fffffffffffff, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'bridge0\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)}, 0x10005085) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:28:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x700, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:28:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0xc00e0000, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2148.424915] 9pnet: Insufficient options for proto=fd [ 2148.473883] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2148.473883] program syz-executor.7 not setting count and/or reply_len properly [ 2148.484128] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2148.484128] program syz-executor.5 not setting count and/or reply_len properly 01:28:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140), 0x1004, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '.)'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_hash}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee01}}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) 01:28:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x900, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2148.566576] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2148.566576] program syz-executor.6 not setting count and/or reply_len properly 01:28:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x4000000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:28:43 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) [ 2148.596945] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2148.596945] program syz-executor.5 not setting count and/or reply_len properly 01:28:43 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x6000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2148.679352] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2148.679352] program syz-executor.7 not setting count and/or reply_len properly 01:28:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) mount$9p_fd(0x0, &(0x7f00000001c0)='\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2148.723438] device veth0_vlan entered promiscuous mode 01:28:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2148.782872] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2148.782872] program syz-executor.7 not setting count and/or reply_len properly [ 2148.811063] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2148.811063] program syz-executor.6 not setting count and/or reply_len properly 01:28:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x5000000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:28:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x2, 0x30, 0x0, 'queue0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="747261b9eb6effffffff2c7266646e", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) [ 2148.879956] FAULT_INJECTION: forcing a failure. [ 2148.879956] name failslab, interval 1, probability 0, space 0, times 0 [ 2148.882546] CPU: 0 PID: 11149 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2148.884112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2148.885976] Call Trace: [ 2148.886578] dump_stack+0x107/0x167 [ 2148.887404] should_fail.cold+0x5/0xa [ 2148.888255] ? __alloc_skb+0x6d/0x5b0 [ 2148.889112] should_failslab+0x5/0x20 [ 2148.889961] kmem_cache_alloc_node+0x55/0x330 [ 2148.890984] __alloc_skb+0x6d/0x5b0 [ 2148.891806] inet6_netconf_notify_devconf+0x84/0x1a0 [ 2148.892942] addrconf_sysctl_unregister+0x131/0x1c0 [ 2148.894069] addrconf_ifdown.isra.0+0x122b/0x15f0 [ 2148.895194] ? addrconf_dad_run+0x180/0x180 [ 2148.896187] addrconf_notify+0x159/0x2410 [ 2148.897126] ? tun_device_event+0x71/0x1160 [ 2148.898098] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2148.899258] ? inet6_ifinfo_notify+0x150/0x150 [ 2148.900275] ? failover_register+0x530/0x530 [ 2148.901261] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 2148.902491] ? ipmr_device_event+0x18b/0x1f0 [ 2148.903480] raw_notifier_call_chain+0xb3/0x110 [ 2148.904523] call_netdevice_notifiers_info+0xb5/0x130 [ 2148.905693] unregister_netdevice_many+0x852/0x1490 [ 2148.906823] ? netdev_pick_tx+0xc70/0xc70 [ 2148.907767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2148.908943] ? queue_delayed_work_on+0xb4/0xe0 [ 2148.909956] ? trace_hardirqs_on+0x5b/0x180 [ 2148.910942] unregister_netdevice_queue+0x201/0x2c0 [ 2148.912051] ? unregister_netdevice_many+0x1490/0x1490 [ 2148.913232] ? linkwatch_fire_event+0x63/0x190 [ 2148.914258] __tun_detach+0xfc1/0x12b0 [ 2148.915154] tun_chr_close+0xc4/0x250 [ 2148.916006] __fput+0x285/0x9f0 [ 2148.916743] ? __tun_detach+0x12b0/0x12b0 [ 2148.917677] task_work_run+0xe2/0x1a0 [ 2148.918551] exit_to_user_mode_prepare+0x186/0x190 [ 2148.919642] syscall_exit_to_user_mode+0x38/0x1d0 [ 2148.920717] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2148.921861] RIP: 0033:0x7fa206731b19 [ 2148.922710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2148.926812] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2148.928526] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2148.930125] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2148.931722] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2148.933319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2148.934923] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:28:44 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 24) [ 2149.196632] device veth0_vlan entered promiscuous mode [ 2149.209742] FAULT_INJECTION: forcing a failure. [ 2149.209742] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.212373] CPU: 0 PID: 11184 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2149.213920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2149.215795] Call Trace: [ 2149.216404] dump_stack+0x107/0x167 [ 2149.217226] should_fail.cold+0x5/0xa [ 2149.218092] ? create_object.isra.0+0x3a/0xa20 [ 2149.219140] should_failslab+0x5/0x20 [ 2149.219982] kmem_cache_alloc+0x5b/0x310 [ 2149.220902] create_object.isra.0+0x3a/0xa20 [ 2149.221885] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2149.223059] kmem_cache_alloc_node+0x169/0x330 [ 2149.224117] __alloc_skb+0x6d/0x5b0 [ 2149.224935] inet6_ifa_notify+0x118/0x220 [ 2149.225862] ? inet6_fill_ifaddr+0xd60/0xd60 [ 2149.226878] __ipv6_ifa_notify+0x17b/0xb10 [ 2149.227842] ? modify_prefix_route+0x590/0x590 [ 2149.228883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2149.230067] ? __local_bh_enable_ip+0x9d/0x100 [ 2149.231114] addrconf_ifdown.isra.0+0xb99/0x15f0 [ 2149.232186] ? addrconf_dad_run+0x180/0x180 [ 2149.233183] addrconf_notify+0x159/0x2410 [ 2149.234127] ? tun_device_event+0x71/0x1160 [ 2149.235134] ? mark_held_locks+0x9e/0xe0 [ 2149.236044] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2149.237210] ? inet6_ifinfo_notify+0x150/0x150 [ 2149.238244] ? failover_register+0x530/0x530 [ 2149.239269] raw_notifier_call_chain+0xb3/0x110 [ 2149.240323] call_netdevice_notifiers_info+0xb5/0x130 [ 2149.241479] dev_close_many+0x25b/0x460 [ 2149.242371] ? __dev_close_many+0x2f0/0x2f0 [ 2149.243354] ? __mod_timer+0x7fb/0xd10 [ 2149.244239] unregister_netdevice_many+0x349/0x1490 [ 2149.245347] ? netdev_pick_tx+0xc70/0xc70 [ 2149.246286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2149.247471] ? queue_delayed_work_on+0xb4/0xe0 [ 2149.248476] ? trace_hardirqs_on+0x5b/0x180 [ 2149.249443] unregister_netdevice_queue+0x201/0x2c0 [ 2149.250568] ? unregister_netdevice_many+0x1490/0x1490 [ 2149.251743] ? linkwatch_fire_event+0x63/0x190 [ 2149.252762] __tun_detach+0xfc1/0x12b0 [ 2149.253659] tun_chr_close+0xc4/0x250 [ 2149.254521] __fput+0x285/0x9f0 [ 2149.255272] ? __tun_detach+0x12b0/0x12b0 [ 2149.256200] task_work_run+0xe2/0x1a0 [ 2149.257061] exit_to_user_mode_prepare+0x186/0x190 [ 2149.258157] syscall_exit_to_user_mode+0x38/0x1d0 [ 2149.259257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2149.260406] RIP: 0033:0x7fa206731b19 [ 2149.261233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2149.265325] RSP: 002b:00007fa203ca7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2149.267025] RAX: 0000000000000003 RBX: 00007fa206844f60 RCX: 00007fa206731b19 [ 2149.268623] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2149.270205] RBP: 00007fa203ca71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2149.271801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2149.273360] R13: 00007ffdbd24481f R14: 00007fa203ca7300 R15: 0000000000022000 01:28:59 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 25) 01:28:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x6000000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:28:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5d, 0x5a}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000800}, 0x820) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf256b0000000c009900ffff0000660000000a001a0008021100000000000a00060008021100000000000a001a000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r1, &(0x7f0000000040)="e74ed1bf", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @mcast1}, 0x80) getpgrp(0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000240)=0x8, 0x4) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 01:28:59 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x7000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:28:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x24101) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x1001, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 01:28:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x20900, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) flock(r0, 0x1) openat(r2, &(0x7f00000001c0)='./file1/file0\x00', 0x4000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000240)) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000001040108bc000000000000060000000000000000010000000800034000000058c53b7a9dd93a85388f059ae6423c2327cf697d3ff7813bef24baa8feacb3491fe803c0f221e65c32366952ebca0ee007da65f626c57d9669978e4bcc1b4e0fcfd4261f8edd26dc3695b2f61f4c66d4d25ebf694abfe9249c9a704108fc082a70727a1abb40e389a240aef94c17cc1d8d6fe60b83ec3cfe0144394f08faa3f9632e00a5fff4b22f7e931c66e36212dfa65748eaede10daa6dcb5178d0cf271e2c48c5b13a2c01f0199a85699f4548d4c96e"], 0x24}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) openat(r3, &(0x7f0000000000)='./file1/file0/../file0\x00', 0x290340, 0x91) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xf2, 0x1, 0x1d, 0xff, 0x0, 0x98d9, 0x4, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0xffff, 0x7f}, 0x42904, 0x400, 0xcd, 0x4, 0x401, 0x5, 0x20, 0x0, 0x80000000, 0x0, 0xc16c}, r5, 0xa, r1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) unshare(0x48020200) 01:28:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xec0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:28:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0xfffff000, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2164.683444] sg_write: 2 callbacks suppressed [ 2164.683465] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2164.683465] program syz-executor.7 not setting count and/or reply_len properly [ 2164.693551] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2164.693551] program syz-executor.6 not setting count and/or reply_len properly [ 2164.698018] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2164.698018] program syz-executor.5 not setting count and/or reply_len properly [ 2164.703423] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2164.785857] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2164.785857] program syz-executor.5 not setting count and/or reply_len properly 01:28:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000000)={0x1, 0x2}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) [ 2164.807807] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2164.807807] program syz-executor.6 not setting count and/or reply_len properly [ 2164.827733] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2164.827733] program syz-executor.7 not setting count and/or reply_len properly 01:28:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x7000000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2164.917159] device veth0_vlan entered promiscuous mode [ 2164.951819] FAULT_INJECTION: forcing a failure. [ 2164.951819] name failslab, interval 1, probability 0, space 0, times 0 [ 2164.954492] CPU: 1 PID: 11207 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2164.956117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2164.958047] Call Trace: [ 2164.958670] dump_stack+0x107/0x167 [ 2164.959539] should_fail.cold+0x5/0xa [ 2164.960437] ? create_object.isra.0+0x3a/0xa20 [ 2164.961510] should_failslab+0x5/0x20 [ 2164.962405] kmem_cache_alloc+0x5b/0x310 [ 2164.963372] create_object.isra.0+0x3a/0xa20 [ 2164.964407] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2164.965607] kmem_cache_alloc_node+0x169/0x330 [ 2164.966686] __alloc_skb+0x6d/0x5b0 [ 2164.967555] inet6_ifa_notify+0x118/0x220 [ 2164.968510] ? inet6_fill_ifaddr+0xd60/0xd60 [ 2164.969534] __ipv6_ifa_notify+0x17b/0xb10 [ 2164.970517] ? modify_prefix_route+0x590/0x590 [ 2164.971621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2164.972853] ? __local_bh_enable_ip+0x9d/0x100 [ 2164.973934] addrconf_ifdown.isra.0+0xb99/0x15f0 [ 2164.975058] ? addrconf_dad_run+0x180/0x180 [ 2164.976086] addrconf_notify+0x159/0x2410 [ 2164.977055] ? tun_device_event+0x71/0x1160 [ 2164.978084] ? mark_held_locks+0x9e/0xe0 [ 2164.979044] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2164.980258] ? inet6_ifinfo_notify+0x150/0x150 [ 2164.981328] ? failover_register+0x530/0x530 [ 2164.982393] raw_notifier_call_chain+0xb3/0x110 [ 2164.983494] call_netdevice_notifiers_info+0xb5/0x130 [ 2164.984702] dev_close_many+0x25b/0x460 [ 2164.985637] ? __dev_close_many+0x2f0/0x2f0 [ 2164.986672] ? lock_downgrade+0x6d0/0x6d0 [ 2164.987660] unregister_netdevice_many+0x349/0x1490 [ 2164.988853] ? __queue_work+0x681/0xf40 [ 2164.989766] ? netdev_pick_tx+0xc70/0xc70 [ 2164.990767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2164.992004] ? queue_delayed_work_on+0xb4/0xe0 [ 2164.993068] ? trace_hardirqs_on+0x5b/0x180 [ 2164.994076] unregister_netdevice_queue+0x201/0x2c0 [ 2164.995233] ? unregister_netdevice_many+0x1490/0x1490 [ 2164.996488] ? linkwatch_fire_event+0x63/0x190 [ 2164.997549] __tun_detach+0xfc1/0x12b0 [ 2164.998467] tun_chr_close+0xc4/0x250 [ 2164.999378] __fput+0x285/0x9f0 [ 2165.000151] ? __tun_detach+0x12b0/0x12b0 [ 2165.001125] task_work_run+0xe2/0x1a0 [ 2165.002022] exit_to_user_mode_prepare+0x186/0x190 [ 2165.003173] syscall_exit_to_user_mode+0x38/0x1d0 [ 2165.004296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2165.005489] RIP: 0033:0x7fa206731b19 [ 2165.006383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.010668] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2165.012433] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2165.014121] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2165.015788] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.017460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.019114] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:29:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:00 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x9000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x4000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2165.095031] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2165.095031] program syz-executor.6 not setting count and/or reply_len properly [ 2165.102879] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2165.102879] program syz-executor.5 not setting count and/or reply_len properly [ 2165.108766] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2165.108766] program syz-executor.7 not setting count and/or reply_len properly 01:29:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0xd4, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc054}, 0x40801) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x20, r4, 0x5, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 01:29:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xe6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x2f, 0xe8b, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r2 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={0x0, 0xc0, 0x97}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'sha384-avx2\x00'}}, &(0x7f0000000480)="9890a85d42a7bc2e42142330a4123a3b9615bcd4b39ab297fdc1091f93e40db011a60577edc6ffa2c3e12ca433c798cfc58cadeca0d7a361572a9ffb13b628f1bfde1eb791f45af1135f24afb779f9680d04f620cb533fac2df1c367989aaa3708437d9f41ad7273a47a91219e7238217eb4c139b2d1a1ef928171738fbcbe0cc2570314f12ad074552cf857ee73167532dc3b591cc727a000dc041f6b38079fd3831a2da477b0983ff58ef37e5335fb6cc91d579e15039ad648ce74d6222bde", &(0x7f0000000600)=""/151) r3 = add_key(&(0x7f0000000340)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="44354e54471ab9920244c091fe515aa20dd57bb8901e4a91a99c26312d071cfc097a07c527990ae558a110941b1865bbd9e35d7dddbc1821eabe2d1433e5de716990454f7489f2645b56095c99aafaa11ea5dea474c7bd0e96f9fde29d400c4e4197f40557ef13983a8ec0db54731e3ef406953044fbabf92d5da5c5ee5c33", 0x7f, r1) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#\x00', r3) keyctl$chown(0x4, 0x0, 0xee01, r2) write$bt_hci(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xb) stat(&(0x7f0000000580)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f0000000440)='dns_resolver\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f00000006c0), r5) r6 = creat(&(0x7f0000000840)='./file0\x00', 0x11) dup2(0xffffffffffffffff, r6) setresuid(0xffffffffffffffff, r4, 0x0) [ 2165.154138] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2165.154138] program syz-executor.6 not setting count