0x0, 0xc23, 0x2}, 0x8a41) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r5, &(0x7f0000000000), 0x5ac, 0x0, 0x0) 01:06:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="70726a71756fa34b078d"]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = syz_io_uring_setup(0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1124001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x121002, 0x40) accept$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r4 = accept$inet6(r3, &(0x7f0000000280), &(0x7f0000000300)=0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r4, &(0x7f0000000340)=0x80, &(0x7f0000000380)=@tipc=@name, 0x0, 0x800}, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x1, 0x0, 0x0, 'Y'}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000001) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x17, 0x0, &(0x7f00000000c0), 0x400000, &(0x7f0000000180)={[{@uni_xlateno}, {@utf8}, {@uni_xlate}, {@shortname_lower}], [{@subj_type={'subj_type', 0x3d, '^&-./'}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, ')'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) 01:06:03 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000190c0), 0x84900, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="078edda50fce023eee010001003e4dbadd0eda85d88ef00719d02128cea7f447e1018198259f8576a89e3ea09108988cd881b23455"]) 01:06:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe0", 0x4f}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:03 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:03 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 957.454986] sg_write: data in/out 33555249/31 bytes for SCSI command 0xfd-- guessing data in; [ 957.454986] program syz-executor.4 not setting count and/or reply_len properly [ 957.475281] EXT4-fs (loop3): Unrecognized mount option "prjquo£K" or missing value 01:06:03 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:03 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x110) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="74726164733d756e6c0900afe5064fc9e44f81a9a6006faf3f0b04036518ecd8d9422fc900"/46]) 01:06:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:03 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:03 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) [ 957.603093] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 957.603093] program syz-executor.4 not setting count and/or reply_len properly 01:06:03 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r1, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000008a8ac4844dab4bc13583d57aea9f02030300000000000000000003000006080001000300000009000200000000f3ad000000080005400000009563106b705595a2ec1af40208000540000000300800010000000026000000ce8bcb4054a1c1026e274bf9d600"/118], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000004) timer_gettime(r1, &(0x7f0000000280)) timer_create(0x4, &(0x7f0000000400)={0x0, 0x38, 0x1, @thr={&(0x7f0000000300), &(0x7f0000000340)="f20d21b5a65d502e22f38b1530ee4c4032ef6f60dbaf440a8db495cf74ba7f3e49a3b89dec347433cc146d5cfe6a0f6438322b07a73d8d5345f423f4619faee2186e3fa620d92138a95c639c13fb89adad9798e766b62e761f8e73b9bdc1db69a7456a228b0156eb8cb9d44d0f36da64f8e0e75816333f3ecaa7d17abe2109a7c911f4712597e55689d82a6454e144c3c453f3896e8d2d1723105c0c75"}}, &(0x7f0000000440)=0x0) timer_settime(r2, 0x0, &(0x7f00000004c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000500)) timer_gettime(r1, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:06:03 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:03 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) 01:06:03 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:06:03 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x0, r1) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:03 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) 01:06:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:19 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) 01:06:19 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0x3}, 0x10, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) r3 = dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) lseek(r3, 0x1, 0x3) r4 = fcntl$dupfd(r0, 0x0, r1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000000)=0xe8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x3) r6 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x680202, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r7, 0xffffffffffffffff, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r5, 0x0, r5, 0x0, 0x6, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r8, &(0x7f0000000100)={0x1}) 01:06:19 executing program 7: add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r1, 0x1) r3 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f00000004c0)="cb754e3519ad4b5744b463301461018d0082e610c66c514c646ff9abd412f9b8f79c05124d78bc9ca1af109d4f2b0b3db6b93c762ebc23098c5a445d6f887f2411b0ba04070575231f695a285ab50c36eb1b2e1b8dfa7230f77fbff72335b2a3dc91984a919c00746e1ee3852aaf0fb190329bdeb6d746cef81701", 0x7b, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='dns_resolver\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffffa40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:06:19 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:19 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000e00)=0x3) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x2284, &(0x7f0000000580)=@bca={0x3, 0xbc, "741888e576a609ee26414329bb04970df36cb67add8d39f6cdb8f84e1328a564ab96ec884df45812695dc67d0a40f1242a9b3bcd8434384656d613858986ee11421da877820939a3b7fa6dd32e898b14afbd5b5e53fdbf333cd8a984a9091b41c12dbd1a4084a294cb8fe9e26a04bd37d29ef79dde90957fba86b1a19af1e8cdf185bf242c4536ef2e9b6dad490acb537f0be3325ac835013f7478ca82e517817e8d697b1dd3d7b85f22ead15bc9b99054127419c07c6e7620ba6552"}) 01:06:19 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 973.709608] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 973.709608] program syz-executor.4 not setting count and/or reply_len properly 01:06:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="c841b97ef27dbb9663ec6f0efec2698081282629dc74f1c3e148cd8d4c6a", 0x1e, 0x7}, {&(0x7f0000000140)="ba641af0c1a953b9a8ca8f98e58c6445c2650ee8f3edd084e9d860d5674055b8ceb87e1f348cab8120ed8b3113bcb828e4806f51971de9efb2e41030fe985786271cc85d7b650707977b0f4eaf4617deecea81fe45529f6d95aa2d47b0b33176d1d2f05787611657369e272acba5953aba6dd8117513ac618b75e7b3cf9e08cfcad43e313d97e8b85ce0736e48925fc14ec8bb8bbd4d558812a7392d0739971080315fd56562f8a3ce0d917cef290e7d5cc69aafd31fd9e2ce03670c383c335f8e09437485a8e6", 0xc7, 0x1}], 0x1001098, &(0x7f0000000480)={[{@block={'block', 0x3d, 0xa00}}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x400}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '*.&\\:'}}, {@subj_role={'subj_role', 0x3d, '+&@.)[#),'}}, {@appraise}, {@dont_appraise}, {@permit_directio}, {@uid_gt={'uid>', r0}}]}) r2 = openat(r1, &(0x7f0000000280)='./file1\x00', 0x581800, 0x81) setresuid(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x7a6}}, './file1/file0\x00'}) faccessat2(r3, &(0x7f0000000440)='./file1\x00', 0x9, 0x200) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2c88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:06:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 973.833238] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 973.833238] program syz-executor.4 not setting count and/or reply_len properly 01:06:19 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) 01:06:19 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:19 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:19 executing program 3: tgkill(0x0, 0x0, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x10140, 0x88) ioctl$int_out(r0, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10400, 0x0) dup2(r5, r2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000002c0)={0x4, 0x9, 0xaf0c}) openat(r4, &(0x7f0000000200)='./file0\x00', 0x0, 0x10) sendfile(0xffffffffffffffff, r5, &(0x7f0000000000), 0x983) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x107ffffffc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x8001}, 0x427a2, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)) 01:06:19 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000080)="8800170300000000000000080000cc000000000000001cdca52a3a0802000001000001010053500701bef00052520501815078", 0x33, 0x1}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nojoliet,hide,overriderockperm,map=off,gid=', @ANYRESHEX=0xee01, @ANYBLOB="1063b491b0a1c5168eba3631033e00"]) 01:06:19 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:35 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:35 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) 01:06:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:35 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@updsa={0x154, 0x1a, 0x1, 0x0, 0x2, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0xfff8}, {@in, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e22, @in=@broadcast}}, @algo_auth={0x48, 0x1, {{'tgr192-generic\x00'}}}]}, 0x154}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getpolicy={0x80, 0x15, 0x408, 0x70bd2d, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x30, 0x6c, r2, r3}, 0x6e6bb9, 0x1}, [@address_filter={0x28, 0x1a, {@in=@multicast2, @in6=@mcast2, 0x2, 0x1f, 0x7f}}, @extra_flags={0x8, 0x18, 0xffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000044) 01:06:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x20, 0x6d, 0xc21, 0x0, 0x0, {0x0, 0x2, 0x2}, [@typed={0xb, 0x0, 0x0, 0x0, @str='[){[[}\x00'}]}, 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e0"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4) 01:06:35 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:06:35 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x400c330d, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000180)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000000)) [ 990.024785] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 990.032945] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 990.036504] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 990.038074] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 990.044231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9381 comm=syz-executor.7 [ 990.053358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9382 comm=syz-executor.6 [ 990.059819] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 990.071908] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 990.077216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9386 comm=syz-executor.6 01:06:35 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:35 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:35 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) 01:06:35 executing program 6: creat(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73668553b300080820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000400), 0x0, 0x9e0}, {&(0x7f0000010400)}, {&(0x7f0000010800)}], 0x1082000, 0x0) unlinkat(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'map_files\x00'}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@audit}]}}) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=']) [ 990.171189] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:06:35 executing program 7: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x45) io_submit(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000001740)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x40400c5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRESDEC]) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x163a90252fc78a1b, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "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", "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"}) io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x48c002) 01:06:35 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:36 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x252000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a0, 0x15, 0x400, 0x70bd2d, 0x25dfdbfe, {0x3}, [@generic="a3970dfe16b6795f53e69311a64d10fb80ffce36cf45923ce82fdaf473f54af6d5285de3130ce40279dbeb9e15b9f6d1443c1669540817ef4c53322c0048235f896c55db8ff57b337046a5721a3b80a90277f3e1846f2a6e042e98cafff9f5fb6a7ffa9a63f508c938413d6ba4df6353d7", @generic="6247f59ffd3f5ed208c4abfb21c41ba734273d3925e9393967e0286ef72d5e82b3405dd6", @nested={0x10, 0x18, 0x0, 0x1, [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3}]}, @generic="7ad240fb32926763d9ee5a755f0692208e385397e33a70ab4a6b16a54de7454a391a63215cb5b43d66696cc6d2f08d7f10d76c1d67f12e", @nested={0x19a, 0x39, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x74, 0x0, 0x0, @uid=0xee00}, @generic="6151b3b957c935b3b6ec42b99f2b388971c0849083f411686c62fe05a49885714792efc99c4009194559584eba68647decff09fd47a49bf34d654a3d2f288c5aca18991c6f89fdc9ce19a06dc3b04ef9c5d1e278260384295ec5", @generic="139f4184702dd6799d0adbaa85dba66d8c14bc2e413017a81224bd8216f7b7942176fee3e6f2f0155a42a02a7c54e30de52341ec55147f2bcddf1001c3109880266c8f94ce2659b3bca16cfbf206859a3e6a50899c6d2a7638a663481c4a25edbb8166ac553b020102fe395f00a1720aa14b49518bb8c6a3ab8f620b28c66b9dd4865a1489489bdc70be346f2b20180052d67624bf885c37b51d4b4dc7d20f7c33088d4d44b57a3a39e29b6f8bb685f162badc", @generic="e82b0a9838920344beb10ed487d724751cc02e2f95092e74fbb51ca29482a100ea6f7b90bfa14ebf17461c0a133d15e610e42a163e8a5a6361f4a888df405e2a3f6a7f857dc99d5070b256ed36289fc6556e71fa5951bba87b589816181c700e4290706f4e", @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0xc, 0x81, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="a486ea6f24e1a1e008c8565fa955fcf0b7dcd85da8692250672b40e5ddaff04663a0353469cc5f3961ad9003ea30f4178209a0333c6a0b56ef9cebe05ff7ac2f4a4a7fd967bb4fc14c14dd095daa0c39aa83", 0x52}, {&(0x7f0000000580)="a77010a898140267601a5db6d6fbbebf13741521ae39691fffdea6c796295fd35eb98b2189a03118f953fd4617fd49260ff74711872dca7315fea8b36843f2bafec1f884f5e24c0caac000168814dfb6de1e1b58a0c32ad88d42d6a4fc25ca9b73bca09039d6a963d015690b6239be4fdd34093ca6750351ce7941a7a3fcd54884ba9f5395fd231c6f15e19d24dc8a58aff57848ae1f1c33f5ac89b663c3dfae8889cadba209551768f1ea524edef88286d1ee2e", 0xb4}, {&(0x7f0000000640)="8f7b37642f15441fde5001bae15a9fcc8368de59286cf924aa703b31cd9a34ce3221646b809c82d0a4f583e42ac4686d71e596dc438ca1d9c53faec908fd7173b7836cc9f0787914e395304b7668b6718bffabf6a92613582b02678856c5a227407d462b42e0ec3a491a76d50ac93718aa7d291e11471ca72970ae293e7777d759b8c0a86bb712569ae2b7739fa99d46e7e323403824d8910a7cecf1a70970435c6c18f160e2fbc2098ed0a5c868f6a96e62e64f033b0069e3b9d096f3c88dfe1ae8f029e22b2b834d4b3aa897c5951ad423084579beb374ba9a9b246de27366b405dd", 0xe3}, {&(0x7f0000000740)="58a4b1bc7374c574a3c66d19844e6ce0d3ba476c0bde7c431a835600488644009cf81cf24252f7a2565536766f1ebf9863d6d3f809584db3ed71753a8fca8f4e7d8ccefdcb2fcf8322d43fbad7c53026ec0bb9fbc684a2368a45a69594392ad90300e448d072989078626281d51150dae79ef584763813ccc75fc788ef62d28183bcc24e53ceb397aa80d631c3aacb77145607a854d8839bcd21499e95ab27b27a581234c79dc52a58d6ce06e80af3ea917912eaa403877db2faf0f31dcec4", 0xbf}, {&(0x7f0000000800)="397a8c948abb0cd8a477cacec75ba0bbd57da4f15402d115a94c09aee52d9bd3c89c45f21f94faa5f76de53640df75529245924b30c58f092fd3cbbcaebdb06e737b921f19502e7f107405f414e59f0f83d0d8cb15889e7b54b0f0294b91ab6e2d030d9b1753ec7e536c6a53e97dbfebd551fc7ef86ca5a823afb716c1bb6dab5b8e985dee4ad70ae18a1c2d", 0x8c}, {&(0x7f00000008c0)="d53bc47613ddefa056c9ec448e28f4059b9443c5a227ac8ba1ae9880e78809d18586b636fe0aed7407de9ae6052695fac5eef73f5793b2994bc7a5e218cfcba52e2cfd802169e765dda13b9c44474e47b84b8a8d7f9cec083e06e07ad837c98b4098c0fecf9b369d105a3bd0d8826dff740f42361a6c3def3efa9ce9c6f4d829d98fa003e35a2de24c55eba20daeb496ead54c53aebb8b1b7b93d26b1af601d5c44476c5846a976c535eb71651ee52360f354ab932f5cd0b77ed521304e0864ebaea5f6d39298a938bec286666d60fa8a89e5376a0330b32", 0xd8}, {&(0x7f00000009c0)="fff4644cfb8e28fe990064a451076644954c7f15000d370ff994438e867acb2cf431d474302745f6b2054061b08c0fbe16eded48118a92ae393b", 0x3a}], 0x7}}, {{&(0x7f0000000a80)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @multicast1}, 0x1, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000b00)="577071664c58742cf72c4fa48bbca5987900cd6a335900b4120e30b52631afd49a19a5b23bc96f88683296601399ff91304c20b36a0bf5f9857b4ae7339db7c7eafebc487894eb27e26eb77a05adb97e19956d84c30a9d922924d74988ac641a287e93cd715ae7f80b138baec26e3a5a47c2093b80cc48fad94d40b0a8c8fc6a0b21d8d58e", 0x85}, {&(0x7f0000000bc0)="77f4f7f535623803b7f72dc277ca7e264245caa20521db59e7e8e421ff1fc32b6ef0b9945e4a49744c7ad62cf4689353ca5b2959d3", 0x35}, {&(0x7f0000000c00)="97e9a3ee85e2a3a3d816cc556fe1c10015b32ad38c57945b6a7a4ec425fd09bd607786421a6bdc50143a3895d1bf834e0c4a0841a710d63f7447019a46086659356479610a35c75d55563ed7e2", 0x4d}, {&(0x7f0000000c80)="a28560de3e229338a20a0a3f45e28591dc0729c16fceee437ab435dc41c8df475582a1ae83c05026bf673d84d41a779a773573b5ae2ffaec38dc0efd807f645da902ce88eea6c0e9a803d79edfe24ff41a5ddcbbcc7c562720a8c1c452c7b3459401b65c58b1f2a8f7dbaec24cd2c8762a2044763bf4db8a30f4ba7ea0e6c29854d215b0ff67a128385a4e25d882b824a5c4a6e15861a0cb", 0x98}, {&(0x7f0000000d40)='U', 0x1}, {&(0x7f0000000d80)="aec502dee6f7c3643af1f35a5100b2a9018b9d692962049edd0cfc50f7654a8609619bc9293d3fcd0310113f57e9facdea667c8a3a7b34f5e7d10bae5af732db44bd55dcd23ea994daea159fdde7d826c7e359c91e42b447e639088a9021c0d4934e6739ed92327bbe105b96a0886e9bc5af8f72a9efc9b44272de928bf45252d3cc8d762570bcd68d64bd9a770c236ad666196ac6b07238192eed089dc77e98c5521dd3fd217cedf23cc4e78f228f05bccd1b68", 0xb4}, {&(0x7f0000000e40)="d2b716f8a8635b847bc8f5e8c81015cd306936505ee7f5019c4e5e3ab3f126c83a5adb8e3bc25b4c64f8c24bd3af8230ee61067adbed1b57aeac97101a8d44eb8f8496efd454d29100d2b9134969ecf5f4caf0513b8a02229bdd2c58cf4f40debc70", 0x62}, {&(0x7f0000000ec0)="1dbf3b0cf0c394d9e9f5aafe772a4dadf9bf61b5912a3971583bc47544f7080775ba22fe85e1943e0104fa5b382d9baeb47cd28cc32ca177dbf202d402cba4aafd27304d7342b985bd87d507114163625e28d70d6b7cf155bed036d653d5dcb10581496fb078da63ff0084241fbcc1a3b888fe10b34b52d090914d0deac89d536c368f7177206f5a12d686b1ad6030884ea62ed8ce29cb7fde32e8d943497b9cca1a", 0xa2}], 0x8, &(0x7f0000001000)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}, @mark={{0x14, 0x1, 0x24, 0x11}}, @txtime={{0x18, 0x1, 0x3d, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x58b}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x78}}, {{&(0x7f0000001080)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001100)="2e360082df7c1c263d14775c6d80b458ae6598083404d538886e8eb43621861b2f96ce15e6431d1573b1158e52b66730dee2b428013286b44bfc3eeeef88b23710080b15ded1352f6ce4cc4de082fa09633fe970bfddedae9f462ddff77246a34987759663a5c5d52a2ef16c36318051c60b886e9f563cc5f626f5aaafd031d811ace2e7c125b2140e925ac7a9afe06e06451b93fe9e39e76515349b004f33d62c0314df34f66bf52a6b1c9aeb6442cd0827240f392527f7ff677b3a445d5755d0e98e9dc61e6debb5ebc0a90f7ac1273562b91110aea7ea9fdf1b", 0xdb}, {&(0x7f0000001200)="edd737b4d7ea70f1b60d5455ad2c4097b4e2e547441bf4b5917568b8e339c31aacaf0a3bc699a9ea901de8cab6da8e759838f9013322fecc6f59eb25a399eb723c82731780796b07bcec3030d1e939b2ea7b03f8a7e4e217ad5365d1990b8fee04c66a92d4dbf13b8d614287bf9a3b53807482e4b78e45cc323ba948d2e7a58e2f91197ecd2d5c4f62849e739a0071f74400b693f1628c586fb52766b8f38fd10eada9965bc84c5cc68a419843b5e6bbc1f46deb96", 0xb5}, {&(0x7f00000012c0)="9ddd61bb8c1a295e400ba8789d575773e230ef6c8aeebdfed4146a6b0419d98f2f9990d91f986d77276f6f7f0317110e28f29baa64a26a92d09a0f55a71572ce2faf4e1849e9811ce63d198b218a47e7017cc650e59c6da86665b19ab3d86e941072cff80d362a504b0034b6d8d568019f5a13bb241ac93591cc1e654d9d205b97f04d70195d086744c20478df660bd810b8d587efbec113197eb16ebebced077d7f0d671e17ca4f09bb99ae3086e8f3c2cbc0927149e1d8e0d5c754c98652df", 0xc0}, {&(0x7f0000001380)="55979c6d212fafab8266960a62f36f5021a43f6859e6ddf7b28702323187eaf22c28d121f713749685a8d7a6a96de2663cf40ba9f702ed905ebe5cfbd21011878086323d98f3d2fc790075a9c6ef09c22e096c9d2368a44a91e95d35452282771d4c816104a21e9ce00268be9e6459c7814555caedc9ee7bf7ed", 0x7a}, {&(0x7f0000001400)="d31e19915514739b6be146f23c683b24e23e42a9e0f398628bed83341f1f2880ce6791faece5eca07f9368c679e7ceda893bdeeb92f89a6d1e532759c512fb8ff99fc28ef56977218a61b6ac02", 0x4d}], 0x5, &(0x7f0000001500)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xbe5}}], 0x48}}, {{&(0x7f0000001580)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001600)="8d88eb108eed7370e2fd1e1a30302512065a29b0dea465637abcde94f3bb90b2a5dc5af5772bf209ef1db81bc41661830c73176d3d6a8bef53fdd3b4ff4884f9aebe6d7f6439af9889345398461ac286be0d75b6b3074542dc0299519515affbccb581", 0x63}, {&(0x7f0000001680)="45ad97c9c0f6111dbe79a60459b18e438ec02e538cc08075d527d99b7384d7c03aff34d715b65c463bd0358fd9ccddcace28d80244facec40952d96d3365218b77930bb1bed41be9a9e4c0b5e9fe6de05277fd731a15fd83ff70c2dd8ed32b70d6202482944a27315ffc48bb9ab65dc275e2eb3c956625f79c44be08a7064547d2d7162e89007d8d19d1da149debe660c6c3be16e4c9e2f0beaffa7f65a5dab43127dbd47ce6a9be956af45aa7515e2b0dcf08d34b8e338d388c56c85ea290", 0xbf}, {&(0x7f0000001740)="7333916684b27da4cb238dc8b33318fa866e2b1f3adce1b08dc70dc59dc4527eb11ebd662548295dda8485c149ea8c8fced9aea830e288e3b66db9f71c", 0x3d}, {&(0x7f0000001780)="354b52bbf6d57e09e1aaac34a91af2773582bced1ee33fb58d1b9bdf5a66e9382e11bac9b48b1fcc2ac62bd14234bc0d10465f953d8f83d4c3078c52cc52749517e2c472033a612dba7db8c54e7fc0bcb58d29dc209d4aae86df52ca00d69ff1dc573b9c5a534ded3ab05886c1cede24f3429b259f3ba5fb6729028cf3c6fd99c5297e3f46198ffed0ab8cdb25657053a67ec084ec6379ba506e7d6364ce2fa04cfaf4cf5cdb8b", 0xa7}, {&(0x7f0000001840)="a6bf6aecafc1207b960bdc1336b6f55610545472e89a1655af59a95c65031bd1ed1c2c805a620023cb8112ad262c8f1c561520e2e2bc105842e5b3998b60e17cc9eb8ec3ffcce7dda361325bacb7", 0x4e}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="8ad6f2d57a1b6ceb0880b4b48b751b7a75c4a92651aa273177b883c8b2d9237bd1979a46bb45e55696df8722c40335b2c45cf3aebf4c8ee83b5584346fb78b7c5abc75f268b1329664ce9fd6e16b4100a832e632594e5442b736359c031cc7b23c3a475095fb9e8eb564552510955e9294e4b7ad10954d1bfc1ee84913e9c95dc94af2b6ae9cdc5dbb64ffef9d4da0fef7", 0x91}], 0x7, &(0x7f0000002a00)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffe17}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{&(0x7f0000002a40)=@xdp={0x2c, 0xa, 0x0, 0x20}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002ac0)="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", 0x1000}], 0x1, &(0x7f0000003b00)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80}}], 0x78}}, {{&(0x7f0000003b80)=@nfc_llcp={0x27, 0x1, 0x2, 0x4, 0x1f, 0xaf, "2466c10ac03c73f395268a96a40b8647e1aaff397ca122914763857d17ff96bd8d6f2213719d4774aa48ef7638c24d5b3b9fdf405e020c543bbda60bf82b36", 0x39}, 0x80, &(0x7f0000003c00)}}], 0x6, 0xc850) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000003dc0)={r2, 0x9, 0x3, 0x3}) renameat(r0, &(0x7f0000003e00)='./file0\x00', r0, &(0x7f0000003e40)='./file0\x00') mount$cgroup(0x0, &(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0), 0x5, &(0x7f0000003f00)={[{@name={'name', 0x3d, '{#&-\x94@*'}}, {@none}, {}, {@cpuset_v2_mode}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@name}, {}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_eq}, {@permit_directio}, {@fsname={'fsname', 0x3d, 'syz0\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x35, 0x30, 0x32, 0x35, 0x62, 0xb, 0x61], 0x2d, [0x63, 0x36, 0x36, 0x65], 0x2d, [0x65, 0x66, 0x36, 0x37], 0x2d, [0x35, 0x64, 0x67, 0x62], 0x2d, [0x35, 0x66, 0x61, 0x615dfc133a6eb627, 0x33, 0x35, 0x34, 0x66]}}}, {@smackfshat={'smackfshat', 0x3d, '#{*.'}}]}) r4 = syz_open_dev$rtc(&(0x7f0000004000), 0xffffffffffffa094, 0x2104c1) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004080), r3) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000004180)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004140)={&(0x7f00000040c0)={0x70, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x70}}, 0x80) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000004280)={&(0x7f00000041c0), 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000004300)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000004700)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000046c0)={&(0x7f0000004340)={0x36c, 0x35, 0x400, 0x70bd29, 0x25dfdbfc, {0x16}, [@generic="0d01b2ff68c6a462a1141aee6af3dc48ef9945a27648b3239f033b97734f75f01ed7e1418be59fa024d99476a07adbd79ac68188a16e92", @generic="f33d44f99fefd12fe43d2e91b0aa4583e10113b0109573919da12efe36a01b7d8e53f016cf4600", @typed={0xf, 0x3a, 0x0, 0x0, @str='+-])@$,/^}\x00'}, @typed={0x8, 0x4f, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x2de, 0x54, 0x0, 0x1, [@typed={0x14, 0x47, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x75, 0x0, 0x0, @fd=r6}, @generic="05410978fac395b6257aac1d0110c3b3a004330885467e3283a9544146cbb38f41498c63893a2f0352e245c41938df4807e507ee0b85ceaf1ba50d10fecbf6dc1c07eeb0666a06f114833c7d776a484c18bf82ac13de6a7533bada5cfac0df6b59e9938c5c53", @generic="534bea94879496c62f85aa8853b79faa7b3c18633d8c6ed1715e090db94b086ffeb72190dc24655c8fe1b4bc8843c296260fc7fe597f35ac42f21176dd6389f369a200266ca2ffbacff46b192d7eb21238e11d62e28beb0b9df56feb2a2d1bf7629c4cb85c8118595e57c04d71aff74c3029db819aa5effe9063a4fe70742232b778e41c63", @generic="040fdf2202dc7262e2bbe70e4e229d622b70a8108d0b271ab77e2925bb77b55f3b665b5af566475ff342450b2111ca55b92702c65f88dd80f5bb90fef308b966af2f3de62ecb90565bde1ae7fb2a51ceed6fdadb69935b9d7b9ee2b62da5d2d026fba6bafe5a5c10caac2ce5882ba65385fdce307f6d188d4e10f578d5a7b3e58142e8a3fd13fc1b74e6ccf737ea4eced430", @generic="1a5c024b8f5606ce3068b6c10aa3ab8401fe2c0e02f3b8032b99567a67c3f5486ee362baffa33e9fd35a0d4709739a174cf6f55491953e6a6541ef8cffd8a947be2e5d58bcc31e76939b817f2e93111a2864bb12df2b9fa972505e5af8bb8fada71284de84755ea945ce83cdd7679eab1f45f0f03744faae686ed5ed518a8abdb5a31b89a22734d5cac90620cd4329194d113b6ead8ad685bc3db1d58b501a3f7d06a90197f56a9324282ed56008f60ffca753b3319ba99c9cbc02bc2354ee988aafa8af08b1c7826129f686c7de5926055874ce1c82773094aa13da9ff66a4fb480d6bce8ae3da83bcbab878d8315ae", @typed={0x8, 0x36, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="010f5c8d22fdaa4d70a571710eb1761582688b795e01504458d9277ba25fbda19d3d17f9641d0a2d44a0d366c67900d24a403f251d"]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4044010}, 0x48000) sendmsg$FOU_CMD_GET(r3, &(0x7f0000004800)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x841) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000004840)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) write$binfmt_script(r7, &(0x7f0000004880)={'#! ', './file0', [{0x20, '\''}], 0xa, "55672fd86c654d1f0ff3f7413defe6f3e67a36f9ebd09714731802f3cf4e739184d38953e39d8c31e67c728f4acae5ca972bafcafaee6357c2bd7b21fb2f274edfa2b09da551d43db0a0f212bbc7cf7b746c4c2b6f680e86e02e95710189a8a4c956a757fa0f784bf0ae3390cf0bd1efaf87897663da761c47300c365d0820cfffa1ade07946bdeab43af076ee31139b26178333c04d5b4fa56567ec73335d6549480304fdb2b6d1f93837e521a339ec381be87a6492f8296840282fc816df9db03ea2"}, 0xd0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000004980)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) 01:06:50 executing program 3: stat(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) sendto$unix(r1, &(0x7f0000000000)="86d828e71539663deb3fea163f670e77803e7848f7ecc53c1c63acccd276e8bb350f664fa64e434c410a8078a1543750eebb2b", 0x33, 0x40000d5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setresuid(0xffffffffffffffff, r0, 0x0) lchown(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 01:06:50 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2c481, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:06:50 executing program 7: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x8, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xbdc6}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001d00210c000000000000000004000200d0825b1587f86783563872e0c265551c74bee6bc7be11ba5cdbd3262b50f1351d4213554b26e82746ff7d2898618142354b969ec6988fb51221887f114f9005eb5811db02b35e25b189dfbc7460d6bce5c27e83b453840a3a41b2853cf99a134c59521388c483e6b1ab1dbf3c222ef13312a0c842329499b4fa8ba143789844a7053b1aeca205a06e1b8f10ed88984724b083fb20e2431caa71bd3a5108a1432eee0f5ec1930cfff058fb5235fe7c181b2629c6385513143d13045b671cef20f7d2f706127bfadb12e175086"], 0x14}}, 0x0) 01:06:50 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) 01:06:50 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:50 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:50 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:06:50 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:50 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:06:50 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='(,*@}C)..\x00') r3 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x80000) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x21db) 01:06:50 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:50 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:06:50 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) 01:07:03 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:07:03 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x100c5, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e20,uname={,version=9p2000,obj_type={{^$,uid>', @ANYRESDEC=r1, @ANYBLOB="2c08000000c4", @ANYRESDEC=r1, @ANYBLOB="2c686173682c7065726d697446646972656374696f2c61707072616973652c61070000006973652c6f626a5f747970653d44261960a22a54d3579723ed935b262c00"]) r2 = open$dir(&(0x7f0000000440)='./file1\x00', 0x48000, 0x3) copy_file_range(r2, 0x0, r0, &(0x7f00000004c0)=0x9, 0x3, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x800, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4}}, './file1\x00'}) accept$unix(r5, &(0x7f0000000580), &(0x7f0000000600)=0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000d0000000000"], 0x1c}}, 0x0) 01:07:03 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:03 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) 01:07:03 executing program 6: r0 = epoll_create1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create(0x3ff) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x5, 0xd1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000001}) dup2(r2, r0) 01:07:03 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:07:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xbc, 0x4, 0x8d, 0x20, 0x0, 0x8000, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_config_ext={0xf83, 0xfff}, 0x18000, 0xfff, 0x7, 0x7, 0x100000000, 0x3, 0x1, 0x0, 0xb3a, 0x0, 0x8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='\x00') sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r2, 0x4b4a, &(0x7f0000000000)) [ 1017.986581] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:07:03 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1018.010730] 9pnet: p9_fd_create_tcp (9669): problem connecting socket to 127.0.0.1 [ 1018.019681] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:07:03 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000f4e089668a0d4000840a22d1089d0f04010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="000000000000000000000000000000000000000000000000000000002000200001000000000005", 0x27, 0x7ff}, {&(0x7f0000010300)="02", 0x1, 0x800}], 0x0, &(0x7f0000012e00)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x3) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', r2) 01:07:03 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:07:03 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) 01:07:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) dup(r0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3fffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) get_thread_area(&(0x7f0000000040)={0x7fff, 0x20000000, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) 01:07:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x70c, 0x26, 0x1, 0x70bd28, 0x0, {}, [@nested={0x6f6, 0x0, 0x0, 0x1, [@generic="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"]}]}, 0x70c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffc, r3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfec4) 01:07:03 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1018.148179] netlink: 1768 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1018.186138] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 5497558138880)! [ 1018.188392] EXT4-fs (loop3): group descriptors corrupted! 01:07:03 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {0x0}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1018.211919] netlink: 1768 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1018.263868] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 5497558138880)! [ 1018.266080] EXT4-fs (loop3): group descriptors corrupted! 01:07:18 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:07:18 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) 01:07:18 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:07:18 executing program 7: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0x5) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000880)=@rc={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000940)=""/149, 0x95}], 0x1}, 0x2) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/70, 0x46, 0xfffffffffffffff8) r1 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x39, 0x30, 0x32, 0x39, 0x0, 0x38, 0x37, 0x2c, 0x34, 0x38]}}}}]}) mknodat$loop(r1, &(0x7f0000000240)='./mnt\x00', 0x0, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f00000007c0)=""/150, 0x96}], 0x3, 0xcae, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r2, @ANYRESHEX=r2]) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0xce, 0x9, 0x2, 0x81, 0x0, 0x400, 0x40000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0xa, @perf_bp={&(0x7f0000000180), 0xa}, 0x8000, 0x6, 0x4, 0x2, 0x0, 0x7ff, 0x5, 0x0, 0xfffffffc, 0x0, 0x8001}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000005080)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00040000"], 0x18}}], 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) 01:07:18 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001e00)={{}, "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"}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r4, &(0x7f0000000680)="69eb1e6f327054e0981e3d72a2ee8d0c839a6d048c41adaeb0dccf37006e0cd0eaf14615c397501bbcdb4febff00002002000000000000000000") setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000700)="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", 0x1000, 0xca) ioctl$RTC_WKALM_SET(r1, 0x4028700f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r4, r2}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}, {@version_u}, {@debug={'debug', 0x3d, 0x6}}, {@version_L}], [{@context={'context', 0x3d, 'root'}}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '^'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) unshare(0x48020200) 01:07:18 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:18 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:18 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r0, 0x0, 0xf88c) [ 1032.756449] tmpfs: Bad value for 'mpol' 01:07:18 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) [ 1032.840146] tmpfs: Bad value for 'mpol' 01:07:18 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file2\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@fscache}, {@fscache}, {@uname={'uname', 0x3d, '*\x00'}}, {@access_uid={'access', 0x3d, 0xee00}}, {@posixacl}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_loose}, {@uname={'uname', 0x3d, '(*'}}], [{@fsmagic={'fsmagic', 0x3d, 0x592}}, {@uid_lt={'uid<', 0xee01}}, {@pcr={'pcr', 0x3d, 0x3}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@measure}]}}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x19c) umount2(&(0x7f0000000080)='./file1\x00', 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x2080, 0x10) r6 = dup2(r4, r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="e4f600000035b5799ba6f6ec422f79d72eff71f86c6d8c64ed75c5acd91a1a68353075dbd4d32fc433102512584c44a44635f3f1c4123b28fe8844d4abc58614e93fda3c4a9b5dc3c7aed507b986d625335f1f4a57d9bfbafeb8d12edf9a5a2874aef844bfb6f7daefd6df2dfb414d9a5c0d67a987a10ee3c11b2abcfaeca34c646e1f155938af310fef68b997c317f49df790408d4b370c810fc9d31283b7cdb0176a6a0db1641935dbb526c3356afdc0ca219a3d69a5eb138593f5e9aaf0463d3f0a8186e29a1a62ee62f15528f34a18ef793eca54fd5b86"]) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000180)='*\x00', &(0x7f00000001c0)='./file0\x00', r5) sendfile(r0, r2, 0x0, 0x100000001) 01:07:18 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f752403d6366d0afcb3cefd4f374c4", @ANYRES16=r6, @ANYBLOB="010003000000000000007e0000000c0099000001000028000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000080)) 01:07:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x54400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffd, 0x22, 0xf7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="95cd218f7ed1334cf1f91087fb1d49de2d63cf8bf039d17d41b1b5dd8c5b4ee5ad71", &(0x7f0000000680)=""/228, 0x1, 0x0, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x8000007, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) syz_io_uring_setup(0x274d, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) 01:07:18 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1033.030978] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1033.033035] sd 0:0:0:0: [sg0] tag#0 CDB: opcode=0x95 [ 1033.034169] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 95 cd 21 8f 7e d1 33 4c f1 f9 10 87 fb 1d 49 de [ 1033.035948] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 2d 63 cf 8b f0 39 d1 7d 41 b1 b5 dd 8c 5b 4e e5 [ 1033.037750] sd 0:0:0:0: [sg0] tag#0 CDB[20]: ad 71 01:07:18 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) [ 1033.068188] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1033.070210] sd 0:0:0:0: [sg0] tag#0 CDB: opcode=0x95 [ 1033.071289] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 95 cd 21 8f 7e d1 33 4c f1 f9 10 87 fb 1d 49 de [ 1033.073018] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 2d 63 cf 8b f0 39 d1 7d 41 b1 b5 dd 8c 5b 4e e5 [ 1033.074766] sd 0:0:0:0: [sg0] tag#0 CDB[20]: ad 71 [ 1033.155980] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 1033.155980] program syz-executor.5 not setting count and/or reply_len properly [ 1048.065422] udc-core: couldn't find an available UDC or it's busy [ 1048.066247] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1048.069229] udc-core: couldn't find an available UDC or it's busy [ 1048.070040] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1048.077638] udc-core: couldn't find an available UDC or it's busy [ 1048.078369] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 01:07:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0x3, 0x3) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) listen(r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/i2c_algo_bit', 0x100, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xa8b9, @loopback}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) shutdown(r0, 0x0) 01:07:33 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:33 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8004}, {&(0x7f0000010900)="88", 0x1, 0xb800}], 0x0, &(0x7f0000001280)={[{@cruft}, {@check_relaxed}]}) 01:07:33 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:07:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) 01:07:33 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:07:33 executing program 6: syz_usb_ep_write(0xffffffffffffffff, 0x4d, 0x19, &(0x7f0000000000)="1c280fbb31447aace67bde8202d82c3341c34e154750895497") r0 = syz_usb_connect(0x3, 0x269, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xb7, 0xf9, 0x9e, 0x10, 0x1bc7, 0x21, 0x4184, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x257, 0x3, 0x5, 0x7, 0x0, 0x8, [{{0x9, 0x4, 0xc0, 0x7, 0x4, 0x32, 0xfe, 0x96, 0xff, [], [{{0x9, 0x5, 0x8, 0x3, 0x1c7, 0x3f, 0x0, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0x7, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x84, 0x3f}, @generic={0xa0, 0xb, "7f49a0f43eb2597347bff6eb5aabd76bb8be72fe844fbc735ce05124f56df50bcdfdcc52738782dbf75d62c6ae9919b643461644103d8460dc2c45ec84e550dea3854d3477a3d99658bbe995e90655653aabc766463c54620914e04fc8613ecae7dcc8c63468cab348762b3484e7f752f9b09bbb9ef53ca37d48b9665fffb540211eb0790d8f9a1d93b555f313c0942a4c3fabbe797fc6f472fed03ddf71"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x80, 0x9, 0x2}}]}}, {{0x9, 0x4, 0x4e, 0x80, 0x0, 0x6d, 0xbb, 0x16, 0x4}}, {{0x9, 0x4, 0xae, 0xfd, 0x7, 0xd9, 0x2a, 0xf5, 0x7, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "5ce75004"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x1}, [@country_functional={0xa, 0x24, 0x7, 0x1, 0x400, [0x7ff, 0xfff]}]}, @uac_control={{0xa, 0x24, 0x1, 0x1c, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x6, 0x1, 0x4}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0xffff, 0xff, "91ba"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x4, 0x20, 0x0, 0x7f, 0x1f}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x3, 0x3, "c5"}]}], [{{0x9, 0x5, 0x2, 0x1, 0x200, 0x8, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x5}, @generic={0x1a, 0x2, "db2aea9ad790806a6fdc391964b2f7c2a0d1f1206186bc0a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xff, 0x81, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x7, 0x7a, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1f, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x1, 0x49, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7d, 0x20}, @generic={0x7c, 0x23, "57dd7d479e2c9e2f6c07084f8c2c08ead09cf91cbc00375ca8cf62877c131b34855e440edd1304661b8d758c4a207fb193cc4b3ff59c5b0c66de82c1fab7f8ae9c7042bebd668b0574b9c576cf02ccac8f09bd2c5808112b021f0476e25a93d8e3d2cfe327fbe9a0124c6aa0331de966b99b30ab799eb98d5d25"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x0, 0x4, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x1, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xff}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x7f, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xc0, 0x40, 0x3, 0xff, 0x6}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x2, [{0xc3, &(0x7f0000000340)=@string={0xc3, 0x3, "a4bebdc181d3d4406babb512700b76a4a453ccee2dd81926db5044ecbc75ab5117f31987a27436006c08a7f6869d450437d3fef07f83dcc1ecde5c5d8595a9e258fd96d8a218221473d640d82914971a14aa0f7d6dc6a8eaa7619ce2e893089897663181d063ff64d9087033216c55fe07943bf7f78f7cf1e07dbe67a48a5b7e77fa4d2273309ca5f5f10553f2b824e6a3ed9b97bdd60c0d8e6b5f5ed77798eb903c0fee5b3af4363ffc781221e4e028be216331872486a09e0e903d1e97384a37"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x280, &(0x7f00000004c0)={[{0x47, 0x4e00, "e14d53b424627b682870f667033da7844df1dd6cfb7ea018876124f5bc9aeac2a06a32d4982ee0efb73c0f63c3f4ca43b2343c9f8b2157b293fb7a2b985b2765fa3a1e595e9bbf"}, {0xbb, 0x4e00, "d83a3118059f1bcfddb3881b7380f3413077e77e332ec2345ba24a8184fa22d62fa03eea3da4a112439e7c61e0a26178fb96f8f6723da16b63a8ae49748b0b64ec38a2c606a28c181fb1f2267a89923f687da19944d2dea0a6f9949d0b20f6f8a066cb1168122e607975662a0ab43f6ed9e910cac3508e4bcc85441e8a47b8c3a64e860cae8d35fe6b57dd73001385a80fa3937c71516b5c6ba145d9e9a0d40112d153c315c8ed6fb741019764ddf9aa1928da756cdc8a17329f56"}, {0x40, 0x4e00, "1649998b25b6c7df8ba1afbde778dc25124476ca3e3c5e88a3eb368b43ff95f05579ee93c6bb6fe172b950fb54851b0b9dd208a4bfeef23dbf40af7f9d80a7f2"}, {0xeb, 0x4e00, "973f479d0ee75856c02863d552fccdbee87c5dfb390f7e0cd6e52c1da81f5c591e36deb06c3e22f6f89e6bae01f1d5ec4019353ae50e569d6b2d4015089611bda3f49203a54008d6b5c99e4d6c07350dde382da34d7c1812978ec35546f368b66b588e58f2dd308f544bf81188b692c26b2ea0d2d4b95f98cba57dad3928fa33c34a9bd6ef2620d624f4afdd42b462e9d0e5bbc15c4c87b74995866b88837d814b51fa4bf518533aff650438ac0a6b71380177aa5c3349e95ac4b64895d35bd488270b085733d3811472b01750ac62897a35301aa7cc327e5ad3a48a6678bdcf1b82d7cca7bde67b63ce77"}, {0x3c, 0x4e00, "a5dfb1b4e3c905b8e7f4939d302413a77e3c25f68f455efc837aded7e8cad58872e646bc2df3f3987e2e3aa314dd8738ce64f62edee36138e093cbfd"}]}) syz_usb_connect$cdc_ecm(0x1, 0xe1, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x1, 0x1, 0x8, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "fce82c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0xee, 0x94}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x9, 0x800}, @mbim_extended={0x8, 0x24, 0x1c, 0x896, 0x6, 0x744a}, @mdlm_detail={0x49, 0x24, 0x13, 0x4, "9fd6fb88ade51116bce9c9f2938fc8f7f3e1f8faa144cc0163119ecd89136f62a962cf2ae0524a13c9ae7237d5cba8c21f4d9ab7cfa197652530c8bb3dc9340131eab1b118"}, @mdlm_detail={0x23, 0x24, 0x13, 0x3, "3df92943e7041450bddc7ae0c385368c1b80d5634bde32bb778578e73e1f69"}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x7, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x20, 0x0, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2d, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x310, 0x80, 0x20, 0x9, 0xff, 0x9}, 0x60, &(0x7f0000000880)={0x5, 0xf, 0x60, 0x1, [@generic={0x5b, 0x10, 0xb, "ff04acd4fee011702e9a51cea04ec882157822e471c0574c3fd90a8258d78f6c92b170a14272082e4fe07c64094c7dd6144a4826fcec7ee614fc78f9840381350beb8a188a50eb4bc6711c3a9c08fb49b6d90a0b6c913428"}]}, 0x3, [{0xa4, &(0x7f0000000900)=@string={0xa4, 0x3, "4eb2e13b3093c065692f270226c78fd35a000e4a28c1ee9e5a2204c08f8fd5782735b502fc8b8705a27ab29c15f3326b1a2e5c9838c3ffcf573098ce15ef8df8a277094086b6827150af82e3c9590d4ba0ac7977473bf2b0ccc8e95343b0e6a41a060ed7f352ad41f1c67b09fde2455dac181f51a34d85e8f3f6211f4405093809db480b61de044d7177c3775882794cf89869fe207502ec70e76d6ce8b689be4452"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_connect$uac1(0xaf418605d9d983e8, 0xed, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x2, 0x30, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x8}, [@processing_unit={0xb, 0x24, 0x7, 0x0, 0x3, 0x2, "8c5f50ae"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x2, 0x2, [0x4, 0xa], 0x7}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x1, "6d2fd0f9ed"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x4, 0x8, "a2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x4, 0xd6, 0x64, "2d58386d843a948c2a"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x40, 0x1, "2e362a81"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x8, 0x1, "05b5fe74d7df"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x101, 0x35c8, 0xfa, "8cd975"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, "c1256d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7f, 0x7, 0x2, {0x7, 0x25, 0x1, 0x1, 0x80, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x84, "b5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x73, 0x3, {0x7, 0x25, 0x1, 0x2, 0xfe}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x200, 0x48, 0x6, 0x3, 0xff, 0x9}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x3, [{0xf6, &(0x7f0000000c00)=@string={0xf6, 0x3, "1848d28667fbf51647879405bdfd935c81824b1a4dc59655994368c1e3fd2850ecc52113f6ce12b39edab0a1c8e2610831bad74d9945c84ca5daae004558623f659e5a8987df352b663fb938a61a938871af24b4632b0fb24990d5e5d6d6081fcd936d9fef6ce50a040eb4c1ca3353c35717cff2e9ce26f3ed2d0cab594bf42a366a954865d2034cca639b34a7402702f92b9064d7b2b14649c49931e3e392ee7e6df39941cc2b18999e421d4e426aa39beee9d06b86f880843baa09314cbfe058a14c8898ff7d58ff00af3cb1dba02c056f1c4b1c4aea046e4d8c31409152bc8c06745fb6f4fbd7877a0a696570d6af166b864e"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x41e}}]}) [ 1048.083849] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 1048.083849] program syz-executor.5 not setting count and/or reply_len properly [ 1048.088136] udc-core: couldn't find an available UDC or it's busy [ 1048.088890] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1048.094309] udc-core: couldn't find an available UDC or it's busy [ 1048.095061] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 syz_usb_connect$cdc_ecm(0x1, 0x7b, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "d5b238"}, {0x5, 0x24, 0x0, 0xda}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xfff, 0x400, 0xff}, [@mdlm={0x15, 0x24, 0x12, 0x50}, @dmm={0x7, 0x24, 0x14, 0xb9}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x1, 0x9}, @dmm={0x7, 0x24, 0x14, 0x2, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x2, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x74, 0x4, 0x8}}}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0xfd, 0xf7, 0x9, 0xff, 0x40}, 0x28b, &(0x7f0000000e80)={0x5, 0xf, 0x28b, 0x6, [@generic={0x102, 0x10, 0x1, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x4, 0x200}, @generic={0xc6, 0x10, 0xb, "dbca2107f59089a3671a22e4c3d37a8fa5510c69eb5fea376db1b5e7b6e3c2d90e2410c2cfe9448288feee7859f46ec700b2462198b6c95115369b3386ad56c23a7425c65b964ac007bf921f1f2ba054fed806c8b28589a01d608ba127635306dd53caa4408d70a737dfb1002716aef08247c7f9796796dbc993a936d81994b0536151d98eed671160c86830958a00cbb5ad1efe861f7d105450f246ba5e231a564f342be638b5c2ef5d50f0869484a43235f475d7fb8667fa3f064c9198e4a9d139f5"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xc64, 0x8700, 0xeeb6, [0x0, 0xc000, 0xc000, 0x0]}, @generic={0x8b, 0x10, 0xa, "cde93e414a99ab27954046f4f55981f507fd65ae45e400a510ef3cf03746521843fee431ff38be15e3beebb122b7d13021032db7a92ec86949cad119dd6756d6fde348f9e1483d26ea274bb39ba2bfcb68cbed5f72e8567219a8250e3d6a782d46b2300d730434cb18588f76152bfdfb65bdc9a1564b3e3139327d4f1efd1aa751e97967a9134dcb"}, @ssp_cap={0x10, 0x10, 0xa, 0x29, 0x1, 0x7, 0xf, 0x1, [0x18]}]}, 0x3, [{0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x40b}}, {0xdb, &(0x7f00000011c0)=@string={0xdb, 0x3, "0883c53d83c04a499613410657a8226e284bb427cff7d210bca0af8718d08e238ec2ade35487bd748e93b5e148cb3a3f7419b899a455bdee3bdb97b3e05f9409216f25e4814528636a4a45ca7bf36a747b5af0bb152c6be761b7f7c21719c83c51d9ee276ff995799e0e0dceeb1af041ac57e286dc40230230621118f3e8b970eaf696bb44b6d5d27e7706b2f5b6934821b962be6cb782daadfbe823c4024f32b674cbb3cebd86839fe25a92b17f5142d104e093c0f2522e11098c3f3283c603b55dda177403a356f0d484ca549c6cd7e802839386b931a055"}}]}) syz_usb_connect(0x2, 0x245, &(0x7f0000001300)={{0x12, 0x1, 0x250, 0x65, 0x79, 0xe2, 0xf7, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x233, 0x1, 0x7, 0x3, 0x10, 0x20, [{{0x9, 0x4, 0xd2, 0xfe, 0x4, 0x9, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x240, 0x7, 0x6, 0xa9}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x2, 0x7, 0x1, [@generic={0x80, 0x3, "3910ef3215f66f388ad322b3b476d95f29c50e9d5e65a2d2aa46aefa4295442e3adc8b2e41a5b045e3fb828b8e24dcffe4d3de0953de2d62f7ffccaebd6c602f37ea774fc3ec3c32bc7029e473fd68c10c4fb38e8004919f76b12462310ef517d9130b962cf53a8b77f199aac2a00efdcf4633c5591e8c2ef81c06b6a2b9"}, @generic={0x7d, 0xf, "a18dfc19f5c4d1add58e53bbfd9884209e6fdeb68ed3b4dac14fd0bd7e57d7df91d5ac29cca0bc5834caa4e450a2264e6774fb4292f0465eed7d8cebd4480bdc926da7b47459e205cdfc258a3fc611934282578d66f8868bf098713192fed39d52e4ef55b9442eb9317ee439635d71b07d1886824edceec9e55bdf"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x7f, 0x2, 0x9, [@generic={0xf9, 0x22, "1346ea9ee4852213fb2fe983f8cac70ad95890a57705a4fbb3095e440d36495399a8a85662734809ae27755ba3d1d807bbae534b85ac7bbe6224d8baa2c9529c8dd37cb967f2d0b91495d158fd153cf83d0e2e74316183a0585c53b4a419b13c60d181e48c65286f057888187db73d2a6cc066904b4cac389c60a34cda3f9d7bdfb34fee30f860d8956d814223eb8f61631ec459732c81fe9770a8ce483b4076ab18bc11681a7af3caf17437be8b2af0b8906e3c815ed57bd4b7ca2e554373050e89a29e11991bab98f135e982564182354647e577ba8201e33219d222a3e7238f6181793d962f7b4e58b788d790345290d2bcf541d73a"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x40, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x5}]}}]}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x250, 0x9, 0x1, 0x7f, 0x40, 0x4}, 0x30, &(0x7f00000015c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8b, "c267623566fd42cfaee32b57e1a883f1"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "93ad6c8f6ac3c980b13b2294cf34af73"}]}, 0x6, [{0xce, &(0x7f0000001600)=@string={0xce, 0x3, "7dd6ba30bfaaa15e6df3ff68bfa10d7e2a001392296ecdad47954eb918859cef96b5f21dee210c953fef010e945e02d911d8171ebc330f2bec51c7ec10c792468c8732452f8251620a862beec893a47e68582ce44ef56ce8c2f267d92d20140af270b21876db35add7fd22c4c9358a045cc40b2ddd8e68cbe5a25d209c10e4fe7971699ab9407184bee62f84844fabc2823f26d0b5c5aee2d6bf07b332aba1c40ecd20da33b67d6d885f4127adfd05a229c4b356d1d3332db29bb7fd9370ee936fd4f7546ec8f9a8e46da6f7"}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x445}}, {0xf, &(0x7f00000017c0)=@string={0xf, 0x3, "89763195e6c6c778aa35303a39"}}, {0xa2, &(0x7f0000001800)=@string={0xa2, 0x3, "a2b1db9c4d5ddd01053813192bf4fa44d0bc458f534569d436d7baeb028235ee21ce791910bc51054d75893892f3e44b3d039f0544aa8ab15694ca64c81676bd477e604ae308b34af53084bd9d3d3f8dc1ac9844690804167c88f8d7d7d4df7ecbe3f5aee5c5c869a747f46d98508dbce362ee2ae5def73b913fd863659c33160e4bde7c2038633b754d4615c5de8520a780dd02a32e871155a0523bfbcf3f16"}}]}) syz_usb_connect$uac1(0x0, 0x88, &(0x7f0000001940)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x45, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x21}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x18, 0x5, 0x20, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xa9, 0x3, 0x5, 0x4f, "", "e6"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8e, 0x1003}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x7, 0x8, {0x7, 0x25, 0x1, 0x182, 0x6, 0x8000}}}}}}}]}}, &(0x7f0000001e00)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x310, 0x2, 0x9f, 0x1, 0x10, 0x7f}, 0x2d, &(0x7f0000001a40)={0x5, 0xf, 0x2d, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xf000, 0x8001, [0xff00c0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x5, 0x8, 0x1, 0x398, 0xff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x4, 0x20, 0x57b}]}, 0x6, [{0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x44f}}, {0xe1, &(0x7f0000001b40)=@string={0xe1, 0x3, "ba24afdd0180dd028b73d1d3d9854a2562ff78eba8724d8b51f048c01e076eae55952a6a59e02f469bc693a633a59302ef23f83ca9d0173b0ce5bb927b7cc8d225f8691d318fa385af503f0aba0637070852c7f6b557984360a50052d3e0005f03e86577b7ff2996ef2e024f4d11a1e59ea4cc41d3d384ee6ed63179c2f2c20cfc5d6c715c65c817d636cea6bbd69c7204ae4dbfcaa55ea0e787a76b9a7d237fd9f61b350a99d7605eb52b6cd6a822d54af590b40cc9f040e1cdc7aa42ac1c56802aacb5dff117eeb4ba9bbb1e9d875db8ed3162f469a62e33666ab1f98b59"}}, {0xa5, &(0x7f0000001c40)=@string={0xa5, 0x3, "84d36ea757af8c482d823ebfedc9544bb1e6ea14081e2f01ee21be7d639b35ca3d38076eb2a766c0cc440f65d66656a8d462d675a56cd631bdb18309fae25754e4d14b89e9e5d6fe11777cff44bdda00d02e9bf4d59f8bc665062131a53c5ce1c71eafd9ae217631db3162f52c9431f0534fad6f5fd97c7856e31618614336ee7c9874b025b089099781d34dfff711b0c038d3777f5f316ea92797954123aaeb7c7392"}}, {0xe3, &(0x7f0000001d00)=@string={0xe3, 0x3, "2e7bebc67bd5bd3fce51c1d3ed0cbafd24d7dc6b040c42d6def4f5474e340d11e2c0ef1800046f16bf9b445bd9fcaca843577eb02bcd81e6d8b154bebe0f9a89e8900b3c8364c566e5b25e45b844f9ea5fbaca61cbf9ebf3cbe56b680c3558a1e00bccff9a663c5d0aba4c45db88f4f6929f66971c8bc7d25d76a77e7877eb8ed62fdd09a4f8d4a604294994825c7163f5ee002d5722cbc8135082123dccd2883d690bc0efa01974dfc0d0e4cdfcab675426debfb0b458d753a38cb7fb8c504efdc70362839e5a69fe7f472a541ec97795b8561d19dc713271305238e231ad56fd"}}]}) syz_usb_connect$cdc_ecm(0x1, 0x53, &(0x7f0000001e80)={{0x12, 0x1, 0x211, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x1, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "035bdfe4becb"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x40, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x20, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3f, 0x40, 0x4}}}}}]}}]}}, &(0x7f0000002100)={0xa, &(0x7f0000001f00)={0xa, 0x6, 0x110, 0xf3, 0x0, 0x2, 0x20, 0x4}, 0x9b, &(0x7f0000001f40)={0x5, 0xf, 0x9b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "865e3451adb4981b17fe4f1e188f007c"}, @ptm_cap={0x3}, @generic={0x7f, 0x10, 0x4, "b678a77dcb149776f9d616c29d484d6827935a44d8e993e5cc8904000abd3db794d52b8d3e70bb4567feb86898a106edf9d2bbde95bba51d2d836f84469448a5f8a5b8636b0781ab045b6f2d13b0ac530eaa766c821e8d0574e6bd2a329a2ce5540ec8d96b6b366fd0c4151b27726b6d5dc067b96ef854ec7aa4f0d5"}]}, 0x1, [{0xfc, &(0x7f0000002000)=@string={0xfc, 0x3, "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"}}]}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000002140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x7, 0x1, 0x3, 0xa0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7c, 0x7a, 0x7}}}}}]}}]}}, &(0x7f0000002380)={0xa, &(0x7f0000002180)={0xa, 0x6, 0x201, 0x0, 0x0, 0x5, 0xff, 0x1f}, 0x16a, &(0x7f00000021c0)={0x5, 0xf, 0x16a, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0x28, 0x3, 0x1000, 0xf000, 0x0, [0xff3f18, 0xff000f, 0xffff]}, @generic={0x65, 0x10, 0x4, "b7af982572ab37ec076f2eeef656f3adf93a0d86f788d9e9ea8e6fd41f50d175edfdd60e6a5114cdd38a424355374c0d18b066112b5b3ca8247b4f2fc8548ecad6ba294951bb8ebab90c6e9c889378d696acd6b7202094b3687d5a209af5437cf575"}, @ptm_cap={0x3}, @generic={0xd8, 0x10, 0x4, "63ff23bb66eefb476b84c79cc5134038f93df72a07d5cf737f18d3123267669e038b95a31c9e49d3c7c6098cd5adc1afc4a1ad9aa01c21d219857bf880494888c704a1dfabab1ab65dddc13740e9d67d2f407d96f3eb300864eccda3c501841cebc2bc9add7ab97c172b9ade927582cbd71cab27742f20273e8d11c3e86c15db3e8868daa77442200268a2ec007911051078767dec32f194553da5ed67e834f8e0740df08d80c642b1ab62b7ac84ed3838ad3d85fd70f3f2a1edeee9a92c3297e61de92fe927f37a27b30974a0b9a4d49f1a36ce5e"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x20, 0x7, 0x8}]}, 0x1, [{0x4, &(0x7f0000002340)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_connect$uac1(0x3, 0x9b, &(0x7f00000023c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x4, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfdac, 0x81}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0x3f, 0x80, "ed6e"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0x50, "d6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb3, 0x6, 0x1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x6, 0x47, "0166"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xcc, 0x4, 0x9, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x90, 0x0, 0xfa, {0x7, 0x25, 0x1, 0x80, 0x33, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc1, 0x3f, 0x1f, {0x7, 0x25, 0x1, 0x1, 0x4, 0x7}}}}}}}]}}, &(0x7f0000002740)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x310, 0xff, 0x7, 0x4, 0x20, 0x9}, 0x2d, &(0x7f00000024c0)={0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0xbf1c, 0xf00, 0x0, [0xff00]}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x40, 0xf000, 0xffff, [0x0, 0x30, 0x3f00]}]}, 0x5, [{0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0xc0a}}, {0x83, &(0x7f0000002540)=@string={0x83, 0x3, "a4fc8da7299d3011c32c351768e2d324c37933fa378fccd020e33f7a451aeca14d5859b2548cc404899f96195baf6cff488b6f21a1b72f3a0c3f62cae7bd6b453c16153b55c9971e99b0c264a124552905628adadd7c4e28167ebd6e1d479b87a60687dcdb99b7c9333cf6613a9418308fdf7399e457e0b27e68ef4cbabdc334d1"}}, {0x9d, &(0x7f0000002600)=@string={0x9d, 0x3, "74c8a1209bfd826cf766e8ad276d652d16faaefbf3458fe5ddf2b5fb22d72a5f9fa5ae60f4a931cb062239a855615f30304972e28daa2ba5decb9efb082904443fffcdc227432ce0286b25a2c0ecc6536ddc6210082d4ea4edf4c9073db569d9fc93bde73a58c44382ca92adee5ff71edd52b3e8d6854662ad79f10129a75f3ffc6e235f0a57dca20e063b980f52259fd42b3f59b7f3e0555152c4"}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_connect$cdc_ncm(0x2, 0x8a, &(0x7f00000027c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x60, 0x80, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'g'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x81, 0x6, 0xe1}, {0x6, 0x24, 0x1a, 0x1, 0x24}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x303, 0x8, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x40, 0x6, 0x1}, @dmm={0x7, 0x24, 0x14, 0xfffb, 0x401}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1f, 0x6, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x5a, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x5ff, 0x1a, 0x80, 0x80}}}}}}}]}}, &(0x7f0000002a00)={0xa, &(0x7f0000002880)={0xa, 0x6, 0x300, 0x0, 0x7f, 0x9, 0x20, 0x8}, 0xc, &(0x7f00000028c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x3, 0x3}]}, 0x1, [{0xd4, &(0x7f0000002900)=@string={0xd4, 0x3, "1e71e33722e5d1d223748be936d9c1e4eacbf0c226d96241cc4a4b4d3cf75c78eeef25fca5b4b7dbda6c8ce42d063679922c5ec3d3901c4279f8d2b0e8cd7b3c992b051a9c48ed09329d466b0e45ef8c6e02945ad717bf55ec701e2eb51b71f0fcc4905b6cf4aa4eaf14f519c3b1f4ef59ffb6c885e89d8897f4b502854f8896fad6341235e26c7d2b6754fb3d31fb44253b0d46c516d6c906d3551ccfa9b2004133bcb197aea653334500db1bedd81cb02430983f8d7f455cf19b822744defd7595c0995ee422080b940431eabc55bd2c5c"}}]}) syz_usb_connect$cdc_ncm(0x4, 0xa0, &(0x7f0000002a40)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0xec, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "26b7"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x3, 0x4, 0x40}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x9b, 0x39, 0x5, 0x8f, 0xff, 0x3f}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0xa, 0x24, 0x7, 0xa0, 0x1baa, [0xffff, 0x80]}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xcb, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0xff, 0x9}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x250, 0xee, 0x9, 0x30, 0x40, 0x81}, 0x104, &(0x7f0000002b40)={0x5, 0xf, 0x104, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0xe, 0x2298}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x8, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x4, 0x0, 0x4232, [0xc0, 0x413f, 0xff0f, 0x3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7, 0xf, 0xfff, [0xff0030]}, @generic={0xc2, 0x10, 0x2, "eb41dd6a94232aa4d47d7b165633499f21312a4c9367973ecf67f9e5fc0ea30ca6bc7a0f0204f8e77f145cae5e284c25828f66501a12a701c6ce929f926d215f871b4715637ace9aef50de402c9b565c5e8df5bdbd7f824b7f51d0b5e1bd918f35ae062079fdedbb7b3844a79cd6bfdc9805c6f78ee903b41097024dbf145acd740846c74c0d8fd39996ea079c81b8247e20383d588c609be693c2e0f55700d0146c961d255ae886e739e2fbd7710eeb6af41151b6c1f4a2c4ea823c16ab84"}]}, 0x2, [{0x70, &(0x7f0000002c80)=@string={0x70, 0x3, "c7e9dce635d5e12b81037af1ab2c22c3c0ee81fd2c78221ee2909f7e325241de345a63c7eec039a0f6a2f9e7d1e9643ac2f8acd949e84bc1e79b03556d2c2d2c0a4d9a8855ab03a549f5882ce4221b1ab6c95319c054927176d1931e76d3b851d4b879a0f2e6cec7f423fe77afdc"}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_connect$cdc_ncm(0x3, 0x87, &(0x7f0000002d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0xbc, 0x40, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b355e864b64d"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa0d, 0x7, 0x1}, {0x6, 0x24, 0x1a, 0x5a3d}, [@mbim={0xc, 0x24, 0x1b, 0x3ff, 0x1ff, 0x60, 0x40, 0xd2b, 0x80}, @dmm={0x7, 0x24, 0x14, 0x7f, 0x1ff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x3f, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x80, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7f, 0x6b, 0x9}}}}}}}]}}, &(0x7f0000003140)={0xa, &(0x7f0000002e40)={0xa, 0x6, 0x250, 0x1, 0x81, 0x3f, 0x20, 0x1}, 0x1a5, &(0x7f0000002e80)={0x5, 0xf, 0x1a5, 0x3, [@generic={0x28, 0x10, 0xb, "5f7d31d6ef46ce0727ca824e7a252c04495ad59cda6a7ff2bf927edd21ab4000054ad31b79"}, @generic={0xc1, 0x10, 0x4, "2c228a93a69d31e7306618e2a78a7dd48612b04ab4a64a90e43db6f117e43bb41c13368559f4d60c19af4799284d3d8b2f95431f27949d8647db99f458a7e19bf868e8cdb514f85536b9e4ddebd3e8c1a7a7a49ef911f447de01440f77ec3ff85709ff42c24fea5018db7ac1f6cbe94fe5335a35c96a46c672842ed16c64324f38e20735295875fca11b36d67a6d50763757672b5a26a5cee8abfb94ded5ffa1813c541f6923657f31232add694558470a3ebd5dca79ca581415ce695636"}, @generic={0xb7, 0x10, 0x4, "849063b90a5f62a07aef2adae78b43f60c1a7b1322ae465a50e57453533694d7959dde0707a71e6c7c364c0f903f0b5281752452cbb4a72e82328ed76e2c0f976da3cff5453c9e55b475e64f3ea54a6ff14aa784f88a58791d9b4b5acb021e6d20eb83ca0b7ee53ae2b264f8dfaca58cae923305d483db5f5c3b868756d11e3143a885f8eab7d36e9226baf7eb5b5ac8c7e356c22e25bb9e29d0255ef4b3aabb8e3718d309853e864cd81fda5efc324f543dea54"}]}, 0x2, [{0x76, &(0x7f0000003040)=@string={0x76, 0x3, "42eb4847d189e38fc0d36fb45280425322a21e4d938f3e51a1526bb362dd87035e19d2f6d422b2d65d16655643a17d02804a01b54e3e02fc52564336ea2026c5aab21e24ef7f554c39256dd8ce3167c39738a333261439b5be9cb2bf8b5ab89919fca9ad952b4bf5341a9bf6ddd36ff71c6e638d"}}, {0x61, &(0x7f00000030c0)=@string={0x61, 0x3, "e5ff3f14fa82a8a1f31715669e7d140876fd7d96eb5ed21f67c1b3d4b9c551cb03d7e13c9cd3623aaed2453067bf8c4a38e9c23bbfba1faca3ba4834f45d66b98af2d60134b508de694239814266181226c56602b980077b868ca0a439aa8c"}}]}) syz_usb_connect$uac1(0x4, 0xb8, &(0x7f0000003180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6, 0x3, 0x1, 0x0, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x3f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x4, 0x1, 0x4, "d4628b", "862f57"}]}, {{0x9, 0x5, 0x1, 0x9, 0x240, 0x40, 0x80, 0xfd, {0x7, 0x25, 0x1, 0x80, 0x3f, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xcf, 0x1, 0xfe, 0x1, "dc74f034708dccb17b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xd6, 0x0, 0xff, "e053b3bd43ad5a89"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0x4, 0x8, "3a153b3c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4, 0x6f, "", "8c03"}]}, {{0x9, 0x5, 0x82, 0x9, 0x640, 0x8, 0x1f, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x545c}}}}}}}]}}, &(0x7f0000003780)={0xa, &(0x7f0000003240)={0xa, 0x6, 0x310, 0xff, 0x37, 0x1, 0x8, 0x4}, 0x8e, &(0x7f0000003280)={0x5, 0xf, 0x8e, 0x3, [@ptm_cap={0x3}, @generic={0x6a, 0x10, 0x3, "296f3b3739aceaf6af1bc48d9fb6628896008264e12663638f5bbaaf6a7dc0135876796fb346f13a6cebb1f8414bb97273c5069b3f1d495a7e53a342c4ec005dc9edb22c3ca8d50ab4e02f09c478fc268611574b0586f11c49def53b3526dc0bb378fd573c2ead"}, @ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x1f17, 0x0, 0x1, [0xffc00f, 0x90, 0xf, 0xc000]}]}, 0x9, [{0xac, &(0x7f0000003340)=@string={0xac, 0x3, "12958974f9cd05dfcd1a3dc0762090650534bd0aec8062c4f70dbb74e19a5a30564edf11550b09a4058447aab8adb53728b883e42ace99aea3fa644cab02b270a0f4b8a6ada31bbe3860554d20b9aadc105c226a60ff9b35491057d4097552280290dd9ef947100f226ec96fc663ab5eb60d08c706983603b12727829e30606306797d75b90fafb2984e8c423ef8385b942f1fa9e38a31c19180c59017e9f871e3c874b61eea76c9fa2b"}}, {0xd4, &(0x7f0000003400)=@string={0xd4, 0x3, "6f763081f9b82af127ee1377a7ac4e99ae72ecaf06ba277a53cc47ae99f5defe37e9c2cb652a422623eaa30a3cbcd2e604b52ea0777db7322aa23e6b25ef9756e3d686b34e530d6c45111340e49b4297e2bc0d2e9aa0b29462137fe0a0256e7fdf93944c157237ef3ff50957bffb168d769522c163385f7f3c1316d64db04f5b8c419acc4a136e7ab2f39288ff35238b90a4bd3d6ff30ab74d4bdb0c42c62d320b5d408b4bfcba2b0595394a2ca59cfba3da5f2af6296aae74fc608b38a346f5a0d35ddd093e5b131314660e65ff39256028"}}, {0xac, &(0x7f0000003500)=@string={0xac, 0x3, "9b8d2e53453e18c18572ff3c68d84becb6167c3577fc7e7532e4468adf3b6d702ae7241917c6137bca1fd44758cf71ce54f3890e848b153f031060b19d6daab06c3de061863dae478eb6f8cd6b03a9fdec665429119c4b211ba60df476ab9433069f2010291b9307d86df6d1777f6cb9ed5907aef2e32247d485916032e53b9314f08673f8be1452db46914128b07586b150759b9aeea9ea2a14ce28ce9cba6d1ebf0e379189765152ef"}}, {0x1f, &(0x7f00000035c0)=@string={0x1f, 0x3, "d5350d2c8d0576acd1bc5cd34d60f257079efec1e09ba0c0378be501fb"}}, {0x4, &(0x7f0000003600)=@lang_id={0x4, 0x3, 0x41b}}, {0x2a, &(0x7f0000003640)=@string={0x2a, 0x3, "438744a1e6b48518029af820d3f9c14d350201d8986a16768c2fa582b7d46cd2fd764cefb26f3314"}}, {0x4, &(0x7f0000003680)=@lang_id={0x4, 0x3, 0x3009}}, {0x43, &(0x7f00000036c0)=@string={0x43, 0x3, "19abfe5b2874d53f87929ff140cb312567b7e2157c67abee77d28298b52952424169f53f3b08a673f87ced203b65a4ccafb2e6511682dd7661537e4aefc09dba1e"}}, {0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x1404}}]}) socket$netlink(0x10, 0x3, 0x18) syz_usb_connect$cdc_ncm(0x4, 0x173, &(0x7f0000003840)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x161, 0x2, 0x1, 0x3f, 0x48, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a40c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x400, 0xd90, 0x1ff, 0x62}, {0x6, 0x24, 0x1a, 0x7, 0x33}, [@mdlm={0x15}, @obex={0x5, 0x24, 0x15, 0x9}, @mdlm_detail={0xdc, 0x24, 0x13, 0x81, "084190027792f5d8daab972499fca376f6c942bc590485bb2e8ab7e6bbfc82a18ffaf3ab205c46e99e44150a561af266e0c2201b94d4651f72d68f66f203dfd0a76d4027c1fe2735b1cc2da26b5f1fa9e97da2d383b490663106772a8dbb24ad2a95f2dd70b87d841421c5d44fc353cba16ee271aa47fce6f381aad1984e8e12c9702cba2dddebc5c769c33ab5680aca60ae18b037acb4bdcfac4d028e39fa64bfd50cf608a85e0137fd16fc537f039b7c6a9c648a3ac9ec9a64f91a9e44f1e0c4562ea7a9c080b1e74e2f084d45222be580b0198c350854"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xba}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x9, 0x628}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7f, 0xff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x36, 0xcd, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x2, 0x6}}}}}}}]}}, &(0x7f0000003d00)={0xa, &(0x7f00000039c0)={0xa, 0x6, 0x310, 0x1, 0x40, 0x7f, 0x0, 0x1}, 0x18, &(0x7f0000003a00)={0x5, 0xf, 0x18, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3a, 0x8, 0x3}, @ptm_cap={0x3}]}, 0x6, [{0x88, &(0x7f0000003a40)=@string={0x88, 0x3, "b4aecaf5bdb7e7fe3dc59314180aaa2c2ff4a31371d3a7949e57e81a619b5bffe8df507c413537607453981f9ef11b7f75f785e5509acfa548afa7d9972f94705dc4584b90490b0f14f955052e97255ca5a77ce9207da097bacd3994cdef00b6622ac55e6ad33624cf00afc2f32d3e594b007d040317b7d03fafce878b0bd1ebd0ffb8fbb177"}}, {0x4, &(0x7f0000003b00)=@lang_id={0x4, 0x3, 0x446}}, {0xf6, &(0x7f0000003b40)=@string={0xf6, 0x3, "9f699924e329693be05d669d32e7c23e01dc7a7a834f8d82b7ddb30b0a6ee4a0fbaf17d7efa0bf987da37396bc7775a70c36a429d00a4e04f2e22accc18f657242352422faa205a6165b2508cfd63fc1b0f8cb751b4b585e2dacb4199564b2261b615f67a1ee4fab34206a760b6c918bc411cd89c2fc8a4976bbfa9ea77fdb66937e7263fedea9fd65fb44e145ad158c4e9e8d9013a62a492fbe1920d9c5e9bb0d8c7b123313a818f2d8ad4163c66a43c8c22753320b79ec44959a5a42012cbfecd621bbbc0338edffbf1d6ff2d2dac5b072dc98392ed8436f8a09401af28ef05d8e843477ca3fcd2e02e6bf092a92d84f9cfa6e"}}, {0x4, &(0x7f0000003c40)=@lang_id={0x4, 0x3, 0x458}}, {0xe, &(0x7f0000003c80)=@string={0xe, 0x3, "30c2df7c51e01ea12610ae59"}}, {0x3e, &(0x7f0000003cc0)=@string={0x3e, 0x3, "f3ca4e1ad5fdb59e44359130e90c7c1ebae9c82c82098e0857f3bf3b51fd83517842c3caaa13ab807107611241459356b2e330036c2a78f3f0dbebaa"}}]}) syz_usb_connect(0x0, 0x619, &(0x7f0000003d80)={{0x12, 0x1, 0x200, 0xc3, 0xf7, 0xac, 0x10, 0x57c, 0x8402, 0xe024, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x607, 0x2, 0xff, 0x64, 0x40, 0x8d, [{{0x9, 0x4, 0xf8, 0x0, 0x7, 0x6a, 0xd8, 0xad, 0x8, [], [{{0x9, 0x5, 0xc, 0x1, 0x0, 0x45, 0x1f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x3, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xe, 0x3, 0x1f, [@generic={0xd6, 0xa, "ba6bd73e93664ea0d8db89a0895e34ec943e45c4f1b3e233987ff58434880d6fc55df0329a7c15ddf10798cc4a4dddebccba6cb882d8d8028130a06fa7e418539b63a7d98fb719e6ed7aaa4884cf7c46db827b525a4ef8926de32d16920eae95a8fad2ba766584e709004ad5d559c2fbf415ddfe166416fab8d7b23cacfb5ea3281ef86dc404c28e2fad5c3aa60f927d908ee30db3b33b49516531c434b5c54bf20d7089e27234ec23417c8fdd89a697e3b5f6b916886ecb02cdc5cc6a902e6f9368e8cc7cc783d730fbc92a7b0bebe2dcae902d"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0x40, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x200}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x40, 0x6, 0x35, [@generic={0x4a, 0x8, "e25d7dbc2a7524fa92b0270de2191d73be91cc36694cca65a27407919ed9f0180c839820c9ebe658c4865bf5b7e31794535ed8728aff75c69bf9ca25be672330a31cc9a0a8dcd1f2"}, @generic={0xd3, 0x23, "54d0f795c38b2532ad00c4b8c4fee02c31aeb3e9d35d27a339637fbb154d8a96f8877718e6c8b71d866379be5ddfab28786cb9b399910ba5eafc69730e5ebb0078e4b09335fdda7e7610dbffecc34ecaa729a420acd90752e4a0f5e8943c55f7a48d817f4aff3baaf563fbb33321c172ce728dbd410f36a5b678006a2dbc7c278ec70d4ae413e465a585e6b989ddc0c8ca2f6163347c2d86cff2d55439220cd9375cfbf9af8ed2c7bdcda5153402801a4f863f539f826ce60b955e4632c09eeec4b1c7419fdab4f2c7c2dcb0f986b6384e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x20, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x77, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x57, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x97, 0xfe, 0x38}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x40, 0xe, 0x40, [@generic={0xdc, 0xe, "8e1b70aa054e39379e3d67ea6098533131e5a287bbd94347ca3d0dab33d8d530a057623d01abfc335524c52c5fcd006f35308941f4f8583bba787ccc31214d6a91bad989f2453a4d46112abdb405f223ee129e1a3a9584f813d593a6b8509e14bf89359f2698df3b983239b89eb28f233b4f95ce99151ebe9597301e0ac2b0225abef13c0e372690920af1cc92d5a0eee63615fa4622e168552bfee15d253c877b9eeb0fc28a9291af0d19f3432b910f64d272511979a9941baf6f2aeed25a37356cea361500311d5cb4c5914113cd57b890ca850f0dd6471b16"}]}}]}}, {{0x9, 0x4, 0xec, 0x1, 0xf, 0xff, 0xff, 0xff, 0xff, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "86"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0xfff7, 0x2b}, {0x6, 0x24, 0x1a, 0x5, 0x1}}], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x13, 0x4, 0xe2, [@generic={0xb3, 0x4, "f1300226a58c8d3995f6f2dc0d21392ddf8580b39766e7264d630e5daaee8660440a43a8bb14cef74e7f890ab403d23580fb0412b356204bcfd8f0319f1cbddfb7772496a76003d27afcd6a3f07c3aff1b86bb6b6f9a5a0cbf91c1bf6729d910f20f4d56421c91f728f2bbae023b7089fbb93a9501dd31131cf42589a272c3d003c13702e0ba496ed0a236edcb8354beeba43863e8a6384114566ac71c69ffce6c0a831af2dbe3a545422458638eb2babe"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x8}]}}, {{0x9, 0x5, 0x1053877d3269fd97, 0x3, 0x3ff, 0xfa, 0x0, 0x5}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x40, 0x80, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3f}, @generic={0x6e, 0x7, "ceedce04248e38c4a6b1dc206c03cbc51cec02df0b05f9b361e0e5a32998befdb00fe7ab4510fb37bd320e52ed69f96b1deee31a7b4e472ef8f15b0df5d8a57801a6bde16c377d46c7b18b18ecaf0d4ae2da3a2f668acfab0c4d16fafabf9bdfd3753d76634dd493d718c5ad"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x81, 0x8, 0x80, [@generic={0x24, 0x24, "5a300fa4269f4995eb0a50a5cd35ba9e8d1ced8b76cd7b2708e6f8a9259f0e1a1189"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x280, 0x8, 0x7f, 0xdf}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x81, 0x9, 0xe4}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x5, 0x7f, 0x1f}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x5, 0x0, 0xff, [@generic={0x69, 0x4, "a4ad0c0fc02400fe41dc441e6b2010a97c1cb07141243b192a89ed7b595810678de42ed045daf0b538ec5cf7f2b605f6a9327ee613d96010204c7bf5c3ae932a9689453b3e0632f4d6a5658a896702ac2370cbdd75929d75d8edf9986b93220ae485f8d4f4a051"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x99, 0x3f, 0xc}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xa2, 0xf0, 0x20}}, {{0x9, 0x5, 0xd, 0x10, 0x440, 0x99, 0x4, 0x87}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x80, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x89, 0x6}, @generic={0x3e, 0x4, "fc384147c40e5ff6a656e6c79ebf120b6d84f982cec69e116c39e0ec50bc751abb52dd822eca4f8f1398cdf1f3dc28ae6c23b87f0034a1eab4d8740e"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0xa2, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x20}]}}, {{0x9, 0x5, 0xe, 0xe, 0x10, 0x20, 0x97, 0x38}}]}}]}}]}}, &(0x7f0000004780)={0xa, &(0x7f00000043c0)={0xa, 0x6, 0x250, 0x6, 0x4, 0x40, 0x8, 0xe8}, 0x5, &(0x7f0000004400)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000004440)=@lang_id={0x4, 0x3, 0x402}}, {0x26, &(0x7f0000004480)=@string={0x26, 0x3, "d1138ae19154e791e130e81c695a4b2e404035b6a1ed38e7a528b18e8e02b51db91b371c"}}, {0x4, &(0x7f00000044c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x49, &(0x7f0000004500)=@string={0x49, 0x3, "846228e2eb5a6573fb791e8be27a7f0650d202781001374787af826f491ff621d3c6c41a2002500a718ac9de25bd05950a41006fd9f0020e7d4304fbf6f8507ede6efe536f2d13"}}, {0x4, &(0x7f0000004580)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f00000045c0)=@lang_id={0x4, 0x3, 0x140a}}, {0xdd, &(0x7f0000004600)=@string={0xdd, 0x3, "f57f545619cadd826b47d498077837e9dd8aaca84dc6d911413ea82f25c84401b70a56c6caaca0e985b1b572d173768bc7dc68298d1e31ac9e5f63938597a6744a2507b14c54a19f49baf03f8facd038dac95e1f0587ad21c8dc9a7aac655bbcba8e191e213b855fdfeb7dcebe3ce185c9b9d100cbaa37571a437303fd39946b29083cab8c9981d019fe7fe9d1f6b51d0946398e03750313779cf816699103763384ab3501a1538205ca8801a5b7fb5f05a47e1dd519f5799ca32a413869cc14bdaa90fe2e6f0da6cbbb39759164704d2f512eaae750473c003f77"}}, {0x45, &(0x7f0000004700)=@string={0x45, 0x3, "d7462fb906e2cca89ee0f637e87265bc54318de934e96c0ef9b4499794e32a4ce9c3b3e9607f6e79fda2094ef82c035f10784d1af52b3617625798910d21348ac65fb9"}}]}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_usb_connect$uac1(0x2, 0xbf, &(0x7f0000004800)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x4, 0xe0, 0x92, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffb7, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x302, 0x2, 0x2}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "a173557c4c"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x2, 0x7, 0x1, 0x0, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x1, 0x3, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0x20, "d694", "97"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1001}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x3f, 0x40, ','}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfe, 0x1, 0x8, 0xf0, 'w}'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x33, 0x80, 0x8, {0x7, 0x25, 0x1, 0x6, 0x6, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x40, 0xc5, {0x7, 0x25, 0x1, 0x82}}}}}}}]}}, &(0x7f0000004d80)={0xa, &(0x7f00000048c0)={0xa, 0x6, 0x110, 0x4, 0x6, 0x8, 0xff, 0x1}, 0x1b, &(0x7f0000004900)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x87, 0x7f, 0x3f, 0x79, 0xf7}, @wireless={0xb, 0x10, 0x1, 0xc, 0xed, 0x0, 0x7, 0x2, 0x8}]}, 0x7, [{0xd1, &(0x7f0000004940)=@string={0xd1, 0x3, "f36d833a04ec444a45c202a610c4aa178a7eda1737e338a867e9efc72cf430f47b38fce0d73b3185c4e3dd80b6c7eda996f21c172585194af4ea67f19177e5548f162299d85d5defe3fb9487757acfa625f8ff96c887747faacdf2751a40fdce0bf3ae4a263f892517bc79b470d83722c580319449f7163265a2ab1ae3aff4d6ba96c3c386d6471ccfa87594c1ffa8860c4172bd8ac900685b1d1664af5c0486e8d3b8ce3efb217e2da78dddeef2e923c24ad3186a1eed82383d1e3ab05d61eea29bca6acdca674f766459e33fbc9a"}}, {0x4, &(0x7f0000004a40)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000004a80)=@lang_id={0x4, 0x3, 0x4001}}, {0x8f, &(0x7f0000004ac0)=@string={0x8f, 0x3, "051ce07d4fe7319c0bd9fbb32d2b5f73eda6f6fe31c09e7c91cac3ab031689511082f7a68ebf8336635a5abc04e502934e59ec08cadbbd20f3eaada2c5b9b9ea3e7ee0384e8b65e6768e22a6df8ac6e9a46a9bccb6e207f9c566a726b76db084e13772ceb8e99de8ed42c8ae689b3c24e16e793b551cda1b80dbb14287ba75036301325c772752a19fe226c8c2"}}, {0x6f, &(0x7f0000004b80)=@string={0x6f, 0x3, "9f98cb76fc3b7d963e6079f7d5633fd0ca67a631e8c4c9a7c167fec166d7e43ebd31e2cdcd513b4fc2277f0b19fa58dac37cd9e8b13aa338957dbd2e3bad694cad708ddb6c3d0ab821883687e3794d32e4411141cf924c575fe0f65e8bbeabadba8dc4dfcfc4b8faa4b1d201cf"}}, {0xff, &(0x7f0000004c00)=@string={0xff, 0x3, "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"}}, {0x7d, &(0x7f0000004d00)=@string={0x7d, 0x3, "ec103775856eb13b5dece512c1640523fdbdab9fc5df9454e3b107a6a6adb6413483d3811c5d2d172a51219bddbedbe49b747aa462ea726368b7a34ca652a40741ac9912987e3ac9eab52508316991425af7790321ef8119906870020bff5b054e66dca139d01c5d59f6725129edd7efa91f517dec0c99ed464d1a"}}]}) 01:07:33 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) [ 1048.165053] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 1048.165053] program syz-executor.5 not setting count and/or reply_len properly 01:07:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) 01:07:33 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1048.198077] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 1048.198077] program syz-executor.5 not setting count and/or reply_len properly 01:07:33 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) 01:07:33 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:33 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1048.241253] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 1048.241253] program syz-executor.5 not setting count and/or reply_len properly [ 1048.283888] ISOFS: Unable to identify CD-ROM format. 01:07:47 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xf8, 0x31, 0x101, 0xfffffffe, 0x0, {0xf}, [@generic="4a9af6462f5813904919a28c9a43a339d84e341a61ddd2637cb2f1521919c02699ebbf300b3c0d6ce2498d6ed155ffbc73312b48cdf63cff1a2beae4ae41af10e8bb021285d1e5a70954dba473a101149e04100319e720296c2bcc4893870eb62177f477656dc6b587fba4ec1f83aeff7c1073cb2d56efd0bcc51eabc40d1878dcf78eea1273f1725287039c2760f99d0579ca36b5c7a88f9a4cb65da0f6401c830ed0014cfdb4163389227f3e3cf50a53e51190778305dcefffab77e8cbda855848fe2214655dd96b3173ccf9a63dc46b7f099898c72c09cd7e7b352b7f5e76f7a68b93"]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c6) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x4000012) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x88801) r5 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xf8e9}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) fcntl$dupfd(r5, 0x0, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f0000000240)=@x25}, 0x5) syz_io_uring_submit(r6, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x7000)=nil, 0x7000, 0xa, 0x1}, 0x0) fallocate(r3, 0x0, 0xfffffffffffff09f, 0x9) 01:07:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) 01:07:47 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:07:47 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0x3, 0x3) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) listen(r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/i2c_algo_bit', 0x100, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xa8b9, @loopback}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) shutdown(r0, 0x0) 01:07:47 executing program 3: ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0xffffffffffffffff, 0x40, [0x9, 0x0, 0x7, 0x80], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r5, 0x0, 0x0) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)="a1df52d2afe3021384b4ffde5870fde83e0022e9d2879d4f0f872679415fce0aaec5a4326f63c1948417ccf2407663d1ed", 0x31, r5) keyctl$get_security(0x11, r4, 0x0, 0x0) r6 = add_key(&(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="f0ab4bc5ec6fd8016069786e7bd308a50fcad87a2a84f4e3d497149b981eef3641fc0eee4002192f9f08e7dfdbadfe0f5432c2226f4e867a572b5da753b7f7ab34e3c443ff44bd817db51d77e6667250529db0e45663dd70a4b977818e05de8e7df51715dafb8c64c0ad0eedd8a016f0ac18e6", 0x73, 0xfffffffffffffffb) add_key(&(0x7f0000000300)='rxrpc_s\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000040)="8616cd640f9d9f08c373dd005ea329bb9384bb9b73f24b4aac2c18aca1e50c0abf4bc509d90fbd5bf1f1ca323f5d2244", 0x23, r6) add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='keyring\x00', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)="84aa550eadbbae1aaf7e50426c60c646264fc29fdca1e83c92d7a2cdb072abc6963ec8ac85cfcd00072ddf4dac95ec29ed87ed08531fec0cfc4f067cb4134dd3c4dd0664b39d94b9d385bb5ebd3e1f6b9ae485e8316f361b4c174c7e39414d737469816d39c10e2debc592729b76dc0d68aea1c6f2217a53be55598a39658c4be61940a56a060b4d6ea6a8a59c392928b043b39b2b", 0x95, 0xfffffffffffffffa) keyctl$revoke(0x3, r7) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r3, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000800)='.dead\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 01:07:47 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:47 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1062.109368] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.6'. 01:07:47 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1062.131283] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 1062.131283] program syz-executor.5 not setting count and/or reply_len properly 01:07:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000140)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000df97e800771df4655f000000000000000001000000000000000b0000000001", 0x5f, 0x400}, {0x0}, {&(0x7f0000000040)="0abdbf2492472e012af0e2e980cab05d516945e43b8996434731b32f87e6ea874d3825842a6958fc745c", 0x2a, 0x101}, {&(0x7f0000000080)="7001f26436599629fbfdb50cc3cca21f537467", 0x13, 0x100000001}], 0x0, &(0x7f00000000c0)) 01:07:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) 01:07:47 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a00)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = signalfd4(r0, &(0x7f0000000240)={[0x45]}, 0x8, 0x800) r3 = signalfd(r2, &(0x7f0000000200), 0x8) dup2(r3, 0xffffffffffffffff) read(r1, &(0x7f0000000080)=""/65, 0x41) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x326) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000380), 0x0, 0x0) fallocate(r5, 0x3, 0x0, 0x18000) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/208, 0xc7}, {&(0x7f0000001780)=""/171, 0xab}, {&(0x7f0000001900)=""/206, 0x98}], 0x6, 0x3f, 0xffffff14) pread64(r4, &(0x7f0000000180)=""/3, 0x3, 0x401) timer_gettime(0x0, &(0x7f0000000100)) 01:07:47 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e0", 0x28}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1062.241123] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1062.263689] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1062.271205] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 1062.271205] program syz-executor.5 not setting count and/or reply_len properly 01:07:48 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1062.284144] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1062.286102] EXT4-fs (loop7): group descriptors corrupted! 