and/or reply_len properly [ 2165.352497] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:29:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x9000000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:29:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xa701, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="0b4300e23d13e0604ae0f500000000000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 01:29:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0xfffffffffffffffe, 0x820008, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX, @ANYBLOB="2c7766646e6f3d30b38ed1add49908ab652d9e93cf09397a09e041897bc2934f8753c3e39ce61c7e1a5612beabec826cc66c21a968913018f6813af1d4bf997e2be7de6f080000003c301306f3087e25dc19872f446cc566a3665babf7d8c9da1f25b3e1b941e335997f27e100c4459f639721ded64e9310203e825d9b600ba1333cca4188a4cc1870b6dbda01c786539c55186ba73c21b73057a2f6b21b189215000000000000", @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYBLOB=',fscache,appraise_type=imasig,euid>', @ANYRESDEC=0x0, @ANYBLOB=',func=BPRM_CHECK,hash,measure,rootcontext=unconfined_u,context=root,dont_measure,\x00']) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r2, 0x0}]) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) 01:29:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000001060101000000000000000640f57956f3c9908dd0dd8da41d840e94353bc20655a2d517e3b974003511e049e8dd0000d22926794fc74578060647f5222a0cf89cc77d9997610ba216468038e1aba4486ba8fb4f846437cb322f7e7cda0be6321be6735f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) tee(0xffffffffffffffff, r3, 0x400, 0xa) r4 = eventfd(0x1ff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/181, 0xb5}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0xc424}, {r8, 0x9530}, {0xffffffffffffffff, 0x202}, {0xffffffffffffffff, 0x18}, {r4, 0x4110}, {r1, 0x48}, {r2}, {r5, 0x2428}], 0x8, &(0x7f0000000100)={r6, r7+60000000}, &(0x7f0000000280)={[0x4]}, 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x1c) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @local, 0x1c}, 0x1c) sendfile(r10, r9, 0x0, 0x9bbb) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 2181.726665] sg_write: 2 callbacks suppressed [ 2181.726678] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.726678] program syz-executor.7 not setting count and/or reply_len properly [ 2181.731254] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.731254] program syz-executor.5 not setting count and/or reply_len properly [ 2181.734382] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.734382] program syz-executor.6 not setting count and/or reply_len properly [ 2181.736740] 9pnet: Insufficient options for proto=fd 01:29:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 26) 01:29:16 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x87010000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2181.765378] 9pnet: Insufficient options for proto=fd [ 2181.778299] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.778299] program syz-executor.7 not setting count and/or reply_len properly [ 2181.780649] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.780649] program syz-executor.5 not setting count and/or reply_len properly 01:29:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xc00e, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)) fspick(r3, &(0x7f0000000140)='./file0/file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x43, 0x6, 0x8}) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000007, 0x20010, r4, 0x0) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448e0, &(0x7f0000000000)) write$binfmt_script(r10, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '^!['}, {0x20, '\x00'}, {0x20, '!}\'!'}, {0x20, '\\\\/}'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '&'}], 0xa, "8cb4b114ac63b2ce8b254365956c1b698b1947ae9ea3fbf810a776e37d0c84b895dc57c5c68813264f2b2e166ec6e960b84424987909"}, 0x5b) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000400), 0x8000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@afid={'afid', 0x3d, 0xb2}}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) syz_io_uring_submit(r5, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x4}}, 0xfffeffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2181.850402] ALSA: seq fatal error: cannot create timer (-22) 01:29:16 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x9effffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000640)=ANY=[], 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') pread64(r1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x2, 0x0, 0x1, 0x8, 0x200}, &(0x7f0000000040)=0x20) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000000)) dup2(r2, r3) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) [ 2181.866552] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.866552] program syz-executor.5 not setting count and/or reply_len properly [ 2181.869486] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.869486] program syz-executor.6 not setting count and/or reply_len properly [ 2181.896449] ALSA: seq fatal error: cannot create timer (-22) [ 2181.921044] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.921044] program syz-executor.7 not setting count and/or reply_len properly [ 2181.948762] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.948762] program syz-executor.5 not setting count and/or reply_len properly 01:29:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$sndseq(r0, &(0x7f0000000340)=[{0xc3, 0x20, 0xff, 0xff, @tick=0x9, {0x80, 0x1f}, {0x9}, @result={0x400, 0x5}}, {0x81, 0x0, 0x4, 0x8, @time={0x0, 0x1000}, {0x9, 0x1f}, {0x1, 0x9}, @raw8={"6be1831b08a21fdddfafc4ba"}}, {0x5, 0x3f, 0x2, 0xf3, @time={0x5, 0x1}, {0x2, 0x7f}, {0x0, 0x2}, @queue={0x80, {0x8, 0x101}}}, {0x1, 0x0, 0x60, 0x8, @tick=0x2, {0x3f, 0x5}, {0x81, 0xf1}, @connect={{0x0, 0x1}, {0x7, 0x40}}}, {0x2, 0x81, 0x6, 0x1, @time={0x2, 0x38}, {0xe4, 0x6}, {0x40, 0x2}, @queue={0x0, {0x64ab, 0x5}}}, {0x9, 0x4, 0x82, 0x0, @tick=0x1, {0x1f, 0xff}, {0x1, 0xc1}, @result={0xc4, 0xfb7e}}, {0x1f, 0x3, 0x5, 0xe5, @tick=0x1, {0x8, 0x40}, {0x7, 0x40}, @result={0x800, 0xa7}}, {0x1, 0x7, 0x9, 0x80, @time={0x7fffffff, 0x401}, {0x1, 0x5}, {0x7, 0x81}, @raw8={"935473c99807edc9d314494b"}}], 0xe0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000, 0x40) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000000)) sendfile(r2, r3, &(0x7f0000000080), 0x1) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) 01:29:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x80010000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2181.975942] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2181.975942] program syz-executor.7 not setting count and/or reply_len properly 01:29:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0xfffffffffffffffe, 0x820008, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX, @ANYBLOB="2c7766646e6f3d30b38ed1add49908ab652d9e93cf09397a09e041897bc2934f8753c3e39ce61c7e1a5612beabec826cc66c21a968913018f6813af1d4bf997e2be7de6f080000003c301306f3087e25dc19872f446cc566a3665babf7d8c9da1f25b3e1b941e335997f27e100c4459f639721ded64e9310203e825d9b600ba1333cca4188a4cc1870b6dbda01c786539c55186ba73c21b73057a2f6b21b189215000000000000", @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYBLOB=',fscache,appraise_type=imasig,euid>', @ANYRESDEC=0x0, @ANYBLOB=',func=BPRM_CHECK,hash,measure,rootcontext=unconfined_u,context=root,dont_measure,\x00']) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r2, 0x0}]) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) 01:29:17 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2182.013952] device veth0_vlan entered promiscuous mode 01:29:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xf000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2182.045666] FAULT_INJECTION: forcing a failure. [ 2182.045666] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.047044] CPU: 1 PID: 11266 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2182.047888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2182.048899] Call Trace: [ 2182.049221] dump_stack+0x107/0x167 [ 2182.049654] should_fail.cold+0x5/0xa [ 2182.050107] ? ___slab_alloc+0x155/0x700 [ 2182.050588] ? create_object.isra.0+0x3a/0xa20 [ 2182.051127] should_failslab+0x5/0x20 [ 2182.051575] kmem_cache_alloc+0x5b/0x310 [ 2182.052062] create_object.isra.0+0x3a/0xa20 [ 2182.052583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2182.053184] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2182.053773] ? inet6_ifa_notify+0x118/0x220 [ 2182.054286] __alloc_skb+0xb1/0x5b0 [ 2182.054710] inet6_ifa_notify+0x118/0x220 [ 2182.055193] ? inet6_fill_ifaddr+0xd60/0xd60 [ 2182.055721] __ipv6_ifa_notify+0x17b/0xb10 [ 2182.056214] ? modify_prefix_route+0x590/0x590 [ 2182.056748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2182.057364] ? __local_bh_enable_ip+0x9d/0x100 [ 2182.057897] addrconf_ifdown.isra.0+0xb99/0x15f0 [ 2182.058459] ? addrconf_dad_run+0x180/0x180 [ 2182.058967] addrconf_notify+0x159/0x2410 [ 2182.059457] ? tun_device_event+0x71/0x1160 [ 2182.059967] ? mark_held_locks+0x9e/0xe0 [ 2182.060451] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2182.061050] ? inet6_ifinfo_notify+0x150/0x150 [ 2182.061587] ? failover_register+0x530/0x530 [ 2182.062107] raw_notifier_call_chain+0xb3/0x110 [ 2182.062657] call_netdevice_notifiers_info+0xb5/0x130 [ 2182.063263] dev_close_many+0x25b/0x460 [ 2182.063733] ? __dev_close_many+0x2f0/0x2f0 [ 2182.064239] ? lock_downgrade+0x6d0/0x6d0 [ 2182.064727] unregister_netdevice_many+0x349/0x1490 [ 2182.065315] ? __queue_work+0x681/0xf40 [ 2182.065775] ? netdev_pick_tx+0xc70/0xc70 [ 2182.066269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2182.066874] ? queue_delayed_work_on+0xb4/0xe0 [ 2182.067402] ? trace_hardirqs_on+0x5b/0x180 [ 2182.067910] unregister_netdevice_queue+0x201/0x2c0 [ 2182.068496] ? unregister_netdevice_many+0x1490/0x1490 [ 2182.069120] ? linkwatch_fire_event+0x63/0x190 [ 2182.069651] __tun_detach+0xfc1/0x12b0 [ 2182.070110] tun_chr_close+0xc4/0x250 [ 2182.070552] __fput+0x285/0x9f0 [ 2182.070933] ? __tun_detach+0x12b0/0x12b0 [ 2182.071423] task_work_run+0xe2/0x1a0 [ 2182.071871] exit_to_user_mode_prepare+0x186/0x190 [ 2182.072453] syscall_exit_to_user_mode+0x38/0x1d0 [ 2182.073010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2182.073607] RIP: 0033:0x7fa206731b19 [ 2182.074037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2182.076192] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2182.077073] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2182.077899] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2182.078726] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2182.079553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2182.080387] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2199.583247] sg_write: 4 callbacks suppressed [ 2199.583265] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2199.583265] program syz-executor.7 not setting count and/or reply_len properly [ 2199.590696] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2199.590696] program syz-executor.5 not setting count and/or reply_len properly 01:29:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0xfffffffffffffffe, 0x820008, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX, @ANYBLOB="2c7766646e6f3d30b38ed1add49908ab652d9e93cf09397a09e041897bc2934f8753c3e39ce61c7e1a5612beabec826cc66c21a968913018f6813af1d4bf997e2be7de6f080000003c301306f3087e25dc19872f446cc566a3665babf7d8c9da1f25b3e1b941e335997f27e100c4459f639721ded64e9310203e825d9b600ba1333cca4188a4cc1870b6dbda01c786539c55186ba73c21b73057a2f6b21b189215000000000000", @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYBLOB=',fscache,appraise_type=imasig,euid>', @ANYRESDEC=0x0, @ANYBLOB=',func=BPRM_CHECK,hash,measure,rootcontext=unconfined_u,context=root,dont_measure,\x00']) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r2, 0x0}]) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) 01:29:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="0c001100ef98e0113b3fc90f0f00fc5c1c000000005d02190b026a5773dc939aa7d2c7a128a0c4acee30ebc37c7dc1c60fc2685f705ec57354", @ANYRES64, @ANYRESOCT=r0], 0x28}}, 0x81) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x8001, 0x4) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000001300)={'fscrypt:', @desc4}, &(0x7f0000001340)={0x0, "0ce94ebfc19fc575b93c20195346a8fb6080faea883e9ae1cc2b0a1280631112901f85624f2c82f1a8b311a4f8467203c7df81e370ac047d7dfeb0605831ddcc", 0x1d}, 0x48, r3) add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r6) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB='\x00\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000fedbdf250400000005000600ff00000008000300f9ffffff080002000300000014000100ff0200000000000000000000000000010800020007000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xa) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) unshare(0x48020200) 01:29:34 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xc00e0000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:34 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) 01:29:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) [ 2199.619647] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2199.619647] program syz-executor.6 not setting count and/or reply_len properly perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x9effffff, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:29:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x34000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:34 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 27) 01:29:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x9aba}}, './file0\x00'}) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x4, 0x4, 0x1}, 0x3fffc000}}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) [ 2199.698864] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2199.698864] program syz-executor.6 not setting count and/or reply_len properly [ 2199.711978] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2199.711978] program syz-executor.7 not setting count and/or reply_len properly [ 2199.723664] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2199.723664] program syz-executor.5 not setting count and/or reply_len properly [ 2199.779125] device veth0_vlan entered promiscuous mode 01:29:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) eventfd(0x20) signalfd4(r0, &(0x7f0000000380)={[0x7ff]}, 0x8, 0x80000) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0xfffffffffffffffe, 0x820008, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX, @ANYBLOB="2c7766646e6f3d30b38ed1add49908ab652d9e93cf09397a09e041897bc2934f8753c3e39ce61c7e1a5612beabec826cc66c21a968913018f6813af1d4bf997e2be7de6f080000003c301306f3087e25dc19872f446cc566a3665babf7d8c9da1f25b3e1b941e335997f27e100c4459f639721ded64e9310203e825d9b600ba1333cca4188a4cc1870b6dbda01c786539c55186ba73c21b73057a2f6b21b189215000000000000", @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYBLOB=',fscache,appraise_type=imasig,euid>', @ANYRESDEC=0x0, @ANYBLOB=',func=BPRM_CHECK,hash,measure,rootcontext=unconfined_u,context=root,dont_measure,\x00']) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x0, 0x0, r2, 0x0}]) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) [ 2199.860176] FAULT_INJECTION: forcing a failure. [ 2199.860176] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.863058] CPU: 0 PID: 11326 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2199.864618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2199.866856] Call Trace: [ 2199.867488] dump_stack+0x107/0x167 [ 2199.868361] should_fail.cold+0x5/0xa [ 2199.869224] ? __alloc_skb+0x6d/0x5b0 [ 2199.870110] should_failslab+0x5/0x20 [ 2199.871001] kmem_cache_alloc_node+0x55/0x330 [ 2199.872063] __alloc_skb+0x6d/0x5b0 [ 2199.872942] inet_netconf_notify_devconf+0xdd/0x250 [ 2199.874132] inetdev_event+0x1035/0x1610 [ 2199.875092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2199.876344] ? call_rcu+0x435/0x9c0 [ 2199.877177] ? devinet_init_net+0x650/0x650 [ 2199.878163] ? nh_netdev_event+0x8c/0x370 [ 2199.879115] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2199.880373] raw_notifier_call_chain+0xb3/0x110 [ 2199.881440] call_netdevice_notifiers_info+0xb5/0x130 [ 2199.882633] unregister_netdevice_many+0x852/0x1490 [ 2199.883804] ? netdev_pick_tx+0xc70/0xc70 [ 2199.884808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2199.886006] ? queue_delayed_work_on+0xb4/0xe0 [ 2199.887100] ? trace_hardirqs_on+0x5b/0x180 [ 2199.888121] unregister_netdevice_queue+0x201/0x2c0 [ 2199.889300] ? unregister_netdevice_many+0x1490/0x1490 [ 2199.890549] ? linkwatch_fire_event+0x63/0x190 [ 2199.891604] __tun_detach+0xfc1/0x12b0 [ 2199.892517] tun_chr_close+0xc4/0x250 [ 2199.893402] __fput+0x285/0x9f0 [ 2199.894142] ? __tun_detach+0x12b0/0x12b0 [ 2199.895277] task_work_run+0xe2/0x1a0 [ 2199.896146] exit_to_user_mode_prepare+0x186/0x190 [ 2199.897491] syscall_exit_to_user_mode+0x38/0x1d0 [ 2199.898806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2199.900180] RIP: 0033:0x7fa206731b19 [ 2199.901198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2199.906155] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2199.908203] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2199.910123] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2199.912045] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2199.913975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2199.915889] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:29:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xc00e0000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:29:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x80000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:34 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 01:29:34 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xf0ffffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0xf, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2199.986176] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2199.986176] program syz-executor.5 not setting count and/or reply_len properly [ 2200.010641] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2200.010641] program syz-executor.7 not setting count and/or reply_len properly [ 2200.055794] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2200.055794] program syz-executor.6 not setting count and/or reply_len properly [ 2200.076324] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2200.076324] program syz-executor.6 not setting count and/or reply_len properly 01:29:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x400000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:52 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 28) 01:29:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0xc0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) r2 = fcntl$dupfd(r1, 0x0, r0) fcntl$setlease(r0, 0x400, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 01:29:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xf0ffffff, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2217.127305] sg_write: 2 callbacks suppressed [ 2217.127324] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.127324] program syz-executor.5 not setting count and/or reply_len properly [ 2217.136091] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.136091] program syz-executor.6 not setting count and/or reply_len properly 01:29:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xfffff000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:52 executing program 2: fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa18) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x100, 0xbe, 0x7, 0x6, 0x6}) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x70e6) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/67, 0x43}, {&(0x7f0000000440)=""/95, 0x5f}], 0x4, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000640)=""/129, 0x81}], 0x1}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f00000007c0)=""/19, 0x13}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/242, 0xf2}, {&(0x7f0000001900)=""/161, 0xa1}, {&(0x7f00000019c0)=""/65, 0x41}, {&(0x7f0000001a40)=""/63, 0x3f}, {&(0x7f0000001a80)=""/140, 0x8c}], 0x7}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/50, 0x32}, {&(0x7f0000001c80)=""/218, 0xda}, {&(0x7f0000001d80)=""/82, 0x52}, {&(0x7f0000001e00)=""/137, 0x89}], 0x4, &(0x7f0000001f00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001f40)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001fc0)=""/158, 0x9e}, {&(0x7f0000002080)=""/231, 0xe7}, {&(0x7f0000002180)=""/22, 0x16}, {&(0x7f00000021c0)=""/5, 0x5}, {&(0x7f0000002200)=""/245, 0xf5}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/59, 0x3b}], 0x7}}, {{&(0x7f0000002400)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f0000002480)=""/25, 0x19}, {&(0x7f00000024c0)=""/177, 0xb1}, {&(0x7f0000002580)=""/244, 0xf4}], 0x3, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002740)=@abs, 0x6e, &(0x7f0000002900)=[{&(0x7f00000027c0)=""/195, 0xc3}, {&(0x7f00000028c0)=""/55, 0x37}], 0x2, &(0x7f0000002940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x7, 0x2060, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002bc0)) ioctl$TIOCGPTPEER(r7, 0x5441, 0x1c3f) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) openat(r8, &(0x7f0000002c00)='./file0\x00', 0xc8000, 0x80) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000002c40), 0x60c4c1, 0x0) [ 2217.157486] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.157486] program syz-executor.7 not setting count and/or reply_len properly write(r9, &(0x7f0000002c80)="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", 0x1000) r10 = syz_open_dev$evdev(&(0x7f0000003c80), 0x80000000, 0x82803) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000003cc0)={0x0, 0x2, 0x7f}) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f00000040c0)={r11, "4b3cac706ce47666a62f562e68e22b6e"}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000050c0)={r3, 0x0, 0x28}) ioctl$VT_RESIZE(r12, 0x5609, &(0x7f0000005100)={0xff, 0xff23}) dup3(r4, r6, 0x0) [ 2217.179135] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.179135] program syz-executor.6 not setting count and/or reply_len properly 01:29:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7d72, &(0x7f0000001c80)={0x0, 0xc947, 0x8, 0x2, 0x19a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001d00), &(0x7f0000001d40)=0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000004500), 0x244040, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2004, @fd=r4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/90, 0x5a}], 0x2, 0x14, 0x1, {0x0, r6}}, 0x3) syz_io_uring_submit(0x0, r2, &(0x7f0000004540)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2007, @fd=r3, 0x4f, 0xfffffffffffffffd, 0x4, 0x2, 0x1, {0x2, r6}}, 0xb17f) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmmsg$inet6(r1, &(0x7f00000043c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="829e1c9dde0e5f18484b386ea404dda6ba19eb62fadb8b895fbe804de844ddfe61ff036b97012ed55920b3dd3ce6fd6f881bcb82595f807acb2c773c595fcaf1fe512e67a3dee7f5564de98451c7049feb6fd146991e2d5ffda10bba5d709f46de9b10d3fc2faa62e86227da03bb737aca19588478d3d48a49e883ecf1abe4d1f44e84ed63443ad2e90a851ecf66130968cca75cc08866d4b868b4ea73b71c275e20e211b9cda80caef56f9e7a6709258dd99756d5f6ced864208faeb456054580d5feaaa8f78324d28e0aaccd2b", 0xce}, {&(0x7f0000000180)="c43b28a66eb575c4dda9d56dde740429dd984ec690a1233e60813aac09d1c78e6c3301dc5b884719f10d5638659c0f83a3ad53419aa7e06942d0", 0x3a}, {&(0x7f00000001c0)="35d199dac04e8faa517539588f57853ee0933db257b18a47dd3b4f23dc115254ca24b88a4dcfd4de708a3c7d5a9504d6d2f62dceca2219b846b627d06a6e8d0d8906b37bf5c991e01e35ad508f56e59ceb92897d2cf7a03779b1921d1ae3679cc4ee5385698437e9c2838cca83d4d2c5bcc335d6658b9a926ed83135a9b131c7eeef6a1959c9ba640d7db2abfe2ad628ff80530c2f792db387f0c5041636c8490f079d3766f1c01abdd4d192e79482c106e980ad91209c00062cfe5ed639", 0xbe}], 0x3, &(0x7f00000002c0)=[@hopopts={{0xb0, 0x29, 0x36, {0x8, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0xff}, @pad1, @generic={0x3, 0x89, "1bc6287cdbb98867cbe24e7312a07eb58910a7d7963890e5536918176edb9bb2d16700738fe56d40da775f36c28f827db24962f9b7fd3a97b14567227e911bcadd631f792eeb7a0568a0a36d43ca1976576c0ebdafd9a11156e56be4be6584de2d679e37e32fdc9965298173224b3c7aa9415ffd5d3737db0ba5cf19d4d8f0f96781e6bf345bc243a6"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x32, 0x0, '\x00', [@pad1, @generic={0x92}]}}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="1ba33fa8bfbacf3544de0159beeb1b0c3904a8720311fbb9ed419981fca8a25964cb9c2f4ff1dbc7ebef2452c8985a128591d1bf73a6688feea2ad0b62206b7da536f86cea50f63cd102d9320af4718a4f15824bc7e5e71ed11a860f2fae40262f18d88c38814f4e73ad101777e4cfbc41837b12f092d5b0c6ecc5602ce0498b637e804552fd42b6732c006eed65aa7417f2f7af28e6ebb2c1af7509dfb912a74f40540fc7e25683d1758190c9ec47908eba0cf4e70d607e2e4639f133d46b", 0xbf}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000500)="ec111f641c6d0874e6651da87e296532c0103d44723b5681580426696eb06711fc4c24bc57f26953b03a27c5def6f0fc98fdd5ac958dc66212a823737631d1330a6e17ff109b026c69366312ddc7d707b45af215ecdd6e50681c1cf200120ca5a2abb526106a56e2730c31424ce3ef0a70b9cd3fb00cb971a76864cc9c6349bc85be337d8fd3d688ea744fc993bbbed8db1702636181cfa27fdd8a452a6cbf82469ab1db39a1dc4dfd52b721479d1d5cf66615c813042b3720be210bed6bd77275c830b274c2b8b3e37cde0f33ff20fabda96f4b0cec37eb8c2cddf8b1766257b637e7", 0xe3}, {&(0x7f0000000640)="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", 0x1000}], 0x2, &(0x7f0000004a80)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0x6}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0xc, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x2, [0x7, 0x4, 0x80, 0xd749]}}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x6}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hoplimit={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x65}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x87, 0xd, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x101, [0x9, 0x2, 0x7, 0x0, 0x4]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x8000, [0x6, 0x1f]}}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x158}}, {{&(0x7f0000001800)={0xa, 0x4e23, 0x401, @remote, 0x2}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001840)="56a21699b28b0377491244986d99b3d32d6feff011434cab16a06f91128beb0dec0e4430c2092250f6c20d5487517a1fcdbf789800e37d8c5dfa7d03d604cbc08eb802189170c4e178c5578471653cdae527d75c8456dec22c1e6fb214d3525ca8cee62edae0976a742cb3bc58889eed5c69c00e98854edefc93784981e0a0a3d453ef46c9c9b79270394a3f0a2ff37302cd8e21005dd9305a5c4ea4bb3be4ee4477eea941c8eaf144a5940ed428e5efeb787ccfc0955af0d27e3b194e17c2cb6c51ba65fdc615b5e1ea9f791c173bac8951eeded800053cd06b347d3cb7e27559484e0e38966515a8f3e6033917b281e5cf6391", 0xf4}, {&(0x7f0000001940)="323fac6ec60fed4e4e745f48f6579500d11139ddd590c70d155e30e32f7718d6633e47c47215e9156aab5be87735e2c615dbe9cc4221eaa809fc7f1a8748ebab630ec284c540e6e9ca774a0776bf78b5475adc4221a281f81f61166df0834f8d70cf1c95da96bd93fb7fdd734d8e422bf5a1df595d152e4cad15eeb9c666d9e6b3b17adad5833277c189f3203029be23a35903b3dbf2ef98", 0x98}, {&(0x7f0000001a00)="e41b01e4ed004b358d6de9128da010e705cddc69e54e5945a36c0aff9f1ef03c85acefbcf0eb54c4954ed6eea17cafed40ce6a85d671a301370a291cc3978e881e67734d45f13f1b3969bb098a63f9de8554ef4f3ea1c3266e36dc5a2245c4cc20772cc30ed25f5c6e201725396ba8c90eb7cb4016565b33ca7b20e679db2d431eb9a210c39aa04fc05f15615e5af489ebce38d6634530cc6267f3749c2b8d9073cca00c62d154c2867a724940652ad9544e8c938e24c5d3c652b47a2867745041125c5efb314eff2ea4b867764ec177b0207b87c6d68214b50373", 0xdb}], 0x3, &(0x7f0000001e00)=[@tclass={{0x14, 0x29, 0x43, 0x408}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0x81, 0x0, [@remote, @loopback]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xe4, 0xc, 0x2, 0x1, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private1, @private0]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x87, 0x14, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, @local, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @loopback, @local]}}}, @dstopts={{0x148, 0x29, 0x37, {0x84, 0x25, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x1, 0x21, [0x4, 0x7, 0x8b, 0x4, 0x1, 0x1, 0x7]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x4, 0x401, [0x5, 0x3, 0x5, 0x8, 0x3, 0xfff, 0x35]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x3, 0xff59, [0x2, 0x8, 0x1400000000000000, 0xbe]}}, @pad1, @generic={0x9, 0x4b, "99c9eda65ddff8a80bd7dd113e043a76c5193596825b7e50bc66216d4f3b35d1cc4fafcdf1c7260de78c0a7136a69dd13a733bd8dff2de04204d3665f006a12597775cbdd6b8f73da983a8"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x3, 0x6, 0x48, 0x267, [0xfff, 0xbe, 0x4]}}, @pad1]}}}, @dstopts={{0x60, 0x29, 0x37, {0x73, 0x8, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x1, [0x5, 0x0, 0x5, 0x4, 0x80000000, 0x8c]}}, @pad1, @ra={0x5, 0x2, 0xfff}]}}}], 0x328}}, {{&(0x7f0000001b40)={0xa, 0x4e20, 0x400, @mcast2, 0x57f}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001b80)="6af7d15d2b8bea20ca20715d6b73e0fe9c981bd280ae793e89b541cc911f8610ca28468bb2dcc5db97f635120c246efbf69fb10c654c388971783c19d099d5aa95fb3ba68b84b11081269f89ee24b6fd8cefb8aa375ef29b4d278cdc1dc0c6adb99145dd62330f0e23c4c5cb56236c5a6450b097ae5405027292b6687c27b5cce3f8fa94dd42d6fb59aa3e51664626959383f0cfa4b8ca6b44991676b7c079961ba984a2d659be32", 0xa8}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000003140)="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", 0x1000}], 0x3, &(0x7f0000004140)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts_2292={{0x1e8, 0x29, 0x4, {0x6, 0x39, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x80, 0x2, [0x4, 0x1, 0x80000000, 0x40, 0x7f, 0x2, 0xffffffff, 0x8]}}, @generic={0x30, 0xa7, "2e983c437ef17d9a29750bb679c6988f93e87fb3ba58629fbc4b8bd12af7a4d5e2d1f70aee5c98115cee9214407208b7176442a18c4a1fa6caa2aafaa44baabd5368e8a1ae6763ab18c97e8dc1b564817b7098888b93627a13e6a9af96cd9a0c2c16085b8706b8a96f4ed18f60907df480a74eb7a85a2843ea4ecab6056993867b77e2ec9a049741e86998017ae488990960b1dc73fa9fc8f85d722c1ac374c0581da43d84f5f2"}, @ra={0x5, 0x2, 0xf4bb}, @generic={0x2, 0xd0, "b6ffb11eacaa514a23f98554acb36ae51dd3171468f165e77b5d4210cc53a330234b92cd8f5a09aebcb544c12c457ce0a21aba062a64d3599c32e7a68273a86be0b3ec229a3fcad84dec2c5cdd031d510af178158e9c8dcc8072d364afe3576d721544fdd7e0b57378353ca35d568002de96703bc17e97dfe2d9fdd9ed09a2424daa7a90278ce4e885c1ecca96c95ed41dfa7737422424e77612bb443e523927789dc20ade2296f5b098500c17a4302b3e324d2152246f596152026defb5366887322763584eafc2e28e7de0fe8e570b"}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x2b, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x80, [0xda, 0xb69, 0x5, 0x6062a3f6]}}, @pad1]}}}], 0x248}}], 0x5, 0x800) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000640)=ANY=[], 0x30) sendmsg$inet6(r1, &(0x7f0000004a40)={&(0x7f0000004580)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000004780)=[{&(0x7f00000045c0)="d56d7f33265ff8ec3ec2c9f2387901c070fd5126bb2c9e0022e16f16e416d224771ba25a306a4ac69549898ae725d5062955eceeb2c79540d806adb080b05021c00c8af9f990d33bc995279d75c2cb564b5ea9d43147cad908ab8541b043099ee7672888fe70abbc41defd8c545a00e66eef60d430367d8abaf7d99fe2", 0x7d}, {&(0x7f0000004640)="f64d2bb09b1699028db6a1b7c2b97095b612eef260a1f639e51114b753590c554cd098a338aafee390fa434c7d9d758b27cf1d5af2da185fc93727034c2b3c50a01b621b2eb13a4a668927104caf1f63e9f4340e9eff5f57ee4c576b7f8ae26021d4c5fa01a7fb1dde8d7d52edce021edaed7042c2daebbee756d6968f6df6971d9b5b91a7dddfe07070cc1237fd7d4c6c79936ecc4181519908d26e2a30", 0x9e}, {&(0x7f0000004700)="1fc16b8783e858499d68da16ca49d8870d4de9450d2758efa7e7079059f40aab64cbe3", 0x23}, {&(0x7f0000004740)}], 0x4, &(0x7f00000047c0)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x33, 0xa, 0x2, 0x0, 0x0, [@private2, @ipv4={'\x00', '\xff\xff', @local}, @private1, @loopback, @remote]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x62, 0x11, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x80, 0x52, "f3d57c35dc830859b58edbd66e471abbaed1ff6c52cc428e49aa28e54496124d31103db7f2c6c801b5be8fb11ec37d21d9d16c87510262b1ef9ff13b9a13823628c7dbd0f657b1a9a466d8ede090387b17d5"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @private0}]}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x3b, 0x1f, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0x81, [0x78ec, 0x1, 0x2, 0x0, 0x4]}}, @jumbo={0xc2, 0x4, 0x20}, @pad1, @generic={0x0, 0xae, "67864e38bc2eefb74b1021f7798f2fd5e57027a8a9c27376960656bcd27043790c8ff56c051c73c5d07fb40209ba84379270bb40aff75241fb8fd57d6ba6913b55589522b84f719975d79b9eb77c0dbcc78ff3fd66b5cc14774ac16ac44cbead403a1b1ff8dbaf79a448ccdc252f9f125c79f9ca240bda3a804279628687daabf2947c8598e792900dcc9582f8ee521bb57f1b23019c2c7f11f3f3b49f638c6361f1e512878d953f674aaf98d02a"}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@pad1]}}}], 0x268}, 0x840) r7 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000004740)=ANY=[@ANYBLOB="010000000100000018000000a526ea33085a1bcd086da7186149be7b9a4c2ea0b3438c27", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) [ 2217.225329] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.225329] program syz-executor.7 not setting count and/or reply_len properly 01:29:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',w=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 01:29:52 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {0xe}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="fae4bf45af3200000000ba0900006cf099d7255987e7034ca6a6be31f40727653000"]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x34}, 0x1, 0x0, 0x0, 0x8015}, 0xa01d) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r5, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r5, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x1) r6 = syz_genetlink_get_family_id$ipvs(0x0, r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) lseek(r1, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) unshare(0x48020200) 01:29:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xfffff000, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2217.329195] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.329195] program syz-executor.5 not setting count and/or reply_len properly [ 2217.361355] 9pnet: Insufficient options for proto=fd 01:29:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0xec0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:29:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xffffff7f, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2217.378748] 9pnet: Insufficient options for proto=fd 01:29:52 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="0367175966c4ef2fa32f6e5f6c90d77fe65f1da9c6106bb5a3cf1f4cf1706130df5bd48e6aa94edd8d48cebabe502cfc0847599a229af71e95242630ac67b54354d10f1fd1df6d1b5cfe7aa77e16ba0ffb41394bfb6a2c57278c10cac6c027888db322ff9946f516fdd09a9f00f4a7e512", 0x71}, {&(0x7f0000000380)="6e4d6030157a07cef9f5108b32f68ea0ab71bd0d235c9253d03a13073555b7716aa60eac3e6e27a0f1980b3a90858f80e9cdd0107efdfd1d3fa57e263afe8903ce34ddf8c15aeb2de082878369253dc124a8974dfb5e82c4cee05313d2e958a4c9f13a409fc14d421038c61d9266d6bdf127abc06820f2f280ab5b16bb284671ce7b3313f00fa9fdaccd0a3df8a74285087c9565f9d82fe316d58c0ca2fbded2e00b", 