01:07:48 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1062.366622] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1062.380148] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1062.382179] EXT4-fs (loop7): group descriptors corrupted! 01:07:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="846aa517da3935790fe5ec8280570291a50383231a88165bfc6467a4dbfc5a02abd43bc685732360b597702f7d7e3cb946c528", 0x33, 0x5}], 0x3000004, &(0x7f0000000000)=ANY=[@ANYBLOB='usrsvgroups,\x00']) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/56, 0x38, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) open_tree(0xffffffffffffffff, 0x0, 0x8000) chdir(&(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400000, 0x21) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f00000001c0)=0x7, 0x4) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000240)=0x6e, 0x80400) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000380)=0x86, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x80000000]}, 0x8, 0x80000) 01:07:48 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:07:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) [ 1062.526918] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 1062.526918] program syz-executor.5 not setting count and/or reply_len properly [ 1062.574153] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 01:07:48 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:07:48 executing program 3: r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000140001000000000000010000000000681804009014000200fc0100"/44], 0x2c}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:08:01 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:08:01 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xb80, 0x0) lseek(r1, 0x0, 0x118cfbbc44a013d4) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(r4) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x1, 0x5, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x0, 0x7, 0x0, 0x9, 0x200, 0x3, 0xa, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5e, 0x40104, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/175, 0xaf) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, 0x0) lseek(r3, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) 01:08:01 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:01 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:01 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x2c, 0x0, "43939b35f5c055c1791200b12d0e4b6397c22f50f6cbc9926609f227be2f2d2fa954743972d73496b07628478c83f57c6d3aeb8c4ef4a944fad1ecfa95d1d442d1ddfcf572af4dbc174a36644e526858"}, 0xd8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010000000000000000100000000005000000000000000c00008008002200ac1414000d197eeddd53c3bda7cf49b3f00bda8f385b1620eafcbabedf37c651eb49b2792dca4f6370c25a81fad6990f02ba9c342c20501d460daa0fc6423f88d8e28401a9ca3ec3f30e5cf427835a45afc9cf40019af882c9d92c6f85738933189a49a4b93e21754ca13def06b67104d067a39c4a3045670bc0b70830ec7a01c7d97541892c86"], 0x28}}, 0x0) 01:08:01 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) 01:08:01 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40, 0x3a1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c009) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4110, 0x100e}, {&(0x7f00000004c0)=""/19, 0x13}], 0x2) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010019000100000018000000", @ANYRES32, @ANYBLOB="070000a9000000002e2f06006c653000"/25]) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 1075.459754] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 1075.459754] program syz-executor.0 not setting count and/or reply_len properly 01:08:01 executing program 7: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3e3cb8ee0c7e11ee}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1075.501219] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 1075.501219] program syz-executor.5 not setting count and/or reply_len properly 01:08:01 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:01 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:01 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:01 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:08:01 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x3, 0x2}, &(0x7f0000000040)='Z.;\xf9\xf6F\xee\x80#', 0x0) r1 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='dns_resolver\x00', r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x66, 0x35, 0x63, 0x34, 0x38, 0x39, 0x33, 0x39, 0x61, 0x37, 0x65, 0x30, 0x65, 0x62, 0x61, 0x32]}, &(0x7f0000000140)={0x0, "cc0dce96005f44a3c80357d999ff929ccec83228d70873325e89d5eb4b57f3ccf4aafb2c1033a22da960f5bdfbc6e96ca2c5cd491d052aa7f63c98296416729e", 0x31}, 0x48, r1) [ 1075.609876] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 1075.609876] program syz-executor.0 not setting count and/or reply_len properly 01:08:01 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {r0, r1/1000+60000}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = signalfd4(r2, 0x0, 0x0, 0x800) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(r2, &(0x7f00000000c0)={[0x49]}, 0x8, 0x800) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) dup3(r3, r4, 0x0) [ 1075.696935] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1075.696935] program syz-executor.5 not setting count and/or reply_len properly 01:08:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000008001, 0xc094b480aa3e9c4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001000020000000000000000000200e4ff0b00f980080002007674d1a9bb939525f2360f5eb8b7a46f414940e4b742d39a2b3e43074032df4965034717ffd8de5637440d9d3c0aef1338808a090074845410b95d0a2a437eab1a72e06a69e09970ee157ebfdb04ff", @ANYRES32=0xee01, @ANYBLOB="1ef0f374274cda368d2d896fea9209a14332da45c22029c8b143fb58ce724249069c6bfa5cc1963dd4d15353bc4bfd1fd5878d9b23949e1321d75a67d4c087cd45f40c9665664f8e75da64e996797fe239adca3400aea3a8f13640"], 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) ioctl(r1, 0x907, &(0x7f0000000000)="06e0979738700b65e883268d0d2464bdcb3d98b5b13cd09adbc10cc1cbe6b95635fdc6231cb4a63bfc0266215b973fb6eb220d1d8e692a05523172e3722badb0818387a7e12a804af29fe214ae32a926114c060b484ac77c1ae329244f") r2 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x87) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x2, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) lseek(r4, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x111000) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:08:15 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:15 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31a", 0x3c}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) 01:08:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="d79279bb7493a38f0f3c905bdb02fc186bb0b2401c8600f577433353b9eec36ab507c6175cd60a39"]) 01:08:15 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:08:15 executing program 3: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r0, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 01:08:15 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:08:15 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1089.885026] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1089.885026] program syz-executor.5 not setting count and/or reply_len properly [ 1089.916886] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1089.919746] netlink: 'syz-executor.6': attribute type 2 has an invalid length. 01:08:15 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) [ 1089.941020] sg_write: data in/out 33555249/12 bytes for SCSI command 0xfd-- guessing data in; [ 1089.941020] program syz-executor.0 not setting count and/or reply_len properly 01:08:15 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1089.980447] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1089.982973] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1090.000841] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1090.000841] program syz-executor.5 not setting count and/or reply_len properly [ 1090.020031] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 01:08:15 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x8, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x2b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb3}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) sendfile(r3, r4, 0x0, 0xe7b) r5 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0xfc, 0xff, 0x3, 0x0, 0x200, 0x20590, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x79d5, 0x4}, 0x200, 0x9, 0x7d01, 0x3, 0x2000000000, 0xfffff99f, 0x2, 0x0, 0x400, 0x0, 0x1000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb3}}, 0xe8) 01:08:15 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1090.068968] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 1090.068968] program syz-executor.0 not setting count and/or reply_len properly 01:08:15 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf", 0x4c}], 0x2) [ 1090.118618] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1090.122119] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1090.137978] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1090.141479] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1090.165600] sg_write: data in/out 33555249/28 bytes for SCSI command 0xfd-- guessing data in; [ 1090.165600] program syz-executor.5 not setting count and/or reply_len properly 01:08:30 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:08:30 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x8, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x2b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb3}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) sendfile(r3, r4, 0x0, 0xe7b) r5 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0xfc, 0xff, 0x3, 0x0, 0x200, 0x20590, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x79d5, 0x4}, 0x200, 0x9, 0x7d01, 0x3, 0x2000000000, 0xfffff99f, 0x2, 0x0, 0x400, 0x0, 0x1000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb3}}, 0xe8) 01:08:30 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf", 0x4c}], 0x2) 01:08:30 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:30 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x8, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x1, 0x1}, 0x2) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x2b, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb3}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) sendfile(r3, r4, 0x0, 0xe7b) r5 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0xfc, 0xff, 0x3, 0x0, 0x200, 0x20590, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x79d5, 0x4}, 0x200, 0x9, 0x7d01, 0x3, 0x2000000000, 0xfffff99f, 0x2, 0x0, 0x400, 0x0, 0x1000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb3}}, 0xe8) 01:08:30 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x10, 0x200, 0x0, 0x0, {0x4, 0x0, 0x2}, [@generic]}, 0x14}}, 0x10000) [ 1104.581241] sg_write: data in/out 33555249/28 bytes for SCSI command 0xfd-- guessing data in; [ 1104.581241] program syz-executor.5 not setting count and/or reply_len properly [ 1104.624204] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 1104.624299] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 1104.624299] program syz-executor.0 not setting count and/or reply_len properly [ 1104.630279] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:08:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYRES64=r1]) r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) fcntl$notify(r0, 0x402, 0x80000045) shutdown(r1, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0x0, 0x8000, 0x0, 0xfffffffb}) recvmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="090091c8befdffff9c68020c0bb955f51b5a00000000000000721125386991f8b0ee179aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000006e00b2f21b1d08a8792599dce110e86682a83f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}], 0x1, 0x120, &(0x7f0000000340)={0x77359400}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000200)=0x4, &(0x7f0000000380)=0x1) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x80000, 0x0) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) unshare(0x48020200) [ 1104.645393] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 1104.651332] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:08:30 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf", 0x4c}], 0x2) 01:08:30 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 01:08:30 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c5", 0x46}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:30 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:30 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/thermal', 0x20200, 0x112) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r0, &(0x7f00000000c0)=0x200, r1, &(0x7f0000000100)=0x9, 0x10000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(r0, 0x0, r2, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) [ 1104.812342] sg_write: data in/out 33555249/28 bytes for SCSI command 0xfd-- guessing data in; [ 1104.812342] program syz-executor.5 not setting count and/or reply_len properly [ 1104.823035] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1104.823035] program syz-executor.4 not setting count and/or reply_len properly 01:08:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x88}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x94, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_setup(0x1d57, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r8 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) close(r5) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x2f, 0x0) r9 = dup2(r8, r6) connect$802154_dgram(r9, 0x0, 0x0) [ 1104.879375] sg_write: data in/out 33555249/22 bytes for SCSI command 0xfd-- guessing data in; [ 1104.879375] program syz-executor.0 not setting count and/or reply_len properly 01:08:30 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf93", 0x4d}], 0x2) [ 1105.019996] sg_write: data in/out 33555249/29 bytes for SCSI command 0xfd-- guessing data in; [ 1105.019996] program syz-executor.5 not setting count and/or reply_len properly 01:08:45 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:45 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:45 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xfc01, 0x0, 0x77, 0x0, 0x1}, 0xc) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0xa01d, 0x20, 0x1, 0x3e1, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[@ANYBLOB="e6023600410008004b33fec0cefcedcc64456dc3026fc7270300a28ce2d10d69c19cc92a89e0e8006ce92d1ea02d49bcf41c21e99e30bd00ab1265cb099871ffbf30d549cd22deb421154c93fa6a6ae8770d7044d50cf80fbf"], 0x54, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup2(r4, r4) connect$inet6(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0xb) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) 01:08:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf93", 0x4d}], 0x2) 01:08:45 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 01:08:45 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:08:45 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e24, @broadcast}}}, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) dup2(r1, r2) setsockopt$inet_mreqn(r0, 0x0, 0x11, &(0x7f0000000000)={@broadcast, @local}, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x304}, 0x0, {0x2, 0x0, @broadcast}}) 01:08:45 executing program 7: ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000000c0)) ptrace$getregset(0x4204, r2, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=""/212, 0xd4}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x1, 0x81, 0x0, 0x3a65, 0x810, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x34e74976a41a55df, @perf_config_ext={0x4, 0x4116889d}, 0x1468, 0x8, 0x4, 0x4, 0x2, 0x2, 0xcde6, 0x0, 0x6be}, r2, 0xe, r0, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203}, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) io_uring_enter(0xffffffffffffffff, 0x3896, 0xcde1, 0x2, &(0x7f0000000040)={[0x6]}, 0x8) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080), 0x8) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1120.167505] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 1120.167505] program syz-executor.0 not setting count and/or reply_len properly 01:08:45 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1120.200830] sg_write: data in/out 33555249/29 bytes for SCSI command 0xfd-- guessing data in; [ 1120.200830] program syz-executor.5 not setting count and/or reply_len properly 01:08:45 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf93", 0x4d}], 0x2) [ 1120.251135] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1120.251135] program syz-executor.4 not setting count and/or reply_len properly 01:08:46 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf93", 0x4d}], 0x2) [ 1120.297932] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 1120.297932] program syz-executor.0 not setting count and/or reply_len properly 01:08:46 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1120.343692] perf: interrupt took too long (7848 > 7838), lowering kernel.perf_event_max_sample_rate to 25000 [ 1120.346769] sg_write: data in/out 33555249/29 bytes for SCSI command 0xfd-- guessing data in; [ 1120.346769] program syz-executor.5 not setting count and/or reply_len properly 01:08:46 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 01:08:46 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:46 executing program 3: syz_io_uring_setup(0x41ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000005, 0xaba380c8bbe1e834, r0, 0x10000000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000000040)=0x3, 0x3) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r5, &(0x7f0000000080)={0x38000, 0x21, 0x2}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r7}}, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x100) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000180)=@sco}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x3, &(0x7f0000000340), 0x8) 01:08:46 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650e", 0x4b}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1120.398217] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1120.398217] program syz-executor.4 not setting count and/or reply_len properly [ 1120.406839] sg_write: data in/out 33555249/29 bytes for SCSI command 0xfd-- guessing data in; [ 1120.406839] program syz-executor.6 not setting count and/or reply_len properly 01:08:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x1) [ 1120.432128] sg_write: data in/out 33555249/27 bytes for SCSI command 0xfd-- guessing data in; [ 1120.432128] program syz-executor.0 not setting count and/or reply_len properly 01:08:46 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x0, 0x5, 0x6, 0x4, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x0, r0, 0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e3, 0x69}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file2\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) r6 = getuid() sendmsg$unix(r1, &(0x7f0000000b00)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000500)="7b655ae2237c0cbb9ad7e63370b1faff77a34d1a7f7481f1efa9e5ddf375a0f4ab1eb135994b0bac05e9edc37a016b587e9a62ad4f3dda5d6706b6d5cd38dbf72fd29f0a1f8b6618cf81274b4b9bc204967ba6bf3e6cf5fb75a0a12f1bae245e4a1d3ace1925a1e05b74762e5a369ddf3ff2af7eab0be3fe47a6c4f9b4e35054dbe35ad5293aa7bf3acc87ca1b79d6801f96438d4929bf453caebc700dfa11f38bcc6045d1061bcfd8962f5a003657ff69e6f0c24a2c1c5ad4077e7d6f771266ee3e59fb23465ba8", 0xc8}, {&(0x7f0000000380)="8e40eeedbcc7330ffb1e78a0d43e2244e4ad3a7583b811a8d375f8c80efa0c35bd358997b5be904989992d07d82ae0ddadfccb9519234b47b196f4bfa480468fb24033da304e87d9441f213cd171c18bf9", 0x51}, {&(0x7f0000000600)="5ee0eea106523c5bf29a8415b9ab4e7dc981945528dd96ae21985c8c5b0f455046c0610d4142bd68940c1634fd69c2af2d00c42364f3080a00b09660a4ea411fd7862b8556824460cd6a6833a1bb54dd550f6febc55d53dab33564ee96131cb3dff1801f93e19bbc5b06", 0x6a}, {&(0x7f0000000680)="01e49a8611d565b80986b27dabe85d017d2272d71213a55ad8780d64334508a9539750460aa0eae9a3154ff7e8bc8e672fd0aecb6d265d457d000e5ee57114192f406af2317f65ff96f7d8308e61b96feb153cc39488e5521cdd5565a4bcc39c5a7a7c10e791cc0bf9e88284559d8b101468e0dd1cc468106f344cb987b7c5a5374b3c382e13c4f2384097", 0x8b}, {&(0x7f0000000740)="059fb26e9714b1628696533436fdffa3658b6266cce8a46180d11dfb95a1bcd9433c6fb4464bd123f22025e6c24afb7e824afdeb2d23c126cf8052fccb42bff62f6e57a38b2a935ba647e0ffc3a5d797c9d055e440977bd34604cb033650774f4526175c488873c1a584106800e09c222769977f753279532e6ed1bbf92461bc4e10c3dcdbc958b1df84446f9f81fed334a89c3f270853b9d2e3c7cd748305d575235878f69b64456f030e44f6aa6c5feae89ecdafeebd1da5085160fe5605aa6bc8fc7f9545d58c548f393eb612fd152cd4e8c2965c59d7152e7cdc229114612dd1966b6d07dc47d79e1215b75a1b", 0xef}, {&(0x7f0000000840)="466c6849c30c87b23c8c8e21c10634351d4ab12a77870fe73994e99f54a07e468d9f2b5f48c05ea40ff308751f438713c5d7e984fa4c34f5cae50990aef19779c5066a04db1aac8b4e2dbeec2bd82c7e159205516e09d7657411a14c894ea870a132d4dab26c9fc5681dd03567639197fbc04221851cda994127f6d0d58c09f1749426c91cc9e9821bbf8a", 0x8b}, {&(0x7f0000000100)}, {&(0x7f0000000900)="e7c636938695702c3950053b96bab8d3730adc8d7b15d28d4e704f175e771ee9bc16ad34d8105527289bdeec3877307736cd060a4f0bcc57e9f82b0e5af5fe0552aca16eddb186a40ebc05cf48356dac9705a71b3b455d16ebbb62fa5a16a9f75b9aa970fe32eda78a4155d71c0a8169e7b178a8c7307ab3610da017a9ec275bf537d570215104b34beb7493d5206475873ce3a9dd87a6df11c477000d106a5cca63bfe72d137a816458ad32e3df", 0xae}, {&(0x7f00000020c0)="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", 0x1000}], 0x9, &(0x7f0000000a80)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xffffffffffffffff}}}], 0x80}, 0xc0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x301, 0x0) pread64(r7, &(0x7f0000000400)=""/198, 0xc6, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, 0x0, 0x0) r8 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x3, 0x3d3, 0x0, r1}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) fadvise64(r8, 0x4, 0x6e, 0x0) r9 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x13, r9, 0xd0b4a000) faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x80, 0x0) ioprio_get$pid(0x0, 0x0) [ 1120.520915] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1120.520915] program syz-executor.0 not setting count and/or reply_len properly 01:08:46 executing program 6: rt_sigqueueinfo(0x0, 0x17, &(0x7f0000000140)={0x0, 0x0, 0xfffffffb}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)) r1 = syz_io_uring_complete(0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xa) capset(0x0, &(0x7f0000000200)={0x93, 0x80000001, 0x3f, 0x0, 0x0, 0x51c0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000007c000000", @ANYRES32=r1, @ANYBLOB="0000080000040000", @ANYBLOB="eb4a7c001f2182fd754902a67d474e2dd5ec867b5109cd7fef8949ee086d648273d2a639b141f76fef7c6c29647707f9efb82c0643c835b005e63a671353eb4421220760976794a9e5eee4c45191a4174c6bec240a57a92306bea02608ae5d82439b321f7f92a1b20dfe14a1ed1e61c1fc32dc85de2f8e46dd4d4129bdb9b69da0e863618b4bff5ce1deee1524fda3af7feb36023c1c76659c796e22eccce168ad0e29c0681ece578cb045631da836fb9cdaf0124d8056efe52e54c156c2f27a90f26556605479bf7351993594942cf2b5277655f16bfa9eeb355631c049540fd66d"]) finit_module(r2, &(0x7f0000000180)='#\x00', 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070cd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000002ec0), 0x4) sendfile(r1, r1, &(0x7f0000000040)=0xfffffffffffffeff, 0xffff) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000100)) unshare(0x48020200) [ 1120.542178] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1120.542178] program syz-executor.5 not setting count and/or reply_len properly 01:08:46 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:46 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:46 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x1) [ 1122.548525] Bluetooth: hci6: command 0x0405 tx timeout 01:08:59 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:08:59 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:08:59 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:59 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x4f, 0x2, 0x4d, 0xff, 0x0, 0x100000001, 0x20, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x58, 0x4, @perf_config_ext={0x3ff, 0x7ff}, 0x4, 0xffffffffffffffff, 0x80000001, 0x9, 0x10000, 0xee, 0x2d1c, 0x0, 0xc14, 0x0, 0x1}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0xbb, 0x0, 0xff, 0x0, 0x59, 0x2010, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x8000, 0x1000000000000}, 0x80, 0x1, 0x10001, 0x5, 0x200, 0x3, 0x2, 0x0, 0x3}, r1, 0x10, r2, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 01:08:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa0) syz_mount_image$vfat(0x0, 0x0, 0x9, 0x0, 0x0, 0x8c, &(0x7f0000000340)=ANY=[@ANYBLOB="00e2ff0020", @ANYRESDEC=0xee01, @ANYBLOB=',smackfsfloor=\x00,fsmagic=0x0000000000000002,measure,seclabel,\x00']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/sr0', 0x200000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) 01:08:59 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:08:59 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x1) 01:08:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r0, r1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r2, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x90802, 0x41) [ 1134.107340] FAULT_INJECTION: forcing a failure. [ 1134.107340] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1134.110139] CPU: 1 PID: 11205 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1134.111640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.113415] Call Trace: [ 1134.113991] dump_stack+0x107/0x167 [ 1134.114799] should_fail.cold+0x5/0xa [ 1134.115624] _copy_from_user+0x2e/0x1b0 [ 1134.116484] iovec_from_user+0x141/0x400 [ 1134.117367] __import_iovec+0x67/0x590 [ 1134.118205] ? SOFTIRQ_verbose+0x10/0x10 [ 1134.119106] import_iovec+0x83/0xb0 [ 1134.119895] vfs_writev+0xc1/0x620 [ 1134.120661] ? vfs_iter_write+0xa0/0xa0 [ 1134.121513] ? __fget_files+0x26d/0x4c0 [ 1134.122370] ? lock_downgrade+0x6d0/0x6d0 [ 1134.123262] ? find_held_lock+0x2c/0x110 [ 1134.124148] ? __fget_files+0x296/0x4c0 [ 1134.125014] ? __fget_light+0xea/0x290 [ 1134.125855] do_writev+0x139/0x300 [ 1134.126635] ? vfs_writev+0x620/0x620 [ 1134.127460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.128562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.129678] do_syscall_64+0x33/0x40 [ 1134.130461] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1134.131578] RIP: 0033:0x7fdf6458fb19 [ 1134.132361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.136288] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1134.137882] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1134.139410] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1134.140933] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.142454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.143996] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1134.158316] sg_write: 2 callbacks suppressed [ 1134.158334] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1134.158334] program syz-executor.5 not setting count and/or reply_len properly 01:08:59 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100005e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x8000000000000, 0x800}, 0x0, 0xd, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x3) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ff4000/0x2000)=nil) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) munlock(&(0x7f0000ff5000/0x1000)=nil, 0x1000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) [ 1134.184883] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1134.184883] program syz-executor.0 not setting count and/or reply_len properly 01:08:59 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:08:59 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe0", 0x4f}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:00 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:00 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:09:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x4f, 0x2, 0x4d, 0xff, 0x0, 0x100000001, 0x20, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x58, 0x4, @perf_config_ext={0x3ff, 0x7ff}, 0x4, 0xffffffffffffffff, 0x80000001, 0x9, 0x10000, 0xee, 0x2d1c, 0x0, 0xc14, 0x0, 0x1}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0xbb, 0x0, 0xff, 0x0, 0x59, 0x2010, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x8000, 0x1000000000000}, 0x80, 0x1, 0x10001, 0x5, 0x200, 0x3, 0x2, 0x0, 0x3}, r1, 0x10, r2, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') [ 1134.359991] sg_write: data in/out 33555249/31 bytes for SCSI command 0xfd-- guessing data in; [ 1134.359991] program syz-executor.0 not setting count and/or reply_len properly 01:09:00 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:00 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1134.439107] FAULT_INJECTION: forcing a failure. [ 1134.439107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.440733] CPU: 0 PID: 11336 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1134.441497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.442550] Call Trace: [ 1134.442857] dump_stack+0x107/0x167 [ 1134.443290] should_fail.cold+0x5/0xa [ 1134.443742] _copy_from_user+0x2e/0x1b0 [ 1134.444218] sg_write.part.0+0x1cf/0xaa0 [ 1134.444703] ? mark_lock+0xf5/0x2df0 [ 1134.445146] ? sg_new_write.isra.0+0x770/0x770 [ 1134.445686] ? lock_acquire+0x197/0x470 [ 1134.446113] ? find_held_lock+0x2c/0x110 [ 1134.446598] ? __might_fault+0xd3/0x180 [ 1134.447062] ? lock_downgrade+0x6d0/0x6d0 [ 1134.447556] ? _cond_resched+0x12/0x80 [ 1134.448009] ? inode_security+0x107/0x140 [ 1134.448494] ? avc_policy_seqno+0x9/0x70 [ 1134.448967] ? selinux_file_permission+0x92/0x520 [ 1134.449535] ? security_file_permission+0x24e/0x570 [ 1134.450109] sg_write+0x87/0x120 [ 1134.450513] do_iter_write+0x482/0x670 [ 1134.450935] ? import_iovec+0x83/0xb0 [ 1134.451349] vfs_writev+0x1ae/0x620 [ 1134.451778] ? vfs_iter_write+0xa0/0xa0 [ 1134.452232] ? __fget_files+0x26d/0x4c0 [ 1134.452702] ? lock_downgrade+0x6d0/0x6d0 [ 1134.453185] ? find_held_lock+0x2c/0x110 [ 1134.453665] ? __fget_files+0x296/0x4c0 [ 1134.454129] ? __fget_light+0xea/0x290 [ 1134.454594] do_writev+0x139/0x300 [ 1134.455014] ? vfs_writev+0x620/0x620 [ 1134.455448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.456063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.456677] do_syscall_64+0x33/0x40 [ 1134.457112] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1134.457703] RIP: 0033:0x7fdf6458fb19 [ 1134.458142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.460084] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1134.460965] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1134.461799] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1134.462644] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.463406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.464237] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:09:00 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe0", 0x4f}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1134.529364] sg_write: data in/out 33555249/31 bytes for SCSI command 0xfd-- guessing data in; [ 1134.529364] program syz-executor.0 not setting count and/or reply_len properly 01:09:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:09:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000140)={0x5, 0xe2, 0x0, 'queue1\x00', 0xed0db2}) sendfile(r1, r0, &(0x7f0000000000)=0x80000000, 0x40) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14}, 0xff24) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x400, 0x0, 0x5}, 0x18) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) fsetxattr$trusted_overlay_origin(r2, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x811) 01:09:00 executing program 7: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0x3, 0x3) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x101000, 0x0) io_submit(0x0, 0xa, &(0x7f0000000c00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000140)="4225f33ac712d69b0ab3afb1fe4fab123056df244447e22dd8841e246ba22bcfdec05c3d46911df69cadbaa16a65d9ee105d0d8f9fdb5aae66269e0d0f2f9aebc5b9adef298b6faaad6ac27ad8f5145b6c5e5ee56325f12aa8ac4adb87984b9ce6105577cca018750d9b3f43a1a2e843993a15e8d131800d4ee07b963a9de81bd1fc23c3246d9011a06ebaf6946b5db33e0309f67ff0cd0a0131f54f798192a9c921002cb96bb6683a03b5d93f", 0xad, 0x324, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000280)="b7ee5117f327d7162ba12bd0df0332210995c74ee62e141e469269c96390eb49e2416eb60d2f", 0x26, 0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xae7, 0xffffffffffffffff, &(0x7f00000003c0)="bbda9398bd9004dc8f46b77d9ec66de8911533c5fe2dd6a05a4d4f881ad495bd19a57af92095eb93572bf3aac07c98bbe36e3455989899f7ae47106164fb0d9b286fe5841e0c31f783485ed070e8385178ba6716d34c3e9067a32862d70e6ae7cef361aeacc12488a828", 0x6a, 0x1f, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x40, r0, &(0x7f0000000440)="bbcc6e4d849d5441d7475c247c66616f4c3fec5da4f1302521e84c3855902ca7dfcc83eb583a1e051634a4ddc2f2bbafe107b15c920a7f5e60dca33a67eb45704e5504252af5b16ea4b55eec3fb9755b72a824fb", 0x54, 0x800, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x7fff, r0, &(0x7f0000000680)="c244198549bf0f046d96d5abbe0284a35666bd48b130d3844b0d9eb565d10c54e623f0540c26567a5c7302b6272ee7726cabe205d5092df85003697428d781361d685120", 0x44, 0x200}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f0000000700)="2beb31f60a2be6018d44b5fc4c7653bbcb61b444ebcd7ce611ef4e48b6ea3256e30ecf4d811f7ade05a4cd629040a230470065dc61ac29b6685006c11fdf1b344497eae9a8c8ef8e0a6c", 0x4a, 0x8, 0x0, 0x1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x8, r2, &(0x7f0000000780)="87a112ee1cb31c00603ac51cada167de2c4f71926d5f83f1dd0b4ac6096d0c378bf7ad3002f6e165bdc9bcdaa4b69d739fbe9b6990adf44feb2bc3926cf8619aff7fe9e7d8119e45e9be02d2dbeef4945c4ac71d314727658ed4149278ada69b092502229b9b77757768ab603cfd41c3d7ed9b7f93881135a4e68375a4a57e3eaaa26ab674301052446cea86089464f2c5e49dd596c6a8218b916ed90a4c4ebfb3123354d11090eff84a2f0db68ed413947ce6", 0xb3, 0x800, 0x0, 0x3}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000000880)="3f2cb216660ee256ce4a596f2883bc98357a2a7606bfc0e0c838ddfab2ef30c21a28eaae3384cab63215862612ac0fa95e4560d3f1dca3842d1aebf7742f32784b7c75283dda6b55b4ddda0ac726016890fdbf61feaac68084b754692a169b578ccfe4e54a629661143cd26459c39d8234458090e2defdccb695a7bd79315e994c40eb60642507a43bebbacb7811521e503dec3e88b2c8e1b9ad", 0x9a, 0x3, 0x0, 0x3, r4}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5, 0x1ff, 0xffffffffffffffff, &(0x7f0000000980)="09d424fc2f28007772bdaca893377c759ce837994ac4ee3fa53773b246cfcc336dec8b518b063253cbb0f2dc6e1be4126d2e090053f2d8e8140493d93754bc7e7c9af97127df86020b12a4f8e348bc05c3ec2d56d276008ea82c7f4449d9b6436f97829df22cbb91b45316092d4d5892f32e3ef106e8f38e7864fe2f52f6157fdf6153b3188970ab8f5c28d84cbeeda8c3d0cd33eec6", 0x96, 0x4}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000ac0)="88ced5e4858a71e129164e1837ac6d742b8a62a136fbe26c4b2f3ef367f932b676aa8c0d8ec48abca8829c13d8d239c3013f07927b381fa25d1bd7911824e6c2b566b8876a02018480ea27b89a93e2fb23c752b0224276212afd8ec0ef7c127df4d89aa250baff846427c8c944af6279eaeebf865e547e8890d39fd28c4a87fea71859b3db6b32c3bc5399fddba7afa553ba473e678dde75fc5553e0f3a103c3edfdb112b6a070f1279fd6cb46f9c3e9bbbe5c742b51508c987d7f2b31a15955f951968e0a041f691b", 0xc9, 0x7, 0x0, 0x1}]) io_cancel(0x0, 0x0, &(0x7f0000000540)) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd, 0x0, 0x0}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) [ 1134.585761] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 1134.593982] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 1134.666132] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 1134.669898] netlink: 'syz-executor.7': attribute type 2 has an invalid length. 01:09:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00210c0000000000000a00000005000000f000000014"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendfile(r4, r5, &(0x7f0000000000)=0x10000, 0x9) r6 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) 01:09:13 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) dup2(r2, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x4a) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001a00210c00000000000000000a00000005000000007a42d30b2ffbbb7f8800000000000000000000000001"], 0x30}}, 0x0) r4 = fsmount(r3, 0x0, 0x76) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x31, 0x21, 0x4, 0x80, 0x0, 0xfffffffe, 0x11, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x2}, 0x10, 0x2, 0x6, 0x8, 0x4, 0xfffffffe, 0x7428}, 0x0, 0x2, r4, 0x2) io_setup(0xf7, &(0x7f0000000000)=0x0) pread64(r0, &(0x7f0000000240)=""/95, 0x5f, 0xc) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1c5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f00000001c0)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r5, 0x3, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000080)={0x10000009}) 01:09:13 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe0", 0x4f}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:13 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:13 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 3) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1147.897388] FAULT_INJECTION: forcing a failure. [ 1147.897388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.898851] CPU: 0 PID: 11368 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1147.899613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.900534] Call Trace: [ 1147.900840] dump_stack+0x107/0x167 [ 1147.901251] should_fail.cold+0x5/0xa [ 1147.901676] _copy_from_user+0x2e/0x1b0 [ 1147.902126] sg_write.part.0+0x5f7/0xaa0 [ 1147.902577] ? sg_new_write.isra.0+0x770/0x770 [ 1147.903095] ? find_held_lock+0x2c/0x110 [ 1147.903551] ? __might_fault+0xd3/0x180 [ 1147.903987] ? lock_downgrade+0x6d0/0x6d0 [ 1147.904457] ? _cond_resched+0x12/0x80 [ 1147.904886] ? inode_security+0x107/0x140 [ 1147.905344] ? avc_policy_seqno+0x9/0x70 [ 1147.905790] ? selinux_file_permission+0x92/0x520 [ 1147.906342] ? security_file_permission+0x24e/0x570 [ 1147.906895] sg_write+0x87/0x120 [ 1147.907271] do_iter_write+0x482/0x670 [ 1147.907709] ? import_iovec+0x83/0xb0 [ 1147.908135] vfs_writev+0x1ae/0x620 [ 1147.908544] ? vfs_iter_write+0xa0/0xa0 [ 1147.908990] ? __fget_files+0x26d/0x4c0 [ 1147.909430] ? lock_downgrade+0x6d0/0x6d0 [ 1147.909891] ? find_held_lock+0x2c/0x110 [ 1147.910346] ? __fget_files+0x296/0x4c0 [ 1147.910802] ? __fget_light+0xea/0x290 [ 1147.911232] do_writev+0x139/0x300 [ 1147.911625] ? vfs_writev+0x620/0x620 [ 1147.912053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1147.912627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1147.913199] do_syscall_64+0x33/0x40 [ 1147.913609] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1147.914170] RIP: 0033:0x7fdf6458fb19 [ 1147.914579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.916656] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1147.917530] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1147.918346] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1147.918401] sg_write: data in/out 33555249/31 bytes for SCSI command 0xfd-- guessing data in; [ 1147.918401] program syz-executor.0 not setting count and/or reply_len properly [ 1147.919155] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.919162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.919168] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1147.940655] sg_write: data in/out 33555249/31 bytes for SCSI command 0xfd-- guessing data in; [ 1147.940655] program syz-executor.3 not setting count and/or reply_len properly 01:09:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:09:13 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:09:13 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe0", 0x4f}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1147.945823] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 1147.953924] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 1147.964345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 01:09:13 executing program 3: r0 = creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) openat(r1, &(0x7f0000000340)='./file0\x00', 0x8000, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x30, 0x81, 0x7fffffff) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = syz_io_uring_complete(r2) copy_file_range(r0, 0x0, r4, &(0x7f0000000240)=0x1, 0xbcaf, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_io_uring_setup(0x3893, &(0x7f00000000c0)={0x0, 0x84b4, 0x20, 0x2, 0x26b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x521500, 0x24, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x5) 01:09:13 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1148.038184] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1148.039261] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1148.040000] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1148.040723] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1148.041543] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 1148.060578] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1148.061872] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1148.062601] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1148.063307] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1148.064118] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 1148.065180] Buffer I/O error on dev sr0, logical block 0, async page read [ 1148.065923] Buffer I/O error on dev sr0, logical block 1, async page read [ 1148.066670] Buffer I/O error on dev sr0, logical block 2, async page read [ 1148.067407] Buffer I/O error on dev sr0, logical block 3, async page read [ 1148.068162] Buffer I/O error on dev sr0, logical block 4, async page read [ 1148.068914] Buffer I/O error on dev sr0, logical block 5, async page read [ 1148.069659] Buffer I/O error on dev sr0, logical block 6, async page read [ 1148.070375] Buffer I/O error on dev sr0, logical block 7, async page read [ 1148.072825] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 1148.077906] FAULT_INJECTION: forcing a failure. [ 1148.077906] name failslab, interval 1, probability 0, space 0, times 1 [ 1148.079713] CPU: 0 PID: 11389 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1148.080444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.081307] Call Trace: [ 1148.081602] dump_stack+0x107/0x167 [ 1148.081993] should_fail.cold+0x5/0xa [ 1148.082433] ? sg_build_indirect.isra.0+0x94/0x710 [ 1148.082962] should_failslab+0x5/0x20 [ 1148.083365] __kmalloc+0x72/0x390 [ 1148.083750] sg_build_indirect.isra.0+0x94/0x710 [ 1148.084257] ? scsi_req_init+0x18/0xb0 [ 1148.084667] ? scsi_initialize_rq+0x16/0xb0 [ 1148.085155] sg_common_write.constprop.0+0x992/0x1a30 [ 1148.085707] ? sg_build_indirect.isra.0+0x710/0x710 [ 1148.086250] ? __might_fault+0xd3/0x180 [ 1148.086673] ? lock_downgrade+0x6d0/0x6d0 [ 1148.087151] sg_write.part.0+0x69e/0xaa0 [ 1148.087591] ? sg_new_write.isra.0+0x770/0x770 [ 1148.088076] ? find_held_lock+0x2c/0x110 [ 1148.088507] ? __might_fault+0xd3/0x180 [ 1148.088923] ? lock_downgrade+0x6d0/0x6d0 [ 1148.089375] ? _cond_resched+0x12/0x80 [ 1148.089783] ? inode_security+0x107/0x140 [ 1148.090217] ? avc_policy_seqno+0x9/0x70 [ 1148.090657] ? selinux_file_permission+0x92/0x520 [ 1148.091184] ? security_file_permission+0x24e/0x570 [ 1148.091712] sg_write+0x87/0x120 [ 1148.092072] do_iter_write+0x482/0x670 [ 1148.092491] ? import_iovec+0x83/0xb0 [ 1148.092897] vfs_writev+0x1ae/0x620 [ 1148.093287] ? vfs_iter_write+0xa0/0xa0 [ 1148.093708] ? __fget_files+0x26d/0x4c0 [ 1148.094138] ? lock_downgrade+0x6d0/0x6d0 [ 1148.094566] ? find_held_lock+0x2c/0x110 [ 1148.095007] ? __fget_files+0x296/0x4c0 [ 1148.095431] ? __fget_light+0xea/0x290 [ 1148.095850] do_writev+0x139/0x300 [ 1148.096226] ? vfs_writev+0x620/0x620 [ 1148.096628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.097172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.097715] do_syscall_64+0x33/0x40 [ 1148.098108] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1148.098668] RIP: 0033:0x7fdf6458fb19 [ 1148.099077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.101036] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1148.101830] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1148.102593] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1148.103374] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.104139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.104901] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1148.143082] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1148.144195] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1148.145050] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1148.145768] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1148.146559] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 01:09:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:09:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b90a5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e35718c602f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f0000000ac0)={0x0, 0xffffffff, 0x8, 0x2, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x6}, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='\\$-!