0xa2}, {&(0x7f0000000440)="f2672b8d5b48238f08569638f5e55025cb77c90f64e7f7373517a6ffae225b6c83b4d3d73216fd7cbc496354a6d2898f5064d627ffa9b1d3294e7ac5631bc374f12032f7f0af30e796dff1c70927f3e71a89777f92d49ed24e1ee64b58f3365119f0927bb06e4b2ede8fc2d10e5fbda90f452bdad42f90ceab591528851cafa2a0e12a3b62cb21d4cbd7af5fbdc2c32b5a91293c1e171c2d843a2ee376303101640f85abd5e4e671e997592e23c64fa6dac50567fd", 0xb5}], 0x3, &(0x7f0000000500)=[@hopopts={{0x120, 0x29, 0x36, {0xff, 0x20, '\x00', [@generic={0x80, 0x7d, "1143c1fb8269e0668af4559c2c05ce8a397e3706afa3460c97c0a6360cd2d76896309f7ed0e5dd567a8953974fa5f7ffa2f6a4160ac127e1e42f428d62a1c6f8d49b51ab463d9e12290ea207973870b1630439ceaf7b91cc255f170aef73ba20e569b358e062687933769d25601f6e3dc8b1ccbda833dc8a293c42ed42"}, @generic={0x1, 0x3f, "b593bef2e3508cc3cf6f968f053fa50233becbc207677be8e0c3b4faa6dd89909935807e1fd3aee3a7ac76928878b15dc92cf4e1d03ff2938f178361ddcb2b"}, @calipso={0x7, 0x20, {0x1, 0x6, 0xc6, 0x9a89, [0x0, 0x5, 0x3]}}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x3b, 0x3f, [0x9, 0x7]}}, @ra, @ra={0x5, 0x2, 0x9}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x62, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0x80, 0x29, 0x36, {0x6, 0xc, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0x80, 0x7f, [0x8, 0x8, 0x0, 0x1000, 0x100000001, 0x0, 0x0, 0x6, 0x6, 0x6]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x208}}], 0x1, 0x800) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) flistxattr(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2217.409815] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.409815] program syz-executor.7 not setting count and/or reply_len properly [ 2217.421841] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.421841] program syz-executor.6 not setting count and/or reply_len properly [ 2217.473906] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.473906] program syz-executor.6 not setting count and/or reply_len properly 01:29:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f1f47c766d3d66012c7266646e6f3d98097cc3a36afd18bca7cf6c0de3231c6e135b67cf5e8f2f6ac988653741f6bbffcbe3e56fd67c54bfb0", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 2217.520838] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2217.520838] program syz-executor.7 not setting count and/or reply_len properly [ 2217.532494] device veth0_vlan entered promiscuous mode 01:29:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x4000, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2217.620285] FAULT_INJECTION: forcing a failure. [ 2217.620285] name failslab, interval 1, probability 0, space 0, times 0 [ 2217.622735] CPU: 0 PID: 11378 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2217.624176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2217.625928] Call Trace: [ 2217.626478] dump_stack+0x107/0x167 [ 2217.627233] should_fail.cold+0x5/0xa [ 2217.628031] ? __alloc_skb+0x6d/0x5b0 [ 2217.628822] should_failslab+0x5/0x20 [ 2217.629621] kmem_cache_alloc_node+0x55/0x330 [ 2217.630558] __alloc_skb+0x6d/0x5b0 [ 2217.631316] inet_netconf_notify_devconf+0xdd/0x250 [ 2217.632335] inetdev_event+0x1035/0x1610 [ 2217.633182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.634217] ? call_rcu+0x435/0x9c0 [ 2217.634963] ? devinet_init_net+0x650/0x650 [ 2217.635851] ? nh_netdev_event+0x8c/0x370 [ 2217.636711] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2217.637777] raw_notifier_call_chain+0xb3/0x110 [ 2217.638739] call_netdevice_notifiers_info+0xb5/0x130 [ 2217.639793] unregister_netdevice_many+0x852/0x1490 [ 2217.640823] ? netdev_pick_tx+0xc70/0xc70 [ 2217.641696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2217.642780] ? queue_delayed_work_on+0xb4/0xe0 [ 2217.643714] ? trace_hardirqs_on+0x5b/0x180 [ 2217.644612] unregister_netdevice_queue+0x201/0x2c0 [ 2217.645658] ? unregister_netdevice_many+0x1490/0x1490 [ 2217.646756] ? linkwatch_fire_event+0x63/0x190 [ 2217.647708] __tun_detach+0xfc1/0x12b0 [ 2217.648518] tun_chr_close+0xc4/0x250 [ 2217.649306] __fput+0x285/0x9f0 [ 2217.649983] ? __tun_detach+0x12b0/0x12b0 [ 2217.650842] task_work_run+0xe2/0x1a0 [ 2217.651633] exit_to_user_mode_prepare+0x186/0x190 [ 2217.652637] syscall_exit_to_user_mode+0x38/0x1d0 [ 2217.653627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2217.654653] RIP: 0033:0x7fa206731b19 [ 2217.655413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2217.659139] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2217.660680] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2217.662129] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2217.663591] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2217.665059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2217.666518] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2232.202448] sg_write: 2 callbacks suppressed [ 2232.202466] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.202466] program syz-executor.5 not setting count and/or reply_len properly [ 2232.217910] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.217910] program syz-executor.6 not setting count and/or reply_len properly 01:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xffffff7f, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:30:07 executing program 1: unshare(0x28020600) semget$private(0x0, 0x0, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x26}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3c, 0x3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x10000000614}, 0x400, 0x46, 0x0, 0x0, 0x1, 0x7fffffff, 0xfff, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) unshare(0x48020200) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000001c0)={0x1, 0x387}) 01:30:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x400300, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}, {@access_client}]}}) 01:30:07 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x33fe0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:07 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xffffff9e, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:07 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 29) [ 2232.231633] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.231633] program syz-executor.7 not setting count and/or reply_len properly 01:30:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={0xb40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x4}, {0x3, 0x8}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x8}, {0x6}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x3, 0x5}, {0x5, 0x2}, {0x6, 0x4}, {0x3}, {0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x3, 0x7}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc61, 0x7f, 0x8001, 0xfffe, 0x200, 0x81, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0xa}, {}, {0x6}, {0x1, 0x9}, {0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x4, 0x3}, {0x3, 0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x2, 0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x5, 0x26, 0x1b, 0x48, 0x7b, 0x2]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x16, 0x2, 0x42, 0x1f, 0x0, 0x6c, 0x2c, 0x6c, 0x30, 0x16, 0x4, 0x16, 0x6, 0x9, 0x1b, 0xc, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x0, 0x1000, 0xfa1, 0x0, 0x3f, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{}, {0x6, 0x8}, {0x6, 0x8}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x6}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x4, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x5, 0x5}, {}, {0x3, 0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x2}, {0x6}, {0x6, 0x4}, {0x6, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x9}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x348, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8001, 0x1000, 0x7, 0x9, 0x6, 0x40, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x5, 0xa}, {0x7, 0x8}, {}, {0x1, 0x8}, {0x2}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x7}, {0x5, 0x2}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x6, 0x2}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x48, 0x24, 0x5, 0x36, 0x2, 0x60, 0x5d, 0x30, 0x6, 0x0, 0x1, 0x1b, 0x24, 0x1]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x16, 0x1, 0x1b, 0x78, 0x30, 0x2, 0xb, 0x1b, 0x4, 0x76, 0x4, 0x3, 0x0, 0x9, 0x12, 0x24, 0x16, 0xc, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x478e76f5a677b43c}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x800, 0x56, 0x1000, 0xff, 0x9d1d, 0x401, 0x5]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf8, 0x2, 0x3f, 0x100, 0x2800, 0xffff, 0x7fff, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3f, 0x20, 0x9, 0x800, 0x9, 0xbfb4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ed, 0x9, 0xff, 0x1, 0x1, 0x6, 0x4af1, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x6, 0x2000, 0x1, 0x3, 0xfffc, 0x7f]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x0, 0x80, 0x8, 0x16a, 0x6]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x5}, {0x3}, {}, {0x1}, {0x3, 0xa}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x4}, {0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x6, 0x3, 0x7, 0x800, 0xff, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x9}, {0x1, 0x3}, {0x2}, {0x6, 0x2}, {0x2, 0x8}, {0x3, 0xa}, {0x3, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x4}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x2, 0x40, 0x9, 0x8000, 0xd8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x1b, 0x5, 0x12, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x85b7, 0x9, 0x8, 0x3, 0x100, 0x2, 0x9]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0x8, 0xbc2, 0x1, 0xc60, 0x2, 0x7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x18, 0x2, 0x9, 0x30, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x3}, {0x4}, {0x1, 0x3}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x8}, {0x5, 0x6}, {0x2, 0x2}, {0x2, 0x4}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x1}, {0x7, 0x7}, {0x5, 0x7}, {0x4, 0xa}, {0x1}, {0x1, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0x9}, {0x2, 0x3}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x1000, 0x1, 0x2, 0x8, 0xc100, 0x8000, 0x1000]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x7}, {0x0, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x2, 0x8}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0x4}, {0x4, 0x8}, {0x7, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x9}, {0x7, 0x7}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x2, 0x8}, {0x7, 0x2}, {0x0, 0x6}, {0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x8}, {0x2}, {0x5, 0x4}, {0x5, 0xa}, {0x5, 0x3}, {0x2, 0x3}, {}, {0x2, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x24, 0x6, 0x1, 0x60, 0x29, 0x36, 0x2, 0x1, 0x24, 0x18, 0x48, 0x0, 0x12, 0x1b, 0x5, 0x16, 0x1, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x5}, {0x2, 0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0xa}, {}, {0x3, 0x1}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0x1}, {0x7, 0x6}, {0x2, 0x3}, {0x3, 0x4}, {0x2, 0x1}, {0x3, 0x8}, {0x1}, {0x7, 0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x2, 0x2}, {0x4, 0x4}, {0x7, 0xa}, {0x6, 0xa}, {0x6, 0x3}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x40, 0x9, 0x73, 0x3, 0x0, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xa, 0x1, 0x6c, 0x30, 0x16, 0x30, 0x0, 0x60, 0x4, 0x2, 0x6, 0x4, 0x1]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x9}, {0x6, 0x7}, {0x3, 0x6}, {0x2, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x2, 0x6}, {0x5, 0x9}, {0x3, 0x6}, {0x6, 0x9}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0x8000, 0x9, 0x8, 0x3, 0x3dc7, 0x8]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x1, 0x2, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x3a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x48, 0x16, 0x4, 0x6, 0x2, 0x36, 0x30, 0x36, 0x3, 0x6c, 0xc, 0x1d, 0x16, 0xc, 0x2, 0x36, 0x1, 0x12, 0x6c, 0x12, 0x0, 0x6, 0x30, 0x18]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x7}, {0x1, 0x9}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x2, 0xa}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x5}, {0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x7}, {0x3, 0x4}, {0x4, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x7}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x5}, {0x5, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x4}, {0x0, 0x8}, {0x5, 0x2}, {0x7}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x3}, {0x7, 0xa}, {0x2, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x7}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x7}, {0x5, 0x1}, {0x3, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {}, {0x1, 0x6}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x4, 0x4}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x3}, {0x3, 0x7}, {0x3, 0x7}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x2}, {0x5}, {0x4, 0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x7, 0xe}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0x8}, {0x4}, {0x2, 0x1}, {0x5, 0x7}, {0x6, 0xa}, {0x5, 0x2}, {0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0xff, 0x5e2a, 0x5, 0x7, 0x2, 0xfa5, 0x200]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x48, 0x16, 0x5, 0x12, 0x4, 0x9, 0xc, 0x16, 0x0, 0x3, 0x1, 0x2]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x2}, {0x5, 0xa}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x6}, {0x3, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x2, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x5, 0x5}, {0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {0x2, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x7}, {0x5, 0x1}, {}, {}, {}, {0x3}, {0x6, 0xa}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {}, {0x2, 0xa}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x8}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x31c, 0x3, 0xa0, 0x9, 0xdb, 0x8, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x7, 0x246, 0xaa, 0x8, 0xdf51, 0x0, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xc32c, 0x3, 0x4, 0x20, 0x27, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x4, 0x1, 0x3, 0x100, 0x1, 0x8]}}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0xa}, {}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x8}, {0x6}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x6}, {0x3, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x1}, {0x4, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x9}, {0x6}, {0x3}, {0x1, 0x8}, {0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x5, 0x6}, {0x6, 0x9}, {0x4, 0x5}, {0x7}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {0x4, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x2}, {0x0, 0x6}, {0x4, 0x9}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x2, 0x9}, {0x1}, {0x6, 0x3}, {0x4}, {0x1, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x6, 0x9}, {0x3, 0x3}, {0x4, 0x7}, {0x5, 0x9}, {0x7, 0x2}, {0x7, 0x8}, {0x4, 0xa}, {0x3, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x1}, {0x7, 0x6}, {0x4, 0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x9}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x7}, {0x2, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x9}, {0x5}, {0x4, 0x4}, {0x3, 0x4}, {0x2, 0x1}, {0x0, 0x4}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x30, 0x24, 0x2, 0x26, 0x1, 0x2, 0x12, 0x1, 0xf585f25f0b70fb5d, 0x4, 0x48, 0x0, 0x12, 0xb, 0x4, 0x9, 0x3, 0x12, 0x6, 0x16, 0x4, 0x3, 0x16, 0x10, 0x6c, 0x0, 0x70, 0x0, 0x36, 0x6, 0x24]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x18, 0x8, 0xff, 0x401, 0x20, 0x4, 0xac21]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0x6, 0x8001, 0x4, 0x6, 0x7f, 0x1, 0x5]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xff, 0x5, 0x18d2, 0x1f, 0x5, 0x825, 0xda0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x1000, 0x9, 0x32, 0x8, 0xfff, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x7, 0x8, 0xd4, 0x81, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x52f3, 0x3, 0x1ff, 0x8001, 0x2, 0x8001, 0x8]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x5, 0xffff, 0x0, 0x695, 0x5, 0x8001, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x9, 0x1000, 0xfff, 0x101, 0x6, 0xff00]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x26, 0x12, 0x3, 0x6, 0x1b, 0xb, 0x18, 0x5d9aac67a214a2b4, 0x24, 0x2, 0x1, 0x9]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x6}, {0x7, 0x1}, {0x0, 0x8}, {}, {}, {0x5, 0x5}, {0x2, 0x5}, {0x2, 0xa}, {0x5, 0x6}, {0x5, 0x5}, {0x2, 0x6}, {0x3, 0x3}, {0x3, 0x3}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x6, 0x6}, {0x4, 0x5}, {0x2}, {0x4, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x6, 0xa}, {0x6, 0x5}, {0x0, 0xa}, {0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x2, 0x9}, {0x7, 0x4}, {}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0xc, 0x48, 0x6, 0x24, 0x1, 0x20, 0x1b, 0x24, 0x12, 0x30, 0xb, 0x16, 0x1, 0x2, 0x0, 0x2, 0x9, 0x3, 0x0, 0x30, 0x2, 0x6c, 0x6c, 0x48, 0x30, 0x3, 0x16, 0x1b, 0x5]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0xb, 0x9, 0x0, 0x24, 0x1b, 0x0, 0x6c, 0x24, 0xc, 0x9, 0xc, 0x2, 0x6c, 0x18, 0x48, 0x48, 0x6, 0x24, 0x67, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x800, 0x3, 0x101, 0xfffd, 0x7f, 0x4000, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x7, 0x7, 0x101, 0xfe00, 0x4, 0x7fff]}}]}]}, @NL80211_ATTR_TX_RATES={0x330, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0xffff, 0x7457, 0x6, 0x3, 0xfffe, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x4, 0x7, 0xa7, 0x5039, 0x4, 0x80]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x4}, {0x2, 0x5}, {0x4, 0x2}, {0x5, 0x4}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x4, 0x7}, {0x5, 0x8}, {0x2, 0x4}, {0x3, 0x7}, {0x5, 0x7}, {0x3, 0x4}, {0x5, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x2, 0x1}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x1, 0x4, 0x800, 0x4, 0x52, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0xf}, {0x7, 0x5}, {0x7, 0x6}, {0x7}, {0x3, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x1}, {0x4, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x4}, {0x1}, {0x2, 0x7}, {0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x6}, {}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x4}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x4}, {0x0, 0xa}, {0x2}, {0x7, 0x8}, {0x7, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x60, 0x16, 0x5, 0x0, 0x1b, 0x2, 0x5, 0x1b, 0x9, 0x2, 0x9, 0x16, 0x3, 0x36, 0x2, 0x1, 0x60, 0xb, 0x16, 0x6, 0x3, 0x60, 0x3, 0x5, 0x30, 0x2, 0x18]}]}, @NL80211_BAND_60GHZ={0x108, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6b3, 0x7, 0x0, 0x101, 0x6, 0x7, 0x44]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1, 0x3, 0x6, 0x5, 0x3, 0x5040]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x2}, {0x4, 0x8}, {0x4, 0x2}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x9}, {0x3, 0x5}, {0x1, 0x8}, {0x3, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x4}, {}, {0x1, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x6, 0x9}, {0x3, 0x8}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x8}, {0x2, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x6}, {0x3, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x7fff, 0x4, 0x8, 0x5d4, 0x8, 0xd43d]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0xc, 0x9, 0x16]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x2, 0x9}, {0x2, 0xa}, {0x6, 0x8}, {0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x2, 0x9}, {0x5, 0x1}, {0x6, 0x1}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x8}, {0x6, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x5}, {0x5, 0x8}, {0x5}, {0x6, 0x2}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0xa}, {0x4, 0xa}, {0x3, 0x6}, {0x3, 0x9}, {0x1}, {0x3, 0x5}, {0x2, 0xa}, {0x1}, {0x6, 0x6}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x7}, {}, {0x1, 0x1}, {0x6, 0xa}, {0x2}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x8}, {0x4}, {0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x7, 0xfff8, 0x3, 0x0, 0xdf, 0x61]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f34, 0x9, 0x800, 0x0, 0x8, 0x15e7, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x6}, {0x4, 0x6}, {0x6}, {0x1, 0x2}, {0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x1, 0x2, 0xfff, 0xfffe, 0x1ff, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x20, 0x3, 0xc, 0x1, 0x7f, 0x60, 0x3, 0x1b, 0x3, 0x60, 0x16, 0x5, 0x0, 0x4, 0x5f3c4b0041d3e5db, 0x3, 0x1, 0x0, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x4}, {0x6, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x69, 0x39a, 0x387, 0x5, 0x4, 0x3, 0x40]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6ba, 0x1, 0x2, 0xff, 0x8000, 0xffe3, 0x92, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x18, 0x3, 0x60, 0x5, 0x48, 0x9, 0x6c, 0x60, 0x36, 0x12, 0xbe5a8d3619874900, 0x48, 0x5, 0x30, 0x4, 0x18, 0x5, 0x18, 0x6c, 0x3, 0x6c, 0x1, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1f, 0x76f, 0x5, 0x400, 0x400, 0x8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x7, 0x8, 0x8, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x20, 0x48]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x7}, {0x5, 0xd}, {0x4, 0x9}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x8}, {0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {}, {0x6, 0x4}, {}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x3, 0x7}, {0x4, 0x4}, {0x4}, {0x5, 0x3}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x4}, {0x3, 0x7}, {0x0, 0x7}, {0x1}, {0x4, 0x1}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x5}, {0x6, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x1}]}]}]}]}, 0xb40}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x36a6b7368bcff217}, 0x4008840) [ 2232.263231] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.263231] program syz-executor.6 not setting count and/or reply_len properly [ 2232.329602] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.329602] program syz-executor.5 not setting count and/or reply_len properly [ 2232.342496] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.342496] program syz-executor.7 not setting count and/or reply_len properly 01:30:07 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syncfs(r0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000240)={0x87, 0x29, 0x1, {0x0, [{{0x10, 0x1, 0x7}, 0xd2, 0x1, 0x7, './file1'}, {{0x4, 0x3, 0x8}, 0x4004, 0x1, 0x7, './file0'}, {{0x80, 0x2}, 0x5, 0x0, 0x7, './file1'}, {{0x4, 0x2, 0x3}, 0x5d5ccf2d, 0x4, 0x7, './file0'}]}}, 0x87) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x100, 0x0, 0x0, 'queue1\x00', 0x3f}) pipe2(&(0x7f0000000000), 0x800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',\x00']) 01:30:07 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x200005e4, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xffffff9e, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:30:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000280), 0xb}, 0x1c210, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x9bbb) 01:30:07 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xfffffff0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2232.480888] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.480888] program syz-executor.6 not setting count and/or reply_len properly [ 2232.507785] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.507785] program syz-executor.6 not setting count and/or reply_len properly 01:30:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xf0ffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:07 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x7ffff000, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2232.585563] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.585563] program syz-executor.7 not setting count and/or reply_len properly [ 2232.588520] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2232.588520] program syz-executor.5 not setting count and/or reply_len properly 01:30:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r3, 0x2285, 0x0) write$binfmt_elf64(r3, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x4f, 0x60, 0x5, 0x0, 0x400, 0x2, 0x6, 0x3, 0x2b5, 0x40, 0x3c0, 0xfffffffa, 0xff, 0x38, 0x1, 0xfff3, 0x101, 0xbba3}, [{0x6474e551, 0x9, 0x213, 0x7fff, 0x6, 0x6, 0x5, 0x5}, {0x60000000, 0x7fff, 0x2, 0x7, 0x18db, 0x6f, 0x7fffffff, 0x7}], "1e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3cc6674f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee9f5be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df390905d6b069862d0ff96087f05fb932700771070f4a5f84a4d00"/204, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) kcmp(r4, 0x0, 0x0, r5, r6) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000240)) fspick(r8, &(0x7f0000000140)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6, 0x5, 0x20, 0x20, 0x0, 0x3, 0x420, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x1200, 0x7fff, 0x6, 0x0, 0x0, 0xb3, 0x3, 0x0, 0xa420, 0x0, 0x7}, r4, 0x4, r8, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@fsname={'fsname', 0x3d, '&(*'}}]}}) [ 2232.617323] device veth0_vlan entered promiscuous mode [ 2232.645880] ALSA: seq fatal error: cannot create timer (-22) [ 2232.654197] 9pnet: Insufficient options for proto=fd [ 2232.664693] ALSA: seq fatal error: cannot create timer (-22) [ 2232.732126] FAULT_INJECTION: forcing a failure. [ 2232.732126] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.734949] CPU: 1 PID: 11439 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2232.736484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2232.738632] Call Trace: [ 2232.739333] dump_stack+0x107/0x167 [ 2232.740117] should_fail.cold+0x5/0xa [ 2232.740977] should_failslab+0x5/0x20 [ 2232.741831] __kmalloc_node_track_caller+0x74/0x3b0 [ 2232.742918] ? inet_netconf_notify_devconf+0xdd/0x250 [ 2232.744052] __alloc_skb+0xb1/0x5b0 [ 2232.744835] inet_netconf_notify_devconf+0xdd/0x250 [ 2232.745900] inetdev_event+0x1035/0x1610 [ 2232.746757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.747844] ? call_rcu+0x435/0x9c0 [ 2232.748607] ? devinet_init_net+0x650/0x650 [ 2232.749528] ? nh_netdev_event+0x8c/0x370 [ 2232.750405] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2232.751489] raw_notifier_call_chain+0xb3/0x110 [ 2232.752475] call_netdevice_notifiers_info+0xb5/0x130 [ 2232.753564] unregister_netdevice_many+0x852/0x1490 [ 2232.754616] ? netdev_pick_tx+0xc70/0xc70 [ 2232.755494] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2232.756597] ? queue_delayed_work_on+0xb4/0xe0 [ 2232.757552] ? trace_hardirqs_on+0x5b/0x180 [ 2232.758452] unregister_netdevice_queue+0x201/0x2c0 [ 2232.759496] ? unregister_netdevice_many+0x1490/0x1490 [ 2232.760590] ? linkwatch_fire_event+0x63/0x190 [ 2232.761566] __tun_detach+0xfc1/0x12b0 [ 2232.762401] tun_chr_close+0xc4/0x250 [ 2232.763197] __fput+0x285/0x9f0 [ 2232.763885] ? __tun_detach+0x12b0/0x12b0 [ 2232.764915] task_work_run+0xe2/0x1a0 [ 2232.765924] exit_to_user_mode_prepare+0x186/0x190 [ 2232.767185] syscall_exit_to_user_mode+0x38/0x1d0 [ 2232.768409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2232.769717] RIP: 0033:0x7fa206731b19 [ 2232.770664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2232.774930] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2232.776572] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2232.778085] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2232.779568] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.781052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.782538] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:30:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000000)) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f3d37c30d5b5d7ba48ba75ed359d52627e4b344e3a27dd84792b2f986e1de1f9c411afb194af0d3f523a8231a624c043a73d0b6e8c3482e4a538d056f0fad2b8e9a505479897fef00080000000000005abc1508dcefb7cc759c0e2435de55bfa4c9d22d9c7c1e972d75b89936a5395364d144e5", @ANYRESHEX=r4, @ANYBLOB="2501c54fe471f5f0882c4a923528c9a2ea451842ba3b4e982fd745f53774706af5ae69476c0d707a898ca6226f259a782528dd72a6952787e0678242c64f293e9a7e157732da047b1620412313f3e8aa8c943659ab584303d14d5297a6fa0d822cd888"]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000000)) ioctl$sock_bt_hci(r5, 0x400448dc, &(0x7f0000000080)="a205c3d1ebf94a297516248b90a8b82bae73551f781e744764a37e9d562afcd239044352d9591d8b9425c9b767de6394e7f65b5ce4d51dc3230e89491b29a62c60") 01:30:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xfffffff0, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2246.366313] sg_write: 6 callbacks suppressed [ 2246.366326] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.366326] program syz-executor.5 not setting count and/or reply_len properly 01:30:21 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000012900)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x420002, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x4008240b, &(0x7f0000000000)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000500)={@remote}, 0x14) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x2, 0x1, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x80000, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x125a0, 0x401, 0x40, 0x3, 0xfff, 0x0, 0x2, 0x0, 0x22e9, 0x0, 0xd81}, r3, 0x0, r2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'macvtap0\x00', &(0x7f00000002c0)=@ethtool_coalesce={0xf, 0xfff, 0xfe, 0x4, 0x7fffffff, 0xffff, 0x4a77, 0x9, 0x7bb, 0xf1, 0x4, 0x2, 0x37, 0x2, 0x3, 0x0, 0xfffeffff, 0x7, 0x5a, 0xffffff00, 0xffff, 0xffff5973}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) 01:30:21 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 30) 01:30:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x1000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2246.382324] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.382324] program syz-executor.6 not setting count and/or reply_len properly [ 2246.388192] 9pnet: Insufficient options for proto=fd 01:30:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xffffffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000, 0x2}, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x28, 0x19, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x14, 0x23f, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x7c, 0xfb, 0xac, 0x0, 0x3f, 0x2080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x49}, 0x1, 0x5, 0x32280000, 0x5, 0x9, 0x7ff, 0x5, 0x0, 0x20e0cbd8, 0x0, 0x8}, 0xffffffffffffffff, 0xc, r0, 0x3) readv(0xffffffffffffffff, 0x0, 0x0) readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2246.422318] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.422318] program syz-executor.5 not setting count and/or reply_len properly [ 2246.440484] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.440484] program syz-executor.7 not setting count and/or reply_len properly [ 2246.441799] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.441799] program syz-executor.6 not setting count and/or reply_len properly [ 2246.453194] 9pnet: Insufficient options for proto=fd 01:30:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x2000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2246.502357] device veth0_vlan entered promiscuous mode [ 2246.507860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:30:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000240)={0x6, 0x7fff, 0x0, 'queue1\x00', 0x101}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7205646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 01:30:21 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x8, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2246.549579] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.549579] program syz-executor.5 not setting count and/or reply_len properly 01:30:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xffffffff, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:30:21 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x12, 0xc21}, 0x14}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) [ 2246.579880] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.579880] program syz-executor.6 not setting count and/or reply_len properly [ 2246.582423] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.582423] program syz-executor.7 not setting count and/or reply_len properly [ 2246.586151] FAULT_INJECTION: forcing a failure. [ 2246.586151] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.587848] CPU: 0 PID: 11497 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2246.588878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.590138] Call Trace: [ 2246.590532] dump_stack+0x107/0x167 [ 2246.591074] should_fail.cold+0x5/0xa [ 2246.591665] ? create_object.isra.0+0x3a/0xa20 [ 2246.592351] should_failslab+0x5/0x20 [ 2246.592927] kmem_cache_alloc+0x5b/0x310 [ 2246.593537] create_object.isra.0+0x3a/0xa20 [ 2246.594189] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.594943] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2246.595702] ? inet_netconf_notify_devconf+0xdd/0x250 [ 2246.596479] __alloc_skb+0xb1/0x5b0 [ 2246.597035] inet_netconf_notify_devconf+0xdd/0x250 [ 2246.597773] inetdev_event+0x1035/0x1610 [ 2246.598381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.599179] ? call_rcu+0x435/0x9c0 [ 2246.599714] ? devinet_init_net+0x650/0x650 [ 2246.600357] ? nh_netdev_event+0x8c/0x370 [ 2246.600978] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2246.601774] raw_notifier_call_chain+0xb3/0x110 [ 2246.602487] call_netdevice_notifiers_info+0xb5/0x130 [ 2246.603294] unregister_netdevice_many+0x852/0x1490 [ 2246.604038] ? netdev_pick_tx+0xc70/0xc70 [ 2246.604674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.605461] ? queue_delayed_work_on+0xb4/0xe0 [ 2246.606156] ? trace_hardirqs_on+0x5b/0x180 [ 2246.606818] unregister_netdevice_queue+0x201/0x2c0 [ 2246.607568] ? unregister_netdevice_many+0x1490/0x1490 [ 2246.608355] ? linkwatch_fire_event+0x63/0x190 [ 2246.609036] __tun_detach+0xfc1/0x12b0 [ 2246.609631] tun_chr_close+0xc4/0x250 [ 2246.610215] __fput+0x285/0x9f0 [ 2246.610709] ? __tun_detach+0x12b0/0x12b0 [ 2246.611333] task_work_run+0xe2/0x1a0 [ 2246.611919] exit_to_user_mode_prepare+0x186/0x190 [ 2246.612651] syscall_exit_to_user_mode+0x38/0x1d0 [ 2246.613382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2246.614155] RIP: 0033:0x7fa206731b19 [ 2246.614715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.617438] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2246.618636] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2246.619709] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2246.620780] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.621838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.622931] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2246.630463] 9pnet: Insufficient options for proto=fd [ 2246.638102] 9pnet: Insufficient options for proto=fd [ 2246.643655] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.643655] program syz-executor.6 not setting count and/or reply_len properly 01:30:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c340, 0x61) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2246.706934] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2246.706934] program syz-executor.5 not setting count and/or reply_len properly [ 2246.737697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.740410] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2246.742872] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2246.766658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11523 comm=syz-executor.1 [ 2246.869459] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 2246.875237] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 01:30:36 