$@+^\xfe\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) 01:09:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000500)='./file1/file0\x00', 0x3) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10100080001) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xfffffffffffffff8, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="b8c21da76586a2f140e9ed458a2c370b0a84a090cd9fec3d7c7d82cfaad85af1395d182e1665dde5335bf11cc3af969bfcf6fd411e705d6b50dcfd0c3d383423e734052e48f4f9caea2292ed12ecac78e5e75361de8a5b64da4bf425642c8e6d54adc593eb10b80f9b1fd0bc499ae891a89b1a4057983530b50325f3c18da7173f34a002f7b8a4bbeb1528048fa645849b9f14b65b07a4f3083c5e8101554029eb80b32c2820f865c1cbd17058c2ac2393b79cfcd86d39ad7fa4309461130ce36ce559513d598d4674be5a3b68ffd47000135d7c0e999be5ce", 0xd9, 0x10000}, {&(0x7f0000000240)="66a5f1b23f57c7c3f20c49f36c2a7c148118226449d1", 0x16, 0x3}, {&(0x7f0000000300)="008ca4dec6869578436d155512eb700a9ea8be6976e886d3adab26", 0x1b, 0xffffffffffffffc0}, {&(0x7f0000000340)="85d070e32fa9f4fae26b79fcf12418d78a0e9509dc4c5d46cdb9c06d8e", 0x1d, 0x100000001}, {&(0x7f0000000380)="cad074119d7c9da1d7b7cc7e0d6dfa22401c1274da2d5ae9318ff17894c78bb19e41a31fd7b58f175b5e9d438a3771c53c48c3c295db8c9e748e670ea526ce3bd1ef299536e9da2415dec40f50fddeaa3e0fa827daf8c5b648153da3198b7280c007b5a17fb5ec", 0x67, 0x3}], 0x100000, &(0x7f0000000480)={[{@shortname_winnt}, {@shortname_winnt}, {@nonumtail}], [{@hash}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, '/^:\xe7,'}}]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) 01:09:27 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:09:27 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:27 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:27 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 5) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:27 executing program 3: set_mempolicy(0x4, 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0xef, 0x8000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$rfkill(r0, &(0x7f0000000040), 0x8) [ 1162.052017] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1162.081153] FAULT_INJECTION: forcing a failure. [ 1162.081153] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.083900] CPU: 0 PID: 11510 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1162.085487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.087187] Call Trace: [ 1162.087746] dump_stack+0x107/0x167 [ 1162.088497] should_fail.cold+0x5/0xa [ 1162.089280] ? create_object.isra.0+0x3a/0xa20 [ 1162.090214] should_failslab+0x5/0x20 [ 1162.091014] kmem_cache_alloc+0x5b/0x310 [ 1162.091885] create_object.isra.0+0x3a/0xa20 [ 1162.092775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1162.093876] __kmalloc+0x16e/0x390 [ 1162.094624] sg_build_indirect.isra.0+0x94/0x710 [ 1162.095592] ? scsi_req_init+0x18/0xb0 [ 1162.096390] ? scsi_initialize_rq+0x16/0xb0 [ 1162.097265] sg_common_write.constprop.0+0x992/0x1a30 [ 1162.098355] ? sg_build_indirect.isra.0+0x710/0x710 [ 1162.099372] ? __might_fault+0xd3/0x180 [ 1162.100170] ? lock_downgrade+0x6d0/0x6d0 [ 1162.101037] sg_write.part.0+0x69e/0xaa0 [ 1162.101885] ? sg_new_write.isra.0+0x770/0x770 [ 1162.102809] ? find_held_lock+0x2c/0x110 [ 1162.103648] ? __might_fault+0xd3/0x180 [ 1162.104452] ? lock_downgrade+0x6d0/0x6d0 [ 1162.105304] ? _cond_resched+0x12/0x80 [ 1162.106085] ? inode_security+0x107/0x140 [ 1162.106924] ? avc_policy_seqno+0x9/0x70 [ 1162.107736] ? selinux_file_permission+0x92/0x520 [ 1162.108713] ? security_file_permission+0x24e/0x570 [ 1162.109716] sg_write+0x87/0x120 [ 1162.110401] do_iter_write+0x482/0x670 [ 1162.111202] ? import_iovec+0x83/0xb0 [ 1162.111973] vfs_writev+0x1ae/0x620 [ 1162.112709] ? vfs_iter_write+0xa0/0xa0 [ 1162.113508] ? __fget_files+0x26d/0x4c0 [ 1162.114310] ? lock_downgrade+0x6d0/0x6d0 [ 1162.115160] ? find_held_lock+0x2c/0x110 [ 1162.115997] ? __fget_files+0x296/0x4c0 [ 1162.116806] ? __fget_light+0xea/0x290 [ 1162.117599] do_writev+0x139/0x300 [ 1162.118316] ? vfs_writev+0x620/0x620 [ 1162.119100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.120157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.121197] do_syscall_64+0x33/0x40 [ 1162.121947] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1162.122975] RIP: 0033:0x7fdf6458fb19 [ 1162.123727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.127423] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1162.128955] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1162.130122] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1162.130122] program syz-executor.0 not setting count and/or reply_len properly [ 1162.130387] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1162.130418] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.136448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.137879] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1162.165071] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1162.168496] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1162.168496] program syz-executor.4 not setting count and/or reply_len properly 01:09:27 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:28 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000400)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000004) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) socketpair(0xf, 0x80000, 0xce, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x84, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x1b, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x84}, 0x1, 0x0, 0x0, 0x85}, 0x44801) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000280)) timer_gettime(0x0, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000300)) 01:09:28 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:28 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1162.349165] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1162.349165] program syz-executor.0 not setting count and/or reply_len properly 01:09:43 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 6) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:43 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:09:43 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/92, 0x5c}, {&(0x7f0000000140)=""/186, 0xba}], 0x2, 0x4, 0x5) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x3) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xffffffff81000000}, 0x50011}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 01:09:43 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:09:43 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x88ac0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={0x0, 0x24}}, 0x4008010) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x32000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001c40)={0x1, 0x3}, 0x4) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r3) close(r3) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x400, 0x129) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000100)={0xa, 0x4e24, 0x7df3, @mcast1, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="8ec4450a61483ac1d5d5c7663f2c71abd79c02345b0e1e0f4dd29719a963084749ac813898ac5a1c8c2acb61da0542f910092fbd74e04d3cf7fb1b6b97cd6d458064e075e1dacf28b3", 0x49}, {&(0x7f0000000200)="e58b51fe49f9c156baea917d31e44177ba38f791300ae0e7d7fa89695a06a3b7280a7e58182f7bc2dede3ce04fcd866e65b6debcf04ff3eafb26eab405414b73d86c994ee1aa6301f9ae36bbfc99525cbef07cda17e5dca7d94dfb55143c666895b987e6552130838929d3519391699e548e21e05974c5ffb25a464601d4666397b8c6820476b033d6bbafb3dbded3418ede77292a49d4ebf9d379eece927545e7ca2a36", 0xa4}], 0x2, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0xb, 0x7ff}}, @hoplimit_2292={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @hopopts={{0x38, 0x29, 0x36, {0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x696}, @enc_lim={0x4, 0x1, 0xff}]}}}], 0x90}, 0x10) [ 1177.804734] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1177.821196] FAULT_INJECTION: forcing a failure. [ 1177.821196] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1177.823322] CPU: 1 PID: 11645 Comm: syz-executor.4 Not tainted 5.10.198 #1 01:09:43 executing program 6: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x66, 0x30, 0x35, 0x36, 0x31, 0x35, 0x30, 0x62, 0x39, 0x60, 0x34, 0x61, 0x39, 0x66, 0x37, 0x30]}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1bc4451e1f202122232425262728292a2b32333435363723c8081953e7c5383b3a3b3c3d3e3f40000000000000"], 0x48, r1) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000640)="12a74672c47b29be9362e100f85a5e91", 0x10, r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:09:43 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:43 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) [ 1177.824603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1177.826043] Call Trace: [ 1177.826509] dump_stack+0x107/0x167 [ 1177.827154] should_fail.cold+0x5/0xa [ 1177.827802] ? find_held_lock+0x2c/0x110 [ 1177.828488] __alloc_pages_nodemask+0x182/0x600 [ 1177.829280] ? __kmalloc+0x16e/0x390 [ 1177.829928] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1177.830975] ? trace_hardirqs_on+0x5b/0x180 [ 1177.831722] alloc_pages_current+0x187/0x280 [ 1177.832495] sg_build_indirect.isra.0+0x2f5/0x710 [ 1177.833346] sg_common_write.constprop.0+0x992/0x1a30 [ 1177.834248] ? sg_build_indirect.isra.0+0x710/0x710 [ 1177.835147] ? __might_fault+0xd3/0x180 [ 1177.835836] ? lock_downgrade+0x6d0/0x6d0 [ 1177.836592] sg_write.part.0+0x69e/0xaa0 [ 1177.837291] ? sg_new_write.isra.0+0x770/0x770 [ 1177.838093] ? find_held_lock+0x2c/0x110 [ 1177.838807] ? __might_fault+0xd3/0x180 [ 1177.839530] ? lock_downgrade+0x6d0/0x6d0 [ 1177.840268] ? _cond_resched+0x12/0x80 [ 1177.840954] ? inode_security+0x107/0x140 [ 1177.841676] ? avc_policy_seqno+0x9/0x70 [ 1177.842380] ? selinux_file_permission+0x92/0x520 [ 1177.843245] ? security_file_permission+0x24e/0x570 01:09:43 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) [ 1177.844121] sg_write+0x87/0x120 [ 1177.844808] do_iter_write+0x482/0x670 [ 1177.845501] ? import_iovec+0x83/0xb0 [ 1177.846169] vfs_writev+0x1ae/0x620 [ 1177.846815] ? vfs_iter_write+0xa0/0xa0 [ 1177.847530] ? __fget_files+0x26d/0x4c0 [ 1177.848234] ? lock_downgrade+0x6d0/0x6d0 [ 1177.848974] ? find_held_lock+0x2c/0x110 [ 1177.849670] ? __fget_files+0x296/0x4c0 [ 1177.850377] ? __fget_light+0xea/0x290 [ 1177.851041] do_writev+0x139/0x300 [ 1177.851685] ? vfs_writev+0x620/0x620 [ 1177.852331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1177.853233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1177.854154] do_syscall_64+0x33/0x40 [ 1177.854797] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1177.855716] RIP: 0033:0x7fdf6458fb19 [ 1177.856355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1177.859610] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1177.860954] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1177.862218] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1177.863501] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1177.864752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.866005] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1177.892425] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1177.892425] program syz-executor.0 not setting count and/or reply_len properly 01:09:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x263d, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x2) r1 = fsmount(0xffffffffffffffff, 0x0, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) stat(0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x5a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0xba28560024061693) sendfile(r0, r4, 0x0, 0x100000001) [ 1177.964614] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1177.964614] program syz-executor.4 not setting count and/or reply_len properly 01:09:43 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x227a, &(0x7f0000000140)) 01:09:43 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:43 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:09:43 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x4e22, 0x3ff, 0x4e21, 0x1, 0x2, 0x80, 0x0, 0x3a, 0x0, 0xee00}, {0x2160e862, 0x5, 0xfffffffffffffff9, 0xeff, 0xffff, 0x8, 0x5, 0x2}, {0xfffffffffffff1f4, 0x7, 0x8001, 0x6}, 0x6, 0x6e6bb8, 0x2, 0x0, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x0, 0x0, 0xdb, 0x80, 0x6, 0x9}}, 0xe8) time(&(0x7f0000000000)) [ 1177.994363] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:09:43 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1178.008251] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:09:43 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:57 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:57 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:09:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, r0, 0x0) 01:09:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xfffffffa, 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000100)="ed35ef0dd61b0fd0ab0ea40240d8e432aa2d7ddde7f1d9668c44d04010e67b8ba7d1eace8c143ae0b9fbe30aabe9165488370e7895d212699275c380a4d39d95c5bda999aa2614d42e5d3b4a95508bb12d7d9e1e7fb416fe6841af1d3df243be6cc6955dd55827fb31f31e85f2b35eb5d774783fb178566764ba3abd466feafc1c9d6601febd60c1e1f474c103fd2a19d472a3fe891890af6e46c17d53a427a8737bd70fc0f6dc5d45012911d9b94a237d767d6accc0bdd6e669c66105dbd848f194f69ee13741a5dbc141888f97a3b8b5ce024bb43545d6bd12e93da57a49c564c3a213a5b55a217021351ee8e65e96f84a", 0xf2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0x401, 0x4) 01:09:57 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:09:57 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 7) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:57 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:57 executing program 6: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x1, 0x2, 0x101, 0x8, r2}) ptrace$getsig(0x4202, r2, 0x6, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) r3 = dup2(r0, r1) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000003c0)={{r3}, 0x0, 0xa, @unused=[0x398, 0x6, 0x400, 0x2], @subvolid=0x1}) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)=@md5={0x1, "6d6edc9db981cf5732af13cdee47fc76"}, 0x11, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4007, @fd=r3, 0x1ff, 0x0, 0x0, 0x13, 0x1, {0x1}}, 0x3) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) [ 1191.973127] FAULT_INJECTION: forcing a failure. [ 1191.973127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1191.975878] CPU: 1 PID: 11801 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1191.977292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1191.978956] Call Trace: [ 1191.979512] dump_stack+0x107/0x167 [ 1191.980255] should_fail.cold+0x5/0xa [ 1191.981031] __alloc_pages_nodemask+0x182/0x600 [ 1191.981977] ? __kmalloc+0x16e/0x390 [ 1191.982723] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1191.983958] ? trace_hardirqs_on+0x5b/0x180 [ 1191.984836] alloc_pages_current+0x187/0x280 [ 1191.985741] sg_build_indirect.isra.0+0x2f5/0x710 [ 1191.986749] sg_common_write.constprop.0+0x992/0x1a30 [ 1191.987834] ? sg_build_indirect.isra.0+0x710/0x710 [ 1191.988868] ? __might_fault+0xd3/0x180 [ 1191.989692] ? lock_downgrade+0x6d0/0x6d0 [ 1191.990588] sg_write.part.0+0x69e/0xaa0 [ 1191.991468] ? sg_new_write.isra.0+0x770/0x770 [ 1191.992416] ? find_held_lock+0x2c/0x110 [ 1191.993255] ? __might_fault+0xd3/0x180 [ 1191.994076] ? lock_downgrade+0x6d0/0x6d0 [ 1191.994947] ? _cond_resched+0x12/0x80 [ 1191.995756] ? inode_security+0x107/0x140 [ 1191.996604] ? avc_policy_seqno+0x9/0x70 [ 1191.997431] ? selinux_file_permission+0x92/0x520 [ 1191.998431] ? security_file_permission+0x24e/0x570 [ 1191.999466] sg_write+0x87/0x120 [ 1192.000169] do_iter_write+0x482/0x670 [ 1192.000975] ? import_iovec+0x83/0xb0 [ 1192.001768] vfs_writev+0x1ae/0x620 [ 1192.002519] ? vfs_iter_write+0xa0/0xa0 [ 1192.003367] ? __fget_files+0x26d/0x4c0 [ 1192.004204] ? lock_downgrade+0x6d0/0x6d0 [ 1192.005055] ? find_held_lock+0x2c/0x110 [ 1192.005905] ? __fget_files+0x296/0x4c0 [ 1192.006734] ? __fget_light+0xea/0x290 [ 1192.007550] do_writev+0x139/0x300 [ 1192.008281] ? vfs_writev+0x620/0x620 [ 1192.009089] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1192.010153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1192.011235] do_syscall_64+0x33/0x40 [ 1192.012004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1192.013043] RIP: 0033:0x7fdf6458fb19 [ 1192.013802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1192.017534] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1192.019060] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1192.020502] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1192.021929] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.023378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.024809] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:09:57 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:09:57 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000, 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='hugetlbfs\x00', 0x0, 0x0) 01:09:57 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:09:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0xf3, 0x4, 0xed, 0x0, 0xff, 0x942, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040)}, 0x2, 0x4, 0x5, 0x4, 0x39c3, 0x352df68d, 0x2, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x5, r0, 0xb) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x801, 0x9) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) getdents64(r1, &(0x7f0000000200)=""/82, 0x52) [ 1192.181807] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1192.181807] program syz-executor.4 not setting count and/or reply_len properly 01:09:57 executing program 6: r0 = syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f00000000c0)='./file0\x00', 0x41, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r1, 0x10, 0x101, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x101) chroot(&(0x7f0000000280)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r2, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x202700, 0x0) statx(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x20, &(0x7f0000001400)) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000003c0)={0x0, "a91f51fa5d7fcca1d4fb574218c55843"}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002e00)={r4, "d7885b01064cde863ef84a335a261f1b"}) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendfile(r2, r3, 0x0, 0x100000001) 01:09:57 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:09:57 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r2, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:09:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:11 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3f, 0x2, 0xff, 0x81, 0x0, 0x0, 0x1100, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080)}, 0x800, 0x7ff, 0x2, 0x0, 0x1f, 0x2ae, 0x4, 0x0, 0x1, 0x0, 0xb5}, 0x0, 0xc, r0, 0xe) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 01:10:11 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5f91f488cc52753b4dd2386c2388bd99b5cc00d13e616a9b6ba1d5e6db8948b8aab0ecea40ca2353f396d6f00e9b0ab527606c1a5bc7f34a614ea39517b2a891dd"], 0x28}}, 0x0) 01:10:11 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:10:11 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 8) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:11 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:11 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:10:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7, 0xf3, 0x4, 0xed, 0x0, 0xff, 0x942, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040)}, 0x2, 0x4, 0x5, 0x4, 0x39c3, 0x352df68d, 0x2, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x5, r0, 0xb) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x801, 0x9) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) getdents64(r1, &(0x7f0000000200)=""/82, 0x52) [ 1205.938822] FAULT_INJECTION: forcing a failure. [ 1205.938822] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1205.940910] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 1205.942198] CPU: 1 PID: 12055 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1205.945574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1205.947603] Call Trace: [ 1205.948264] dump_stack+0x107/0x167 [ 1205.949039] should_fail.cold+0x5/0xa [ 1205.949821] __alloc_pages_nodemask+0x182/0x600 [ 1205.950763] ? __kmalloc+0x16e/0x390 [ 1205.951530] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1205.952743] ? trace_hardirqs_on+0x5b/0x180 [ 1205.953617] alloc_pages_current+0x187/0x280 [ 1205.954506] sg_build_indirect.isra.0+0x2f5/0x710 [ 1205.955655] sg_common_write.constprop.0+0x992/0x1a30 [ 1205.956712] ? sg_build_indirect.isra.0+0x710/0x710 [ 1205.957719] ? __might_fault+0xd3/0x180 [ 1205.958518] ? lock_downgrade+0x6d0/0x6d0 [ 1205.959377] sg_write.part.0+0x69e/0xaa0 [ 1205.960218] ? sg_new_write.isra.0+0x770/0x770 [ 1205.961136] ? find_held_lock+0x2c/0x110 [ 1205.961952] ? __might_fault+0xd3/0x180 [ 1205.962747] ? lock_downgrade+0x6d0/0x6d0 [ 1205.963598] ? _cond_resched+0x12/0x80 [ 1205.964380] ? inode_security+0x107/0x140 [ 1205.965209] ? avc_policy_seqno+0x9/0x70 [ 1205.966020] ? selinux_file_permission+0x92/0x520 [ 1205.966994] ? security_file_permission+0x24e/0x570 [ 1205.968006] sg_write+0x87/0x120 [ 1205.968692] do_iter_write+0x482/0x670 [ 1205.969480] ? import_iovec+0x83/0xb0 [ 1205.970248] vfs_writev+0x1ae/0x620 [ 1205.970981] ? vfs_iter_write+0xa0/0xa0 [ 1205.971795] ? __fget_files+0x26d/0x4c0 [ 1205.972605] ? lock_downgrade+0x6d0/0x6d0 [ 1205.973432] ? find_held_lock+0x2c/0x110 [ 1205.974263] ? __fget_files+0x296/0x4c0 [ 1205.975067] ? __fget_light+0xea/0x290 [ 1205.975871] do_writev+0x139/0x300 [ 1205.976580] ? vfs_writev+0x620/0x620 [ 1205.977355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1205.978401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1205.979459] do_syscall_64+0x33/0x40 [ 1205.980211] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1205.981238] RIP: 0033:0x7fdf6458fb19 [ 1205.981981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1205.985661] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1205.987180] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1205.988611] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1205.990041] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1205.991485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.992909] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:10:11 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:10:11 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0x3, 0x3) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1206.118873] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1206.120664] CPU: 1 PID: 12077 Comm: syz-executor.6 Not tainted 5.10.198 #1 [ 1206.122069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.123749] Call Trace: [ 1206.124291] dump_stack+0x107/0x167 [ 1206.125037] sysfs_warn_dup.cold+0x1c/0x29 [ 1206.125891] sysfs_do_create_link_sd+0x122/0x140 [ 1206.126844] sysfs_create_link+0x5f/0xc0 [ 1206.127676] device_add+0x703/0x1bc0 [ 1206.128431] ? devlink_add_symlinks+0x970/0x970 [ 1206.129370] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1206.130427] wiphy_register+0x1da6/0x2850 [ 1206.131279] ? wiphy_unregister+0xb90/0xb90 [ 1206.132186] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1206.133260] ieee80211_register_hw+0x23c5/0x38b0 [ 1206.134236] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1206.135199] ? net_generic+0xdb/0x2b0 [ 1206.135985] ? lockdep_init_map_type+0x2c7/0x780 [ 1206.136961] ? memset+0x20/0x50 [ 1206.137640] ? __hrtimer_init+0x12c/0x270 [ 1206.138474] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 1206.139553] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1206.140479] ? hwsim_new_radio_nl+0x967/0x1080 [ 1206.141393] ? memcpy+0x39/0x60 [ 1206.142061] hwsim_new_radio_nl+0x991/0x1080 [ 1206.142946] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1206.144005] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1206.145321] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1206.146631] genl_family_rcv_msg_doit+0x22d/0x330 [ 1206.147602] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1206.148914] ? cap_capable+0x1d6/0x240 [ 1206.149706] ? ns_capable+0xe2/0x110 [ 1206.150458] genl_rcv_msg+0x33c/0x5a0 [ 1206.151230] ? genl_get_cmd+0x480/0x480 [ 1206.152051] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1206.153097] ? lock_release+0x680/0x680 [ 1206.153903] ? netlink_deliver_tap+0xf4/0xcd0 [ 1206.154807] netlink_rcv_skb+0x14b/0x430 [ 1206.155622] ? genl_get_cmd+0x480/0x480 [ 1206.156414] ? netlink_ack+0xab0/0xab0 [ 1206.157205] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1206.158117] ? is_vmalloc_addr+0x7b/0xb0 [ 1206.158929] genl_rcv+0x24/0x40 [ 1206.159599] netlink_unicast+0x549/0x7f0 [ 1206.160425] ? netlink_attachskb+0x870/0x870 [ 1206.161310] ? __virt_addr_valid+0x128/0x350 [ 1206.162208] netlink_sendmsg+0x90f/0xdf0 [ 1206.163029] ? netlink_unicast+0x7f0/0x7f0 [ 1206.163903] ? netlink_unicast+0x7f0/0x7f0 [ 1206.164744] __sock_sendmsg+0x154/0x190 [ 1206.165533] ____sys_sendmsg+0x70d/0x870 [ 1206.166350] ? sock_write_iter+0x3d0/0x3d0 [ 1206.167192] ? do_recvmmsg+0x6d0/0x6d0 [ 1206.167977] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1206.169026] ? lock_chain_count+0x20/0x20 [ 1206.169867] ___sys_sendmsg+0xf3/0x170 [ 1206.170645] ? sendmsg_copy_msghdr+0x160/0x160 [ 1206.171566] ? lock_downgrade+0x6d0/0x6d0 [ 1206.172398] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1206.173442] ? SOFTIRQ_verbose+0x10/0x10 [ 1206.174261] ? __fget_files+0x296/0x4c0 [ 1206.175057] ? __fget_light+0xea/0x290 [ 1206.175852] __sys_sendmsg+0xe5/0x1b0 [ 1206.176615] ? __sys_sendmsg_sock+0x40/0x40 [ 1206.177474] ? __traceiter_irq_enable+0xc0/0xc0 [ 1206.178427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.179498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.180536] ? trace_hardirqs_on+0x5b/0x180 [ 1206.181405] do_syscall_64+0x33/0x40 [ 1206.182314] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1206.183348] RIP: 0033:0x7f1478b1cb19 [ 1206.184123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.187816] RSP: 002b:00007f1476071188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.189335] RAX: ffffffffffffffda RBX: 00007f1478c30020 RCX: 00007f1478b1cb19 [ 1206.190761] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 1206.192192] RBP: 00007f1478b76f6d R08: 0000000000000000 R09: 0000000000000000 [ 1206.193617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.195036] R13: 00007ffef666579f R14: 00007f1476071300 R15: 0000000000022000 01:10:11 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1206.217767] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1206.217767] program syz-executor.4 not setting count and/or reply_len properly 01:10:11 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:10:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffffd}, 0x600, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000ba8c0a16da84bf04341f3f0d49e648bbc0ee236dd503b1ddc977e0eccca40fb427ccf6a904b500000000000000000000000000c8520e662393140ce39e2d294a6dc19695c6f224b2a4dfcec50435ba56be5f224079485faeb22974a90f2d68524c2a610bd9f7784d8f1d66306a0baee7ac6ec5ab5eb3413071000ec24b0727ad1ca6b2078cd3709181c9fd6e34", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x800021, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000002a40)) keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000400), 0x6) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='encrypted\x00', 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x0) request_key(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='id_resolver\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000080)) ioctl$VT_DISALLOCATE(r1, 0x5608) 01:10:12 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 9) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:12 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:12 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup2(r0, r2) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$vcs(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) sendfile(r3, r6, &(0x7f0000000000)=0x3, 0x67) ioctl$sock_netdev_private(r6, 0x89fe, &(0x7f0000000040)="2f23618b90e01a83d785f7d4ae85cd966e4c8bb9f3febd4dc971047707995dfb8741cc945b") setresuid(0xffffffffffffffff, 0x0, 0x0) 01:10:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) [ 1206.417839] FAULT_INJECTION: forcing a failure. [ 1206.417839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1206.420494] CPU: 0 PID: 12181 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1206.421896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.423594] Call Trace: [ 1206.424132] dump_stack+0x107/0x167 [ 1206.424869] should_fail.cold+0x5/0xa [ 1206.425638] __alloc_pages_nodemask+0x182/0x600 [ 1206.426569] ? __kmalloc+0x16e/0x390 [ 1206.427316] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1206.428539] ? trace_hardirqs_on+0x5b/0x180 [ 1206.429412] alloc_pages_current+0x187/0x280 [ 1206.430301] sg_build_indirect.isra.0+0x2f5/0x710 [ 1206.431284] sg_common_write.constprop.0+0x992/0x1a30 [ 1206.432362] ? sg_build_indirect.isra.0+0x710/0x710 [ 1206.433372] ? __might_fault+0xd3/0x180 [ 1206.434178] ? lock_downgrade+0x6d0/0x6d0 [ 1206.435046] sg_write.part.0+0x69e/0xaa0 [ 1206.435885] ? sg_new_write.isra.0+0x770/0x770 [ 1206.436823] ? find_held_lock+0x2c/0x110 [ 1206.437656] ? __might_fault+0xd3/0x180 [ 1206.438457] ? lock_downgrade+0x6d0/0x6d0 [ 1206.439307] ? _cond_resched+0x12/0x80 [ 1206.440100] ? inode_security+0x107/0x140 [ 1206.440935] ? avc_policy_seqno+0x9/0x70 [ 1206.441753] ? selinux_file_permission+0x92/0x520 [ 1206.442733] ? security_file_permission+0x24e/0x570 [ 1206.443768] sg_write+0x87/0x120 [ 1206.444460] do_iter_write+0x482/0x670 [ 1206.445251] ? import_iovec+0x83/0xb0 [ 1206.446029] vfs_writev+0x1ae/0x620 [ 1206.446767] ? vfs_iter_write+0xa0/0xa0 [ 1206.447581] ? __fget_files+0x26d/0x4c0 [ 1206.448389] ? lock_downgrade+0x6d0/0x6d0 [ 1206.449227] ? find_held_lock+0x2c/0x110 [ 1206.450066] ? __fget_files+0x296/0x4c0 [ 1206.450881] ? __fget_light+0xea/0x290 [ 1206.451676] do_writev+0x139/0x300 [ 1206.452393] ? vfs_writev+0x620/0x620 [ 1206.453174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1206.454233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1206.455289] do_syscall_64+0x33/0x40 [ 1206.456064] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1206.457106] RIP: 0033:0x7fdf6458fb19 [ 1206.457857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.461576] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1206.463116] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1206.464574] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1206.466021] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1206.467484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.468921] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:10:12 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1206.497230] netlink: 'syz-executor.6': attribute type 2 has an invalid length. 01:10:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:10:12 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r3, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:12 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1206.642302] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1206.642302] program syz-executor.4 not setting count and/or reply_len properly 01:10:25 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:10:25 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x1d3040, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0x3, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r7 = dup2(r1, r1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000000040)=0x3, 0x3) io_submit(0x0, 0x6, &(0x7f0000000640)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xebd3, 0xffffffffffffffff, &(0x7f0000000140)="d5ad3376646987238a975fc64a804dd852deddc85f140c57f5bd9cfcb4d6da78323a5c2c22e3e58547cfa2eaebe86211ae341fb2e60818d28e55157dab6c8255c2fede48e9a91b828c4c8c7c2236d8ccee330f68f9e6b06d49331891a2323c008ad487b91a3bb6d33f8c380dafcd2c9db211dd11663dedce1bd39fe1ff362e23a178f4cdcc88d5", 0x87, 0x100000000, 0x0, 0x3, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x6, r5, &(0x7f0000000240)="8f5bb7b6e074595d", 0x8, 0x40, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f00000002c0)="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", 0xfc, 0xac, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x1ff, r1, &(0x7f0000000400)="41e3bbeeffd388c0e245d8d4a8f6d62b37e4ada275db8a3cb843ff0052275b073d1f0fe373a93643a4f112c5ef25262002cbee4a4deff1381c98bb715fe4492a38dfd900a2c35342062bc8e84f33fba4aee9dfd73c69095cb4090f2e7ac26a6465f1fd7bb8afb97aa1acca9f866b380f6ddf17dc63ee928c7ee57f633c97b736734b001ff07153a54e1ed06db5f9d1225eb42a4c7ae92ec5cae117461cacad5a814dc7a9c66e64772cb874f95365781a83693758ac5218af4eb4d606b568215e51bda053d91ad6f0d8da685f2e467106ad548fbd7ab9c497f4abc65c496f8124", 0xe0, 0x1ff, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f0000000540)="89b057954d434062c431", 0xa, 0x7ff, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x97a, r0, &(0x7f00000005c0), 0x0, 0x8, 0x0, 0x1, r8}]) setpgid(r2, r2) ptrace(0x420e, r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x17}, r2, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a000101000000040000fee16df95ecc0000000000000000"], 0x1c}}, 0x0) 01:10:25 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:25 executing program 7: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x80000000, 0x4) r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x368, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "261f3d5eae7fefc0aa362cc5e3dcf735c28da3a0d233eb55e1d7343c4eb83e751f06ee69320d15837489f65b720b2681f8d1c1f4461e057353749c7fecef7494e9c6f7e3f967b2c3bab02a9eee7ebd7ccb59ae8f9f9c0db799bf82427dd5893cc7462985b5fa3ef1cc0eb61528e9be4b06358e49c72e55b407bf540322e97c3cc1b8d0bff9885ed24f9fdaa86d39627875ffb6f27cf97a914c"}, @ETHTOOL_A_BITSET_MASK={0x66, 0x5, "5624a8040317ca817934221850c6f4dd686021feeb8ec9b081252e4f8b9c5a286fd1596bd830dc1d2f1987d298ba1167732742b8222f91bf0e380096e038de3a6016a8bca702de99921011a3c92bcc280c50e587dffb0afc3aff0356b4f0cd5e5a36"}, @ETHTOOL_A_BITSET_VALUE={0x3b, 0x4, "83de4017f72ff2314dc7f144d1c85927ee30b2811bb1fb9134f35d0e10b3ee80a339efaa075b3089df19a148b27d68d9382d279f8e98d8"}, @ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "dc792349040235c41d1148d51cc5588b804e79b643813a362bb10b582f8b3b6124b6765abaffef0b"}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@)-%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/zero\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x80, 0x4, "b56b629a2d2720bfaa6ff55923060b700e23ed6f461e1223e7cee5d22c0e940f0c5832ef3c3dc33d45d70e1312040ef0a999a966c85a3e66628c7436e68fb31b69287fe18f93a2f8cafde0d054afccb34e0d621d8ac30f235281a7720dd199ab8a1d6458439f25454fb595d7fb6c1a3d470b08a8f2c2e7c994d4ce1a"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1e, 0x4, "f2346a56055e87b8e4ed5b5731272c7935cf31ae1e202715cc72"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x368}, 0x1, 0x0, 0x0, 0x4004}, 0x10008010) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x525000, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000002c0)=')\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='net/raw\x00') pread64(r7, &(0x7f0000000300)=""/166, 0xa6, 0x0) preadv(r7, &(0x7f0000000600)=[{&(0x7f0000000240)=""/82, 0x52}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000400)=""/214, 0xd6}, {&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/6, 0x6}], 0x8, 0x9, 0xde) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x40010, r0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x32900, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000006c0)={'wlan1\x00'}) 01:10:25 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:10:25 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535f", 0x17}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:25 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:25 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500003c0000000000069078ac1e0001ac1414bb00deff00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800000107c0eac664a3080a00"/28], 0x0) [ 1219.499992] FAULT_INJECTION: forcing a failure. [ 1219.499992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1219.502780] CPU: 1 PID: 12319 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1219.504262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.506026] Call Trace: [ 1219.506591] dump_stack+0x107/0x167 [ 1219.507365] should_fail.cold+0x5/0xa [ 1219.508202] __alloc_pages_nodemask+0x182/0x600 [ 1219.509189] ? __kmalloc+0x16e/0x390 [ 1219.509979] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1219.511272] ? trace_hardirqs_on+0x5b/0x180 [ 1219.512204] alloc_pages_current+0x187/0x280 [ 1219.513146] sg_build_indirect.isra.0+0x2f5/0x710 [ 1219.514188] sg_common_write.constprop.0+0x992/0x1a30 [ 1219.515312] ? sg_build_indirect.isra.0+0x710/0x710 [ 1219.516293] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 1219.516390] ? __might_fault+0xd3/0x180 [ 1219.518714] ? lock_downgrade+0x6d0/0x6d0 [ 1219.519653] sg_write.part.0+0x69e/0xaa0 [ 1219.520524] ? sg_new_write.isra.0+0x770/0x770 [ 1219.521522] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1219.522665] ? trace_hardirqs_on+0x5b/0x180 [ 1219.523624] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1219.524836] ? _cond_resched+0x12/0x80 [ 1219.525673] ? inode_security+0x107/0x140 [ 1219.526585] ? avc_policy_seqno+0x9/0x70 [ 1219.527455] ? selinux_file_permission+0x92/0x520 [ 1219.528522] ? security_file_permission+0x24e/0x570 [ 1219.529614] sg_write+0x87/0x120 [ 1219.530364] do_iter_write+0x482/0x670 [ 1219.531217] ? import_iovec+0x83/0xb0 [ 1219.532088] vfs_writev+0x1ae/0x620 [ 1219.532888] ? vfs_iter_write+0xa0/0xa0 [ 1219.533762] ? __fget_files+0x26d/0x4c0 [ 1219.534628] ? lock_downgrade+0x6d0/0x6d0 [ 1219.535349] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 1219.535543] ? find_held_lock+0x2c/0x110 [ 1219.535587] ? __fget_files+0x296/0x4c0 [ 1219.535621] ? __fget_light+0xea/0x290 [ 1219.535650] do_writev+0x139/0x300 [ 1219.540494] ? vfs_writev+0x620/0x620 [ 1219.541350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1219.542520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1219.543696] do_syscall_64+0x33/0x40 [ 1219.544536] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1219.545686] RIP: 0033:0x7fdf6458fb19 [ 1219.546526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.550693] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1219.552446] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1219.554031] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1219.555596] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.557139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1219.558685] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:10:25 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:25 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0xf9, 0x4, 0x9, 0x1, 0x2, 0x2, 0x6, 0x1, 0xc7, 0x40, 0x31a, 0xfffffe19, 0x7, 0x38, 0x1, 0x3, 0x0, 0x2}, [{0x4, 0x5, 0x0, 0x100000000, 0x9, 0xe2, 0x6, 0x2}], "f242a721adcc1fd269f2388b26c6abb62f56c5977ee521978a1f8d83529523f4370d3c88ef74bb45b86774f56baad90dced1d5a495dc41f4f82dbb50f85a0245b8a01721e223f7660ceb87c840c3b45f036161347719c289bf98506a4e609a19a98d04b398287aaa9c189883377bb742675ec893bb72793ec4b2223768c4e2118d417af8afd5478839b86ac1fe57f7ab9215ec1133ecf9e0daa713a072e09e50a9d7e59ad5c0ba0ac17afdbc1b360dc68190c5d659785c", ['\x00', '\x00', '\x00']}, 0x42f) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000000040)=0x3, 0x3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 1219.648977] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 1219.650956] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1219.650956] program syz-executor.4 not setting count and/or reply_len properly [ 1219.664213] netlink: 'syz-executor.6': attribute type 2 has an invalid length. 