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2261.550145] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.550145] program syz-executor.5 not setting count and/or reply_len properly [ 2261.557434] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.557434] program syz-executor.7 not setting count and/or reply_len properly [ 2261.583146] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.583146] program syz-executor.6 not setting count and/or reply_len properly [ 2261.597067] udc-core: couldn't find an available UDC or it's busy [ 2261.598539] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 01:30:36 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="e74ed1bf", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80) setsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000240)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 01:30:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x3000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:36 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe59a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203010300e10000000000020300000108004000000002000fbe666cb6e0d4dda1dacc587d72ce86ac16f590a51b1a5babf4fb9e27959d34c0df08a5216fecea04f8d544c0c8f70db77a6d10b170a69e86cdac77400cce1f6d5f7f08d108856e54512767d04133904b872d80a7bf22d17963f66c7c4c842ae3814d8b26925ecc471991134661d06919e3d1ccc2131469bfabbde8bcf6db7fc43515c6c21fe8254dc3b80e725a41bf0fd5500e7cbf8850752085f527ce2c56"], 0x1c}}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0xd8499488957a772f, 0x70bd27}, 0x14}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xc4, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x2, 0x1, 0x7, 0x80, 0x9f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b852477f8e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0xffeb}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x0, 0x9, 0x1}, @mdlm_detail={0x24, 0x24, 0x13, 0xd3, "33320e3f4529b5a910838c89cca80b5835fbbdf8133203afc6e0e1dc74ecce9e"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x3e, 0xf801}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x70, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xc9, 0xee, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0xb4, 0x80}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xff, 0x0, 0x9, 0x10}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "b4a80acfabb4bb28dc199e8e98e8b7b9"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "21f091025d0aa1a418e9b9d95c8d5c99"}]}}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) timer_gettime(r1, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000300)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:30:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0xb, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:36 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 31) 01:30:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 2261.639869] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.639869] program syz-executor.6 not setting count and/or reply_len properly ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:30:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x8d0f, 0xfffffffe, 0x1, 'queue0\x00', 0x8}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 01:30:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0, 0x48}], 0x3}}, 0x0) io_uring_enter(r0, 0x6e71, 0x91ad, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) syz_io_uring_setup(0x4a9c, &(0x7f0000000300)={0x0, 0xbd8, 0x4, 0x0, 0x13c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x3758, &(0x7f0000000380)={0x0, 0xad3e, 0x8, 0x1, 0x332, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2004, @fd=r7, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000340)=""/90, 0x5a}], 0x2, 0x14, 0x1, {0x0, r9}}, 0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000940)=[{0xa8, 0x11, 0xf05a, "2637a2c9aba996e39d62be776c630b5d8a6309b3912734b38373f2587677761d2bbb4286efe2dd0d64c60d47e96f6c8a1d5cc6a22858632809a37b7e1654157b923ba2b1b277f159bdbec3fe662503873173b0041fa3125f5f11db31d1baa18c756a4be8441f44da1e276f121bc7ff53b9e11f7b2c2df0985fa88a4f30dbb07fdddfd9e329eb532a829980e498fc2b0f23d514416a826d"}, {0x18, 0x10d, 0x2, "9c3c48a8187e"}, {0x108, 0x117, 0xd66f, "74905094942548546c7fa60899431d00be249dfb1584e9957ea47cd5e2356d5ca85c0d6dacaf795c02ecc2f2c5820ccc96910b5c1b315d7afd40747493f2aa55965b198ca86ffe12e71ffcfb4aa03cb282bccd7c767241ee7d19f84bca2161cb259c85196c8e26874baafe8c0924f1507bfd5d84e188f9a6746385f7af4e6c8e462e910787f64ac87a325c97b21260ca96d9260dec0fa74b7157f433f940a776459280a25b9df80727ab5616924ae09fc49a80aa283476dd413c9ed384d18e6a6c8860c79522bb71c38a074b5571c2f320b4e5abd49036161d430534e62aba7f68efa9e9a93f84a414789e7472c1aa7ed8477f670b94079d"}, {0x98, 0x113, 0x81, "a363fc7673c7a4948e8d594c405ad399fd3f229974de3ea41e0f649aa420c8bd663d9b63e6889aceb14789f75589b0d213684a95cad867940bd08274af8776b30592bc6957e3c3fc083d5493ae6c8c7f23f092cd5ddfd9580d5860c268e159b57e870d4f3082854de84ecfd4c7466bfddfd4ef0f1649c59f9f31924f80ec4b37b208c9f4d5"}, {0x58, 0x111, 0x1, "71f540c7fff6273dace43d3ac0551270bc0c5b90bc69087e2bd5c3ec510d292fe260d20a5b128535ba2045db08d3771ef49d81aaed535e6759160ac1714779ed26d4dd0c2ade"}, {0x88, 0x36, 0x1, "e14e9137a791423d65c23f862f0052b7526db321f1b3f5b67ec375c78186b40ab9873dd9ba7c244d6ffe49f3bc1d7d01394feecfa3623e4bd5978ef5ab6fe3f3b20b65b6c03cc5471837295bde03d053799af312c715a50115732aefd7999c1436c824ff0021a46c44fe4d04e7739c2b591fe706dd6e"}], 0x340}, 0x0, 0x10000000, 0x1, {0x0, r9}}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x397c, 0xad8c, 0x2, &(0x7f0000000040)={[0x1]}, 0x8) 01:30:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0xa, 0xa, 0x24) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xe231, 0x5}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) [ 2261.692666] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.692666] program syz-executor.7 not setting count and/or reply_len properly 01:30:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x0, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2261.709806] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.709806] program syz-executor.5 not setting count and/or reply_len properly 01:30:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2261.766130] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.766130] program syz-executor.6 not setting count and/or reply_len properly [ 2261.779396] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.779396] program syz-executor.6 not setting count and/or reply_len properly 01:30:36 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x2, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x4000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2261.897907] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.897907] program syz-executor.7 not setting count and/or reply_len properly [ 2261.904279] device veth0_vlan entered promiscuous mode [ 2261.936293] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2261.936293] program syz-executor.5 not setting count and/or reply_len properly 01:30:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3b, 0x5, 0x9f, 0x6, 0x3, 0x3e, 0x1, 0x74, 0x40, 0x1f9, 0x9, 0x0, 0x38, 0x1, 0xe56f, 0x7fff, 0x46}, [{0x6, 0x10001, 0x5, 0x400, 0x10000, 0x7, 0x4, 0x7}], "813a1c30c7abab780d64573aa5ce0899edc08269761c368f2935b2ae5025e1830062d0d5fc42889f5f37acf094e5e03bfb748ffd8cbdbda363653140b96c96d1ef4c0392799593a199fe58ff53a007aad605dd4e805c15c4e1490954fe4687ecbde983ebd41fb3598430ebc75cb2f133ef05f3238b97701dc87800848d59fe8655e53fe29c0e972c3d8bd4cf618f1491ed0a56add2eefec08428dbbb98ab3a160e792fd9274a6dc495aebb2e559994785587a5a108eb6dbe41e6887addcd0e4637fd58fb95e7fad89db61df55c187614a505e3b58a3ff971bf347b5026791ed123cfd7ab", ['\x00', '\x00', '\x00']}, 0x45c) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 2262.069628] FAULT_INJECTION: forcing a failure. [ 2262.069628] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.072142] CPU: 1 PID: 11559 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2262.073643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.075440] Call Trace: [ 2262.076014] dump_stack+0x107/0x167 [ 2262.076802] should_fail.cold+0x5/0xa [ 2262.077632] ? __alloc_skb+0x6d/0x5b0 [ 2262.078463] should_failslab+0x5/0x20 [ 2262.079287] kmem_cache_alloc_node+0x55/0x330 [ 2262.080268] __alloc_skb+0x6d/0x5b0 [ 2262.081060] inet6_netconf_notify_devconf+0x84/0x1a0 [ 2262.082168] addrconf_sysctl_unregister+0x131/0x1c0 [ 2262.083281] addrconf_ifdown.isra.0+0x122b/0x15f0 [ 2262.084342] ? addrconf_dad_run+0x180/0x180 [ 2262.085301] addrconf_notify+0x159/0x2410 [ 2262.086210] ? tun_device_event+0x71/0x1160 [ 2262.087157] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2262.088272] ? inet6_ifinfo_notify+0x150/0x150 01:30:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x313f17e9, 0x401, 0x0, 'queue0\x00', 0xfffffffa}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000080)={0x100, 0x2f9f836c, 0x8, {0x1381, 0x8}, 0x7f, 0xae}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="a102"]) [ 2262.089261] ? failover_register+0x530/0x530 [ 2262.090445] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 2262.091638] ? ipmr_device_event+0x18b/0x1f0 [ 2262.092587] raw_notifier_call_chain+0xb3/0x110 [ 2262.093595] call_netdevice_notifiers_info+0xb5/0x130 [ 2262.094717] unregister_netdevice_many+0x852/0x1490 [ 2262.095805] ? netdev_pick_tx+0xc70/0xc70 [ 2262.096705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.097830] ? queue_delayed_work_on+0xb4/0xe0 [ 2262.098805] ? trace_hardirqs_on+0x5b/0x180 [ 2262.099736] unregister_netdevice_queue+0x201/0x2c0 [ 2262.100803] ? unregister_netdevice_many+0x1490/0x1490 [ 2262.101930] ? linkwatch_fire_event+0x63/0x190 [ 2262.102925] __tun_detach+0xfc1/0x12b0 [ 2262.103767] tun_chr_close+0xc4/0x250 [ 2262.104573] __fput+0x285/0x9f0 [ 2262.105277] ? __tun_detach+0x12b0/0x12b0 [ 2262.106166] task_work_run+0xe2/0x1a0 [ 2262.106992] exit_to_user_mode_prepare+0x186/0x190 [ 2262.108044] syscall_exit_to_user_mode+0x38/0x1d0 [ 2262.109085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2262.110179] RIP: 0033:0x7fa206731b19 [ 2262.110981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.114914] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2262.116539] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2262.118056] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2262.119583] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2262.121094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2262.122605] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2262.140955] 9pnet: Insufficient options for proto=fd 01:30:50 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5000e, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r1, 0x2285, 0x0) write$binfmt_elf64(r1, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x4f, 0x60, 0x5, 0x0, 0x400, 0x2, 0x6, 0x3, 0x2b5, 0x40, 0x3c0, 0xfffffffa, 0xff, 0x38, 0x1, 0xfff3, 0x101, 0xbba3}, [{0x6474e551, 0x9, 0x213, 0x7fff, 0x6, 0x6, 0x5, 0x5}, {0x60000000, 0x7fff, 0x2, 0x7, 0x18db, 0x6f, 0x7fffffff, 0x7}], "1e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) kcmp(r2, 0x0, 0x0, r3, r4) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0xfffffffffffffc01, 0x428600) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xc4, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ID={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x7, 0x69, 0xbe, 0x0, 0x1, 0x800, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x101}, 0x40a0, 0x2, 0x7, 0x0, 0x2, 0x2, 0x54, 0x0, 0x0, 0x0, 0x3}, r2, 0x1, r0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1}, 0x6e) r8 = dup(r7) recvmmsg(r8, &(0x7f0000007940)=[{{0x0, 0x200000, 0x0}}], 0x500, 0x20000022, 0x0) 01:30:50 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x3, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2275.526925] sg_write: 4 callbacks suppressed [ 2275.526944] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.526944] program syz-executor.7 not setting count and/or reply_len properly [ 2275.543298] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.543298] program syz-executor.5 not setting count and/or reply_len properly [ 2275.549713] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.549713] program syz-executor.6 not setting count and/or reply_len properly 01:30:50 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 32) 01:30:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:30:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x5000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x10202, 0x1ce) 01:30:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:50 executing program 2: r0 = gettid() setpriority(0x1, r0, 0x0) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x401) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/mcfilter6\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfd, 0xff, 0x1f, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200, 0x5}, 0x10018, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x3, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, &(0x7f0000000080)) prlimit64(r0, 0xb, 0x0, &(0x7f0000000180)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) fcntl$lock(r3, 0x26, &(0x7f0000000300)={0x2, 0x4, 0x6, 0xfffffffffffffffd, r4}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x100000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = fork() setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25, 0x3) prlimit64(r6, 0x5, &(0x7f0000000240)={0x80, 0x64}, &(0x7f0000000280)) [ 2275.568800] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.568800] program syz-executor.1 not setting count and/or reply_len properly [ 2275.601007] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.601007] program syz-executor.6 not setting count and/or reply_len properly 01:30:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="26ab"]) 01:30:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x208, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2275.655126] 9pnet: Insufficient options for proto=fd [ 2275.656623] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.656623] program syz-executor.7 not setting count and/or reply_len properly [ 2275.670047] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.670047] program syz-executor.5 not setting count and/or reply_len properly [ 2275.677690] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.677690] program syz-executor.1 not setting count and/or reply_len properly [ 2275.683909] 9pnet: Insufficient options for proto=fd [ 2275.690141] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.690141] program syz-executor.6 not setting count and/or reply_len properly [ 2275.714384] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2275.714384] program syz-executor.6 not setting count and/or reply_len properly 01:30:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x4, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:30:50 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0xd8003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80080002}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRES16=r0], 0x5d4}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000090) r2 = dup(r1) pidfd_send_signal(r2, 0x2001e, &(0x7f0000000040)={0x3a, 0xfffffffe, 0x5}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x2010, r2, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x20010, r2, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3}, 0x100000) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 01:30:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa31cb00ef4680ba4) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x52, 0x4, 0x4, 0x20, 0x80000001, 0x2, 0x3, 0x7fff, 0x1b1, 0x40, 0x11, 0x5, 0x7, 0x38, 0x2, 0x81, 0x820, 0x6}, [{0x2, 0x2, 0xfffffffffffffffa, 0x7, 0x1f, 0xffff, 0xa16, 0x7f}, {0x1, 0x8, 0x3ff, 0x81, 0x7fffffff, 0x20, 0x7fffffff, 0x100000000}], "409b1a9bfe04079bf0aebb9e64f64efeab152046fcd0bd8c5a1ab5363e995a318dc5a55f6669daed791b6c96d3174db004b09fa44b6fe348300fe705c321cdea8373b352071a1d29dfd637f1", ['\x00', '\x00']}, 0x2fc) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="1d01", @ANYRESDEC=r0, @ANYRESHEX, @ANYRESOCT]) 01:30:50 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f00000001c0)={0x0, 0xe8ec}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x48041, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x4010, r3, 0x7885a000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x7, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x604180, 0x4) getpgid(0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:30:50 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x4, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:30:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x6000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2275.821926] device veth0_vlan entered promiscuous mode 01:30:50 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x20b, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2275.950370] FAULT_INJECTION: forcing a failure. [ 2275.950370] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.953366] CPU: 1 PID: 11634 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2275.954941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.956788] Call Trace: [ 2275.957380] dump_stack+0x107/0x167 [ 2275.958198] should_fail.cold+0x5/0xa [ 2275.959073] ? create_object.isra.0+0x3a/0xa20 [ 2275.960091] should_failslab+0x5/0x20 [ 2275.960940] kmem_cache_alloc+0x5b/0x310 [ 2275.961850] create_object.isra.0+0x3a/0xa20 [ 2275.962828] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2275.963964] kmem_cache_alloc_node+0x169/0x330 [ 2275.964989] __alloc_skb+0x6d/0x5b0 [ 2275.965819] inet6_netconf_notify_devconf+0x84/0x1a0 [ 2275.966964] addrconf_sysctl_unregister+0x131/0x1c0 [ 2275.968076] addrconf_ifdown.isra.0+0x122b/0x15f0 [ 2275.969166] ? addrconf_dad_run+0x180/0x180 [ 2275.970141] addrconf_notify+0x159/0x2410 [ 2275.971080] ? tun_device_event+0x71/0x1160 [ 2275.972020] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2275.973135] ? inet6_ifinfo_notify+0x150/0x150 [ 2275.974128] ? failover_register+0x530/0x530 [ 2275.975113] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 2275.976345] ? ipmr_device_event+0x18b/0x1f0 [ 2275.977339] raw_notifier_call_chain+0xb3/0x110 [ 2275.978388] call_netdevice_notifiers_info+0xb5/0x130 [ 2275.979546] unregister_netdevice_many+0x852/0x1490 [ 2275.980674] ? netdev_pick_tx+0xc70/0xc70 [ 2275.981614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2275.982782] ? queue_delayed_work_on+0xb4/0xe0 [ 2275.983798] ? trace_hardirqs_on+0x5b/0x180 [ 2275.984764] unregister_netdevice_queue+0x201/0x2c0 [ 2275.985880] ? unregister_netdevice_many+0x1490/0x1490 [ 2275.987061] ? linkwatch_fire_event+0x63/0x190 [ 2275.988082] __tun_detach+0xfc1/0x12b0 [ 2275.988968] tun_chr_close+0xc4/0x250 [ 2275.989810] __fput+0x285/0x9f0 [ 2275.990543] ? __tun_detach+0x12b0/0x12b0 [ 2275.991482] task_work_run+0xe2/0x1a0 [ 2275.992349] exit_to_user_mode_prepare+0x186/0x190 [ 2275.993443] syscall_exit_to_user_mode+0x38/0x1d0 [ 2275.994529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2275.995692] RIP: 0033:0x7fa206731b19 [ 2275.996518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.000642] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2276.002340] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2276.003929] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2276.005514] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2276.007106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2276.008690] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:31:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x7000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2288.843862] sg_write: 6 callbacks suppressed [ 2288.843881] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2288.843881] program syz-executor.5 not setting count and/or reply_len properly [ 2288.858889] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2288.858889] program syz-executor.7 not setting count and/or reply_len properly 01:31:03 executing program 2: getpgid(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) syz_io_uring_complete(0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffc00}}, 0x0, 0x0, 0x28, 0x0, "1d11b58cf8efa7b26379e412c5aee11e877abbeebf4307a6837302d962b27feca5ab8d34d2ba6277de7e852670268357e37f10abdb608b0376fb65cfb17d7a3cac9d2e1d5c45500cc50ba338934ad4e0"}, 0xd8) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000440)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x5d, 0x0, @thr={&(0x7f00000002c0)="c58435b56fadce6925a8c5ef8299d1c9436890996f121c55fd3949c7ffe74e562d5b7ad3ba81ec2ee03296fc177baf9eb677c3b886f2d2f6f15bbb7648f001000000a7e1de93ae4056fd27712f2d24552e5d7d39ec16e048786d22b4989871bad0f0ee169831b6e6f3e5f6aec27d337087b8119f6d755f6e40547c31e63fdaf4b4593725c72c370172c9527216a415009b28cfab12175e4c530e215b70f7b654b1cc73e9eabfb340bcf589b70ae5e8acd00b6770b80a2a135bf9bd68f3679d8a46b4c50a69d29136daef4804fe9cb5f8caceaeb2b7310d7154d547c522215a4a59b9787a63c4e818bd23c5668aa30f9e030613", &(0x7f0000000540)="2ac7a21c8555cb8161df3e647dcdb023da28a1a647a16e4f8e6fa8febca24d45c7a3d99bb9f57cbd2a9300e181ca7c1e21a348b0080a5409b2a4e4d827024c7bc481ad488ef6fded915ad2c221d17d526fba95e126bf2c8f45e164040e2fc26125b81d14d34a97df6efce3e5b87ef010bd0fd8fd2cad78e0a46b99411deb38836c2a13d2"}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)=""/200, 0x20000148}], 0x1, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/101, 0x65) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="a12d144340fa3314000000160001b2957eab0000"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:31:03 executing program 1: getpgid(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) r0 = syz_io_uring_complete(0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000440)="c58435b56fadce6925a8c5ef8299d1c9436890996f121c55fd3949c7ffe74e562d5b7ad3ba81ec2ee03296fc177baf9eb677c3b886f2d2f6f15bbb7648f0411a0e88a7e1de93ae4056fd27712f2d24552e5d7d39ec16e048786d22b4989871bad0f0ee169831b6e6f3e5f6aec27d337087b8119f6d755f6e40547c31e63fdaf4b4593725c72c370172c9527216a415009b28cfab12175e4c530e215b70f7b654b1cc73e9eabfb340bcf589b70ae5e8acd00b6770b80a2a135bf9bd68f3679d8a46b4c50a69d29136daef4804fe9cb5f8caceaeb2b7310d7154d547c522215a4a59b9787a63c4e818bd23c5668aa30f9e030613", &(0x7f0000000540)="2ac7a21c8555cb8161df3e647dcdb023da28a1a647a16e4f8e6fa8febca24d45c7a3d99bb9f57cbd2a9300e181ca7c1e21a348b0080a5409b2a4e4d827024c7bc481"}}, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001600010d0000000000000000000000001c2345091868085dee6455c9bda99621c779496bf35aa636a1b3da8f24e90a5b037aa94b7a2446526b30fad508a9f950babc1897e61e3f3769c13db7a77a9b61933d37f298ddde7ba6ef019241e1fe53bbb1dc3e6fa11d8b41d2b21d6b1df26aed43afa6b80b96b517950535dd661d279cfc0cbde8b82da66638c6ecc8cdd9fe27f951a732d463ee390f7cd0551cf0e56c55a96b26a114abadf22900ce6789bc234b640d5bbcebca917026b01e23667d512320b246d5600654"], 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) preadv2(r2, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000700)=""/97, 0x61}, {&(0x7f0000000780)=""/112, 0x70}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000180)}], 0x8, 0x7, 0x3, 0xf) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x2, 0xc0, 0xf91b}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 01:31:03 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 33) 01:31:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7776ad32d2f6", @ANYRESHEX=r3, @ANYBLOB=',\x00']) 01:31:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x5, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x4000, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2288.875115] audit: type=1400 audit(1732843863.908:141): avc: denied { relabelto } for pid=11676 comm="syz-executor.4" name="file0" dev="sda" ino=16007 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=file permissive=1 [ 2288.885340] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2288.885340] program syz-executor.6 not setting count and/or reply_len properly [ 2288.889856] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2288.889856] program syz-executor.7 not setting count and/or reply_len properly [ 2288.890245] audit: type=1400 audit(1732843863.923:142): avc: denied { mounton } for pid=11676 comm="syz-executor.4" path="/syzkaller-testdir389012231/syzkaller.nDiTJe/135/file0" dev="sda" ino=16007 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=file permissive=1 [ 2288.895063] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2288.895063] program syz-executor.6 not setting count and/or reply_len properly [ 2288.898649] 9pnet: Insufficient options for proto=fd [ 2288.921419] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2288.921419] program syz-executor.5 not setting count and/or reply_len properly [ 2288.929364] audit: type=1400 audit(1732843863.962:143): avc: denied { read write } for pid=11676 comm="syz-executor.4" name="file0" dev="sda" ino=16007 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=file permissive=1 01:31:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x6, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x9000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2288.959613] audit: type=1400 audit(1732843863.985:144): avc: denied { open } for pid=11676 comm="syz-executor.4" path="/syzkaller-testdir389012231/syzkaller.nDiTJe/135/file0" dev="sda" ino=16007 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=file permissive=1 01:31:04 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2288.988649] audit: type=1400 audit(1732843863.987:145): avc: denied { relabelfrom } for pid=11676 comm="syz-executor.4" name="file0" dev="sda" ino=16007 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=file permissive=1 [ 2289.000163] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2289.000163] program syz-executor.5 not setting count and/or reply_len properly [ 2289.004356] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2289.004356] program syz-executor.7 not setting count and/or reply_len properly [ 2289.014963] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2289.014963] program syz-executor.6 not setting count and/or reply_len properly [ 2289.028119] audit: type=1400 audit(1732843864.060:146): avc: denied { getattr } for pid=8267 comm="syz-executor.4" path="/syzkaller-testdir389012231/syzkaller.nDiTJe/135/file0" dev="sda" ino=16007 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=file permissive=1 01:31:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee01}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@seclabel}, {@fowner_gt={'fowner>', r4}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/seq\x00'}}, {@obj_user={'obj_user', 0x3d, '/dev/snd/seq\x00'}}]}}) [ 2289.036495] audit: type=1400 audit(1732843864.060:147): avc: denied { unlink } for pid=8267 comm="syz-executor.4" name="file0" dev="sda" ino=16007 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=file permissive=1 [ 2289.070323] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2289.070323] program syz-executor.7 not setting count and/or reply_len properly 01:31:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x6, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2289.182876] device veth0_vlan entered promiscuous mode [ 2289.197202] FAULT_INJECTION: forcing a failure. [ 2289.197202] name failslab, interval 1, probability 0, space 0, times 0 [ 2289.198637] CPU: 0 PID: 11695 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2289.199479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2289.200477] Call Trace: [ 2289.200797] dump_stack+0x107/0x167 [ 2289.201236] should_fail.cold+0x5/0xa [ 2289.201696] should_failslab+0x5/0x20 [ 2289.202152] __kmalloc_node_track_caller+0x74/0x3b0 [ 2289.202756] ? inet6_netconf_notify_devconf+0x84/0x1a0 [ 2289.203396] __alloc_skb+0xb1/0x5b0 [ 2289.203837] inet6_netconf_notify_devconf+0x84/0x1a0 [ 2289.204452] addrconf_sysctl_unregister+0x131/0x1c0 [ 2289.205054] addrconf_ifdown.isra.0+0x122b/0x15f0 [ 2289.205638] ? addrconf_dad_run+0x180/0x180 [ 2289.206163] addrconf_notify+0x159/0x2410 [ 2289.206665] ? tun_device_event+0x71/0x1160 [ 2289.207187] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2289.207813] ? inet6_ifinfo_notify+0x150/0x150 [ 2289.208360] ? failover_register+0x530/0x530 [ 2289.208891] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 2289.209553] ? ipmr_device_event+0x18b/0x1f0 [ 2289.210085] raw_notifier_call_chain+0xb3/0x110 [ 2289.210652] call_netdevice_notifiers_info+0xb5/0x130 [ 2289.211270] unregister_netdevice_many+0x852/0x1490 [ 2289.211880] ? netdev_pick_tx+0xc70/0xc70 [ 2289.212387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2289.213013] ? queue_delayed_work_on+0xb4/0xe0 [ 2289.213562] ? trace_hardirqs_on+0x5b/0x180 [ 2289.214083] unregister_netdevice_queue+0x201/0x2c0 [ 2289.214680] ? unregister_netdevice_many+0x1490/0x1490 [ 2289.215315] ? linkwatch_fire_event+0x63/0x190 [ 2289.215874] __tun_detach+0xfc1/0x12b0 [ 2289.216349] tun_chr_close+0xc4/0x250 [ 2289.216813] __fput+0x285/0x9f0 [ 2289.217211] ? __tun_detach+0x12b0/0x12b0 [ 2289.217710] task_work_run+0xe2/0x1a0 [ 2289.218175] exit_to_user_mode_prepare+0x186/0x190 [ 2289.218766] syscall_exit_to_user_mode+0x38/0x1d0 [ 2289.219345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2289.219969] RIP: 0033:0x7fa206731b19 [ 2289.220417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2289.222619] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2289.223533] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2289.224390] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2289.225244] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.226100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.226961] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:31:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x2, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x84002, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) ftruncate(r0, 0x5) r2 = open(&(0x7f0000000100)='./file1\x00', 0x260080, 0x6f) utimensat(r2, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}, 0x100) sendfile(r0, r1, 0x0, 0x100000001) 01:31:16 executing program 2: mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f00000000c0)={[{@lazytime}]}) mknod(&(0x7f0000000080)='./file0/../file0\x00', 0xc000, 0x10001) 01:31:16 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x7, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2301.632614] sg_write: 2 callbacks suppressed [ 2301.632633] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.632633] program syz-executor.7 not setting count and/or reply_len properly [ 2301.652945] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.652945] program syz-executor.6 not setting count and/or reply_len properly 01:31:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x0, 0x9, {0x2, 0x6f5}, 0xcca7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0x188, @tick=0x1, 0x80, {0x0, 0x7f}, 0x81, 0x1, 0x1f}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 01:31:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:31:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x9effffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:16 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 34) [ 2301.662775] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.662775] program syz-executor.5 not setting count and/or reply_len properly [ 2301.698193] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.698193] program syz-executor.5 not setting count and/or reply_len properly 01:31:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766afd68106", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 01:31:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000300)={0x0, 0x7, 0x1, @thr={&(0x7f0000000180)="36c393d5f97180d00498140adb3ac54b8bdcb913b6a5c53789d4edf5bcf2f5693eebad705e3f9ad5aa2b629ccec93f6bd86b3c6f2f3524e7b89c8386e78d08c48e3b75a8d7ea89413a216dc9ca2200a4e052b34170f7e83b3774cffca887877d26141506a0e331781034fde530b23d67242d051e034c30cba9676627b34431652090509700bc2b0e3513cd1035d50cc3beb419b183d7a6e2c85e2a431ba591", &(0x7f0000000500)="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"}}, &(0x7f0000000340)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) clone3(&(0x7f0000000400)={0x80100400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100), {0xf}, &(0x7f0000000240)=""/125, 0x7d, &(0x7f0000000380)=""/108, &(0x7f0000000140)=[0x0], 0x1}, 0x58) dup3(r1, r0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:31:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xa7010000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x9, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2301.743360] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.743360] program syz-executor.6 not setting count and/or reply_len properly [ 2301.747018] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.747018] program syz-executor.7 not setting count and/or reply_len properly [ 2301.786709] 9pnet: Insufficient options for proto=fd [ 2301.801103] 9pnet: Insufficient options for proto=fd [ 2301.806281] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.806281] program syz-executor.5 not setting count and/or reply_len properly 01:31:16 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x8, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x3, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@private2}, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) syz_io_uring_setup(0x752d, &(0x7f0000000200)={0x0, 0x10ce, 0x0, 0x3, 0x69}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), 0xfffffffffffffffc) clock_gettime(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc6e2, 0x32) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="af", 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) [ 2301.884240] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.884240] program syz-executor.6 not setting count and/or reply_len properly [ 2301.888253] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.888253] program syz-executor.7 not setting count and/or reply_len properly 01:31:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40a9c0, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x20280, 0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:31:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2301.927503] device veth0_vlan entered promiscuous mode [ 2301.946813] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2301.946813] program syz-executor.7 not setting count and/or reply_len properly 01:31:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000)=0x1, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2302.059520] FAULT_INJECTION: forcing a failure. [ 2302.059520] name failslab, interval 1, probability 0, space 0, times 0 [ 2302.062120] CPU: 1 PID: 11749 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2302.063707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2302.065608] Call Trace: [ 2302.066219] dump_stack+0x107/0x167 [ 2302.067059] should_fail.cold+0x5/0xa [ 2302.067939] ? create_object.isra.0+0x3a/0xa20 [ 2302.068985] should_failslab+0x5/0x20 [ 2302.069856] kmem_cache_alloc+0x5b/0x310 [ 2302.070791] create_object.isra.0+0x3a/0xa20 [ 2302.071791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2302.072968] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2302.074124] ? inet6_netconf_notify_devconf+0x84/0x1a0 [ 2302.075334] __alloc_skb+0xb1/0x5b0 [ 2302.076347] inet6_netconf_notify_devconf+0x84/0x1a0 [ 