01:10:41 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) 01:10:41 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 11) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:41 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:41 executing program 7: syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa000000000690780a010102ac0914bb020000000020907802000000800000008a5c5cbc11424b18bf349b206023226f2d3ca81953860b2d23637206f0f9b65a2e14a6a32d132b994ee182ff93"], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000780)=[{&(0x7f0000000200)="9b", 0x1}], 0x1, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x8847}, @void, @ipv4=@dccp={{0x7, 0x4, 0x3, 0x2, 0x55, 0x64, 0x0, 0x81, 0x21, 0x0, @private=0xa010102, @multicast2, {[@noop, @noop, @ra={0x94, 0x4}]}}, {{0x4e21, 0x4e20, 0x4, 0x1, 0xf, 0x0, 0x0, 0x6, 0x1, "33a37b", 0xa9, "77aefd"}, "c98803415dc1d2ff6752ca06c7c5d02bbbad4b3616ebf92ab5cc0279571fedc10c6ed68b8391e6fb04"}}}, 0x59) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpgid(r2, r2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x3) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x88a8}, @val={0x3, 0x7, 0x1, 0x5, 0x1ff, 0xe9e5}, @mpls={[{0x3, 0x0, 0x1}, {0x6e, 0x0, 0x1}], @ipv4=@dccp={{0x11, 0x4, 0x3, 0x3a, 0xd0, 0x66, 0x0, 0x81, 0x21, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x1c, 0x71, 0x0, 0x0, [0x0, 0x7fff, 0x101, 0x9, 0x800, 0x9]}, @noop, @timestamp={0x44, 0x10, 0x26, 0x0, 0x2, [0x7, 0x8, 0x0]}]}}, {{0x4e24, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x9, 0x3, "95c444", 0xf8, "10485f"}, "71a934dd65bcea89720c1822c27f4d12ae17e4520cf2d903a2fbd5e5e5e48a139e0e705b9d93b81b8233d949a27e7efd15356d17047d50cfea43e5991cbeccd07c304a29935134e75ba2b39b6d5de88edc9fae9a0288486c1b2db6af2e9ae428b2e55cedb54eca9b7b3b213b670c61f71a3342c7eeee676c99c16ee4"}}}}, 0xe6) ptrace(0x420e, r2) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xbc, 0x40, 0x0, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic="13dec0d07b11a2306bd0c4f094ef589d2413677c854007d51217e74ba8a6dc46e2195d10bcb05507625fb5e04696b5bde4c4e93dea354a9860b4a5ac77be6a68992e0d384a4d76a370eda0aca0b03c5c5ddd897eea903ca92920a19bb4f4aa3fbe41c60858dcc66c505ac341e73f67460c695801d5bc66da5be9615339f16840936837355890277fb5b45b876f6ce7c63bd7061d414b1b990508e140ada6", @typed={0x8, 0x27, 0x0, 0x0, @pid=r2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4008001) 01:10:41 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:10:41 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x1d3040, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000000040)=0x3, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r7 = dup2(r1, r1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f0000000040)=0x3, 0x3) io_submit(0x0, 0x6, &(0x7f0000000640)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xebd3, 0xffffffffffffffff, &(0x7f0000000140)="d5ad3376646987238a975fc64a804dd852deddc85f140c57f5bd9cfcb4d6da78323a5c2c22e3e58547cfa2eaebe86211ae341fb2e60818d28e55157dab6c8255c2fede48e9a91b828c4c8c7c2236d8ccee330f68f9e6b06d49331891a2323c008ad487b91a3bb6d33f8c380dafcd2c9db211dd11663dedce1bd39fe1ff362e23a178f4cdcc88d5", 0x87, 0x100000000, 0x0, 0x3, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x6, r5, &(0x7f0000000240)="8f5bb7b6e074595d", 0x8, 0x40, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f00000002c0)="8aec482847a8b248083a03733f1449464bc5d959575d34604c7fae16fbf561911e17614f1124583b63288df81385421db98ad9469e465887d0a184d2a4be3280fc5d66e52b83965eff1d148a448ee043159191507fded41238a66e08e49b8edf0e085b7f23cd5bf1090285d44b45fd60d474e0290ec05b48bc14cd52b19929056852b0a789b2ac8e49dfc5431ad0f23e580b82c2601a1d5d43fbf255742368899e6d7d7ab238869a42d1216d8faf6b7cbba1ca29db5bba5419aa139146556eed9860912a55cd0ebde721a495f760722df8fd851b2fab26a5eaeee5fd425b9cb868c17570c3ab74ad2409131a233239db902c504e1508476a873fdb6f", 0xfc, 0xac, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x1ff, r1, &(0x7f0000000400)="41e3bbeeffd388c0e245d8d4a8f6d62b37e4ada275db8a3cb843ff0052275b073d1f0fe373a93643a4f112c5ef25262002cbee4a4deff1381c98bb715fe4492a38dfd900a2c35342062bc8e84f33fba4aee9dfd73c69095cb4090f2e7ac26a6465f1fd7bb8afb97aa1acca9f866b380f6ddf17dc63ee928c7ee57f633c97b736734b001ff07153a54e1ed06db5f9d1225eb42a4c7ae92ec5cae117461cacad5a814dc7a9c66e64772cb874f95365781a83693758ac5218af4eb4d606b568215e51bda053d91ad6f0d8da685f2e467106ad548fbd7ab9c497f4abc65c496f8124", 0xe0, 0x1ff, 0x0, 0x2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f0000000540)="89b057954d434062c431", 0xa, 0x7ff, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x97a, r0, &(0x7f00000005c0), 0x0, 0x8, 0x0, 0x1, r8}]) setpgid(r2, r2) ptrace(0x420e, r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x17}, r2, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a000101000000040000fee16df95ecc0000000000000000"], 0x1c}}, 0x0) 01:10:41 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:41 executing program 3: fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000140)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23, 0x0) gettid() fstatfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) close(r0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) setpriority(0x2, r2, 0x400) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) get_robust_list(0x0, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000180)=0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001d00210ccde40000000000000400020014001180c09801a7b0c7dba09475f251c743092f0800310043e6cf345f13be", @ANYRES32, @ANYBLOB="92001a800400060011fd4b89fa85a9"], 0xc4}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) [ 1235.524024] FAULT_INJECTION: forcing a failure. [ 1235.524024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1235.526752] CPU: 1 PID: 12458 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1235.528267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1235.530174] Call Trace: [ 1235.530789] dump_stack+0x107/0x167 [ 1235.531627] should_fail.cold+0x5/0xa [ 1235.532528] __alloc_pages_nodemask+0x182/0x600 [ 1235.533587] ? __kmalloc+0x16e/0x390 [ 1235.534438] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1235.535817] ? trace_hardirqs_on+0x5b/0x180 [ 1235.536807] alloc_pages_current+0x187/0x280 [ 1235.537824] sg_build_indirect.isra.0+0x2f5/0x710 [ 1235.538935] sg_common_write.constprop.0+0x992/0x1a30 [ 1235.540142] ? sg_build_indirect.isra.0+0x710/0x710 [ 1235.541286] ? __might_fault+0xd3/0x180 [ 1235.542196] ? lock_downgrade+0x6d0/0x6d0 [ 1235.543183] sg_write.part.0+0x69e/0xaa0 [ 1235.544139] ? sg_new_write.isra.0+0x770/0x770 [ 1235.545189] ? find_held_lock+0x2c/0x110 [ 1235.546122] ? __might_fault+0xd3/0x180 [ 1235.547026] ? lock_downgrade+0x6d0/0x6d0 [ 1235.547989] ? _cond_resched+0x12/0x80 [ 1235.548869] ? inode_security+0x107/0x140 [ 1235.549807] ? avc_policy_seqno+0x9/0x70 [ 1235.550724] ? selinux_file_permission+0x92/0x520 [ 1235.551831] ? security_file_permission+0x24e/0x570 [ 1235.552959] sg_write+0x87/0x120 [ 1235.553730] do_iter_write+0x482/0x670 [ 1235.554615] ? import_iovec+0x83/0xb0 [ 1235.555482] vfs_writev+0x1ae/0x620 [ 1235.556324] ? vfs_iter_write+0xa0/0xa0 [ 1235.557221] ? __fget_files+0x26d/0x4c0 [ 1235.558120] ? lock_downgrade+0x6d0/0x6d0 [ 1235.559052] ? find_held_lock+0x2c/0x110 [ 1235.559994] ? __fget_files+0x296/0x4c0 [ 1235.560904] ? __fget_light+0xea/0x290 [ 1235.561789] do_writev+0x139/0x300 [ 1235.562592] ? vfs_writev+0x620/0x620 [ 1235.563458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1235.564657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1235.565821] do_syscall_64+0x33/0x40 [ 1235.566660] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1235.567860] RIP: 0033:0x7fdf6458fb19 [ 1235.568696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.572801] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1235.574504] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1235.576112] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1235.577702] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.579293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1235.580896] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:10:41 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) [ 1235.601733] netlink: 'syz-executor.6': attribute type 2 has an invalid length. 01:10:41 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:41 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1235.615120] netlink: 'syz-executor.6': attribute type 2 has an invalid length. [ 1235.618910] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. 01:10:41 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb", 0x23}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1235.656264] debugfs: Directory 'À˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 01:10:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x114}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x70, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x70}}, 0x4000) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="2a2009cf2c36dbaa1692ec5903e4a149e7073da9d4b9ebc6d20e801bb2cf944d9e70aee300c9bf0753c6511302a9ce06957c641616c72d890722f29725a84ed5c008c27bcd2f2e51c63bc40c7f97a542318026f268520b41e289e3591a3bde1544703ae7b6e5dafccad8a0d0a1b580f3bfb813b57792", @ANYRES16, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="140004006772657461703000000000000000000008000500040000000500530001000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008015}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:10:41 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) [ 1235.723978] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1235.723978] program syz-executor.4 not setting count and/or reply_len properly 01:10:41 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1235.855375] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1235.875971] sysfs: cannot create duplicate filename '/class/ieee80211/À˜§°ÇÛ ”uòQÇC !' [ 1235.877973] CPU: 1 PID: 12467 Comm: syz-executor.3 Not tainted 5.10.198 #1 [ 1235.879435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1235.881349] Call Trace: [ 1235.881959] dump_stack+0x107/0x167 01:10:41 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) [ 1235.882800] sysfs_warn_dup.cold+0x1c/0x29 [ 1235.884027] sysfs_do_create_link_sd+0x122/0x140 [ 1235.885140] sysfs_create_link+0x5f/0xc0 [ 1235.886078] device_add+0x703/0x1bc0 [ 1235.886935] ? devlink_add_symlinks+0x970/0x970 [ 1235.888010] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1235.889112] wiphy_register+0x1da6/0x2850 [ 1235.890064] ? wiphy_unregister+0xb90/0xb90 [ 1235.891061] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1235.892289] ieee80211_register_hw+0x23c5/0x38b0 [ 1235.893383] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1235.894482] ? net_generic+0xdb/0x2b0 [ 1235.895361] ? lockdep_init_map_type+0x2c7/0x780 [ 1235.896455] ? memset+0x20/0x50 [ 1235.897217] ? __hrtimer_init+0x12c/0x270 [ 1235.898170] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 1235.899335] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1235.900407] ? hwsim_new_radio_nl+0x967/0x1080 [ 1235.901480] ? memcpy+0x39/0x60 [ 1235.902231] hwsim_new_radio_nl+0x991/0x1080 [ 1235.903225] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1235.904315] ? trace_hardirqs_on+0x5b/0x180 [ 1235.905309] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1235.906452] genl_family_rcv_msg_doit+0x22d/0x330 [ 1235.907471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1235.908980] ? cap_capable+0x1d6/0x240 [ 1235.909884] ? ns_capable+0xe2/0x110 [ 1235.910752] genl_rcv_msg+0x33c/0x5a0 [ 1235.911645] ? genl_get_cmd+0x480/0x480 [ 1235.912577] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1235.913790] ? lock_release+0x680/0x680 [ 1235.914707] ? __lockdep_reset_lock+0x180/0x180 [ 1235.915809] netlink_rcv_skb+0x14b/0x430 [ 1235.916736] ? genl_get_cmd+0x480/0x480 [ 1235.917675] ? netlink_ack+0xab0/0xab0 [ 1235.918540] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1235.919473] ? is_vmalloc_addr+0x7b/0xb0 [ 1235.920356] genl_rcv+0x24/0x40 [ 1235.921107] netlink_unicast+0x549/0x7f0 [ 1235.922035] ? netlink_attachskb+0x870/0x870 [ 1235.922940] ? __virt_addr_valid+0x128/0x350 [ 1235.923847] netlink_sendmsg+0x90f/0xdf0 [ 1235.924746] ? netlink_unicast+0x7f0/0x7f0 [ 1235.925714] ? netlink_unicast+0x7f0/0x7f0 [ 1235.926614] __sock_sendmsg+0x154/0x190 [ 1235.927455] ____sys_sendmsg+0x70d/0x870 [ 1235.928385] ? sock_write_iter+0x3d0/0x3d0 [ 1235.929337] ? do_recvmmsg+0x6d0/0x6d0 [ 1235.930211] ? perf_trace_lock+0xac/0x490 [ 1235.931063] ? __lockdep_reset_lock+0x180/0x180 [ 1235.932025] ___sys_sendmsg+0xf3/0x170 [ 1235.932894] ? sendmsg_copy_msghdr+0x160/0x160 [ 1235.933932] ? lock_downgrade+0x6d0/0x6d0 [ 1235.934802] ? futex_exit_release+0x220/0x220 [ 1235.935800] ? __fget_files+0x296/0x4c0 [ 1235.936714] ? __fget_light+0xea/0x290 [ 1235.937602] __sys_sendmsg+0xe5/0x1b0 [ 1235.938429] ? __sys_sendmsg_sock+0x40/0x40 [ 1235.939322] ? __do_sys_futex+0x2bb/0x480 [ 1235.940285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1235.941463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1235.942573] ? trace_hardirqs_on+0x5b/0x180 [ 1235.943488] do_syscall_64+0x33/0x40 [ 1235.944344] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1235.945493] RIP: 0033:0x7f5559bb8b19 [ 1235.946319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1235.950371] RSP: 002b:00007f555712e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.952092] RAX: ffffffffffffffda RBX: 00007f5559ccbf60 RCX: 00007f5559bb8b19 [ 1235.953690] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 1235.955291] RBP: 00007f5559c12f6d R08: 0000000000000000 R09: 0000000000000000 [ 1235.956905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.958506] R13: 00007ffddab44d9f R14: 00007f555712e300 R15: 0000000000022000 01:10:41 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:56 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x7c, 0x81, 0x20, 0x4, 0x0, 0x400, 0x4812, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x100, 0x1ff0, 0x5, 0x3, 0xfffffffffffff000, 0x9, 0x8, 0x0, 0xff, 0x0, 0x86}, r2, 0x100000c, r0, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"/456], 0x28}}, 0x0) 01:10:56 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:10:56 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 1) 01:10:56 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 12) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:56 executing program 3: fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000140)='system_u:object_r:chkpwd_exec_t:s0\x00', 0x23, 0x0) gettid() fstatfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002400)=[{0x0}, {0x0, 0x39}, {&(0x7f0000002080)="bc", 0x1}], 0x3}}], 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) close(r0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) setpriority(0x2, r2, 0x400) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) get_robust_list(0x0, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000180)=0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001d00210ccde40000000000000400020014001180c09801a7b0c7dba09475f251c743092f0800310043e6cf345f13be", @ANYRES32, @ANYBLOB="92001a800400060011fd4b89fa85a9"], 0xc4}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) 01:10:56 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:10:56 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:10:56 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netstat\x00') r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x8945) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1c8, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x318}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6}, {0x8, 0x13, 0x7fffffff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x1}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x9f85}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x810}, 0x1000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xd0, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xfffd}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6}, {0x8, 0x15, 0xfffffeff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0xffc0}, {0x8, 0x15, 0x81}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000804}, 0x40190) socket$inet_icmp(0x2, 0x2, 0x1) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, 0x10000, 0x0) 01:10:56 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74e", 0x29}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1250.731688] FAULT_INJECTION: forcing a failure. [ 1250.731688] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.733195] CPU: 1 PID: 12622 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1250.734016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.735013] Call Trace: [ 1250.735338] dump_stack+0x107/0x167 [ 1250.735775] should_fail.cold+0x5/0xa [ 1250.736239] ? blk_rq_map_user_iov+0x2aa/0x1a60 [ 1250.736785] should_failslab+0x5/0x20 [ 1250.737244] __kmalloc+0x72/0x390 [ 1250.737666] blk_rq_map_user_iov+0x2aa/0x1a60 [ 1250.738200] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1250.738821] ? sg_write.part.0+0x69e/0xaa0 [ 1250.739326] ? sg_write+0x87/0x120 [ 1250.739760] ? blk_rq_unmap_user+0x750/0x750 [ 1250.740370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.740989] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1250.741670] ? trace_hardirqs_on+0x5b/0x180 [ 1250.742200] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1250.742887] ? import_single_range+0x24d/0x2e0 [ 1250.743464] blk_rq_map_user+0x103/0x170 [ 1250.743990] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1250.744594] ? alloc_pages_current+0x18f/0x280 [ 1250.745156] ? sg_build_indirect.isra.0+0x448/0x710 [ 1250.745202] FAULT_INJECTION: forcing a failure. [ 1250.745202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.745772] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1250.745792] ? sg_build_indirect.isra.0+0x710/0x710 [ 1250.745803] ? __might_fault+0xd3/0x180 [ 1250.745825] ? lock_downgrade+0x6d0/0x6d0 [ 1250.750417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.751086] sg_write.part.0+0x69e/0xaa0 [ 1250.751590] ? sg_new_write.isra.0+0x770/0x770 [ 1250.752177] ? find_held_lock+0x2c/0x110 [ 1250.752692] ? __might_fault+0xd3/0x180 [ 1250.753177] ? lock_downgrade+0x6d0/0x6d0 [ 1250.753703] ? _cond_resched+0x12/0x80 [ 1250.754179] ? inode_security+0x107/0x140 [ 1250.754705] ? avc_policy_seqno+0x9/0x70 [ 1250.755200] ? selinux_file_permission+0x92/0x520 [ 1250.755812] ? security_file_permission+0x24e/0x570 [ 1250.756437] sg_write+0x87/0x120 [ 1250.756878] do_iter_write+0x482/0x670 [ 1250.757355] ? import_iovec+0x83/0xb0 [ 1250.757854] vfs_writev+0x1ae/0x620 [ 1250.758297] ? vfs_iter_write+0xa0/0xa0 [ 1250.758829] ? __fget_files+0x26d/0x4c0 [ 1250.759313] ? lock_downgrade+0x6d0/0x6d0 [ 1250.759856] ? find_held_lock+0x2c/0x110 [ 1250.760368] ? __fget_files+0x296/0x4c0 [ 1250.760886] ? __fget_light+0xea/0x290 [ 1250.761364] do_writev+0x139/0x300 [ 1250.761822] ? vfs_writev+0x620/0x620 [ 1250.762283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.762961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.763598] do_syscall_64+0x33/0x40 [ 1250.764073] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1250.764707] RIP: 0033:0x7fdf6458fb19 [ 1250.765164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.767421] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1250.768387] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1250.769239] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1250.770085] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.770953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1250.771775] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1250.772767] CPU: 0 PID: 12623 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1250.774190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.775861] Call Trace: [ 1250.776419] dump_stack+0x107/0x167 [ 1250.777173] should_fail.cold+0x5/0xa [ 1250.777961] _copy_from_user+0x2e/0x1b0 [ 1250.778776] iovec_from_user+0x141/0x400 [ 1250.779614] __import_iovec+0x67/0x590 [ 1250.780427] ? SOFTIRQ_verbose+0x10/0x10 [ 1250.781263] import_iovec+0x83/0xb0 [ 1250.782003] vfs_writev+0xc1/0x620 [ 1250.782732] ? vfs_iter_write+0xa0/0xa0 [ 1250.783529] ? __fget_files+0x26d/0x4c0 [ 1250.784344] ? lock_downgrade+0x6d0/0x6d0 [ 1250.785172] ? find_held_lock+0x2c/0x110 [ 1250.786015] ? __fget_files+0x296/0x4c0 [ 1250.786829] ? __fget_light+0xea/0x290 [ 1250.787609] do_writev+0x139/0x300 [ 1250.788349] ? vfs_writev+0x620/0x620 [ 1250.789135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.790205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.791261] do_syscall_64+0x33/0x40 [ 1250.792040] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1250.793094] RIP: 0033:0x7f81f957bb19 [ 1250.793854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.797586] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1250.799132] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1250.800609] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1250.802064] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.803518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.804972] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 01:10:56 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1250.831341] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1250.853924] sysfs: cannot create duplicate filename '/class/ieee80211/À˜§°ÇÛ ”uòQÇC !' [ 1250.855192] CPU: 1 PID: 12615 Comm: syz-executor.3 Not tainted 5.10.198 #1 [ 1250.855968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.856893] Call Trace: [ 1250.857208] dump_stack+0x107/0x167 [ 1250.857619] sysfs_warn_dup.cold+0x1c/0x29 [ 1250.858107] sysfs_do_create_link_sd+0x122/0x140 [ 1250.858671] sysfs_create_link+0x5f/0xc0 [ 1250.859131] device_add+0x703/0x1bc0 [ 1250.859565] ? devlink_add_symlinks+0x970/0x970 [ 1250.860122] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1250.860717] wiphy_register+0x1da6/0x2850 [ 1250.861185] ? wiphy_unregister+0xb90/0xb90 [ 1250.861676] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1250.862276] ieee80211_register_hw+0x23c5/0x38b0 [ 1250.862824] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1250.863375] ? net_generic+0xdb/0x2b0 [ 1250.863835] ? lockdep_init_map_type+0x2c7/0x780 [ 1250.864412] ? memset+0x20/0x50 [ 1250.864799] ? __hrtimer_init+0x12c/0x270 [ 1250.865284] mac80211_hwsim_new_radio+0x1ce0/0x4250 [ 1250.865886] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1250.866418] ? hwsim_new_radio_nl+0x967/0x1080 [ 1250.866947] ? memcpy+0x39/0x60 [ 1250.867331] hwsim_new_radio_nl+0x991/0x1080 [ 1250.867838] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1250.868468] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1250.869220] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1250.869984] genl_family_rcv_msg_doit+0x22d/0x330 [ 1250.870545] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1250.871312] ? cap_capable+0x1d6/0x240 [ 1250.871824] ? ns_capable+0xe2/0x110 [ 1250.872317] genl_rcv_msg+0x33c/0x5a0 [ 1250.872816] ? genl_get_cmd+0x480/0x480 [ 1250.873333] ? mac80211_hwsim_new_radio+0x4250/0x4250 [ 1250.874005] ? lock_release+0x680/0x680 [ 1250.874521] ? __lockdep_reset_lock+0x180/0x180 [ 1250.875131] netlink_rcv_skb+0x14b/0x430 [ 1250.875650] ? genl_get_cmd+0x480/0x480 [ 1250.876185] ? netlink_ack+0xab0/0xab0 [ 1250.876679] ? netlink_deliver_tap+0x1c4/0xcd0 [ 1250.877270] ? is_vmalloc_addr+0x7b/0xb0 [ 1250.877773] genl_rcv+0x24/0x40 [ 1250.878196] netlink_unicast+0x549/0x7f0 [ 1250.878658] ? netlink_attachskb+0x870/0x870 [ 1250.879189] ? __virt_addr_valid+0x128/0x350 [ 1250.879732] netlink_sendmsg+0x90f/0xdf0 [ 1250.880228] ? netlink_unicast+0x7f0/0x7f0 [ 1250.880747] ? netlink_unicast+0x7f0/0x7f0 [ 1250.881240] __sock_sendmsg+0x154/0x190 [ 1250.881720] ____sys_sendmsg+0x70d/0x870 [ 1250.882192] ? sock_write_iter+0x3d0/0x3d0 [ 1250.882698] ? do_recvmmsg+0x6d0/0x6d0 [ 1250.883149] ? perf_trace_lock+0xac/0x490 [ 1250.883643] ? __lockdep_reset_lock+0x180/0x180 [ 1250.884207] ___sys_sendmsg+0xf3/0x170 [ 1250.884661] ? sendmsg_copy_msghdr+0x160/0x160 [ 1250.885194] ? lock_downgrade+0x6d0/0x6d0 [ 1250.885685] ? __fget_files+0x1c0/0x4c0 [ 1250.886154] ? __fget_files+0x296/0x4c0 [ 1250.886622] ? __fget_light+0xea/0x290 [ 1250.887084] __sys_sendmsg+0xe5/0x1b0 [ 1250.887523] ? __sys_sendmsg_sock+0x40/0x40 [ 1250.888046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1250.888657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1250.889258] ? trace_hardirqs_on+0x5b/0x180 [ 1250.889744] do_syscall_64+0x33/0x40 [ 1250.890175] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1250.890763] RIP: 0033:0x7f5559bb8b19 [ 1250.891206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.893371] RSP: 002b:00007f555712e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.894262] RAX: ffffffffffffffda RBX: 00007f5559ccbf60 RCX: 00007f5559bb8b19 [ 1250.895086] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 1250.895889] RBP: 00007f5559c12f6d R08: 0000000000000000 R09: 0000000000000000 [ 1250.896727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.897501] R13: 00007ffddab44d9f R14: 00007f555712e300 R15: 0000000000022000 01:10:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = eventfd2(0x0, 0x80001) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x96e, 0x8, 0x81, 0x2, 0x80000000}) inotify_init() openat(0xffffffffffffffff, 0x0, 0x20000, 0x80) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x2000, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x8, &(0x7f0000001540)=[{&(0x7f0000000240)="087f190d3e6f688660886cb06e57ab9abdf2a1bea5e939389ac9033458e00c66ea4c674e57cb5b786a59836d3b80cd49d1268ccfe102eeeed6f80953db460899e5b5413edf90009aaacc83da1366d35387dd20d93f189e12bc071420703e46ad304f2e677b7033bc2d27e78f0dc003", 0x6f, 0x8}, {&(0x7f00000002c0)="60f0e407594c19652e5bff687147cabec4189cf85031a71934c62d5d00ee090209dc03df6637083aafba1d57019479b28520b01c7694ed32e3bf48d36850994792a1caeca01c95681d56ddab3266a0272f2ed8663e7ff70f23247776ba36f50868fd4366775138dd6042c7d032d4e6c6496c1ea5137b01f08c6dd262d8a1baeb5acdcdf8e0158b7aebc42b1df93b349740", 0x91, 0x43}, {&(0x7f0000000380)="ce20e1e7b3ef9d3b7f1d48d9a199b5c8521294bfab74f65b3efa4d54c21f395e3b8dccdba8f520f73760b56d0100238b150ff6bc7641bf99f80a577d6ccd7b83d9b64dc7022d09347dd49e7925600914b72cc8633d0541fed7575cf946eeb6a1e51f458353e9df722c2d8199302efaa9bd320afc10b0618a9e4656d13bf8d9ea7fd5c8d180bec43e24f7cbc3694051aee964583bdf6014268595fa06d832049abbc4c02fa267ba4a86866c3f9759e7e946e6d2615beef6aa27918753f7e454c73d7dcd8c3405b4d2eecd8103e83b28d377ff76aeba834ce5b38131a457d65cf5d3642af801c6813d3b606035336802", 0xef, 0xffffffff}, {&(0x7f0000000480)="4765e51cab587629f5205451f0bb816a7a48c57f6bcd0c52a007899cfac26b41e44b2044f99cf84f5423299b2c03debec496dd3faf7e1357116e3251dfd343ff439c99cbb56dce0fa4d6ff18a5978c77f2a0d29664bc3c8402f2c38c376ab46abde9850dd1d1fbc70659eb6e4d773ddcc8da8cb4da5355a1ee4d6e9c", 0x7c, 0x7fff}, {&(0x7f00000001c0)="fe78cbcf4a01ecfefe9f3783a79a32174492bf9fc013a7618059", 0x1a, 0x6}, {&(0x7f0000000500)="93d88b0a3d98547d73d02d9ab56a451fdf35eaea2b3c9fd624e8716d1679ff9b446c5be73413f2bbdedab181dda1b9253f5330aec4984bf81d51ca3efe", 0x3d, 0x7fff}, {&(0x7f0000000540)="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", 0x1000, 0x8}, {&(0x7f0000001e00)="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", 0x1000, 0x1}], 0x10018c6, &(0x7f0000000200)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) openat(r2, &(0x7f0000000180)='./file2\x00', 0x101080, 0x80) sendfile(r4, r2, 0x0, 0x7ffffff9) 01:11:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={@empty, @mcast2, @mcast1, 0x2, 0x5, 0x0, 0x400, 0x8, 0x2000040}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x40, 0x4, 0x0, 0x0, 0x35, 0x4281c, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5446, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0xa80, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x5, 0xff, 0x0, 0x8, 0x0, 0xfee5}, 0xffffffffffffffff, 0x0, r0, 0xb) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x0, 0x800) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0, 0x50) openat(r3, &(0x7f0000000200)='./file0\x00', 0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 01:11:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/i2c_algo_bit', 0x100, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000180)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'bridge_slave_0\x00', {0x2, 0x0, @multicast2}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) read(r3, &(0x7f0000000300)=""/62, 0x3e) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xa8b9, @loopback}, 0x1c) sendfile(r2, r0, &(0x7f00000002c0)=0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) 01:11:10 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:11:10 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 13) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:10 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) pwrite64(r3, &(0x7f0000000140)="255bea2c53da213bc56757be76a4549cfbfba335b043de2243a40f76b7bcec80e416f02f0a058fadf30fc30c08618a3089d17e6c26e8e8544d7bca29f1b05588fc127956be8e00a8a0cadf1fcaf0fb801f95a08353b8330ea9c84ec8b147000a7a24fb9695190590bfe005d9d8d94ef5562b74a29543d7c1e73f381b090a72306bc63481f4da217d99dee1b7158cf68dda6ecdf1874e4892f553e45483a5ce9125ed4ac54475e03aec198b9c1578a780fc7e6fc71297d2ed45756449fc9187ca727fd4999f3fc1877d9d0c288966152a93c38048db2dc6d05b1fce1a390571b64d7e1b0a", 0xe4, 0x3) fallocate(r2, 0x0, 0x0, 0x8800000) lseek(r1, 0x0, 0x3) r4 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(r6, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FICLONE(r6, 0x40049409, r5) sendfile(r0, r7, 0x0, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 01:11:10 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 2) 01:11:10 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:11:10 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1264.339586] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1264.366367] FAULT_INJECTION: forcing a failure. [ 1264.366367] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.369161] CPU: 1 PID: 12754 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1264.370657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1264.372481] Call Trace: [ 1264.373068] dump_stack+0x107/0x167 [ 1264.373859] should_fail.cold+0x5/0xa [ 1264.374692] ? prep_compound_page+0x295/0x3c0 [ 1264.375673] ? create_object.isra.0+0x3a/0xa20 [ 1264.376674] should_failslab+0x5/0x20 [ 1264.377502] kmem_cache_alloc+0x5b/0x310 [ 1264.378390] ? prep_new_page+0x159/0x1d0 [ 1264.379272] create_object.isra.0+0x3a/0xa20 [ 1264.380238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1264.381340] __kmalloc+0x16e/0x390 [ 1264.382113] blk_rq_map_user_iov+0x2aa/0x1a60 [ 1264.383092] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1264.384285] ? sg_write.part.0+0x69e/0xaa0 [ 1264.385223] ? sg_write+0x87/0x120 [ 1264.386005] ? blk_rq_unmap_user+0x750/0x750 [ 1264.386973] ? find_held_lock+0x2c/0x110 [ 1264.387858] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1264.389035] ? lock_downgrade+0x6d0/0x6d0 [ 1264.389933] ? import_single_range+0x24d/0x2e0 [ 1264.390927] blk_rq_map_user+0x103/0x170 [ 1264.391803] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1264.392840] ? alloc_pages_current+0x18f/0x280 [ 1264.393835] ? sg_build_indirect.isra.0+0x448/0x710 [ 1264.394932] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1264.396115] ? sg_build_indirect.isra.0+0x710/0x710 [ 1264.397188] ? __might_fault+0xd3/0x180 [ 1264.398054] ? lock_downgrade+0x6d0/0x6d0 [ 1264.398986] sg_write.part.0+0x69e/0xaa0 [ 1264.399873] ? sg_new_write.isra.0+0x770/0x770 [ 1264.400879] ? find_held_lock+0x2c/0x110 [ 1264.401770] ? __might_fault+0xd3/0x180 [ 1264.402641] ? lock_downgrade+0x6d0/0x6d0 [ 1264.403564] ? _cond_resched+0x12/0x80 [ 1264.404418] ? inode_security+0x107/0x140 [ 1264.405327] ? avc_policy_seqno+0x9/0x70 [ 1264.406212] ? selinux_file_permission+0x92/0x520 [ 1264.407285] ? security_file_permission+0x24e/0x570 [ 1264.408406] sg_write+0x87/0x120 [ 1264.409147] do_iter_write+0x482/0x670 [ 1264.409991] ? import_iovec+0x83/0xb0 [ 1264.410836] vfs_writev+0x1ae/0x620 [ 1264.411622] ? vfs_iter_write+0xa0/0xa0 [ 1264.412488] ? __fget_files+0x26d/0x4c0 [ 1264.413356] ? lock_downgrade+0x6d0/0x6d0 [ 1264.414245] ? find_held_lock+0x2c/0x110 [ 1264.415135] ? __fget_files+0x296/0x4c0 [ 1264.416018] ? __fget_light+0xea/0x290 [ 1264.416870] do_writev+0x139/0x300 [ 1264.417644] ? vfs_writev+0x620/0x620 [ 1264.418478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1264.419605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.420755] do_syscall_64+0x33/0x40 [ 1264.421573] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1264.422686] RIP: 0033:0x7fdf6458fb19 [ 1264.423496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1264.427492] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1264.429157] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1264.430707] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1264.432263] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.433813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1264.435356] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1264.438893] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1264.448914] FAULT_INJECTION: forcing a failure. [ 1264.448914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.450117] CPU: 0 PID: 12765 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1264.450854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1264.451689] Call Trace: [ 1264.451986] dump_stack+0x107/0x167 [ 1264.452374] should_fail.cold+0x5/0xa [ 1264.452785] _copy_from_user+0x2e/0x1b0 [ 1264.453195] sg_write.part.0+0x1cf/0xaa0 [ 1264.453636] ? mark_lock+0xf5/0x2df0 [ 1264.454017] ? sg_new_write.isra.0+0x770/0x770 [ 1264.454495] ? lock_acquire+0x197/0x470 [ 1264.454888] ? find_held_lock+0x2c/0x110 [ 1264.455319] ? __might_fault+0xd3/0x180 [ 1264.455730] ? lock_downgrade+0x6d0/0x6d0 [ 1264.455812] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1264.455812] program syz-executor.4 not setting count and/or reply_len properly [ 1264.456183] ? _cond_resched+0x12/0x80 [ 1264.459970] ? inode_security+0x107/0x140 [ 1264.460426] ? avc_policy_seqno+0x9/0x70 [ 1264.460868] ? selinux_file_permission+0x92/0x520 [ 1264.461395] ? security_file_permission+0x24e/0x570 [ 1264.461903] sg_write+0x87/0x120 [ 1264.462277] do_iter_write+0x482/0x670 [ 1264.462667] ? import_iovec+0x83/0xb0 [ 1264.463096] vfs_writev+0x1ae/0x620 [ 1264.463462] ? vfs_iter_write+0xa0/0xa0 [ 1264.463892] ? __fget_files+0x26d/0x4c0 [ 1264.464292] ? lock_downgrade+0x6d0/0x6d0 [ 1264.464738] ? find_held_lock+0x2c/0x110 [ 1264.465146] ? __fget_files+0x296/0x4c0 [ 1264.465585] ? __fget_light+0xea/0x290 [ 1264.465974] do_writev+0x139/0x300 [ 1264.466362] ? vfs_writev+0x620/0x620 [ 1264.466741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1264.467307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.467821] do_syscall_64+0x33/0x40 [ 1264.468260] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1264.468774] RIP: 0033:0x7f81f957bb19 [ 1264.469185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1264.471081] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1264.471916] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1264.472666] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1264.473444] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 01:11:10 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b", 0x2c}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1264.474211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.475137] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 01:11:10 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1264.510019] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 01:11:10 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:10 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 3) 01:11:10 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 14) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, &(0x7f00000005c0)) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) lgetxattr(&(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x0, 0x0) getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) fsmount(r0, 0x1, 0x82) symlink(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000d40)=ANY=[@ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="10000400000000002000050000000000"], 0x64, 0x1) [ 1264.578958] Zero length message leads to an empty skb 01:11:10 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1264.610830] FAULT_INJECTION: forcing a failure. [ 1264.610830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.612285] CPU: 0 PID: 12881 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1264.612995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1264.613908] Call Trace: [ 1264.614190] dump_stack+0x107/0x167 [ 1264.614571] should_fail.cold+0x5/0xa [ 1264.614963] _copy_from_user+0x2e/0x1b0 [ 1264.615363] sg_write.part.0+0x5f7/0xaa0 [ 1264.615780] ? sg_new_write.isra.0+0x770/0x770 [ 1264.616262] ? find_held_lock+0x2c/0x110 [ 1264.616687] ? __might_fault+0xd3/0x180 [ 1264.617086] ? lock_downgrade+0x6d0/0x6d0 [ 1264.617521] ? _cond_resched+0x12/0x80 [ 1264.617921] ? inode_security+0x107/0x140 [ 1264.618347] ? avc_policy_seqno+0x9/0x70 [ 1264.618760] ? selinux_file_permission+0x92/0x520 [ 1264.619250] ? security_file_permission+0x24e/0x570 [ 1264.619758] sg_write+0x87/0x120 [ 1264.620114] do_iter_write+0x482/0x670 [ 1264.620523] ? import_iovec+0x83/0xb0 [ 1264.620910] vfs_writev+0x1ae/0x620 [ 1264.621196] FAULT_INJECTION: forcing a failure. [ 1264.621196] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.621281] ? vfs_iter_write+0xa0/0xa0 [ 1264.621300] ? __fget_files+0x26d/0x4c0 [ 1264.624399] ? lock_downgrade+0x6d0/0x6d0 [ 1264.624873] ? find_held_lock+0x2c/0x110 [ 1264.625322] ? __fget_files+0x296/0x4c0 [ 1264.625778] ? __fget_light+0xea/0x290 [ 1264.626209] do_writev+0x139/0x300 [ 1264.626618] ? vfs_writev+0x620/0x620 [ 1264.627046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1264.627626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.628229] do_syscall_64+0x33/0x40 [ 1264.628648] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1264.629198] RIP: 0033:0x7f81f957bb19 [ 1264.629602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1264.631600] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1264.632439] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1264.633228] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1264.634006] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.634795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.635572] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1264.636393] CPU: 1 PID: 12882 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1264.637823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1264.639511] Call Trace: [ 1264.640057] dump_stack+0x107/0x167 [ 1264.640811] should_fail.cold+0x5/0xa [ 1264.641589] ? bio_alloc_bioset+0x3b7/0x600 [ 1264.642467] should_failslab+0x5/0x20 [ 1264.643242] __kmalloc+0x72/0x390 [ 1264.643952] bio_alloc_bioset+0x3b7/0x600 [ 1264.644816] ? bvec_alloc+0x2f0/0x2f0 [ 1264.645589] ? kasan_unpoison_shadow+0x33/0x50 [ 1264.646519] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1264.647553] blk_rq_map_user_iov+0x473/0x1a60 [ 1264.648479] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1264.649563] ? sg_write.part.0+0x69e/0xaa0 [ 1264.650434] ? blk_rq_unmap_user+0x750/0x750 [ 1264.651332] ? find_held_lock+0x2c/0x110 [ 1264.652168] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1264.653239] ? lock_downgrade+0x6d0/0x6d0 [ 1264.654073] ? import_single_range+0x24d/0x2e0 [ 1264.655002] blk_rq_map_user+0x103/0x170 [ 1264.655828] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1264.656797] ? alloc_pages_current+0x18f/0x280 [ 1264.657726] ? sg_build_indirect.isra.0+0x448/0x710 [ 1264.658749] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1264.659819] ? sg_build_indirect.isra.0+0x710/0x710 [ 1264.660834] ? __might_fault+0xd3/0x180 [ 1264.661638] ? lock_downgrade+0x6d0/0x6d0 [ 1264.662506] sg_write.part.0+0x69e/0xaa0 [ 1264.663331] ? sg_new_write.isra.0+0x770/0x770 [ 1264.664266] ? find_held_lock+0x2c/0x110 [ 1264.665092] ? __might_fault+0xd3/0x180 [ 1264.665897] ? lock_downgrade+0x6d0/0x6d0 [ 1264.666756] ? _cond_resched+0x12/0x80 [ 1264.667550] ? inode_security+0x107/0x140 [ 1264.668415] ? avc_policy_seqno+0x9/0x70 [ 1264.669237] ? selinux_file_permission+0x92/0x520 [ 1264.670227] ? security_file_permission+0x24e/0x570 [ 1264.671237] sg_write+0x87/0x120 [ 1264.671929] do_iter_write+0x482/0x670 [ 1264.672743] ? import_iovec+0x83/0xb0 [ 1264.673526] vfs_writev+0x1ae/0x620 [ 1264.674265] ? vfs_iter_write+0xa0/0xa0 [ 1264.675071] ? __fget_files+0x26d/0x4c0 [ 1264.675879] ? lock_downgrade+0x6d0/0x6d0 [ 1264.676742] ? find_held_lock+0x2c/0x110 [ 1264.677576] ? __fget_files+0x296/0x4c0 [ 1264.678417] ? __fget_light+0xea/0x290 [ 1264.679218] do_writev+0x139/0x300 [ 1264.679943] ? vfs_writev+0x620/0x620 [ 1264.680729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1264.681799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.682851] do_syscall_64+0x33/0x40 [ 1264.683608] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1264.684684] RIP: 0033:0x7fdf6458fb19 [ 1264.685443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1264.689169] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1264.690709] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1264.692149] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1264.693597] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.695028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1264.696507] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:11:10 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 4) 01:11:10 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1264.763304] FAULT_INJECTION: forcing a failure. [ 1264.763304] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.764770] CPU: 0 PID: 12893 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1264.765479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1264.766319] Call Trace: [ 1264.766680] dump_stack+0x107/0x167 [ 1264.767063] should_fail.cold+0x5/0xa [ 1264.767589] ? sg_build_indirect.isra.0+0x94/0x710 [ 1264.768113] should_failslab+0x5/0x20 [ 1264.768505] __kmalloc+0x72/0x390 [ 1264.768854] sg_build_indirect.isra.0+0x94/0x710 [ 1264.769329] ? scsi_req_init+0x18/0xb0 [ 1264.769720] ? scsi_initialize_rq+0x16/0xb0 [ 1264.770156] sg_common_write.constprop.0+0x992/0x1a30 [ 1264.770696] ? sg_build_indirect.isra.0+0x710/0x710 [ 1264.771205] ? __might_fault+0xd3/0x180 [ 1264.771615] ? lock_downgrade+0x6d0/0x6d0 [ 1264.772052] sg_write.part.0+0x69e/0xaa0 [ 1264.772475] ? sg_new_write.isra.0+0x770/0x770 [ 1264.772938] ? find_held_lock+0x2c/0x110 [ 1264.773344] ? __might_fault+0xd3/0x180 [ 1264.773743] ? lock_downgrade+0x6d0/0x6d0 [ 1264.774165] ? _cond_resched+0x12/0x80 [ 1264.774559] ? inode_security+0x107/0x140 [ 1264.774994] ? avc_policy_seqno+0x9/0x70 [ 1264.775545] ? selinux_file_permission+0x92/0x520 [ 1264.776041] ? security_file_permission+0x24e/0x570 [ 1264.776561] sg_write+0x87/0x120 [ 1264.776948] do_iter_write+0x482/0x670 [ 1264.777346] ? import_iovec+0x83/0xb0 [ 1264.777772] vfs_writev+0x1ae/0x620 [ 1264.778141] ? vfs_iter_write+0xa0/0xa0 [ 1264.778583] ? __fget_files+0x26d/0x4c0 [ 1264.778979] ? lock_downgrade+0x6d0/0x6d0 [ 1264.779426] ? find_held_lock+0x2c/0x110 [ 1264.779849] ? __fget_files+0x296/0x4c0 [ 1264.780308] ? __fget_light+0xea/0x290 [ 1264.780741] do_writev+0x139/0x300 [ 1264.781136] ? vfs_writev+0x620/0x620 [ 1264.781550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1264.782122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.782659] do_syscall_64+0x33/0x40 [ 1264.783071] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1264.783598] RIP: 0033:0x7f81f957bb19 [ 1264.784008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1264.785935] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1264.786773] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1264.787509] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1264.788291] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.789072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.789833] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1264.889215] EXT4-fs (sda): re-mounted. Opts: (null) [ 1264.910775] EXT4-fs (sda): re-mounted. Opts: (null) [ 1265.019224] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:11:25 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:25 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 5) 01:11:25 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 15) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:25 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:11:25 executing program 6: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x4000000003) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) lseek(r2, 0x4, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000e2f6e90014000100000000000000000002000c2250ee0000000000000000000000000000000036c4d0e7646c511824e6cbf6aa68b4eea625fefdd6e0c35478a51de1493629a014704d432b545bafffe46207ddcfcf006fed4e7654b903cfa379402b30286770bd60ac736c27936919a5117c1c70d360149044c90cea81ba6e7e1cc323c8eedad488f39c413f5b88aacff06f5f486cec1eab3443b52e923ae1bda8860ef1b0790edf7cf9a090df4c9962a388d3b97d9896f388a1dd3e7a7b318010d23802609b10e27542655831903fbf32ab047a1c"], 0x2c}}, 0x0) ppoll(&(0x7f0000000180)=[{r4, 0x200}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x101]}, 0x8) creat(&(0x7f0000000140)='./file1\x00', 0x15) ioctl$LOOP_SET_STATUS(r2, 0x4c09, 0x0) 01:11:25 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x15) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f00000002c0)={@id={0x2, 0x0, @b}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) r5 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x115142, 0x8) sendfile(r4, r5, &(0x7f0000000140)=0x240000000, 0x3) sendfile(r1, r2, 0x0, 0x20d315) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) socket$packet(0x11, 0x3, 0x300) r6 = openat(r5, &(0x7f00000000c0)='./file1\x00', 0x800, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='memory.swap.high\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000003c0)={{r7}, 0x0, 0x2, @inherit={0x80, &(0x7f0000000340)={0x1, 0x7, 0x0, 0x1, {0x14, 0x3, 0x1b, 0x40, 0x95f}, [0x2, 0x1, 0x4, 0x2, 0x9, 0x1, 0x800]}}, @subvolid=0x7}) 01:11:25 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000400)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000340)={0x24452724, 0x8001, 0x2, 0x2, 0x2, [{0x2, 0x7106fee2, 0x9}, {0x3, 0x3, 0x800, '\x00', 0x809}]}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x7, 0x0, &(0x7f0000000340), 0x14041, &(0x7f00000014c0)=ANY=[@ANYRES64=r0]) dup2(r5, r6) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) read$hiddev(r1, &(0x7f0000000280)=""/175, 0xaf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 01:11:25 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1279.470854] FAULT_INJECTION: forcing a failure. [ 1279.470854] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.473744] CPU: 0 PID: 13013 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1279.475152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.476870] Call Trace: [ 1279.476898] dump_stack+0x107/0x167 [ 1279.476927] should_fail.cold+0x5/0xa [ 1279.479202] ? create_object.isra.0+0x3a/0xa20 [ 1279.480145] should_failslab+0x5/0x20 [ 1279.480932] kmem_cache_alloc+0x5b/0x310 [ 1279.481754] ? sg_build_indirect.isra.0+0x94/0x710 [ 1279.482748] create_object.isra.0+0x3a/0xa20 [ 1279.483641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1279.484692] __kmalloc+0x16e/0x390 [ 1279.485430] sg_build_indirect.isra.0+0x94/0x710 [ 1279.486404] ? scsi_req_init+0x18/0xb0 [ 1279.487203] ? scsi_initialize_rq+0x16/0xb0 [ 1279.488081] sg_common_write.constprop.0+0x992/0x1a30 [ 1279.489149] ? sg_build_indirect.isra.0+0x710/0x710 [ 1279.490161] ? __might_fault+0xd3/0x180 [ 1279.490977] ? lock_downgrade+0x6d0/0x6d0 [ 1279.491857] sg_write.part.0+0x69e/0xaa0 [ 1279.492692] ? sg_new_write.isra.0+0x770/0x770 [ 1279.493619] ? find_held_lock+0x2c/0x110 [ 1279.494449] ? __might_fault+0xd3/0x180 [ 1279.495257] ? lock_downgrade+0x6d0/0x6d0 [ 1279.496108] ? _cond_resched+0x12/0x80 [ 1279.496923] ? inode_security+0x107/0x140 [ 1279.497758] ? avc_policy_seqno+0x9/0x70 [ 1279.498562] ? selinux_file_permission+0x92/0x520 [ 1279.499528] ? security_file_permission+0x24e/0x570 [ 1279.500539] sg_write+0x87/0x120 [ 1279.501218] do_iter_write+0x482/0x670 [ 1279.501996] ? import_iovec+0x83/0xb0 [ 1279.502755] vfs_writev+0x1ae/0x620 [ 1279.503494] ? vfs_iter_write+0xa0/0xa0 [ 1279.504292] ? __fget_files+0x26d/0x4c0 [ 1279.505082] ? lock_downgrade+0x6d0/0x6d0 [ 1279.505909] ? find_held_lock+0x2c/0x110 [ 1279.506731] ? __fget_files+0x296/0x4c0 [ 1279.507553] ? __fget_light+0xea/0x290 [ 1279.508354] do_writev+0x139/0x300 [ 1279.509072] ? vfs_writev+0x620/0x620 [ 1279.509838] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1279.510879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1279.511927] do_syscall_64+0x33/0x40 [ 1279.512680] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1279.513702] RIP: 0033:0x7f81f957bb19 [ 1279.514444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1279.518111] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1279.519628] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1279.521065] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1279.522477] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.523896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.525350] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1279.535074] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1279.535074] program syz-executor.5 not setting count and/or reply_len properly [ 1279.536969] FAULT_INJECTION: forcing a failure. [ 1279.536969] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.541312] CPU: 1 PID: 13018 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1279.542703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.544382] Call Trace: [ 1279.544927] dump_stack+0x107/0x167 [ 1279.545679] should_fail.cold+0x5/0xa [ 1279.546453] ? create_object.isra.0+0x3a/0xa20 [ 1279.547385] should_failslab+0x5/0x20 [ 1279.548156] kmem_cache_alloc+0x5b/0x310 [ 1279.548983] create_object.isra.0+0x3a/0xa20 [ 1279.549872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1279.550893] __kmalloc+0x16e/0x390 [ 1279.551616] bio_alloc_bioset+0x3b7/0x600 [ 1279.552456] ? bvec_alloc+0x2f0/0x2f0 [ 1279.553236] ? kasan_unpoison_shadow+0x33/0x50 [ 1279.554158] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1279.555192] blk_rq_map_user_iov+0x473/0x1a60 [ 1279.556098] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1279.557193] ? sg_write.part.0+0x69e/0xaa0 [ 1279.558059] ? blk_rq_unmap_user+0x750/0x750 [ 1279.558961] ? find_held_lock+0x2c/0x110 [ 1279.559789] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1279.560866] ? lock_downgrade+0x6d0/0x6d0 [ 1279.561698] ? import_single_range+0x24d/0x2e0 [ 1279.562622] blk_rq_map_user+0x103/0x170 [ 1279.563440] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1279.564420] ? alloc_pages_current+0x18f/0x280 [ 1279.565344] ? sg_build_indirect.isra.0+0x448/0x710 [ 1279.566379] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1279.567460] ? sg_build_indirect.isra.0+0x710/0x710 [ 1279.568490] ? __might_fault+0xd3/0x180 [ 1279.569308] ? lock_downgrade+0x6d0/0x6d0 [ 1279.570172] sg_write.part.0+0x69e/0xaa0 [ 1279.570996] ? sg_new_write.isra.0+0x770/0x770 [ 1279.571925] ? find_held_lock+0x2c/0x110 [ 1279.572770] ? __might_fault+0xd3/0x180 [ 1279.573579] ? lock_downgrade+0x6d0/0x6d0 [ 1279.574420] ? _cond_resched+0x12/0x80 [ 1279.575194] ? inode_security+0x107/0x140 [ 1279.576040] ? avc_policy_seqno+0x9/0x70 [ 1279.576883] ? selinux_file_permission+0x92/0x520 [ 1279.577875] ? security_file_permission+0x24e/0x570 [ 1279.578898] sg_write+0x87/0x120 [ 1279.579600] do_iter_write+0x482/0x670 [ 1279.580408] ? import_iovec+0x83/0xb0 [ 1279.581196] vfs_writev+0x1ae/0x620 [ 1279.581956] ? vfs_iter_write+0xa0/0xa0 [ 1279.582774] ? __fget_files+0x26d/0x4c0 [ 1279.583582] ? lock_downgrade+0x6d0/0x6d0 [ 1279.584439] ? find_held_lock+0x2c/0x110 [ 1279.585269] ? __fget_files+0x296/0x4c0 [ 1279.586079] ? __fget_light+0xea/0x290 [ 1279.586882] do_writev+0x139/0x300 [ 1279.587612] ? vfs_writev+0x620/0x620 [ 1279.588393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1279.589452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1279.590486] do_syscall_64+0x33/0x40 [ 1279.591253] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1279.592349] RIP: 0033:0x7fdf6458fb19 [ 1279.593100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1279.596833] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1279.598370] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1279.599829] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1279.601255] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.602688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1279.604104] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:11:25 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 6) [ 1279.666842] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1279.666842] program syz-executor.4 not setting count and/or reply_len properly [ 1279.680022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 01:11:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$9p_unix(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x20000, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) [ 1279.728412] FAULT_INJECTION: forcing a failure. [ 1279.728412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1279.731134] CPU: 1 PID: 13104 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1279.732532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.734183] Call Trace: [ 1279.734725] dump_stack+0x107/0x167 [ 1279.735456] should_fail.cold+0x5/0xa [ 1279.736215] ? find_held_lock+0x2c/0x110 [ 1279.737043] __alloc_pages_nodemask+0x182/0x600 [ 1279.737976] ? __kmalloc+0x16e/0x390 [ 1279.738724] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1279.739973] ? trace_hardirqs_on+0x5b/0x180 [ 1279.740862] alloc_pages_current+0x187/0x280 [ 1279.741751] sg_build_indirect.isra.0+0x2f5/0x710 [ 1279.742728] sg_common_write.constprop.0+0x992/0x1a30 [ 1279.743774] ? sg_build_indirect.isra.0+0x710/0x710 [ 1279.744781] ? __might_fault+0xd3/0x180 [ 1279.745579] ? lock_downgrade+0x6d0/0x6d0 [ 1279.746440] sg_write.part.0+0x69e/0xaa0 [ 1279.747258] ? sg_new_write.isra.0+0x770/0x770 [ 1279.748180] ? find_held_lock+0x2c/0x110 [ 1279.749017] ? __might_fault+0xd3/0x180 [ 1279.749814] ? lock_downgrade+0x6d0/0x6d0 [ 1279.750667] ? _cond_resched+0x12/0x80 [ 1279.751451] ? inode_security+0x107/0x140 [ 1279.752302] ? avc_policy_seqno+0x9/0x70 [ 1279.753117] ? selinux_file_permission+0x92/0x520 [ 1279.754090] ? security_file_permission+0x24e/0x570 [ 1279.755093] sg_write+0x87/0x120 [ 1279.755779] do_iter_write+0x482/0x670 [ 1279.756587] ? import_iovec+0x83/0xb0 [ 1279.757356] vfs_writev+0x1ae/0x620 [ 1279.758090] ? vfs_iter_write+0xa0/0xa0 [ 1279.758884] ? __fget_files+0x26d/0x4c0 [ 1279.759683] ? lock_downgrade+0x6d0/0x6d0 [ 1279.760517] ? find_held_lock+0x2c/0x110 [ 1279.761344] ? __fget_files+0x296/0x4c0 [ 1279.762153] ? __fget_light+0xea/0x290 [ 1279.762940] do_writev+0x139/0x300 [ 1279.763656] ? vfs_writev+0x620/0x620 [ 1279.764442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1279.765489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1279.766528] do_syscall_64+0x33/0x40 [ 1279.767276] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1279.768310] RIP: 0033:0x7f81f957bb19 [ 1279.769059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1279.772736] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1279.774260] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1279.775686] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1279.777133] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.778559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.779988] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 01:11:25 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:11:25 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 16) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:25 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b76", 0x2d}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:25 executing program 3: msgget$private(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0xcd58d069aa0eebd7}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001c40), 0x4) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffe0}, 0x0, 0x1782, 0x6, 0x0, 0x7ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) io_submit(0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$P9_RCREATE(r4, &(0x7f0000000840)={0x18, 0x73, 0x1, {{0x1, 0x2, 0x5}, 0x6}}, 0x18) ioctl$HCIINQUIRY(r3, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, "09183a"}) bind$bt_hci(r3, &(0x7f0000000380)={0x1f, 0x3}, 0x6) 01:11:25 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:11:25 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r1, 0x2) r2 = io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r4 = syz_io_uring_setup(0x623f, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0\x00'}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x190}, 0x0, 0x80, 0x0, {0x0, r6}}, 0x9) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000240)={0x9, "d47f503efcd47ada4801ef6cd162ce6a0ec656e63de3e6449bb3ba88ae8dc5f2c6ee7844c1ab15cfb8f6ac3ebad457238652d16fe468bcf7b8cb38caf07e9ed605456bf8b1630278a9a5e2404167614eaa45dcca72a3126359188dcac2bf4d3ad4d7eaab94898af1b5f3f6a001991ed0c95698153ccd9e57fe8dfa9dc0eec8972812715825d410c1566d7e644e7650c8454a074ba42e2a7aca0f4bdd3011fe753b7352e2e460cacc5dbbd320aca09b00277152cae3765d1bcae59540e8b24f8d527e2794ad03668c21ff499369eb3ca5af43befbbe907d990192701450b7b79af9b9a6433d0b0a6ca8a2a5d615f68563959fe2c01464eb60270968820589e0ef13bcb692f3f288a642a33f3071ce75cd49e59ce7f957f104dcfc968646f7858493b35882cd39944267cab61dce45d6fd824a937a8d4dde6bfd374d53de5e014656543661898a3ac9d40b579bc0da1c71d77cc5d2dd4a049da745f8684c9392e2c3181444520884118bff1552472b1c1d2239443bc4b87056e75f5cab8fa8be1cce9f365c69b472bc3848c4243dd45e15db5366cd0825b973c9333d4d65be639e3f99040b1a47a76aa6fa37b24dee72aae8a89be54bfe06db487a2ca681c030e0c9335cd3c552f579deedad841abd3ad82994be831c58d357fc8147b67f879770e865725036a04d261f0f83208e5e9633949a49868fd66eaef57b5c236eacea0e"}) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x181}, "038db6e8233c23d9", "b231e40393c68559be475c82199ac23c", "63d338fd", "5f2fdaeb8a6300bc"}, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r7, r0, 0x0) 01:11:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x82a8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x9}, 0x110, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffb, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000280), 0x2, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r0, r4, r5, r0], 0x4) stat(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file0\x00'}) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) openat$cgroup_freezer_state(r2, &(0x7f0000000200), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) [ 1280.009008] FAULT_INJECTION: forcing a failure. [ 1280.009008] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.011749] CPU: 0 PID: 13145 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1280.013171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1280.014855] Call Trace: [ 1280.015397] dump_stack+0x107/0x167 [ 1280.016138] should_fail.cold+0x5/0xa [ 1280.016920] ? mempool_alloc+0x148/0x360 [ 1280.017744] ? mempool_free_pages+0x20/0x20 [ 1280.018624] should_failslab+0x5/0x20 [ 1280.019390] kmem_cache_alloc+0x5b/0x310 [ 1280.020206] ? mempool_free_pages+0x20/0x20 [ 1280.021129] mempool_alloc+0x148/0x360 [ 1280.021929] ? mempool_resize+0x7d0/0x7d0 [ 1280.022785] ? mark_lock+0xf5/0x2df0 [ 1280.023562] __sg_alloc_table+0x24e/0x390 [ 1280.024433] sg_alloc_table_chained+0x9b/0x1f0 [ 1280.025363] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 1280.026349] scsi_alloc_sgtables+0x236/0xaf0 [ 1280.027247] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 1280.028288] ? scsi_init_command+0x4ee/0x750 [ 1280.029182] scsi_queue_rq+0x1dc9/0x27f0 [ 1280.030016] blk_mq_dispatch_rq_list+0x372/0x1c30 [ 1280.030994] ? target_block+0x21/0x60 [ 1280.031771] ? __blk_mq_sched_dispatch_requests+0x236/0x450 [ 1280.032918] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 1280.033901] ? do_raw_spin_lock+0x121/0x260 [ 1280.034777] ? rwlock_bug.part.0+0x90/0x90 [ 1280.035624] ? hctx_lock+0x7f/0x200 [ 1280.036374] __blk_mq_sched_dispatch_requests+0x263/0x450 [ 1280.037472] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 1280.038484] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 1280.039553] __blk_mq_run_hw_queue+0x12c/0x290 [ 1280.040486] ? blk_mq_start_request+0x3f0/0x3f0 [ 1280.041431] __blk_mq_delay_run_hw_queue+0x4f1/0x550 [ 1280.042460] blk_mq_run_hw_queue+0x170/0x2f0 [ 1280.042492] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1280.042492] program syz-executor.5 not setting count and/or reply_len properly [ 1280.043350] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 1280.047572] ? do_raw_spin_unlock+0x4f/0x220 [ 1280.048478] ? _raw_spin_unlock+0x1a/0x30 [ 1280.049320] blk_mq_sched_insert_request+0x384/0x440 [ 1280.050349] ? __blk_mq_sched_bio_merge+0x3d0/0x3d0 [ 1280.051340] ? sg_remove_sfp_usercontext+0x420/0x420 [ 1280.052363] ? blk_account_io_start+0x11b/0x170 [ 1280.053303] sg_common_write.constprop.0+0xee9/0x1a30 [ 1280.054347] ? sg_build_indirect.isra.0+0x710/0x710 [ 1280.055346] ? __might_fault+0xd3/0x180 [ 1280.056161] ? lock_downgrade+0x6d0/0x6d0 [ 1280.057047] sg_write.part.0+0x69e/0xaa0 [ 1280.057863] ? sg_new_write.isra.0+0x770/0x770 [ 1280.058794] ? find_held_lock+0x2c/0x110 [ 1280.059617] ? __might_fault+0xd3/0x180 [ 1280.060412] ? lock_downgrade+0x6d0/0x6d0 [ 1280.061262] ? _cond_resched+0x12/0x80 [ 1280.062050] ? inode_security+0x107/0x140 [ 1280.062891] ? avc_policy_seqno+0x9/0x70 [ 1280.063703] ? selinux_file_permission+0x92/0x520 [ 1280.064704] ? security_file_permission+0x24e/0x570 [ 1280.065717] sg_write+0x87/0x120 [ 1280.066399] do_iter_write+0x482/0x670 [ 1280.067191] ? import_iovec+0x83/0xb0 [ 1280.067959] vfs_writev+0x1ae/0x620 [ 1280.068710] ? vfs_iter_write+0xa0/0xa0 [ 1280.069502] ? __fget_files+0x26d/0x4c0 [ 1280.070302] ? lock_downgrade+0x6d0/0x6d0 [ 1280.071145] ? find_held_lock+0x2c/0x110 [ 1280.071984] ? __fget_files+0x296/0x4c0 [ 1280.072813] ? __fget_light+0xea/0x290 [ 1280.073620] do_writev+0x139/0x300 [ 1280.074355] ? vfs_writev+0x620/0x620 [ 1280.075132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1280.076196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1280.077267] do_syscall_64+0x33/0x40 [ 1280.078025] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1280.079084] RIP: 0033:0x7fdf6458fb19 [ 1280.079845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.083555] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1280.085096] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1280.086519] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1280.087960] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.089437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1280.090880] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1280.131106] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1280.131106] program syz-executor.4 not setting count and/or reply_len properly 01:11:25 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:11:25 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 7) 01:11:25 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 1280.213923] device veth0_vlan entered promiscuous mode [ 1280.246814] FAULT_INJECTION: forcing a failure. [ 1280.246814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1280.249814] CPU: 0 PID: 13207 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1280.251207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1280.252890] Call Trace: [ 1280.253431] dump_stack+0x107/0x167 [ 1280.254183] should_fail.cold+0x5/0xa [ 1280.254955] __alloc_pages_nodemask+0x182/0x600 [ 1280.255916] ? __kmalloc+0x16e/0x390 [ 1280.256683] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1280.257885] ? trace_hardirqs_on+0x5b/0x180 01:11:25 executing program 7: prctl$PR_SET_FPEXC(0xc, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup(r2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x58, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x2c}}, 0x0) [ 1280.258854] alloc_pages_current+0x187/0x280 [ 1280.259760] sg_build_indirect.isra.0+0x2f5/0x710 [ 1280.260748] sg_common_write.constprop.0+0x992/0x1a30 [ 1280.261794] ? sg_build_indirect.isra.0+0x710/0x710 [ 1280.262789] ? __might_fault+0xd3/0x180 [ 1280.263597] ? lock_downgrade+0x6d0/0x6d0 [ 1280.264469] sg_write.part.0+0x69e/0xaa0 [ 1280.265303] ? sg_new_write.isra.0+0x770/0x770 [ 1280.266226] ? find_held_lock+0x2c/0x110 [ 1280.267069] ? __might_fault+0xd3/0x180 [ 1280.267866] ? lock_downgrade+0x6d0/0x6d0 [ 1280.268723] ? _cond_resched+0x12/0x80 [ 1280.269502] ? inode_security+0x107/0x140 [ 1280.270328] ? avc_policy_seqno+0x9/0x70 [ 1280.271135] ? selinux_file_permission+0x92/0x520 [ 1280.272099] ? security_file_permission+0x24e/0x570 [ 1280.273103] sg_write+0x87/0x120 [ 1280.273784] do_iter_write+0x482/0x670 [ 1280.274567] ? import_iovec+0x83/0xb0 [ 1280.275333] vfs_writev+0x1ae/0x620 [ 1280.276064] ? vfs_iter_write+0xa0/0xa0 [ 1280.276890] ? __fget_files+0x26d/0x4c0 [ 1280.277688] ? lock_downgrade+0x6d0/0x6d0 [ 1280.278519] ? find_held_lock+0x2c/0x110 [ 1280.279346] ? __fget_files+0x296/0x4c0 [ 1280.280172] ? __fget_light+0xea/0x290 [ 1280.280964] do_writev+0x139/0x300 [ 1280.281702] ? vfs_writev+0x620/0x620 [ 1280.282479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1280.283535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1280.284609] do_syscall_64+0x33/0x40 [ 1280.285366] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1280.286403] RIP: 0033:0x7f81f957bb19 [ 1280.287161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.290882] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1280.292445] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1280.293892] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1280.295356] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.296824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.298282] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1280.302757] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1280.302757] program syz-executor.0 not setting count and/or reply_len properly [ 1280.331514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=13259 comm=syz-executor.7 [ 1280.351361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=13259 comm=syz-executor.7 [ 1280.389981] device veth0_vlan entered promiscuous mode [ 1280.446852] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1280.446852] program syz-executor.5 not setting count and/or reply_len properly 01:11:42 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 8) 01:11:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000000000008000b0e25d34bde0c825", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='./file1/../file0\x00']) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x88001000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x298, 0x1d, 0x8, 0x70bd29, 0x25dfdbfb, {0x2}, [@nested={0x1af, 0x12, 0x0, 0x1, [@generic="54906e8f76bffbca5d25cbc1126d1c3ba2a436bc7942ccc82ced35eb46966e1dc9f4e97645dc2b0314c9a7e05481da1ec03820ffd576cd54024c82289a4ac367801ed54a3e9c3e04649be7", @typed={0x8, 0x75, 0x0, 0x0, @uid=r4}, @generic="f007f58f481a87215d4d0f0a4c8b22833466a77679ec38e9216aecf76e0328a7ca7d1dfcdc4a51ce41a6714787cdaebaeb552c6f52b0ce11c3bb63", @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="ed05f0dee01b073a174fafb02ef36eaf3daa9be2be82878246da5adcdedb11e852e9254a87efcc52047c885d65194270c5e5fdccf6f27009786cba416b91a1432b00", @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xc, 0x2c, 0x0, 0x0, @u64=0x3}, @generic="f708264ef4d8678ed6cbebb98fcd713b9e1da8042b61c4aebc5aef20d88e75cc66bdbdafb9dfef4d01149b0b9ac15a25821b7646a280e0ef36d0fa903aefb2bd657fb31c3c26d9d775c0b824d73836a00ab4f5566ef9077681e802874ccc0aedb522c421660e4f896958751ef1ae236663143a6cf9de678a8d09a4a70ccaa19812806a48f6a2151ef8170d145f908c6b0bc2a55ef3f0f493cfd2adeba24e8cbbe848b9205d57d39b619806", @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}]}, @generic="cd7bf8539e2f7ba23d5385f2d64469813c80e0de671c24e19d65fa091fbc37f66a115337b6edbdc4ddd201422d83c978768660210f5ff27016758e2ecbcea7ea1dcca19194c5bc31c64b0c91b5de373f27e67ae48c1c8f166c809ee65a1bc9f5c42f170c9aac78ba898c9742c2e086a0f97bb7a8321ff945525c03b6633723fdd3496bcc3580a560", @generic="b90fe33140c68a58617c7cac7c3266a300638d3fa03beddc17d06a6b5e476477d01eb75c0318a2402c0fc189574b94be0325b2e53cd5", @nested={0x14, 0x89, 0x0, 0x1, [@typed={0x4, 0x17}, @typed={0x8, 0x38, 0x0, 0x0, @uid=r5}, @typed={0x4, 0x35}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x48000}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r3, @ANYBLOB="04000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000080)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x4002c0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x81, 0x80, 0x20, 0x0, 0x65, 0x4a042, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x4}, 0x10000, 0x6, 0x6, 0x7, 0x7f, 0xfffffff7, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r6, 0xf) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) sendfile(r1, r3, 0x0, 0x100000001) 01:11:42 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 17) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:42 executing program 3: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x1, 0x6, &(0x7f0000000100)=[{&(0x7f0000000000)="22f76bf343b013", 0x7}, {&(0x7f0000000040)="8e32b6fb393b7448f040a93bb0dabb47d2b0a0e7c5b022d54d7c917a4c2790efb5ee7fccb7bf866d1af736c803c1bf9157fdc51128f8a4882f94032c14f29a9b0450e7173173181802c3dc38b72d5baa996c1ff00b38f2e0a32679a7f89d1a6a4f38f95ba4a0224ff81972ff07873b293f0775da20f5058ae06c32921804516b39e4f3aedd645c7bf3c673e8ff38412b1fbd7a043b370c49e7bb2745c8cc4b3ceac2bf4b9fd2e2ad9262f9e96622c48477aad6b75f457005608c17edf181", 0xbe}, {&(0x7f00000001c0)="5e5b7bd3ea938d68a692541e092884368805894baa24b8cc44f88de42aa614cf9f51f6ccaa49a0d35723910c3d5913d66313d959fe5e1d3d905d798aeb5eae91f00cfc421397e2d871cd1c8a6251ceea02d44b3f11fc5b87295cb346220a270e063195c2e72ebcb32f34a70742b56b5e83e0061bff517bc1ff4bb96dd152e57ea2c30a87083290a2bb3018a5bc7297197418f9af04615d8d670cd9c93ef8ce2a6d06bf2fccbf6f7daf4e020d0ec8ad2ed081d4886b707e6ec634", 0xba}, {&(0x7f0000000280)="3d89a75a1105bfabfba4ac4fd1ca9b0bb1ad2f6ea28b53452aeb90e3bbcf32477ec0eb9194ae80a16c5dc3372a18c029221fb9f51ab9e51d03d3b7aed59e857522f8c30a76bb35d2bd30833972ff2981d3349c66dd577bdd52251776b15043b1aa0455d7590a83b9cee151703444f4fbb97ea7c664029db4", 0x78}], 0x4, 0x2, 0x0, {0x1, r4}}, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x13, r5, 0x0) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000000040)=0x3, 0x3) syz_io_uring_setup(0x7c93, &(0x7f0000000340)={0x0, 0xa685, 0x4, 0x0, 0x1ee, 0x0, r6}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) 01:11:42 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:11:42 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 01:11:42 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:11:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x1a, 0x0, 0x70bd2d, 0x0, {}, [@generic='\x00\x00\x00\x00\x00\x00']}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=""/253, 0xfd}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) unshare(0x48020200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000140001000000080000140000020000001800008014000200fc0100"/44], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="b5143f5d", @ANYRES16=r6, @ANYBLOB="000326bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17cee26c0511551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) timerfd_settime(r4, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, &(0x7f00000002c0)) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x1) [ 1296.590104] FAULT_INJECTION: forcing a failure. [ 1296.590104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.590900] FAULT_INJECTION: forcing a failure. [ 1296.590900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1296.592830] CPU: 1 PID: 13281 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1296.592842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.592848] Call Trace: [ 1296.592879] dump_stack+0x107/0x167 [ 1296.592903] should_fail.cold+0x5/0xa [ 1296.592929] _copy_from_user+0x2e/0x1b0 [ 1296.592953] sg_write.part.0+0x5f7/0xaa0 [ 1296.592976] ? sg_new_write.isra.0+0x770/0x770 [ 1296.593003] ? find_held_lock+0x2c/0x110 [ 1296.593029] ? __might_fault+0xd3/0x180 [ 1296.593047] ? lock_downgrade+0x6d0/0x6d0 [ 1296.593065] ? __lock_acquire+0x1657/0x5b00 [ 1296.593096] ? _cond_resched+0x12/0x80 [ 1296.593114] ? inode_security+0x107/0x140 [ 1296.593132] ? avc_policy_seqno+0x9/0x70 [ 1296.593148] ? selinux_file_permission+0x92/0x520 [ 1296.593169] ? iov_iter_advance+0x23b/0xec0 [ 1296.593192] sg_write+0x87/0x120 [ 1296.593215] do_iter_write+0x482/0x670 [ 1296.593237] ? import_iovec+0x83/0xb0 [ 1296.593261] vfs_writev+0x1ae/0x620 [ 1296.593282] ? vfs_iter_write+0xa0/0xa0 [ 1296.593298] ? __fget_files+0x26d/0x4c0 [ 1296.593335] ? __fget_files+0x296/0x4c0 [ 1296.593364] ? __fget_light+0xea/0x290 [ 1296.593388] do_writev+0x139/0x300 [ 1296.593407] ? vfs_writev+0x620/0x620 [ 1296.593444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1296.619600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1296.620687] do_syscall_64+0x33/0x40 [ 1296.621445] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1296.622500] RIP: 0033:0x7fdf6458fb19 [ 1296.623265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.627030] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1296.628593] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1296.630046] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1296.631499] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.632968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1296.634436] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1296.635945] CPU: 0 PID: 13286 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1296.637351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.638983] Call Trace: [ 1296.639521] dump_stack+0x107/0x167 [ 1296.640250] should_fail.cold+0x5/0xa [ 1296.641039] __alloc_pages_nodemask+0x182/0x600 [ 1296.641969] ? __kmalloc+0x16e/0x390 [ 1296.642713] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1296.643913] ? trace_hardirqs_on+0x5b/0x180 [ 1296.644799] alloc_pages_current+0x187/0x280 [ 1296.645680] sg_build_indirect.isra.0+0x2f5/0x710 [ 1296.646654] sg_common_write.constprop.0+0x992/0x1a30 [ 1296.647719] ? sg_build_indirect.isra.0+0x710/0x710 [ 1296.648765] ? __might_fault+0xd3/0x180 [ 1296.649564] ? lock_downgrade+0x6d0/0x6d0 [ 1296.650420] sg_write.part.0+0x69e/0xaa0 [ 1296.651258] ? sg_new_write.isra.0+0x770/0x770 [ 1296.652178] ? find_held_lock+0x2c/0x110 [ 1296.653025] ? __might_fault+0xd3/0x180 [ 1296.653829] ? lock_downgrade+0x6d0/0x6d0 [ 1296.654709] ? _cond_resched+0x12/0x80 [ 1296.655505] ? inode_security+0x107/0x140 [ 1296.656352] ? avc_policy_seqno+0x9/0x70 [ 1296.657181] ? selinux_file_permission+0x92/0x520 [ 1296.658159] ? security_file_permission+0x24e/0x570 [ 1296.659175] sg_write+0x87/0x120 [ 1296.659869] do_iter_write+0x482/0x670 [ 1296.660660] ? import_iovec+0x83/0xb0 [ 1296.661424] vfs_writev+0x1ae/0x620 [ 1296.662149] ? vfs_iter_write+0xa0/0xa0 [ 1296.662943] ? __fget_files+0x26d/0x4c0 [ 1296.663733] ? lock_downgrade+0x6d0/0x6d0 [ 1296.664571] ? find_held_lock+0x2c/0x110 [ 1296.665389] ? __fget_files+0x296/0x4c0 [ 1296.666192] ? __fget_light+0xea/0x290 [ 1296.666971] do_writev+0x139/0x300 [ 1296.667682] ? vfs_writev+0x620/0x620 [ 1296.668447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1296.669541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1296.670568] do_syscall_64+0x33/0x40 [ 1296.671322] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1296.672338] RIP: 0033:0x7f81f957bb19 [ 1296.673093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.676714] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1296.678222] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1296.679650] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1296.681078] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.682483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.683896] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1296.705208] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1296.705208] program syz-executor.5 not setting count and/or reply_len properly [ 1296.712855] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 1296.733104] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1296.733104] program syz-executor.0 not setting count and/or reply_len properly 01:11:42 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpgid(r1, r1) ptrace(0x420e, r1) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000140)=r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x8) ptrace$getenv(0x4201, r1, 0x1f, &(0x7f0000000440)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000d801040101000000000000000000000000087aa976981e74f4add55e20bc0248a60ae573ce410fe9caec01acd9ae820e995b6b160414a6eafc74c2040af98637f21c77366fb6382950131de5e98ef26de13c6dc180dc94000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008084}, 0x200400c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x3, 0xffffff76, 0xda0, 0x2760, 0x10001}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000480)={0x0, 0x0, 0x200, 0xc2}, 0x10) syz_io_uring_submit(0x0, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000300)="be3ba1d095204afbc67c71a53708dfc7934b959d3071c322a17fff3cad9fe8bb02da0be505ebbb739420d61bbc0df6e62899dde38f9b1713060d243da26d02214a7df274ae575eb3d82496abd0704a", 0x5, 0x0, 0x0, {0x3}}, 0x2) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008000}, 0x20044800) 01:11:42 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 9) 01:11:42 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 1296.894335] FAULT_INJECTION: forcing a failure. [ 1296.894335] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1296.897314] CPU: 1 PID: 13406 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1296.898733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1296.900422] Call Trace: [ 1296.900984] dump_stack+0x107/0x167 [ 1296.901740] should_fail.cold+0x5/0xa [ 1296.902534] __alloc_pages_nodemask+0x182/0x600 [ 1296.903498] ? __kmalloc+0x16e/0x390 [ 1296.904256] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1296.905490] ? trace_hardirqs_on+0x5b/0x180 [ 1296.906379] alloc_pages_current+0x187/0x280 [ 1296.907285] sg_build_indirect.isra.0+0x2f5/0x710 [ 1296.908272] sg_common_write.constprop.0+0x992/0x1a30 [ 1296.909374] ? sg_build_indirect.isra.0+0x710/0x710 [ 1296.910400] ? __might_fault+0xd3/0x180 [ 1296.911223] ? lock_downgrade+0x6d0/0x6d0 [ 1296.912105] sg_write.part.0+0x69e/0xaa0 [ 1296.912949] ? sg_new_write.isra.0+0x770/0x770 [ 1296.913896] ? find_held_lock+0x2c/0x110 [ 1296.914744] ? __might_fault+0xd3/0x180 [ 1296.915557] ? lock_downgrade+0x6d0/0x6d0 [ 1296.916426] ? _cond_resched+0x12/0x80 [ 1296.917235] ? inode_security+0x107/0x140 [ 1296.918083] ? avc_policy_seqno+0x9/0x70 [ 1296.918918] ? selinux_file_permission+0x92/0x520 [ 1296.919921] ? security_file_permission+0x24e/0x570 [ 1296.920969] sg_write+0x87/0x120 [ 1296.921674] do_iter_write+0x482/0x670 [ 1296.922481] ? import_iovec+0x83/0xb0 [ 1296.923266] vfs_writev+0x1ae/0x620 [ 1296.924024] ? vfs_iter_write+0xa0/0xa0 [ 1296.924854] ? __fget_files+0x26d/0x4c0 [ 1296.925674] ? lock_downgrade+0x6d0/0x6d0 [ 1296.926524] ? find_held_lock+0x2c/0x110 [ 1296.927369] ? __fget_files+0x296/0x4c0 [ 1296.928200] ? __fget_light+0xea/0x290 [ 1296.929021] do_writev+0x139/0x300 [ 1296.929747] ? vfs_writev+0x620/0x620 [ 1296.930534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1296.931610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1296.932702] do_syscall_64+0x33/0x40 [ 1296.933468] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1296.934523] RIP: 0033:0x7f81f957bb19 [ 1296.935284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1296.939052] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1296.940611] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1296.942058] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1296.943521] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1296.945019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.946482] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 01:11:42 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:11:42 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x0, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1296.977368] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1297.008998] netlink: 'syz-executor.7': attribute type 2 has an invalid length. [ 1297.027210] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1297.055375] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1297.055375] program syz-executor.0 not setting count and/or reply_len properly 01:11:42 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 18) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:42 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffffa}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='stripe=0x0040000']) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x5, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000240)="96948082313bbbaf43e0fece8d54fc694d94d9cb2542617e71829d3cf0a4ba33141b1cbb202ef447fb574d20554dbb56c59db609abdd8ba4cae9df961ff80c4b86e1b118097f359ef1e7374868650c00d8df9e803643cb9db28ad32b5a8b37d6da4336dc740cbcf8928e2d245d95f20defe38540282cdf5697ac7cb8a3f38fd2f5083486e7168dc9477300c2bd99e00253b94b51894dd6fb641ce818875e13093fab8cd0dc58bed3bd73e3af45e6312c5cb71539651e2b81ef0b064bc0ea0b5f04ad1d9fa74546716a669f25989907a21c6e5ec63f5ec05995a18692a588adc77d1c6c4a4ccbb37bd503e8e2", 0xec}, {&(0x7f0000000340)="a2dfd75f18bf8755f51695fbd40352a390db1e68bdcb47afe847ec62a0de6cd8ea036ebc9b8dabfc23af", 0x2a, 0xff}, {&(0x7f0000000380)="53b5b627705a01cd76bc75419ee53396b454690ab73f906cc34a84916c5df4c9a92c355eaf9cc8e54419dc3cc0e8573165b0837e04c65fd4e5aae733fb6875fa73e2a94c374ce5e417cf189c24bd7c6d8774a1c4ad276ab0f1f6c3521aa93efb764b22cc2c22191343c58c05eb65c6aea0e62bc4f0ad3ff0008303b7468bf1c53ab31235875377cec38bd95d62e9d4f5", 0x90, 0x80000000}, {&(0x7f0000000440)="f02f8169fb763ad5e7c6d7b468a0a32d562e0ae116f14ab3e2fd6c6b142d61b620e3b902552e41bb66c1c5265d5ae2bc6a9d2b34a3a210389cf62cd3b1236e285ff52de2dbd38260e09100a298f4abf810e0238fa0e0aa73b165d9d23491597c66f4e107d8b76d0fca524da39a2d281b1a7b75fffc65e592bb3d00", 0x7b, 0x48000000000}], 0x2000002, &(0x7f0000000800)=ANY=[@ANYBLOB="687567653d6e657665722c73697a653d33783665673967352c687567653d6164766973652c6d706f6c3d7072656665723d7374617469632c6d706f6c3d62696e643d72656c61746976652c73697a653d6d313665326b2c6769643da7463778c7a56bd9e04922daef9836e7bf4bc8186168bf26e30390140da5e0c975543425147b7239749f5c6a80236d3ac5bfdcb3780c9a5b8a4b4a0e83af488547c260e0ae6e558ea5fcbcd552b09f90d0c0b1fe8c2f0cd5a18af5675c8c6c891a8bdba1c51f8d832f7570386f8b4800d7508f30f5d59fe39e2b315f3f3b06672775274aacd011d2296b2df8f5d70b5e0bad7842a00c39753346c5f67ebd3af3ceb6447c0590513b555c42f4f061bdef5eff8e9ea1b339c065a96b9ff403284bc85776cd653fbf46ab6e19ae9167c020bafd51ddb9505509fd547b7ff9c4597713d0073c5fe4c24448e3a91344", @ANYRESHEX, @ANYBLOB=',huge=advise,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',func=FILE_CHECK,\x00']) recvfrom(0xffffffffffffffff, &(0x7f0000000600)=""/157, 0x9d, 0x2000, &(0x7f00000006c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) mount$9p_unix(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x40000, &(0x7f00000009c0)={'trans=unix,', {[{@access_any}, {@cachetag={'cachetag', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@aname={'aname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@cache_mmap}, {@cache_fscache}, {@version_9p2000}, {@mmap}, {@aname={'aname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}], [{@smackfsdef={'smackfsdef', 0x3d, '+*(]\'-$'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}@!&+,&'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@subj_role={'subj_role', 0x3d, '}+'}}]}}) mount$bind(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x2000, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="7f14fb56fd2e29ae0d6409d92f0b8ca2053d2082a9ddadbc6eebfb152afc11fb60e4f50fdadc1997549a8416", 0x2c, 0x4, &(0x7f0000000780)=@nfc={0x27, 0x1, 0x1, 0x6}, 0x80) [ 1297.130189] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1297.130189] program syz-executor.5 not setting count and/or reply_len properly [ 1297.150921] FAULT_INJECTION: forcing a failure. [ 1297.150921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.153486] CPU: 1 PID: 13419 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1297.154895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1297.156601] Call Trace: [ 1297.157152] dump_stack+0x107/0x167 [ 1297.157907] should_fail.cold+0x5/0xa [ 1297.158691] _copy_from_user+0x2e/0x1b0 [ 1297.159507] sg_write.part.0+0x1cf/0xaa0 [ 1297.160337] ? sg_new_write.isra.0+0x770/0x770 [ 1297.161308] ? find_held_lock+0x2c/0x110 [ 1297.162149] ? __might_fault+0xd3/0x180 [ 1297.162969] ? lock_downgrade+0x6d0/0x6d0 [ 1297.163827] ? _cond_resched+0x12/0x80 [ 1297.164625] ? inode_security+0x107/0x140 [ 1297.165458] ? avc_policy_seqno+0x9/0x70 [ 1297.166293] ? selinux_file_permission+0x92/0x520 [ 1297.167269] ? iov_iter_advance+0x23b/0xec0 [ 1297.168151] sg_write+0x87/0x120 [ 1297.168849] do_iter_write+0x482/0x670 [ 1297.169660] ? import_iovec+0x83/0xb0 [ 1297.170446] vfs_writev+0x1ae/0x620 [ 1297.171203] ? vfs_iter_write+0xa0/0xa0 [ 1297.172008] ? __fget_files+0x26d/0x4c0 [ 1297.172831] ? lock_downgrade+0x6d0/0x6d0 [ 1297.173685] ? find_held_lock+0x2c/0x110 [ 1297.174530] ? __fget_files+0x296/0x4c0 [ 1297.175351] ? __fget_light+0xea/0x290 [ 1297.176153] do_writev+0x139/0x300 [ 1297.176903] ? vfs_writev+0x620/0x620 [ 1297.177695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1297.178766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1297.179827] do_syscall_64+0x33/0x40 [ 1297.180589] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1297.181644] RIP: 0033:0x7fdf6458fb19 [ 1297.182408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1297.186148] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1297.187680] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1297.189124] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1297.190548] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.191996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1297.193438] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1297.196383] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1297.197939] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:11:42 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 10) [ 1297.296901] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0040000,errors=continue [ 1297.372832] FAULT_INJECTION: forcing a failure. [ 1297.372832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1297.375722] CPU: 0 PID: 13519 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1297.377107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1297.378824] Call Trace: [ 1297.379377] dump_stack+0x107/0x167 [ 1297.380129] should_fail.cold+0x5/0xa [ 1297.380922] __alloc_pages_nodemask+0x182/0x600 [ 1297.381887] ? __kmalloc+0x16e/0x390 [ 1297.382649] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1297.383860] ? trace_hardirqs_on+0x5b/0x180 [ 1297.384764] alloc_pages_current+0x187/0x280 [ 1297.385665] sg_build_indirect.isra.0+0x2f5/0x710 [ 1297.386678] sg_common_write.constprop.0+0x992/0x1a30 [ 1297.387759] ? sg_build_indirect.isra.0+0x710/0x710 [ 1297.388800] ? __might_fault+0xd3/0x180 [ 1297.389626] ? lock_downgrade+0x6d0/0x6d0 [ 1297.390515] sg_write.part.0+0x69e/0xaa0 [ 1297.391350] ? sg_new_write.isra.0+0x770/0x770 [ 1297.392303] ? find_held_lock+0x2c/0x110 [ 1297.393155] ? __might_fault+0xd3/0x180 [ 1297.393949] ? lock_downgrade+0x6d0/0x6d0 [ 1297.394801] ? _cond_resched+0x12/0x80 [ 1297.395601] ? inode_security+0x107/0x140 [ 1297.396455] ? avc_policy_seqno+0x9/0x70 [ 1297.397270] ? selinux_file_permission+0x92/0x520 [ 1297.398271] ? security_file_permission+0x24e/0x570 [ 1297.399316] sg_write+0x87/0x120 [ 1297.400009] do_iter_write+0x482/0x670 [ 1297.400835] ? import_iovec+0x83/0xb0 [ 1297.401611] vfs_writev+0x1ae/0x620 [ 1297.402375] ? vfs_iter_write+0xa0/0xa0 [ 1297.403204] ? __fget_files+0x26d/0x4c0 [ 1297.404018] ? lock_downgrade+0x6d0/0x6d0 [ 1297.404878] ? find_held_lock+0x2c/0x110 [ 1297.405723] ? __fget_files+0x296/0x4c0 [ 1297.406548] ? __fget_light+0xea/0x290 [ 1297.407339] do_writev+0x139/0x300 [ 1297.408053] ? vfs_writev+0x620/0x620 [ 1297.408858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1297.409926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1297.410999] do_syscall_64+0x33/0x40 [ 1297.411763] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1297.412798] RIP: 0033:0x7f81f957bb19 [ 1297.413552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1297.417245] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1297.418796] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1297.420254] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1297.421713] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1297.423139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1297.424611] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1297.429973] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1297.429973] program syz-executor.5 not setting count and/or reply_len properly 01:11:58 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:11:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) sendfile(r1, r0, 0x0, 0x500000001) 01:11:58 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 11) 01:11:58 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x0, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:11:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1312.483923] FAULT_INJECTION: forcing a failure. [ 1312.483923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.485764] CPU: 1 PID: 13547 Comm: syz-executor.0 Not tainted 5.10.198 #1 [ 1312.486601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1312.487595] Call Trace: [ 1312.487926] dump_stack+0x107/0x167 [ 1312.488361] should_fail.cold+0x5/0xa [ 1312.488844] _copy_from_user+0x2e/0x1b0 [ 1312.489323] iovec_from_user+0x141/0x400 [ 1312.489804] __import_iovec+0x67/0x590 [ 1312.490448] ? SOFTIRQ_verbose+0x10/0x10 [ 1312.490945] import_iovec+0x83/0xb0 [ 1312.491386] vfs_writev+0xc1/0x620 [ 1312.491820] ? vfs_iter_write+0xa0/0xa0 [ 1312.492293] ? __fget_files+0x26d/0x4c0 [ 1312.492815] ? lock_downgrade+0x6d0/0x6d0 [ 1312.493303] ? find_held_lock+0x2c/0x110 [ 1312.493793] ? __fget_files+0x296/0x4c0 [ 1312.494278] ? __fget_light+0xea/0x290 [ 1312.494755] do_writev+0x139/0x300 [ 1312.495172] ? vfs_writev+0x620/0x620 [ 1312.495635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1312.496273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1312.496915] do_syscall_64+0x33/0x40 [ 1312.497348] entry_SYSCALL_64_after_hwframe+0x62/0xc7 01:11:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9a, 0x80, 0x2, 0x1f, 0x0, 0x7, 0x80001, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2}, 0x2028, 0x6, 0x40, 0x6, 0x7, 0x0, 0xff, 0x0, 0xfffffeff}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) fsetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="6f58782e5e5b2921142f671149da2e5b00"], &(0x7f0000000200)=',$,@#}\x00', 0x7, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24fe2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x877, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r3, r2) accept$unix(r1, 0x0, &(0x7f0000000080)) 01:11:58 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 19) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:58 executing program 7: ftruncate(0xffffffffffffffff, 0xffff) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x0, 0x0, 0x5, 0x7, 0x7]}, 0x0) r0 = creat(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c100000140001000000000000eae8c5f8873406a7515a7170496edf000000020000001800008014000200fcb6183f0dc0cb269e0d783019fc746ab88ee589c21acb027896dfa8380faa3bef95458d055c5c73225ef0958021c9bd77fbd8dc139840cf97ad360a34892ee2a0e15ea5772c7f1705d237a7c8fb130806ca59d66bb547dffd672425520f673eae"], 0x2c}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24006005}, 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="9a", 0x1}], 0x1}}], 0x1, 0x4044854) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x500, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/189]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001c40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001e00)={0x78c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x75a}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x8, 0x20, 0x3}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x94f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xede}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x78c}, 0x1, 0x0, 0x0, 0x10}, 0x40) [ 1312.497963] RIP: 0033:0x7f10668b3b19 [ 1312.498525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1312.500735] RSP: 002b:00007f1063e29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1312.501649] RAX: ffffffffffffffda RBX: 00007f10669c6f60 RCX: 00007f10668b3b19 [ 1312.502480] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1312.503366] RBP: 00007f1063e291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.504262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.505145] FAULT_INJECTION: forcing a failure. [ 1312.505145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.505180] R13: 00007ffd803064bf R14: 00007f1063e29300 R15: 0000000000022000 [ 1312.509845] CPU: 0 PID: 13552 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1312.511266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1312.512953] Call Trace: [ 1312.513500] dump_stack+0x107/0x167 [ 1312.514254] should_fail.cold+0x5/0xa [ 1312.515037] _copy_from_user+0x2e/0x1b0 [ 1312.515858] sg_write.part.0+0x5f7/0xaa0 [ 1312.516712] ? sg_new_write.isra.0+0x770/0x770 [ 1312.517660] ? find_held_lock+0x2c/0x110 [ 1312.518501] ? __might_fault+0xd3/0x180 [ 1312.519325] ? lock_downgrade+0x6d0/0x6d0 [ 1312.520197] ? _cond_resched+0x12/0x80 [ 1312.521061] ? inode_security+0x107/0x140 [ 1312.521915] ? avc_policy_seqno+0x9/0x70 [ 1312.522753] ? selinux_file_permission+0x92/0x520 [ 1312.523758] ? iov_iter_advance+0x23b/0xec0 [ 1312.524657] sg_write+0x87/0x120 [ 1312.525369] do_iter_write+0x482/0x670 [ 1312.526181] ? import_iovec+0x83/0xb0 [ 1312.526980] vfs_writev+0x1ae/0x620 [ 1312.527734] ? vfs_iter_write+0xa0/0xa0 [ 1312.528554] ? __fget_files+0x26d/0x4c0 [ 1312.529390] ? lock_downgrade+0x6d0/0x6d0 [ 1312.530243] ? find_held_lock+0x2c/0x110 [ 1312.531095] ? __fget_files+0x296/0x4c0 [ 1312.531926] ? __fget_light+0xea/0x290 [ 1312.532743] do_writev+0x139/0x300 [ 1312.533484] ? vfs_writev+0x620/0x620 [ 1312.534292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1312.535371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1312.536426] do_syscall_64+0x33/0x40 [ 1312.537201] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1312.538233] RIP: 0033:0x7fdf6458fb19 [ 1312.538998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1312.542717] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1312.544244] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1312.545672] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1312.547078] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.548493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.549910] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1312.570904] FAULT_INJECTION: forcing a failure. [ 1312.570904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1312.573873] CPU: 0 PID: 13544 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1312.575275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1312.576988] Call Trace: [ 1312.577521] dump_stack+0x107/0x167 [ 1312.578264] should_fail.cold+0x5/0xa [ 1312.579030] __alloc_pages_nodemask+0x182/0x600 [ 1312.579975] ? __kmalloc+0x16e/0x390 [ 1312.580736] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1312.581954] ? trace_hardirqs_on+0x5b/0x180 [ 1312.582829] alloc_pages_current+0x187/0x280 [ 1312.583726] sg_build_indirect.isra.0+0x2f5/0x710 [ 1312.584710] sg_common_write.constprop.0+0x992/0x1a30 [ 1312.585763] ? sg_build_indirect.isra.0+0x710/0x710 [ 1312.586760] ? __might_fault+0xd3/0x180 [ 1312.587556] ? lock_downgrade+0x6d0/0x6d0 [ 1312.588414] sg_write.part.0+0x69e/0xaa0 [ 1312.589251] ? sg_new_write.isra.0+0x770/0x770 [ 1312.590167] ? find_held_lock+0x2c/0x110 [ 1312.590993] ? __might_fault+0xd3/0x180 [ 1312.591792] ? lock_downgrade+0x6d0/0x6d0 [ 1312.592632] ? _cond_resched+0x12/0x80 [ 1312.593424] ? inode_security+0x107/0x140 [ 1312.594255] ? avc_policy_seqno+0x9/0x70 [ 1312.595074] ? selinux_file_permission+0x92/0x520 [ 1312.596052] ? security_file_permission+0x24e/0x570 [ 1312.597071] sg_write+0x87/0x120 [ 1312.597757] do_iter_write+0x482/0x670 [ 1312.598549] ? import_iovec+0x83/0xb0 [ 1312.599322] vfs_writev+0x1ae/0x620 [ 1312.600061] ? vfs_iter_write+0xa0/0xa0 [ 1312.600870] ? __fget_files+0x26d/0x4c0 [ 1312.601672] ? lock_downgrade+0x6d0/0x6d0 [ 1312.602505] ? find_held_lock+0x2c/0x110 [ 1312.603343] ? __fget_files+0x296/0x4c0 [ 1312.604152] ? __fget_light+0xea/0x290 [ 1312.604954] do_writev+0x139/0x300 [ 1312.605671] ? vfs_writev+0x620/0x620 [ 1312.606445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1312.607510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1312.608553] do_syscall_64+0x33/0x40 [ 1312.609334] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1312.610373] RIP: 0033:0x7f81f957bb19 [ 1312.611136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1312.614829] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1312.616377] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1312.617815] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1312.619229] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.620643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.622083] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 01:11:58 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1312.672747] netlink: 4648 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1312.676938] FAULT_INJECTION: forcing a failure. [ 1312.676938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.678265] CPU: 1 PID: 13657 Comm: syz-executor.0 Not tainted 5.10.198 #1 01:11:58 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 20) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:11:58 executing program 6: pipe2(0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000014c0)={'HL\x00'}, &(0x7f0000001540)=0x1e) pipe2(0x0, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0x3, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000001340)=""/77, 0xffffffffffffff51) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1248}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r0, 0x10, 0x8000, 0x20) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x16, r5}) [ 1312.679119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1312.680213] Call Trace: [ 1312.680513] dump_stack+0x107/0x167 [ 1312.680927] should_fail.cold+0x5/0xa [ 1312.681363] _copy_from_user+0x2e/0x1b0 [ 1312.681815] sg_write.part.0+0x1cf/0xaa0 [ 1312.682278] ? mark_lock+0xf5/0x2df0 [ 1312.682699] ? sg_new_write.isra.0+0x770/0x770 [ 1312.683219] ? lock_acquire+0x197/0x470 [ 1312.683665] ? find_held_lock+0x2c/0x110 [ 1312.684124] ? __might_fault+0xd3/0x180 [ 1312.684573] ? lock_downgrade+0x6d0/0x6d0 [ 1312.685059] ? _cond_resched+0x12/0x80 [ 1312.685504] ? inode_security+0x107/0x140 [ 1312.685973] ? avc_policy_seqno+0x9/0x70 sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e80)=ANY=[@ANYBLOB="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"], 0x10a0}, 0x1, 0x0, 0x0, 0x20000841}, 0x40014) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xff, 0x7, 0x0) sendmsg$nl_generic(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={0x0, 0x224}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) io_uring_setup(0x5473, &(0x7f00000000c0)={0x0, 0x7ba4, 0x3a, 0x1, 0x1c0, 0x0, r0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)=ANY=[@ANYBLOB="1418eb00", @ANYRES16=0x0, @ANYBLOB="200000000000ffdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) syz_genetlink_get_family_id$nbd(&(0x7f0000001500), 0xffffffffffffffff) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000000)=0x6, 0x4) [ 1312.686506] ? selinux_file_permission+0x92/0x520 [ 1312.687086] ? security_file_permission+0x24e/0x570 [ 1312.687655] sg_write+0x87/0x120 [ 1312.688037] do_iter_write+0x482/0x670 [ 1312.688486] ? import_iovec+0x83/0xb0 [ 1312.688931] vfs_writev+0x1ae/0x620 [ 1312.689344] ? vfs_iter_write+0xa0/0xa0 [ 1312.689796] ? __fget_files+0x26d/0x4c0 [ 1312.690244] ? lock_downgrade+0x6d0/0x6d0 [ 1312.690705] ? find_held_lock+0x2c/0x110 [ 1312.691172] ? __fget_files+0x296/0x4c0 [ 1312.691627] ? __fget_light+0xea/0x290 [ 1312.692070] do_writev+0x139/0x300 [ 1312.692472] ? vfs_writev+0x620/0x620 [ 1312.692963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1312.693546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1312.694122] do_syscall_64+0x33/0x40 [ 1312.694535] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1312.695125] RIP: 0033:0x7f10668b3b19 [ 1312.695543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1312.697583] RSP: 002b:00007f1063e29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1312.698433] RAX: ffffffffffffffda RBX: 00007f10669c6f60 RCX: 00007f10668b3b19 [ 1312.699253] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1312.700047] RBP: 00007f1063e291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.700819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.701617] R13: 00007ffd803064bf R14: 00007f1063e29300 R15: 0000000000022000 01:11:58 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x58, r4, 0x0, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x58}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:11:58 executing program 7: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) perf_event_open(&(0x7f0000000880)={0x0, 0x80, 0x0, 0x97, 0x7, 0x0, 0x0, 0x0, 0xc101, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc, 0x0, @perf_bp={&(0x7f0000000780), 0x8}, 0x83, 0x78916be4, 0x40, 0x1, 0x0, 0xa3, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$P9_RCREATE(r1, &(0x7f0000000840)={0x18, 0x73, 0x1, {{0x1, 0x2, 0x5}, 0x6}}, 0x18) socketpair(0x2a, 0x3, 0x800, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f454c46dffeade8090000000000000003c2b7003e0020000000c7010000000000004000000000000000d70200000000000000000000faff380001000300090000000100000003000000050000000000000008000000000000000100000000000000ff0f0000000000000000000000000000fdfffffffffffffff28bed58d2a14e2b4475f64c8daee17e80a56e00"/1421], 0x58b) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x3}, 0x6) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x2}, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="d28bfc40ee1f9179415e16f5ef34f88b452ab30cfaab97c0a9d9eec3fce940b1dd713c62bdf84a9f93d7dc6e26c3ace792f8c9f9de183038c0bc77c7dd8ae3c153fe461927d25583220d85f0aa7f0dc3b55b10c01e4569cfefa5679deb08c5c3fb316e8982a4b550f28ab5536675ab0ad830d2d9916ebe604c300e266325895d130b9f5de3671145eab232352178abf4e8001b2dae2ecb745cd836d041af654c8d147d587d2f12371ff28cdfad02c1cabc5233206b60e4a70ad26e70432c4d1315a6d7dc509326a8f2f9836a4411694a3b56d313fc84c5cfd9b8f8e05ccf360d0d7fa587c84ccc1cec44191264189854d1e50829777367e37b2cf32b6fb984b68215833d702302c22c14f8226636fa981a6782e4acd632d12a3217476e7a4b39a7f4c6fe0064c84bc838b6e40ede7031319c5a6485c47d85bf6c52c69af6e8df8db082305bf6be9a2e", 0x149, 0x0, &(0x7f00000005c0)={0x2, 0xbd, {0x1, 0xc, 0x18, "22dd7d1b429b5b5fcc63fd53d7cb9e837d5e843c1b59913c", 0x98, "77ae175dddccf8b1b84484c657155c4fd61567af1fd73f7031448f901d21d4347c0b028dafe09702296a9d18c8fa4ef9f278d94cec6b25cccbf305511a814a98b5efa0ab89562021d7f3afb49a260636ebdf350228485d145a270a6a667ec8e8c9e111a27edbcddc48ec1bf0b534daa5f8a0e420d1f42758836e82df6dca8a6fa4363738be36e38f6a76c8c7242d834443f132ca9d471c3e"}, 0x75, "113f2842abc3264fcc744f3837e90c14f223526bbcb5ae2822cc7e5ed91495c714e93b76400034d18c162f9c523d35a1ac5eb94a760da6b240b09f6193365f264e6680a214c6141fa008c336b11c282690633843ff83d8ad5562e00d2e18ccb113cee08512d95da8eb97757771405a6d7dcc360278"}, 0x13e}) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0]\xe6\x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r3) [ 1312.742574] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1312.742574] program syz-executor.4 not setting count and/or reply_len properly [ 1312.755642] FAULT_INJECTION: forcing a failure. [ 1312.755642] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.756932] CPU: 1 PID: 13670 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1312.757675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1312.758589] Call Trace: [ 1312.758878] dump_stack+0x107/0x167 [ 1312.759269] should_fail.cold+0x5/0xa [ 1312.759676] ? sg_build_indirect.isra.0+0x94/0x710 [ 1312.760206] should_failslab+0x5/0x20 [ 1312.760613] __kmalloc+0x72/0x390 [ 1312.761004] sg_build_indirect.isra.0+0x94/0x710 [ 1312.761551] ? scsi_req_init+0x18/0xb0 [ 1312.761970] ? scsi_initialize_rq+0x16/0xb0 [ 1312.762434] sg_common_write.constprop.0+0x992/0x1a30 [ 1312.762995] ? sg_build_indirect.isra.0+0x710/0x710 [ 1312.763541] ? vprintk_func+0x93/0x140 [ 1312.763953] ? printk+0xba/0xf1 [ 1312.764315] ? record_print_text.cold+0x16/0x16 [ 1312.764839] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1312.765390] ? trace_hardirqs_on+0x5b/0x180 [ 1312.765880] sg_write.part.0+0x69e/0xaa0 [ 1312.766341] ? sg_new_write.isra.0+0x770/0x770 [ 1312.766862] ? find_held_lock+0x2c/0x110 [ 1312.767306] ? __might_fault+0xd3/0x180 [ 1312.767741] ? lock_downgrade+0x6d0/0x6d0 [ 1312.768215] ? _cond_resched+0x12/0x80 [ 1312.768663] ? inode_security+0x107/0x140 [ 1312.769139] ? avc_policy_seqno+0x9/0x70 [ 1312.769583] ? selinux_file_permission+0x92/0x520 [ 1312.770109] ? iov_iter_advance+0x23b/0xec0 [ 1312.770597] sg_write+0x87/0x120 [ 1312.770979] do_iter_write+0x482/0x670 [ 1312.771410] ? import_iovec+0x83/0xb0 [ 1312.771844] vfs_writev+0x1ae/0x620 [ 1312.772245] ? vfs_iter_write+0xa0/0xa0 [ 1312.772685] ? __fget_files+0x26d/0x4c0 [ 1312.773129] ? lock_downgrade+0x6d0/0x6d0 [ 1312.773595] ? find_held_lock+0x2c/0x110 [ 1312.774049] ? __fget_files+0x296/0x4c0 [ 1312.774498] ? __fget_light+0xea/0x290 [ 1312.774916] do_writev+0x139/0x300 [ 1312.775318] ? vfs_writev+0x620/0x620 [ 1312.775746] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1312.776329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1312.776905] do_syscall_64+0x33/0x40 [ 1312.777315] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1312.777891] RIP: 0033:0x7fdf6458fb19 [ 1312.778304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1312.780297] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1312.781143] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1312.781921] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1312.782724] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.783510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.784288] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1312.796209] netlink: 4648 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1312.803242] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1312.803242] program syz-executor.5 not setting count and/or reply_len properly 01:11:58 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:12:17 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 3) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:12:17 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:12:17 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:12:17 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x7, 0x8, 0x0, 0x88, 0x0, 0x20, 0x1862, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xb09c}, 0x0, 0x5, 0x0, 0x5, 0x80000001, 0x4, 0xc64, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x500000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x34}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x3, r7, 0x1, 0x80, 0x6, @multicast}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200001, 0x12345}, 0xbe) setresuid(0xffffffffffffffff, 0x0, 0x0) 01:12:17 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 12) 01:12:17 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 01:12:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x3) openat(r0, &(0x7f0000000000)='./file1\x00', 0x40400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) 01:12:17 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 21) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1331.406307] FAULT_INJECTION: forcing a failure. [ 1331.406307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.409058] CPU: 1 PID: 13806 Comm: syz-executor.0 Not tainted 5.10.198 #1 [ 1331.410469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.412145] Call Trace: [ 1331.412688] dump_stack+0x107/0x167 [ 1331.413433] should_fail.cold+0x5/0xa [ 1331.414204] _copy_from_user+0x2e/0x1b0 [ 1331.414995] sg_write.part.0+0x5f7/0xaa0 [ 1331.415818] ? sg_new_write.isra.0+0x770/0x770 [ 1331.416739] ? find_held_lock+0x2c/0x110 [ 1331.417605] ? __might_fault+0xd3/0x180 [ 1331.418415] ? lock_downgrade+0x6d0/0x6d0 [ 1331.419279] ? _cond_resched+0x12/0x80 [ 1331.420076] ? inode_security+0x107/0x140 [ 1331.420942] ? avc_policy_seqno+0x9/0x70 [ 1331.421764] ? selinux_file_permission+0x92/0x520 [ 1331.422768] ? security_file_permission+0x24e/0x570 [ 1331.423801] sg_write+0x87/0x120 [ 1331.424498] do_iter_write+0x482/0x670 [ 1331.425303] ? import_iovec+0x83/0xb0 [ 1331.426097] vfs_writev+0x1ae/0x620 [ 1331.426848] ? vfs_iter_write+0xa0/0xa0 [ 1331.427667] ? __fget_files+0x26d/0x4c0 [ 1331.428102] FAULT_INJECTION: forcing a failure. [ 1331.428102] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.428482] ? lock_downgrade+0x6d0/0x6d0 [ 1331.428499] ? find_held_lock+0x2c/0x110 [ 1331.428531] ? __fget_files+0x296/0x4c0 [ 1331.428561] ? __fget_light+0xea/0x290 [ 1331.428587] do_writev+0x139/0x300 [ 1331.434814] ? vfs_writev+0x620/0x620 [ 1331.435603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.436682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.437760] do_syscall_64+0x33/0x40 [ 1331.438522] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.439571] RIP: 0033:0x7f10668b3b19 [ 1331.440331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.444098] RSP: 002b:00007f1063e29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1331.445692] RAX: ffffffffffffffda RBX: 00007f10669c6f60 RCX: 00007f10668b3b19 [ 1331.447156] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1331.448624] RBP: 00007f1063e291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.450094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.451559] R13: 00007ffd803064bf R14: 00007f1063e29300 R15: 0000000000022000 [ 1331.453044] CPU: 0 PID: 13807 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1331.454738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.456444] Call Trace: [ 1331.457079] dump_stack+0x107/0x167 [ 1331.457849] should_fail.cold+0x5/0xa [ 1331.458763] ? blk_rq_map_user_iov+0x2aa/0x1a60 [ 1331.459721] should_failslab+0x5/0x20 [ 1331.460511] __kmalloc+0x72/0x390 [ 1331.461337] blk_rq_map_user_iov+0x2aa/0x1a60 [ 1331.462241] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1331.463327] ? sg_write.part.0+0x69e/0xaa0 [ 1331.464179] ? sg_write+0x87/0x120 [ 1331.464932] ? blk_rq_unmap_user+0x750/0x750 [ 1331.465850] ? find_held_lock+0x2c/0x110 [ 1331.466689] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1331.467768] ? lock_downgrade+0x6d0/0x6d0 [ 1331.468622] ? import_single_range+0x24d/0x2e0 [ 1331.469556] blk_rq_map_user+0x103/0x170 [ 1331.470383] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1331.471338] ? alloc_pages_current+0x18f/0x280 [ 1331.472265] ? sg_build_indirect.isra.0+0x448/0x710 [ 1331.473302] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1331.474368] ? sg_build_indirect.isra.0+0x710/0x710 [ 1331.475366] ? __might_fault+0xd3/0x180 [ 1331.476166] ? lock_downgrade+0x6d0/0x6d0 [ 1331.477033] sg_write.part.0+0x69e/0xaa0 [ 1331.477853] ? sg_new_write.isra.0+0x770/0x770 [ 1331.478805] ? find_held_lock+0x2c/0x110 [ 1331.479621] ? __might_fault+0xd3/0x180 [ 1331.480294] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1331.480294] program syz-executor.4 not setting count and/or reply_len properly [ 1331.480425] ? lock_downgrade+0x6d0/0x6d0 [ 1331.484508] ? _cond_resched+0x12/0x80 [ 1331.485306] ? inode_security+0x107/0x140 [ 1331.486160] ? avc_policy_seqno+0x9/0x70 [ 1331.486997] ? selinux_file_permission+0x92/0x520 [ 1331.487999] ? security_file_permission+0x24e/0x570 [ 1331.489054] sg_write+0x87/0x120 [ 1331.489752] do_iter_write+0x482/0x670 [ 1331.490551] ? import_iovec+0x83/0xb0 [ 1331.491348] vfs_writev+0x1ae/0x620 [ 1331.492088] ? vfs_iter_write+0xa0/0xa0 [ 1331.492579] FAULT_INJECTION: forcing a failure. [ 1331.492579] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.492891] ? __fget_files+0x26d/0x4c0 [ 1331.492927] ? lock_downgrade+0x6d0/0x6d0 [ 1331.496777] ? find_held_lock+0x2c/0x110 [ 1331.497638] ? __fget_files+0x296/0x4c0 [ 1331.498455] ? __fget_light+0xea/0x290 [ 1331.499258] do_writev+0x139/0x300 [ 1331.499995] ? vfs_writev+0x620/0x620 [ 1331.500780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.501850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.502909] do_syscall_64+0x33/0x40 [ 1331.503667] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.504707] RIP: 0033:0x7f81f957bb19 [ 1331.505480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.509209] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1331.510774] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1331.512226] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1331.513713] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.515176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.516640] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1331.518124] CPU: 1 PID: 13798 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1331.519560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.521264] Call Trace: [ 1331.521805] dump_stack+0x107/0x167 [ 1331.522784] should_fail.cold+0x5/0xa [ 1331.523630] ? create_object.isra.0+0x3a/0xa20 [ 1331.524676] should_failslab+0x5/0x20 [ 1331.525473] kmem_cache_alloc+0x5b/0x310 [ 1331.526396] create_object.isra.0+0x3a/0xa20 [ 1331.527355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1331.528478] __kmalloc+0x16e/0x390 [ 1331.529312] sg_build_indirect.isra.0+0x94/0x710 [ 1331.530291] ? sg_common_write.constprop.0+0x907/0x1a30 [ 1331.531388] sg_common_write.constprop.0+0x992/0x1a30 [ 1331.532456] ? sg_build_indirect.isra.0+0x710/0x710 [ 1331.533482] ? vprintk_func+0x93/0x140 [ 1331.534265] ? printk+0xba/0xf1 [ 1331.534937] ? record_print_text.cold+0x16/0x16 [ 1331.535884] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1331.536930] ? trace_hardirqs_on+0x5b/0x180 [ 1331.537826] sg_write.part.0+0x69e/0xaa0 [ 1331.538675] ? sg_new_write.isra.0+0x770/0x770 [ 1331.539613] ? find_held_lock+0x2c/0x110 [ 1331.540450] ? __might_fault+0xd3/0x180 [ 1331.541274] ? lock_downgrade+0x6d0/0x6d0 [ 1331.542127] ? _cond_resched+0x12/0x80 [ 1331.542919] ? inode_security+0x107/0x140 [ 1331.543766] ? avc_policy_seqno+0x9/0x70 [ 1331.544592] ? selinux_file_permission+0x92/0x520 [ 1331.545589] ? iov_iter_advance+0x23b/0xec0 [ 1331.546476] sg_write+0x87/0x120 [ 1331.547180] do_iter_write+0x482/0x670 [ 1331.547995] ? import_iovec+0x83/0xb0 [ 1331.548781] vfs_writev+0x1ae/0x620 [ 1331.549539] ? vfs_iter_write+0xa0/0xa0 [ 1331.550348] ? __fget_files+0x26d/0x4c0 [ 1331.551163] ? lock_downgrade+0x6d0/0x6d0 [ 1331.552018] ? find_held_lock+0x2c/0x110 [ 1331.552862] ? __fget_files+0x296/0x4c0 [ 1331.553693] ? __fget_light+0xea/0x290 [ 1331.554495] do_writev+0x139/0x300 [ 1331.555220] ? vfs_writev+0x620/0x620 [ 1331.556005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.557087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.558147] do_syscall_64+0x33/0x40 [ 1331.558909] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.559947] RIP: 0033:0x7fdf6458fb19 [ 1331.560709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.564450] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1331.566018] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1331.567469] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1331.568943] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.570405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.571872] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:12:17 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 13) 01:12:17 executing program 3: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/67) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000180)={{0x8001}, 0x100, './file0\x00'}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/20) 01:12:17 executing program 6: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82080, 0x4) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000002100210c0000000000000000020000e2"], 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x40010, r1, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000240)=')\x01&$]-\x87\\', &(0x7f0000000280)='\x00', &(0x7f0000000300)='\x00'], &(0x7f0000000800)=[&(0x7f0000000380)='\x00', &(0x7f00000011c0)='--\x00', &(0x7f0000000400)='\x00', 0xfffffffffffffffe, &(0x7f0000000440)='@%-@[\x00', &(0x7f0000001200)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='%.{\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00'], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x0, @unused=[0x5, 0x9], @subvolid}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$setown(r2, 0x8, 0x0) r3 = socket(0x2b, 0x80000, 0x2) bind$802154_dgram(r3, &(0x7f00000000c0)={0x24, @short={0x2, 0xfffd, 0xaaa3}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010004000000001800000400", @ANYRES32=r2, @ANYBLOB="ec000000000000002e2f66696c653100"]) syz_open_dev$mouse(&(0x7f0000000100), 0xddb4, 0x406c80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f00000012c0)=0x8, 0x4) listxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000700)=""/207, 0xcf) 01:12:17 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:12:17 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1331.760408] FAULT_INJECTION: forcing a failure. [ 1331.760408] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.763055] CPU: 0 PID: 13919 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1331.764461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.766151] Call Trace: [ 1331.766713] dump_stack+0x107/0x167 [ 1331.767480] should_fail.cold+0x5/0xa [ 1331.768274] ? prep_compound_page+0x295/0x3c0 [ 1331.769193] ? create_object.isra.0+0x3a/0xa20 [ 1331.770135] should_failslab+0x5/0x20 [ 1331.770909] kmem_cache_alloc+0x5b/0x310 [ 1331.771741] ? prep_new_page+0x159/0x1d0 [ 1331.772587] create_object.isra.0+0x3a/0xa20 [ 1331.772962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1331.773510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1331.773534] __kmalloc+0x16e/0x390 [ 1331.773562] blk_rq_map_user_iov+0x2aa/0x1a60 [ 1331.773583] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1331.773599] ? sg_write.part.0+0x69e/0xaa0 [ 1331.773612] ? sg_write+0x87/0x120 [ 1331.773645] ? blk_rq_unmap_user+0x750/0x750 [ 1331.773672] ? find_held_lock+0x2c/0x110 [ 1331.773708] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1331.783475] ? lock_downgrade+0x6d0/0x6d0 [ 1331.784313] ? import_single_range+0x24d/0x2e0 [ 1331.785250] blk_rq_map_user+0x103/0x170 [ 1331.786081] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1331.787029] ? alloc_pages_current+0x18f/0x280 [ 1331.787960] ? sg_build_indirect.isra.0+0x448/0x710 [ 1331.788993] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1331.790074] ? sg_build_indirect.isra.0+0x710/0x710 [ 1331.791085] ? __might_fault+0xd3/0x180 [ 1331.791896] ? lock_downgrade+0x6d0/0x6d0 [ 1331.792769] sg_write.part.0+0x69e/0xaa0 [ 1331.793610] ? sg_new_write.isra.0+0x770/0x770 [ 1331.794561] ? find_held_lock+0x2c/0x110 [ 1331.795400] ? __might_fault+0xd3/0x180 [ 1331.796208] ? lock_downgrade+0x6d0/0x6d0 [ 1331.797080] ? _cond_resched+0x12/0x80 [ 1331.797868] ? inode_security+0x107/0x140 [ 1331.798725] ? avc_policy_seqno+0x9/0x70 [ 1331.799550] ? selinux_file_permission+0x92/0x520 [ 1331.800558] ? security_file_permission+0x24e/0x570 [ 1331.801587] sg_write+0x87/0x120 [ 1331.802288] do_iter_write+0x482/0x670 [ 1331.803089] ? import_iovec+0x83/0xb0 [ 1331.803881] vfs_writev+0x1ae/0x620 [ 1331.804619] ? vfs_iter_write+0xa0/0xa0 [ 1331.805449] ? __fget_files+0x26d/0x4c0 [ 1331.806255] ? lock_downgrade+0x6d0/0x6d0 [ 1331.807097] ? find_held_lock+0x2c/0x110 [ 1331.807953] ? __fget_files+0x296/0x4c0 [ 1331.808755] ? __fget_light+0xea/0x290 [ 1331.809552] do_writev+0x139/0x300 [ 1331.810271] ? vfs_writev+0x620/0x620 [ 1331.811056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.812100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.813152] do_syscall_64+0x33/0x40 [ 1331.813898] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.814951] RIP: 0033:0x7f81f957bb19 [ 1331.815711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.819448] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1331.821001] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1331.822438] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1331.823885] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.825324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.826759] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 01:12:17 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:12:17 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 22) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:12:17 executing program 7: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x8, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010000000000000096000000000005000000ff7f000000000000040014"], 0x24}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000ace670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000ace670325132510000e670325107", 0x9b, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) openat(r2, &(0x7f0000000240)='./file0/file0\x00', 0x8040, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) [ 1331.885956] FAULT_INJECTION: forcing a failure. [ 1331.885956] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.888662] CPU: 0 PID: 13932 Comm: syz-executor.0 Not tainted 5.10.198 #1 [ 1331.890079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.891761] Call Trace: [ 1331.892312] dump_stack+0x107/0x167 [ 1331.893073] should_fail.cold+0x5/0xa [ 1331.893854] ? sg_build_indirect.isra.0+0x94/0x710 [ 1331.894847] should_failslab+0x5/0x20 [ 1331.894862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1331.897332] __kmalloc+0x72/0x390 [ 1331.898051] sg_build_indirect.isra.0+0x94/0x710 [ 1331.899002] ? scsi_req_init+0x18/0xb0 [ 1331.899778] ? scsi_initialize_rq+0x16/0xb0 [ 1331.900647] sg_common_write.constprop.0+0x992/0x1a30 [ 1331.901696] ? sg_build_indirect.isra.0+0x710/0x710 [ 1331.902688] ? __might_fault+0xd3/0x180 [ 1331.903482] ? lock_downgrade+0x6d0/0x6d0 [ 1331.904336] sg_write.part.0+0x69e/0xaa0 [ 1331.905195] ? sg_new_write.isra.0+0x770/0x770 [ 1331.906141] ? find_held_lock+0x2c/0x110 [ 1331.906959] ? __might_fault+0xd3/0x180 [ 1331.907749] ? lock_downgrade+0x6d0/0x6d0 [ 1331.908603] ? _cond_resched+0x12/0x80 [ 1331.909399] ? inode_security+0x107/0x140 [ 1331.910221] ? avc_policy_seqno+0x9/0x70 [ 1331.911047] ? selinux_file_permission+0x92/0x520 [ 1331.912040] ? security_file_permission+0x24e/0x570 [ 1331.913080] sg_write+0x87/0x120 [ 1331.913766] do_iter_write+0x482/0x670 [ 1331.914557] ? import_iovec+0x83/0xb0 [ 1331.915324] vfs_writev+0x1ae/0x620 [ 1331.915982] device wlan1 entered promiscuous mode [ 1331.916065] ? vfs_iter_write+0xa0/0xa0 [ 1331.917883] ? __fget_files+0x26d/0x4c0 [ 1331.918676] ? lock_downgrade+0x6d0/0x6d0 [ 1331.919513] ? find_held_lock+0x2c/0x110 [ 1331.920350] ? __fget_files+0x296/0x4c0 [ 1331.921199] ? __fget_light+0xea/0x290 [ 1331.922002] do_writev+0x139/0x300 [ 1331.922742] ? vfs_writev+0x620/0x620 [ 1331.923527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.924578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.925649] do_syscall_64+0x33/0x40 [ 1331.926417] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1331.927467] RIP: 0033:0x7f10668b3b19 [ 1331.928238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.931961] RSP: 002b:00007f1063e29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1331.933527] RAX: ffffffffffffffda RBX: 00007f10669c6f60 RCX: 00007f10668b3b19 [ 1331.934968] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1331.936392] RBP: 00007f1063e291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.937850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.939319] R13: 00007ffd803064bf R14: 00007f1063e29300 R15: 0000000000022000 [ 1331.963858] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1331.963858] program syz-executor.4 not setting count and/or reply_len properly [ 1331.972843] FAULT_INJECTION: forcing a failure. [ 1331.972843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1331.975746] CPU: 0 PID: 13935 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1331.977144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.978828] Call Trace: [ 1331.979359] dump_stack+0x107/0x167 [ 1331.980096] should_fail.cold+0x5/0xa [ 1331.980867] ? find_held_lock+0x2c/0x110 [ 1331.981716] __alloc_pages_nodemask+0x182/0x600 [ 1331.982666] ? __kmalloc+0x16e/0x390 [ 1331.983429] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1331.984677] ? trace_hardirqs_on+0x5b/0x180 [ 1331.985584] alloc_pages_current+0x187/0x280 [ 1331.986487] sg_build_indirect.isra.0+0x2f5/0x710 [ 1331.987484] sg_common_write.constprop.0+0x992/0x1a30 [ 1331.988552] ? sg_build_indirect.isra.0+0x710/0x710 [ 1331.989562] ? vprintk_func+0x93/0x140 [ 1331.990362] ? printk+0xba/0xf1 [ 1331.991040] ? record_print_text.cold+0x16/0x16 [ 1331.992010] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1331.993063] ? trace_hardirqs_on+0x5b/0x180 [ 1331.993943] sg_write.part.0+0x69e/0xaa0 [ 1331.994778] ? sg_new_write.isra.0+0x770/0x770 [ 1331.995709] ? find_held_lock+0x2c/0x110 [ 1331.995939] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1331.995939] program syz-executor.5 not setting count and/or reply_len properly [ 1331.996541] ? __might_fault+0xd3/0x180 [ 1331.996572] ? lock_downgrade+0x6d0/0x6d0 [ 1332.001461] ? _cond_resched+0x12/0x80 [ 1332.002267] ? inode_security+0x107/0x140 [ 1332.003105] ? avc_policy_seqno+0x9/0x70 [ 1332.003941] ? selinux_file_permission+0x92/0x520 [ 1332.004955] ? iov_iter_advance+0x23b/0xec0 [ 1332.005840] sg_write+0x87/0x120 [ 1332.006549] do_iter_write+0x482/0x670 [ 1332.007349] ? import_iovec+0x83/0xb0 [ 1332.008124] vfs_writev+0x1ae/0x620 [ 1332.008862] ? vfs_iter_write+0xa0/0xa0 [ 1332.009670] ? __fget_files+0x26d/0x4c0 [ 1332.010476] ? lock_downgrade+0x6d0/0x6d0 [ 1332.011314] ? find_held_lock+0x2c/0x110 [ 1332.012145] ? __fget_files+0x296/0x4c0 [ 1332.012975] ? __fget_light+0xea/0x290 [ 1332.013770] do_writev+0x139/0x300 [ 1332.014485] ? vfs_writev+0x620/0x620 [ 1332.015262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1332.016332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.017395] do_syscall_64+0x33/0x40 [ 1332.018153] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1332.019207] RIP: 0033:0x7fdf6458fb19 [ 1332.019894] FAT-fs (loop7): Unrecognized mount option "€" or missing value [ 1332.019986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.025158] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1332.026705] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1332.028141] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1332.029597] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.031062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.032515] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1332.144410] FAT-fs (loop7): Unrecognized mount option "€" or missing value 01:12:32 executing program 3: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x654a, r2, &(0x7f0000000300)="4143506305e843307b317116d5b0481896f391f28c7053dab42570d4429743dff973c04b32ad8a77d6f79f8488eb25461c398e6c75e976b0df12fdcfc9f48f3ca27d117f17a61ff4909dec8c9fb2f577240655b79970d227e7671d04c6e3222407a29361a6358f65a31fdb9e06804057d79fd40f09f877faf5fd2daad236f0e5b741275257f219152ad62e63d8eb15667a5c347c2dc95dca2bb0f8eff1a59efc3a14c5a9ce156c51d385c3a254d8dfbf", 0xb0, 0x31, 0x0, 0x1, r3}]) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x4}, {0x5}]}, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 01:12:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r2 = geteuid() r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') fchown(r4, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x0, r2, 0x0, r2, 0x0, 0x40}, 0x0, 0x0, 0x7f, 0x40000, 0x7, 0x6, 0x0, 0x1, 0x9, 0x4, r5}) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x4, 0x8, 0x81, 0x0, 0x0, 0xfffffffffffffb3e, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x5, 0xffff62ef, 0x4, 0x0, 0xfffffff7}, r5, 0x1, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x0, 0xfffffff0}]}, 0x14, 0x0) 01:12:32 executing program 1: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x113401, 0xf0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e00000017f000000ac1414bbac1414430000000000000000"], 0x18) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fallocate(r3, 0x0, 0x401, 0x56) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 01:12:32 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) 01:12:32 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 14) 01:12:32 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 23) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) 01:12:32 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 5) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1346.347435] FAULT_INJECTION: forcing a failure. [ 1346.347435] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.348951] CPU: 1 PID: 14065 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1346.349769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.350778] Call Trace: [ 1346.351102] dump_stack+0x107/0x167 [ 1346.351539] should_fail.cold+0x5/0xa [ 1346.352000] ? bio_alloc_bioset+0x3b7/0x600 [ 1346.352519] should_failslab+0x5/0x20 [ 1346.352982] __kmalloc+0x72/0x390 [ 1346.353413] bio_alloc_bioset+0x3b7/0x600 [ 1346.353913] ? bvec_alloc+0x2f0/0x2f0 [ 1346.354362] ? kasan_unpoison_shadow+0x33/0x50 [ 1346.354907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1346.355505] blk_rq_map_user_iov+0x473/0x1a60 [ 1346.356042] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1346.356677] ? sg_write.part.0+0x69e/0xaa0 [ 1346.357218] ? blk_rq_unmap_user+0x750/0x750 [ 1346.357768] ? find_held_lock+0x2c/0x110 [ 1346.358283] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1346.358920] ? lock_downgrade+0x6d0/0x6d0 [ 1346.359446] ? import_single_range+0x24d/0x2e0 [ 1346.360014] blk_rq_map_user+0x103/0x170 [ 1346.360512] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1346.361122] ? alloc_pages_current+0x18f/0x280 [ 1346.361692] ? sg_build_indirect.isra.0+0x448/0x710 [ 1346.362336] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1346.363006] ? sg_build_indirect.isra.0+0x710/0x710 [ 1346.363338] FAULT_INJECTION: forcing a failure. [ 1346.363338] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.363630] ? __might_fault+0xd3/0x180 [ 1346.363642] ? lock_downgrade+0x6d0/0x6d0 [ 1346.363669] sg_write.part.0+0x69e/0xaa0 [ 1346.363692] ? sg_new_write.isra.0+0x770/0x770 [ 1346.367951] ? find_held_lock+0x2c/0x110 [ 1346.368447] ? __might_fault+0xd3/0x180 [ 1346.368942] ? lock_downgrade+0x6d0/0x6d0 [ 1346.369446] ? _cond_resched+0x12/0x80 [ 1346.369934] ? inode_security+0x107/0x140 [ 1346.370415] ? avc_policy_seqno+0x9/0x70 [ 1346.370884] ? selinux_file_permission+0x92/0x520 [ 1346.371439] ? security_file_permission+0x24e/0x570 [ 1346.372056] sg_write+0x87/0x120 [ 1346.372465] do_iter_write+0x482/0x670 [ 1346.372954] ? import_iovec+0x83/0xb0 [ 1346.373432] vfs_writev+0x1ae/0x620 [ 1346.373890] ? vfs_iter_write+0xa0/0xa0 [ 1346.374373] ? __fget_files+0x26d/0x4c0 [ 1346.374873] ? lock_downgrade+0x6d0/0x6d0 [ 1346.375371] ? find_held_lock+0x2c/0x110 [ 1346.375874] ? __fget_files+0x296/0x4c0 [ 1346.376358] ? __fget_light+0xea/0x290 [ 1346.376849] do_writev+0x139/0x300 [ 1346.377293] ? vfs_writev+0x620/0x620 [ 1346.377745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.378345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.378962] do_syscall_64+0x33/0x40 [ 1346.379413] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.380005] RIP: 0033:0x7f81f957bb19 [ 1346.380454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.382591] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1346.383465] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1346.384287] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1346.385152] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.385980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.386855] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1346.387778] CPU: 0 PID: 14068 Comm: syz-executor.0 Not tainted 5.10.198 #1 [ 1346.389229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.390920] Call Trace: [ 1346.391462] dump_stack+0x107/0x167 [ 1346.392229] should_fail.cold+0x5/0xa [ 1346.393015] ? create_object.isra.0+0x3a/0xa20 [ 1346.393302] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1346.393302] program syz-executor.4 not setting count and/or reply_len properly [ 1346.393965] should_failslab+0x5/0x20 [ 1346.393984] kmem_cache_alloc+0x5b/0x310 [ 1346.394010] create_object.isra.0+0x3a/0xa20 [ 1346.398363] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1346.399417] __kmalloc+0x16e/0x390 [ 1346.399584] FAULT_INJECTION: forcing a failure. [ 1346.399584] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1346.400162] sg_build_indirect.isra.0+0x94/0x710 [ 1346.402536] ? scsi_req_init+0x18/0xb0 [ 1346.403335] ? scsi_initialize_rq+0x16/0xb0 [ 1346.404213] sg_common_write.constprop.0+0x992/0x1a30 [ 1346.405283] ? sg_build_indirect.isra.0+0x710/0x710 [ 1346.406307] ? __might_fault+0xd3/0x180 [ 1346.407129] ? lock_downgrade+0x6d0/0x6d0 [ 1346.408008] sg_write.part.0+0x69e/0xaa0 [ 1346.408836] ? sg_new_write.isra.0+0x770/0x770 [ 1346.409796] ? find_held_lock+0x2c/0x110 [ 1346.410631] ? __might_fault+0xd3/0x180 [ 1346.411436] ? lock_downgrade+0x6d0/0x6d0 [ 1346.412302] ? _cond_resched+0x12/0x80 [ 1346.413107] ? inode_security+0x107/0x140 [ 1346.413955] ? avc_policy_seqno+0x9/0x70 [ 1346.414787] ? selinux_file_permission+0x92/0x520 [ 1346.415802] ? security_file_permission+0x24e/0x570 [ 1346.416820] sg_write+0x87/0x120 [ 1346.417553] do_iter_write+0x482/0x670 [ 1346.418359] ? import_iovec+0x83/0xb0 [ 1346.419151] vfs_writev+0x1ae/0x620 [ 1346.419904] ? vfs_iter_write+0xa0/0xa0 [ 1346.420712] ? __fget_files+0x26d/0x4c0 [ 1346.421535] ? lock_downgrade+0x6d0/0x6d0 [ 1346.422379] ? find_held_lock+0x2c/0x110 [ 1346.423224] ? __fget_files+0x296/0x4c0 [ 1346.424058] ? __fget_light+0xea/0x290 [ 1346.424859] do_writev+0x139/0x300 [ 1346.425608] ? vfs_writev+0x620/0x620 [ 1346.426392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.427462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.428516] do_syscall_64+0x33/0x40 [ 1346.429283] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.430332] RIP: 0033:0x7f10668b3b19 [ 1346.431094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.434854] RSP: 002b:00007f1063e29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1346.436429] RAX: ffffffffffffffda RBX: 00007f10669c6f60 RCX: 00007f10668b3b19 [ 1346.437967] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1346.439428] RBP: 00007f1063e291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.440890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.442355] R13: 00007ffd803064bf R14: 00007f1063e29300 R15: 0000000000022000 [ 1346.443869] CPU: 1 PID: 14067 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1346.444664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.445612] Call Trace: [ 1346.445922] dump_stack+0x107/0x167 [ 1346.446336] should_fail.cold+0x5/0xa [ 1346.446776] __alloc_pages_nodemask+0x182/0x600 [ 1346.447313] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1346.447928] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1346.448605] alloc_pages_current+0x187/0x280 [ 1346.449125] sg_build_indirect.isra.0+0x2f5/0x710 [ 1346.449673] sg_common_write.constprop.0+0x992/0x1a30 [ 1346.450246] ? sg_build_indirect.isra.0+0x710/0x710 [ 1346.450809] ? vprintk_func+0x93/0x140 [ 1346.451243] ? printk+0xba/0xf1 [ 1346.451614] ? record_print_text.cold+0x16/0x16 [ 1346.452138] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1346.452715] sg_write.part.0+0x69e/0xaa0 [ 1346.453178] ? sg_new_write.isra.0+0x770/0x770 [ 1346.453722] ? find_held_lock+0x2c/0x110 [ 1346.454198] ? __might_fault+0xd3/0x180 [ 1346.454638] ? lock_downgrade+0x6d0/0x6d0 [ 1346.455136] ? _cond_resched+0x12/0x80 [ 1346.455587] ? inode_security+0x107/0x140 [ 1346.456046] ? avc_policy_seqno+0x9/0x70 [ 1346.456496] ? selinux_file_permission+0x92/0x520 [ 1346.456711] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1346.457057] ? iov_iter_advance+0x23b/0xec0 [ 1346.459018] sg_write+0x87/0x120 [ 1346.459403] do_iter_write+0x482/0x670 [ 1346.459841] ? import_iovec+0x83/0xb0 [ 1346.460270] vfs_writev+0x1ae/0x620 [ 1346.460689] ? vfs_iter_write+0xa0/0xa0 [ 1346.461135] ? __fget_files+0x26d/0x4c0 [ 1346.461587] ? lock_downgrade+0x6d0/0x6d0 [ 1346.462064] ? find_held_lock+0x2c/0x110 [ 1346.462538] ? __fget_files+0x296/0x4c0 [ 1346.463004] ? __fget_light+0xea/0x290 [ 1346.463439] do_writev+0x139/0x300 [ 1346.463863] ? vfs_writev+0x620/0x620 [ 1346.464309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.464905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.465486] do_syscall_64+0x33/0x40 [ 1346.465906] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.466492] RIP: 0033:0x7fdf6458fb19 [ 1346.466924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.469012] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1346.469871] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1346.470708] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1346.471511] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.472365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.473203] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:12:32 executing program 6: getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000240)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x14, 0x1, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x4, 0x5, [{0x80, 0xffff, 0x1f}, {0x4, 0x800, 0xffff, '\x00', 0x2000}, {0x1, 0x4, 0x7, '\x00', 0x1801}, {0x100, 0xcf9c, 0x9, '\x00', 0x2000}, {0x1, 0x5c7, 0xfffffffffffffff7, '\x00', 0x1000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) io_setup(0xffff, &(0x7f0000000140)) memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\x0fG/\xf9\n', 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) r4 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0xf0, 0xd3b5, 0x1, &(0x7f0000000000)={[0x645e]}, 0xfffffffffffffeea) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) signalfd4(0xffffffffffffffff, &(0x7f0000000b80), 0x8, 0x0) [ 1346.482945] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1346.482945] program syz-executor.0 not setting count and/or reply_len properly 01:12:32 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 24) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1346.517676] netlink: 'syz-executor.6': attribute type 2 has an invalid length. 01:12:32 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 15) 01:12:32 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 6) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1346.558585] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1346.558585] program syz-executor.4 not setting count and/or reply_len properly [ 1346.561767] FAULT_INJECTION: forcing a failure. [ 1346.561767] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.563024] CPU: 1 PID: 14080 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1346.563779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.564696] Call Trace: [ 1346.564992] dump_stack+0x107/0x167 [ 1346.565415] should_fail.cold+0x5/0xa [ 1346.565835] ? create_object.isra.0+0x3a/0xa20 [ 1346.566330] should_failslab+0x5/0x20 [ 1346.566758] kmem_cache_alloc+0x5b/0x310 [ 1346.567193] create_object.isra.0+0x3a/0xa20 [ 1346.567679] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1346.568228] __kmalloc+0x16e/0x390 [ 1346.568638] bio_alloc_bioset+0x3b7/0x600 [ 1346.569102] ? bvec_alloc+0x2f0/0x2f0 [ 1346.569507] ? kasan_unpoison_shadow+0x33/0x50 [ 1346.570018] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1346.570571] blk_rq_map_user_iov+0x473/0x1a60 [ 1346.571069] ? sg_common_write.constprop.0+0x992/0x1a30 [ 1346.571641] ? sg_write.part.0+0x69e/0xaa0 [ 1346.572122] ? blk_rq_unmap_user+0x750/0x750 [ 1346.572608] ? mark_held_locks+0x9e/0xe0 [ 1346.573049] ? find_held_lock+0x2c/0x110 [ 1346.573509] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1346.574075] ? lock_downgrade+0x6d0/0x6d0 [ 1346.574272] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1346.574528] ? import_single_range+0x24d/0x2e0 [ 1346.574545] blk_rq_map_user+0x103/0x170 [ 1346.574557] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1346.574576] ? alloc_pages_current+0x18f/0x280 [ 1346.578009] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 1346.578538] ? sg_build_indirect.isra.0+0x448/0x710 [ 1346.579103] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1346.579703] ? sg_build_indirect.isra.0+0x710/0x710 [ 1346.580259] ? __might_fault+0xd3/0x180 [ 1346.580700] ? lock_downgrade+0x6d0/0x6d0 [ 1346.581166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.581769] sg_write.part.0+0x69e/0xaa0 [ 1346.582203] ? sg_new_write.isra.0+0x770/0x770 [ 1346.582722] ? find_held_lock+0x2c/0x110 [ 1346.583175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.583773] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1346.584376] ? trace_hardirqs_on+0x5b/0x180 [ 1346.584844] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1346.585445] ? _cond_resched+0x12/0x80 [ 1346.585864] ? inode_security+0x107/0x140 [ 1346.586324] ? avc_policy_seqno+0x9/0x70 [ 1346.586757] ? selinux_file_permission+0x92/0x520 [ 1346.587300] ? security_file_permission+0x24e/0x570 [ 1346.587842] sg_write+0x87/0x120 [ 1346.588221] do_iter_write+0x482/0x670 [ 1346.588670] ? import_iovec+0x83/0xb0 [ 1346.589116] vfs_writev+0x1ae/0x620 [ 1346.589514] ? vfs_iter_write+0xa0/0xa0 [ 1346.589973] ? __fget_files+0x26d/0x4c0 [ 1346.590401] ? lock_downgrade+0x6d0/0x6d0 [ 1346.590855] ? find_held_lock+0x2c/0x110 [ 1346.591294] ? __fget_files+0x296/0x4c0 [ 1346.591722] ? __fget_light+0xea/0x290 [ 1346.592159] do_writev+0x139/0x300 [ 1346.592558] ? vfs_writev+0x620/0x620 [ 1346.592978] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.593543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.594115] do_syscall_64+0x33/0x40 [ 1346.594517] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.595070] RIP: 0033:0x7f81f957bb19 [ 1346.595506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.597561] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1346.598406] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1346.599208] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1346.600004] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.600777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.601577] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 01:12:32 executing program 2: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000011c0)=""/121, 0x79}], 0x1, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x4c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x400cc00) [ 1346.623783] FAULT_INJECTION: forcing a failure. [ 1346.623783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1346.625152] CPU: 1 PID: 14077 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1346.625902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.626797] Call Trace: [ 1346.627089] dump_stack+0x107/0x167 [ 1346.627495] should_fail.cold+0x5/0xa [ 1346.627912] __alloc_pages_nodemask+0x182/0x600 [ 1346.628423] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1346.629006] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1346.629666] alloc_pages_current+0x187/0x280 [ 1346.630148] sg_build_indirect.isra.0+0x2f5/0x710 [ 1346.630675] sg_common_write.constprop.0+0x992/0x1a30 [ 1346.631245] ? sg_build_indirect.isra.0+0x710/0x710 [ 1346.631797] ? vprintk_func+0x93/0x140 [ 1346.631922] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1346.631922] program syz-executor.5 not setting count and/or reply_len properly [ 1346.632220] ? printk+0xba/0xf1 [ 1346.632238] ? record_print_text.cold+0x16/0x16 [ 1346.636331] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1346.636913] sg_write.part.0+0x69e/0xaa0 [ 1346.637372] ? sg_new_write.isra.0+0x770/0x770 [ 1346.637898] ? find_held_lock+0x2c/0x110 [ 1346.638358] ? __might_fault+0xd3/0x180 [ 1346.638814] ? lock_downgrade+0x6d0/0x6d0 [ 1346.639285] ? _cond_resched+0x12/0x80 [ 1346.639726] ? inode_security+0x107/0x140 [ 1346.640186] ? avc_policy_seqno+0x9/0x70 [ 1346.640636] ? selinux_file_permission+0x92/0x520 [ 1346.641188] ? iov_iter_advance+0x23b/0xec0 [ 1346.641683] sg_write+0x87/0x120 [ 1346.642074] do_iter_write+0x482/0x670 [ 1346.642513] ? import_iovec+0x83/0xb0 [ 1346.642952] vfs_writev+0x1ae/0x620 [ 1346.643366] ? vfs_iter_write+0xa0/0xa0 [ 1346.643823] ? __fget_files+0x26d/0x4c0 [ 1346.644274] ? lock_downgrade+0x6d0/0x6d0 [ 1346.644739] ? find_held_lock+0x2c/0x110 [ 1346.645216] ? __fget_files+0x296/0x4c0 [ 1346.645676] ? __fget_light+0xea/0x290 [ 1346.646110] do_writev+0x139/0x300 [ 1346.646510] ? vfs_writev+0x620/0x620 [ 1346.646942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.647543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.648127] do_syscall_64+0x33/0x40 [ 1346.648540] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.649111] RIP: 0033:0x7fdf6458fb19 [ 1346.649529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.651549] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1346.652411] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1346.653179] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1346.653951] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.654712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.655510] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 01:12:32 executing program 7: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x3, 0x3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x7, 0x9, 0x48, @mcast2, @private2, 0x10, 0x1, 0x401, 0x3ff}}) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x404c008) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, @ethernet={0x306, @random="73a7434fa556"}, @ax25={0x3, @bcast, 0x4}, @phonet={0x23, 0x3f, 0x8, 0x2a}, 0x5, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='veth0_to_team\x00', 0x9, 0x8000, 0x3ff}) r4 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1346.693180] netlink: 'syz-executor.6': attribute type 2 has an invalid length. 01:12:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x80, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@dont_hash}]}}) ftruncate(r2, 0x5) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r4, 0x2001000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x2011, r4, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="92", 0x1}], 0x1, 0x0, 0x0, 0x0) ftruncate(r4, 0x84) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) pwritev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="30c4a0d6f5441e369fa30eee7371fed8a035f9098076c7", 0x17}, {&(0x7f00000002c0)="bf2fa270d7f7f39ef340f3f892903e07f3f2b5228633ca6dc40a97457e5ad846ae220a4664465ec425d6c21d2a36b84957308c45266308b2068c6c5d1a99c1f60cbf9e6a1dbfa1f813e35dca67ed1a79f9a494c014ea0dd6bf68470c2b7e666767ba8d0c23", 0x65}], 0x2, 0x2, 0x7f) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 01:12:32 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="bb2dcc1d9820", @dev, @val={@void, {0x8100, 0x6}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x10, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_ra}}}}}, 0x0) [ 1346.735074] FAULT_INJECTION: forcing a failure. [ 1346.735074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1346.736444] CPU: 1 PID: 14081 Comm: syz-executor.0 Not tainted 5.10.198 #1 [ 1346.737205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.738098] Call Trace: [ 1346.738394] dump_stack+0x107/0x167 [ 1346.738786] should_fail.cold+0x5/0xa [ 1346.739203] ? find_held_lock+0x2c/0x110 [ 1346.739636] __alloc_pages_nodemask+0x182/0x600 [ 1346.740163] ? __kmalloc+0x16e/0x390 [ 1346.740573] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1346.741235] ? trace_hardirqs_on+0x5b/0x180 [ 1346.741699] alloc_pages_current+0x187/0x280 [ 1346.742176] sg_build_indirect.isra.0+0x2f5/0x710 [ 1346.742704] sg_common_write.constprop.0+0x992/0x1a30 [ 1346.743263] ? sg_build_indirect.isra.0+0x710/0x710 [ 1346.743810] ? __might_fault+0xd3/0x180 [ 1346.744248] ? lock_downgrade+0x6d0/0x6d0 [ 1346.744714] sg_write.part.0+0x69e/0xaa0 [ 1346.745172] ? sg_new_write.isra.0+0x770/0x770 [ 1346.745670] ? find_held_lock+0x2c/0x110 [ 1346.746103] ? __might_fault+0xd3/0x180 [ 1346.746539] ? lock_downgrade+0x6d0/0x6d0 [ 1346.746993] ? _cond_resched+0x12/0x80 [ 1346.747423] ? inode_security+0x107/0x140 [ 1346.747875] ? avc_policy_seqno+0x9/0x70 [ 1346.748324] ? selinux_file_permission+0x92/0x520 [ 1346.748865] ? security_file_permission+0x24e/0x570 [ 1346.749416] sg_write+0x87/0x120 [ 1346.749784] do_iter_write+0x482/0x670 [ 1346.750209] ? import_iovec+0x83/0xb0 [ 1346.750632] vfs_writev+0x1ae/0x620 [ 1346.751036] ? vfs_iter_write+0xa0/0xa0 [ 1346.751472] ? __fget_files+0x26d/0x4c0 [ 1346.751911] ? lock_downgrade+0x6d0/0x6d0 [ 1346.752374] ? find_held_lock+0x2c/0x110 [ 1346.752820] ? __fget_files+0x296/0x4c0 [ 1346.753290] ? __fget_light+0xea/0x290 [ 1346.753710] do_writev+0x139/0x300 [ 1346.754114] ? vfs_writev+0x620/0x620 [ 1346.754546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.755112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.755695] do_syscall_64+0x33/0x40 [ 1346.756109] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.756669] RIP: 0033:0x7f10668b3b19 [ 1346.757071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.759069] RSP: 002b:00007f1063e29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1346.759921] RAX: ffffffffffffffda RBX: 00007f10669c6f60 RCX: 00007f10668b3b19 [ 1346.760699] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1346.761481] RBP: 00007f1063e291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.762261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.763049] R13: 00007ffd803064bf R14: 00007f1063e29300 R15: 0000000000022000 01:12:32 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) (fail_nth: 16) [ 1346.793285] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1346.793285] program syz-executor.0 not setting count and/or reply_len properly 01:12:32 executing program 7: syz_emit_ethernet(0xab7, &(0x7f0000001c00)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "961517", 0xa81, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1f, "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"}, {0x0, 0xf, "311c1c5f30690bec8e727b3c866a73eb26f3ae5e2774b32ed67dffea2d4b08a36dab1da3177e671c1151de6c95ac83c4b86abbaddce466e4fb0fce1c126765d56317b4cc2550c30862b02c3c4ca7b3cb67b07f522f86ecfe9e3448e94f529a10bc80392b35e76a1604ffdad8874b8e945857e90042d6f045fbb994"}, {0x0, 0x15, "683ff6cba5a042d30ed204fc61fd79299beddf84b5dff27ae963f4fd32cc3fd9fe4ae8887852dba81747700671f81053be5764d6a30d71d014466c298a52843e80716b442b76d0390c96eaad8cd8fcc99c754dce884acecb6877861412a3477306183e175be590a99e9eb3154d016a0e17a491714d170ba0152d52e67966353caf7fd955eeb224e4c3c742d41ee97eb09d7504c68d77206fe21e7a263625b49ed385e541f744b6"}, {0x0, 0x15, "29e70acf91761cb9196e139e3fdfe1c00205ba9571433c766ab1fa285a39f9a91e8dcf6954dfb2845c66ba88ba43dbd6a14929d1318f2709a27f5dfcdd0b38da5af0a28b214ea330a5b719bd30372c0bd524cfc5228761fb76925cbfb369a02457de445e1d03b0947265a8716f46c450a90d001c5f5618c44eb199e6ceb0c692a78408663923c2d4e2b569ee4b3c7942972f07a0b9d9c64f198cd7f55f6ca0d01db4375f34705f6613371837"}, {0x0, 0xc, "2562be125b4ef57aa156e9edd9f095b240b1542a66addad202b7fe724b26048591ab58997ed9be66ab128bac885947c859a0792903d945895b98fdaad47889c9dcf30176f12550aaebc88548bd70ebd936c440ae4ec1c73cd82f5903da3778fd5de60b57"}, {0x0, 0xe3, "38cd0b4db609f829c6e4b0cf8d8e8a73ff6bc7e071a12bdbc6d005f9bbf6f82a3353749cd516d4aebcee781c11be806f8edc04c2ede6e1cf1d0260a3640442916e0b2debe6b543c7d38807d7f087f0a0fcb0b69414466c9883e230cdc51c7756ff1600a9e746ea3b3014ca5b6ff49bb35687233d571f1f735d81a186cd2647e28755bd13c853c43caee57400aff1d854f154a4097c261c3dd38135728b1fc03efabe97e6986cfb10104aeb581791f0ee247237a7bbfd2ac6c666cdad21e1ea41cf5a58dccfa32445c1a69ae9e7d60a3d83d9c494f95cf6ac87f28f3815f50835eeeb5cf85c4c901fc71f606fd5ed20f08f13c0dee0cdf8b0ea77d402609bc2bd70504790f26ee65771f1802888972d354af1e679615549d80b87e6b5892200ceaf75d679da9afc64d570ef93c9244bd8dcb8b0da565dd01889928fc145e3ef0f96987f8420e9c4ec08f85d5145ef2591359fb0e505a4e67af3de5e2ba6b6a97801f82649f0d4fad538a7390e11233a7a069389655159b5310081bdd85c8b53f1cc1ad6d5d73dedcf3af028268e335f6aa55c37737cb79e01b5f07da40750abb21b406e30e1728588dda39ee9a9ea53319d61d2cefed0a1adddf2904406ec63c132704f6d633a5e399c0c59f5aa1be0c7ac077a94589a4b97c1b102cd6ad8f1bcd31b85d66acb06ec8e743f2e88e8ac9b55044abc5d82af4f32236d55e9774409dd68035591207e4cda5025afd56352c130bc764c1684193ff1efca3e8e34aab9e2d34b2e42bbf6c2010e602c3ee5bbfd7983ee6042b78dfddbc6953f3db4edd1219a299bb48c2211c6d85457fe1d12481270cff7817dd0cf44497625ed041e5e5e40ec67eefdceac5fa4aeebba3129a8e3c9d898eb1bafc0a53ea1f5050a4e6ece7a305f7b2608721f789dcf96ddfae2ced0ddc3bbb80d0bd29a938c2ad0c5ce75d2471e28bf7e728abcc76d2bf8f0a762d2d583774d0a096a0d706406214152489d0aba15e90bd2c1a84eff38a1a0ba4956aea68d82aebbfa3e93261bf1fd671c6a1a43e81dd6f97c35b1b2be432de311772401fc8608d96ec3e6cb4e4827a75aecebe2295893bf991d7b85e7d966687c150fbe53bbe744b2a8fe4690c0a4221b899846ef3ac9dbe68bd9b11599712d92a667458a38677db490477522471aa9e8d67c4badd3d6541c3b356b2d5da57ce4e1780968ac3d0c899bdbb4f2c0db83995a00c26568d541c0c471ffbd1b3a694f45ba4dbc38d5d9344659380eba00d81e9743b232e780843095d16a1a50e22b267e5587bd4c3e9104ae3ae3b285ec907a4e55fdad7fa516042fecd97c5061fa6e26b84cc20e3a7250e8e86e23d470f29f891bc557712243b1a41c8288409c47e6d1035c13ca1b0c537f80ab8b8c936dd5202b85e47b51e8ac2364215a7b5ca2c353dd96fb871f8beaf9d9b9026af548237fa80674820fe67d0cad90b6a17ac5082cbbeab2ca0670b12a6181724b9b99d9cb8272f9b13584510c9da86271875129961ef1e03bd28a8ce859438906554549177cd2109125f5f2f4bfcf5ecfe370ad3292d9ce5c2208778a911fe3716782e4e737092ae7f9175dae4ab01745810c4010a616467fa8c6318b03003367d41c3c9b73fc09b2fad6e89473981dc9b8795b0c1a8569bfe45c4bc6d40f1f072103c64f1a0a14df5d056a59063801c5ceff004a45d77b7d4fe95f7b55d9dd9aaec03b5b8ea74a90bb9a16fed4a39f4c7d54bc782107e10732c882529a218cd6ae6bc216317e821b3d3a85f14f1688866e623db3e3e63ef28724833fb08ff21f4ad2750b71065679f9a948b16705b1f312581bf9021f537f8b79f3ee70b3b2f7f4c26312e6d0d3be9dc718ff2a9a221305e5ef877210f4a86d2fc2e432b99a5fd8a3bc43d9060fb7344ec03e9b1886b7e966bc6e197858196a93b9d9c00d1886763d5c9814bc32611bbc25f31078f949dae498f3a68bc5112bacc05bf5db70bc679d96d95696510f5a8e510a3c1899a59567c3a4e0fe347030af67300a95e03873a04fd758c7593f1401978032016dc48306e53e5882b751ece6a0450df8f9dd496759010dab3f50be10aed17a12f41803fe05f5a94bdf1f6aefe07037e35e9f259c0eff2a53ee628c635d53bdb4726e02d5e9189deecbc0ad42e9bfd5019c7417e9b093b19166e4088b536f182ce0541ab8f82e58341591eb4991311f8bd921e6b1e137bf599175c33c1e0f70f8f44e3fda94676ffa9beecaf04699aab527b680da051b0d568b4690195227068d35f6029cf79adad48d2e431f489af79e827cff0de565748efa68ffe8a0676976af924c7e691883c78738d2cde6877483c394e2b3b01a66a03dfa957db85e04574cf80e9133b4cb37d1239ae777aa4dc61feeeade7e3f76f18f5a6622a426ff6865c3a820d3e1b126237c488c8c299f1572d54767ed1d488269b0694995ebf6253e7aea89780018532be816ef9bb1d1ae79c935409979f2b2fed9f65284530855ad161881a928859413d3bed72a3263dcbb9472c8240422b1cd28c6179beff7d7c76a731733f56a2c0eb5ce68"}, {0x5, 0x4, "5c2ae282bbdf28b29d536dfa36d749149b252d70ec9d6d77f17e489f27c387"}]}}}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000000500)=[{&(0x7f0000000340)="0d50ecfe20cd07441686d2d93b423a94fefbc0249588923edae733bdc7e632a4ef0ce437a1485f01db5320277f2c487c934bd2ba9af656b97c76c7271ca0f2f739da285ee844fc58c247e35eff208025b0f701c819ecfc2d940d750473a9a43927408a41cfc24c9e9e8f04ad8211f5246d779956a8854a330232fe2b29927235962d21a13411dd09c49ea2bc561fc45c4766b2d699cd2bd690d6fbafcdc8a066dbabda2b0d55f5", 0xa7, 0x8}, {&(0x7f0000000400)="164c4db9e65222eef241e550b6e5fd7dced76a3bc51db79da0c529c169e1751fbb68666a08cab49bc149d4b77ccf30793b5192db640bee48a80b27b103f20d456b5fe8837c40e31bb0ff915f5130e61fcaf3a11875e3845fc5085cbfa7427de3264622a9b29edab35f2dfb6e781f23e543b9ef7190103b0e0d3cc11092c8b96a4047f0686d134f3df93cafe935f23dfe10bc64ec9c08fb1e0e67b27780", 0x9d, 0x1}, {&(0x7f00000004c0)="287fbb1333d5b1134e0b8c1eeb682fe9e45305641611fbb49da09d76d98898e2a6afbb767fbdde4d", 0x28}], 0x28a84b, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x8}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x5e, 0x6d, 0x67, 0x30]}}, {@size={'size', 0x3d, [0x67, 0x67, 0x25, 0x1f71ee9fc073379e, 0x38, 0x70, 0x6d]}}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x39, 0x39, 0x35, 0x2d, 0x55]}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x37, 0x36, 0x38, 0x61, 0x57, 0x37, 0x37], 0x2d, [0x37, 0x35, 0x62, 0x32], 0x2d, [0x39, 0x38, 0x30, 0x66], 0x2d, [0x63, 0x0, 0x66, 0x33], 0x2d, [0x33, 0x62, 0x39, 0x61, 0x35, 0x64, 0x35, 0x30]}}}, {@dont_appraise}]}) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x3) write$tun(r0, &(0x7f0000000000)={@void, @void, @ipv6=@gre_packet={0x1, 0x6, "e97d3e", 0x291, 0x2f, 0xff, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x3a, 0x8, 0x4, 0x4, 0x8, 0x40, 0x3, [@local, @dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @private0]}, @srh={0x6c, 0x8, 0x4, 0x4, 0x20, 0x40, 0x1e1, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x49, 0x0, [], "1ae09d4cd8e155780a9084c5af8303f07025083788185bb09d41490287480fa478aa764c150046d9113ba669a32c7a8c681912cd3dac9f70f7c6d2124a88925cfa6c5ea07705c27e4a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xe165], "f26e92394e9b2d326370171e626c779003714d32d5adb9fc0fcc7698271a938be2613d765b03b87b4eb8c1af10fb1a66b830334a30495573a5847292188727e4991f658422c7daf6663717c08db28894851c0a00939dc21ebe6626c35e5fcd6d0c3a3f65833dcf747295888c377fb551c49fb6bc61b18ba8f09226b8783252d50f6ea5c18db59ea248b9704ca7bd1941a33e1103b0737c700ddda233c692ef703785cbbd2a6b44828072da8ef0808eb59b959a160c1bcd"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x3, 0xff], "81819743b2d860bb38473433637a9b61b2dc929225b758f24d4aaa017f5b72944f177885aa8235ab95fca25a144b79612e179bb1dcad0de1d2167fe373e858513540831811f8fb09893f7b93c384e40e00c9977616da136930f00b6c9e"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0xc5, 0x1, 0x0, 0x0, 0x6, 0x1}, 0x1, {0x10001}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x49, 0x1, 0x0, 0x0, 0x4, 0x7f}, 0x2, {0x6, 0x5, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "168c569993ff2abd537e1ae49d19fae4d6e37d2c658c47ae6d2c8c30261a50f921dfa69af052ad515c04d2ebf5d676fad145e9dd97de8f34fc5d56ea4ad10426c87653329cef59da228dc62f5aab265e05bc9f69669fb40d8c4a"}}}}}, 0x2b9) 01:12:32 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930fe095", 0x50}], 0x2) (fail_nth: 25) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) [ 1346.925239] sg_write: data in/out 33555249/32 bytes for SCSI command 0xfd-- guessing data in; [ 1346.925239] program syz-executor.4 not setting count and/or reply_len properly [ 1346.930949] FAULT_INJECTION: forcing a failure. [ 1346.930949] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.933788] CPU: 0 PID: 14207 Comm: syz-executor.5 Not tainted 5.10.198 #1 [ 1346.935192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.936871] Call Trace: [ 1346.937435] dump_stack+0x107/0x167 [ 1346.938180] should_fail.cold+0x5/0xa [ 1346.938952] ? mempool_alloc+0x148/0x360 [ 1346.939774] ? mempool_free_pages+0x20/0x20 [ 1346.940648] should_failslab+0x5/0x20 [ 1346.941431] kmem_cache_alloc+0x5b/0x310 [ 1346.942261] ? mempool_free_pages+0x20/0x20 [ 1346.943147] mempool_alloc+0x148/0x360 [ 1346.943941] ? mempool_resize+0x7d0/0x7d0 [ 1346.944786] ? mark_lock+0xf5/0x2df0 [ 1346.945579] __sg_alloc_table+0x24e/0x390 [ 1346.946443] sg_alloc_table_chained+0x9b/0x1f0 [ 1346.947374] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 1346.948365] scsi_alloc_sgtables+0x236/0xaf0 [ 1346.949278] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 1346.950317] ? scsi_init_command+0x4ee/0x750 [ 1346.951226] scsi_queue_rq+0x1dc9/0x27f0 [ 1346.952079] blk_mq_dispatch_rq_list+0x372/0x1c30 [ 1346.953072] ? target_block+0x21/0x60 [ 1346.953869] ? __blk_mq_sched_dispatch_requests+0x236/0x450 [ 1346.955025] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 1346.956016] ? do_raw_spin_lock+0x121/0x260 [ 1346.956901] ? rwlock_bug.part.0+0x90/0x90 [ 1346.957775] ? hctx_lock+0x7f/0x200 [ 1346.958529] __blk_mq_sched_dispatch_requests+0x263/0x450 [ 1346.959647] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 1346.960688] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 1346.961770] __blk_mq_run_hw_queue+0x12c/0x290 [ 1346.962710] ? blk_mq_start_request+0x3f0/0x3f0 [ 1346.963692] __blk_mq_delay_run_hw_queue+0x4f1/0x550 [ 1346.964728] blk_mq_run_hw_queue+0x170/0x2f0 [ 1346.965640] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 1346.966687] ? do_raw_spin_unlock+0x4f/0x220 [ 1346.967586] ? _raw_spin_unlock+0x1a/0x30 [ 1346.968442] blk_mq_sched_insert_request+0x384/0x440 [ 1346.969479] ? __blk_mq_sched_bio_merge+0x3d0/0x3d0 [ 1346.970484] ? sg_remove_sfp_usercontext+0x420/0x420 [ 1346.971517] ? blk_account_io_start+0x11b/0x170 [ 1346.972473] sg_common_write.constprop.0+0xee9/0x1a30 [ 1346.973541] ? sg_build_indirect.isra.0+0x710/0x710 [ 1346.974559] ? __might_fault+0xd3/0x180 [ 1346.975361] ? lock_downgrade+0x6d0/0x6d0 [ 1346.976237] sg_write.part.0+0x69e/0xaa0 [ 1346.977060] ? sg_new_write.isra.0+0x770/0x770 [ 1346.978008] ? find_held_lock+0x2c/0x110 [ 1346.978831] ? __might_fault+0xd3/0x180 [ 1346.979633] ? lock_downgrade+0x6d0/0x6d0 [ 1346.980490] ? _cond_resched+0x12/0x80 [ 1346.981281] ? inode_security+0x107/0x140 [ 1346.982124] ? avc_policy_seqno+0x9/0x70 [ 1346.982939] ? selinux_file_permission+0x92/0x520 [ 1346.983931] ? security_file_permission+0x24e/0x570 [ 1346.984952] sg_write+0x87/0x120 [ 1346.985666] do_iter_write+0x482/0x670 [ 1346.986479] ? import_iovec+0x83/0xb0 [ 1346.987262] vfs_writev+0x1ae/0x620 [ 1346.988005] ? vfs_iter_write+0xa0/0xa0 [ 1346.988818] ? __fget_files+0x26d/0x4c0 [ 1346.989652] ? lock_downgrade+0x6d0/0x6d0 [ 1346.990499] ? find_held_lock+0x2c/0x110 [ 1346.991339] ? __fget_files+0x296/0x4c0 [ 1346.992163] ? __fget_light+0xea/0x290 [ 1346.992957] do_writev+0x139/0x300 [ 1346.993701] ? vfs_writev+0x620/0x620 [ 1346.994498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1346.995595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.996661] do_syscall_64+0x33/0x40 [ 1346.997426] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1346.998474] RIP: 0033:0x7f81f957bb19 [ 1346.999231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1347.002949] RSP: 002b:00007f81f6af1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1347.004478] RAX: ffffffffffffffda RBX: 00007f81f968ef60 RCX: 00007f81f957bb19 [ 1347.005918] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1347.007343] RBP: 00007f81f6af11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.008766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.010197] R13: 00007ffc24a2742f R14: 00007f81f6af1300 R15: 0000000000022000 [ 1347.025207] FAULT_INJECTION: forcing a failure. [ 1347.025207] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1347.027923] CPU: 0 PID: 14195 Comm: syz-executor.4 Not tainted 5.10.198 #1 [ 1347.029338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1347.030996] Call Trace: [ 1347.031533] dump_stack+0x107/0x167 [ 1347.032270] should_fail.cold+0x5/0xa [ 1347.033043] __alloc_pages_nodemask+0x182/0x600 [ 1347.034002] ? __kmalloc+0x16e/0x390 [ 1347.034758] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1347.035975] ? trace_hardirqs_on+0x5b/0x180 [ 1347.036848] alloc_pages_current+0x187/0x280 [ 1347.037742] sg_build_indirect.isra.0+0x2f5/0x710 [ 1347.038724] sg_common_write.constprop.0+0x992/0x1a30 [ 1347.039780] ? sg_build_indirect.isra.0+0x710/0x710 [ 1347.040786] ? vprintk_func+0x93/0x140 [ 1347.041579] ? printk+0xba/0xf1 [ 1347.042243] ? record_print_text.cold+0x16/0x16 [ 1347.043184] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1347.044198] ? trace_hardirqs_on+0x5b/0x180 [ 1347.045117] sg_write.part.0+0x69e/0xaa0 [ 1347.045950] ? sg_new_write.isra.0+0x770/0x770 [ 1347.046899] ? find_held_lock+0x2c/0x110 [ 1347.047724] ? __might_fault+0xd3/0x180 [ 1347.048542] ? lock_downgrade+0x6d0/0x6d0 [ 1347.049405] ? _cond_resched+0x12/0x80 [ 1347.050204] ? inode_security+0x107/0x140 [ 1347.051041] ? avc_policy_seqno+0x9/0x70 [ 1347.051875] ? selinux_file_permission+0x92/0x520 [ 1347.052846] ? iov_iter_advance+0x23b/0xec0 [ 1347.053686] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 1347.053686] program syz-executor.5 not setting count and/or reply_len properly [ 1347.053742] sg_write+0x87/0x120 [ 1347.053766] do_iter_write+0x482/0x670 [ 1347.057022] ? import_iovec+0x83/0xb0 [ 1347.057882] vfs_writev+0x1ae/0x620 [ 1347.058636] ? vfs_iter_write+0xa0/0xa0 [ 1347.059445] ? __fget_files+0x26d/0x4c0 [ 1347.060260] ? lock_downgrade+0x6d0/0x6d0 [ 1347.061103] ? find_held_lock+0x2c/0x110 [ 1347.061954] ? __fget_files+0x296/0x4c0 [ 1347.062783] ? __fget_light+0xea/0x290 [ 1347.063588] do_writev+0x139/0x300 [ 1347.064317] ? vfs_writev+0x620/0x620 [ 1347.065133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1347.066200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1347.067245] do_syscall_64+0x33/0x40 [ 1347.068006] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1347.069040] RIP: 0033:0x7fdf6458fb19 [ 1347.069804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1347.073510] RSP: 002b:00007fdf61b05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1347.075030] RAX: ffffffffffffffda RBX: 00007fdf646a2f60 RCX: 00007fdf6458fb19 [ 1347.076462] RDX: 0000000000000002 RSI: 00000000200003c0 RDI: 0000000000000007 [ 1347.077900] RBP: 00007fdf61b051d0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.079332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1347.080758] R13: 00007ffd8947400f R14: 00007fdf61b05300 R15: 0000000000022000 [ 1396.819149] device lo left promiscuous mode VM DIAGNOSIS: 01:17:37 Registers: info registers vcpu 0 RAX=ffffffff83e59480 RBX=0000000000000000 RCX=ffffffff83e4153c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e59a88 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85671c48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5948e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc56e33d88 CR3=000000000f8b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=66206365786509007374726174736572 XMM04=6469646e616320636578650e007a7a75 XMM05=65676169727420636578650b00657461 XMM06=78650a006873616d7320636578650a00 XMM07=6d20636578650d006c61746f74206365 XMM08=650900737472617473657220726f7475 XMM09=6320636578650e007a7a756620636578 XMM10=7420636578650b006574616469646e61 XMM11=73616d7320636578650a006567616972 XMM12=650d006c61746f7420636578650a0068 XMM13=78650a00657a696d696e696d20636578 XMM14=7320636578650a0073746e6968206365 XMM15=00006e65672063657865080073646565 info registers vcpu 1 RAX=ffffffff83e59480 RBX=0000000000000001 RCX=ffffffff83e4153c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e59a88 RBP=ffffed100112e000 RSP=ffff88800897fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85671c48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5948e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe3347b3430 CR3=000000000f8b8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041642e5c00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000