2302.077553] addrconf_sysctl_unregister+0x131/0x1c0 [ 2302.078690] addrconf_ifdown.isra.0+0x122b/0x15f0 [ 2302.079803] ? addrconf_dad_run+0x180/0x180 [ 2302.080808] addrconf_notify+0x159/0x2410 [ 2302.081744] ? tun_device_event+0x71/0x1160 [ 2302.082715] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2302.083879] ? inet6_ifinfo_notify+0x150/0x150 [ 2302.084907] ? failover_register+0x530/0x530 [ 2302.085899] ? cfg80211_netdev_notifier_call+0x298/0x10c0 [ 2302.087128] ? ipmr_device_event+0x18b/0x1f0 [ 2302.088139] raw_notifier_call_chain+0xb3/0x110 [ 2302.089191] call_netdevice_notifiers_info+0xb5/0x130 [ 2302.090347] unregister_netdevice_many+0x852/0x1490 [ 2302.091472] ? netdev_pick_tx+0xc70/0xc70 [ 2302.092419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2302.093589] ? queue_delayed_work_on+0xb4/0xe0 [ 2302.094607] ? trace_hardirqs_on+0x5b/0x180 [ 2302.095576] unregister_netdevice_queue+0x201/0x2c0 [ 2302.096700] ? unregister_netdevice_many+0x1490/0x1490 [ 2302.097880] ? linkwatch_fire_event+0x63/0x190 [ 2302.098909] __tun_detach+0xfc1/0x12b0 [ 2302.099796] tun_chr_close+0xc4/0x250 [ 2302.100656] __fput+0x285/0x9f0 [ 2302.101397] ? __tun_detach+0x12b0/0x12b0 [ 2302.102333] task_work_run+0xe2/0x1a0 [ 2302.103198] exit_to_user_mode_prepare+0x186/0x190 [ 2302.104308] syscall_exit_to_user_mode+0x38/0x1d0 [ 2302.105387] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2302.106539] RIP: 0033:0x7fa206731b19 [ 2302.107374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2302.111491] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2302.113184] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2302.114772] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2302.116378] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2302.117976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2302.119579] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:31:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x2, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:31:30 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x4, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) dup2(r0, r1) socket$netlink(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b32, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 01:31:30 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 35) [ 2315.918330] hugetlbfs: Unknown parameter ':' 01:31:30 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) fspick(r1, &(0x7f0000000140)='./file0/file0\x00', 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x511840) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000080)={0x7, 0x1, {0xffffffffffffffff, 0x1, 0x4, 0x1, 0xffff}, 0x101}) 01:31:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xc00e0000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, &(0x7f0000000100)=':\x00') r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/wireless\x00') mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNGETSNDBUF(r3, 0x400454cb, &(0x7f0000000040)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000200)={0x0, 0x100000000, [0x1, 0xffffffff, 0x7, 0x4, 0x3, 0x5]}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,debug=0x0000000000000000,\x00']) [ 2315.928396] hugetlbfs: Unknown parameter ':' 01:31:30 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x9, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2315.942062] sg_write: 2 callbacks suppressed [ 2315.942073] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2315.942073] program syz-executor.6 not setting count and/or reply_len properly [ 2315.965719] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2315.965719] program syz-executor.7 not setting count and/or reply_len properly [ 2315.985417] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2315.985417] program syz-executor.5 not setting count and/or reply_len properly 01:31:31 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x40001, 0x0) readahead(r0, 0x7, 0x401) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x3a1102, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x8, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000001) r5 = openat(r1, 0x0, 0x100, 0x2) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x410100, 0x12) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)=ANY=[@ANYBLOB="0100b079d4fe9ff4e8c9e500", @ANYRES32=r7, @ANYBLOB="00000000000000003a09a030674a871cdefbe1a1aacd9d2e2f66696c653000"]) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) [ 2315.999316] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2315.999316] program syz-executor.6 not setting count and/or reply_len properly [ 2316.007402] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2316.007402] program syz-executor.7 not setting count and/or reply_len properly 01:31:31 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x5, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2316.080613] ALSA: seq fatal error: cannot create timer (-22) [ 2316.105565] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2316.105565] program syz-executor.5 not setting count and/or reply_len properly [ 2316.115715] device veth0_vlan entered promiscuous mode 01:31:31 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xf0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2316.167929] FAULT_INJECTION: forcing a failure. [ 2316.167929] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.169325] CPU: 1 PID: 11803 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2316.170148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.171130] Call Trace: [ 2316.171452] dump_stack+0x107/0x167 [ 2316.171882] should_fail.cold+0x5/0xa [ 2316.172343] ? __alloc_skb+0x6d/0x5b0 [ 2316.172800] should_failslab+0x5/0x20 [ 2316.173258] kmem_cache_alloc_node+0x55/0x330 [ 2316.173800] __alloc_skb+0x6d/0x5b0 [ 2316.174237] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2316.174788] unregister_netdevice_many+0x8e3/0x1490 [ 2316.175374] ? netdev_pick_tx+0xc70/0xc70 [ 2316.175868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.176500] ? queue_delayed_work_on+0xb4/0xe0 [ 2316.177034] ? trace_hardirqs_on+0x5b/0x180 [ 2316.177545] unregister_netdevice_queue+0x201/0x2c0 [ 2316.178129] ? unregister_netdevice_many+0x1490/0x1490 [ 2316.178749] ? linkwatch_fire_event+0x63/0x190 [ 2316.179295] __tun_detach+0xfc1/0x12b0 [ 2316.179758] tun_chr_close+0xc4/0x250 [ 2316.180204] __fput+0x285/0x9f0 [ 2316.180599] ? __tun_detach+0x12b0/0x12b0 [ 2316.181091] task_work_run+0xe2/0x1a0 [ 2316.181542] exit_to_user_mode_prepare+0x186/0x190 [ 2316.182121] syscall_exit_to_user_mode+0x38/0x1d0 [ 2316.182683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.183295] RIP: 0033:0x7fa206731b19 [ 2316.183735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.185887] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2316.186774] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2316.187603] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2316.188439] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.189275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2316.190116] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2316.209601] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2316.209601] program syz-executor.6 not setting count and/or reply_len properly 01:31:31 executing program 2: mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x7f}}, './file1\x00'}) statx(r3, &(0x7f0000000180)='./file1\x00', 0x800, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r1, 0x0, r2, 0x2, 0x0, 0x1}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400210c00008000000000000af00000040000006c980100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x32100, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c02, 0x0) chown(0x0, 0xee00, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000218000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) 01:31:31 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000004cc0)={0x24, 0x0, 0x800, 0x70b926, 0x25dfdbff, {{}, {}, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"/311], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5e, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x409becb7bdf81d3, 0x2000002, 0x1, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r3 = fsmount(0xffffffffffffffff, 0x1, 0xcc) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000740)=ANY=[@ANYBLOB="01000033a7000000180000006d33cb4fb681b295c46c6c71476e9436cf55a07ccbdb429d2d4341d2b779ed650a32", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendfile(r0, r4, &(0x7f0000001940)=0x200000, 0xfde) syz_genetlink_get_family_id$ipvs(&(0x7f0000001580), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x80000000, 0x3, &(0x7f0000000580)="496a654d6ce82355af160005be08c6a043d1cf51d08e1263bcf18eec879a74d467857e4bdf4cf6d550426c37c21ac0ae345dc371c72890a3d02ec9142e3e9359cb54dcfdd12a5dc0e2f223cd7367a8906ac72d81bdd57aea636c5fe2b502daac85c44712e257db59d8f70e1cadba0aa7ee65cb58201f", 0x4, 0x0, 0x1}, 0x10) accept4$unix(r4, &(0x7f00000015c0), &(0x7f0000000200)=0x6e, 0x800) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x101000) signalfd(0xffffffffffffffff, &(0x7f0000001a00)={[0x400]}, 0x8) [ 2316.239782] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2316.239782] program syz-executor.6 not setting count and/or reply_len properly [ 2316.241755] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2316.241755] program syz-executor.7 not setting count and/or reply_len properly 01:31:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x523600) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000001580)={0x10f8, 0x3d, 0x4, 0x70bd29, 0x25dfdbfe, {0x10}, [@generic="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", @generic="07edb5741ba285713114ccb9001ecfaef1db887e843f6a2239037aae91ef0ee223ed9b52a9c5ca497d435046ec9de07bbcf3fc056a880f5a28a476ba2c5fcb733a75d549d0b867bc6af8bf04210fe91022c13f05b7d7d668057f27b092c381b7bf375ecd815c5f7d262eb9e17ccdc284830ae0641a25856153eae1cf9153944c6f69252850fc14656c8e986c6b2eaf31b89af0b5d66ac186a7d8d5a4fa562dc1d0d7b6b8024f580500dab0c074124887c9bd72572bd52a82d67fb1cecb22f19de9946d13250b0a3c7ab4134c1f86f1cdcbc3ae5794aca068ad02161f360d488edf3b"]}, 0x10f8}, 0x1, 0x0, 0x0, 0x4004804}, 0x20008080) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x1, 0x4}, 0x6) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x1, 0x100, 0xfffffffffffffff8}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x20010, r2, 0xcc80f000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000340)={0x80000000, 0x7ff, 0x401, {0x2, 0x401}, 0x1f, 0xffffff80}) 01:31:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x3, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:31:31 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 36) [ 2316.318850] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2316.318850] program syz-executor.7 not setting count and/or reply_len properly [ 2316.330678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 01:31:31 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x6, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xf0ffffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2316.414234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:31:31 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x187, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x22000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x7, 0xfffffd44, 0x2e96de78, 0xf6, 0x8, 0x8}) write$sndseq(r0, &(0x7f0000000240)=[{0x5, 0x40, 0x4, 0x0, @tick, {0x8, 0x6}, {0x20, 0x6}, @raw8={"a9da67b87bf5570a6be849f6"}}, {0x40, 0x8, 0x3, 0x2, @time={0x7, 0x3}, {0x81, 0x1}, {0x6c, 0xc3}, @result={0x1, 0x200}}], 0x38) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='=fd,r\x00'/15, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r5, @ANYRES32]) r6 = accept4$bt_l2cap(r2, 0x0, &(0x7f0000000000), 0x80000) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) syncfs(r3) 01:31:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x4, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2316.528258] device veth0_vlan entered promiscuous mode [ 2316.532147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2316.620579] FAULT_INJECTION: forcing a failure. [ 2316.620579] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.623270] CPU: 0 PID: 11836 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2316.624836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.626725] Call Trace: [ 2316.627334] dump_stack+0x107/0x167 [ 2316.628183] should_fail.cold+0x5/0xa [ 2316.629042] ? __alloc_skb+0x6d/0x5b0 [ 2316.629920] should_failslab+0x5/0x20 [ 2316.630793] kmem_cache_alloc_node+0x55/0x330 [ 2316.631815] __alloc_skb+0x6d/0x5b0 [ 2316.632711] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2316.633791] unregister_netdevice_many+0x8e3/0x1490 [ 2316.635020] ? netdev_pick_tx+0xc70/0xc70 [ 2316.635972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.637220] ? queue_delayed_work_on+0xb4/0xe0 [ 2316.638335] ? trace_hardirqs_on+0x5b/0x180 [ 2316.639340] unregister_netdevice_queue+0x201/0x2c0 [ 2316.640530] ? unregister_netdevice_many+0x1490/0x1490 [ 2316.641770] ? linkwatch_fire_event+0x63/0x190 [ 2316.642888] __tun_detach+0xfc1/0x12b0 [ 2316.643812] tun_chr_close+0xc4/0x250 [ 2316.644660] __fput+0x285/0x9f0 [ 2316.645411] ? __tun_detach+0x12b0/0x12b0 [ 2316.646332] task_work_run+0xe2/0x1a0 [ 2316.647198] exit_to_user_mode_prepare+0x186/0x190 [ 2316.648268] syscall_exit_to_user_mode+0x38/0x1d0 [ 2316.649366] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2316.650487] RIP: 0033:0x7fa206731b19 [ 2316.651392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.655695] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2316.657414] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2316.659014] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2316.660581] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.662190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2316.663746] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2329.956218] sg_write: 6 callbacks suppressed [ 2329.956228] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2329.956228] program syz-executor.7 not setting count and/or reply_len properly [ 2329.969329] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2329.969329] program syz-executor.5 not setting count and/or reply_len properly [ 2329.970903] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2329.970903] program syz-executor.6 not setting count and/or reply_len properly 01:31:44 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 37) 01:31:44 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000200)=""/117, 0x75) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) 01:31:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x5, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:31:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xfffff000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:44 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x300, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, r0, 0x2) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66687b963000"]) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0xc0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a", 0x4c, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb63455f06e0ac29e00f522a151c2774de3ac62b0621adbe8f1cfca71952a01bd410dbd0731eb96367acfaef362026b898c9311a95951a302f26d1b3d3c6fb59470b3ce9e99d98277d23940f8e92a64207f20951d9407895b748c", 0xb8, 0x5}], 0x1, &(0x7f0000000600)={[{'-$/\xd1M\x8b\x0f\x1c\xa2lF_\xb2\xdf\xc7AK\xf8\x8f\xa9\xf6\x18\x90\xe0:\x1f\xd4\x04\x84\xaa\x982o(\xb3\xec)\xb0\xe0\xb0J\xe12\x8b\xd7\x89~\x84%\x81b\xd0\xddo\x8e8\x96\x8a\x9dx\x13\xf2JZa\xf9\xa7Ck\xf4\x84e^\xc0\x81\xfaL\xbc\x19\b\x9b\xc3'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f00000005c0)=0x6, 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x200) dup3(r7, r6, 0x80000) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) close_range(r6, 0xffffffffffffffff, 0x0) [ 2329.992086] 9pnet: Insufficient options for proto=fd [ 2330.006880] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2330.006880] program syz-executor.7 not setting count and/or reply_len properly [ 2330.015362] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2330.015362] program syz-executor.6 not setting count and/or reply_len properly ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x9}, 0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x2204040, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c5966646e6f3d746e0d40b37a83406c4714f47d80b89f109887ee3879dea34a07ec44092960993384d910074e7441c0aeed516b5236781c748de324a70eef3f6483ffddd0c8108d2a414a30917ad40500fc1d2f8f1be09550463d8a959b9a4c0cac52124b43103757d6d513cd420814de012a", @ANYRESHEX, @ANYBLOB=',access=any,\x00']) 01:31:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c726664ee6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 01:31:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x7, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2330.035475] 9pnet: Insufficient options for proto=fd 01:31:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x8, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:45 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x500, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2330.089847] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2330.089847] program syz-executor.7 not setting count and/or reply_len properly [ 2330.100813] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2330.100813] program syz-executor.6 not setting count and/or reply_len properly [ 2330.109689] nfs: Unknown parameter '-$/ÑM‹¢lF_²ßÇAKø©öà:Ô„ª˜2o(³ì)°à°Já2‹×‰~„%bÐÝoŽ8–ŠxòJZaù§Ckô„e^ÀúL¼›Ã' 01:31:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x17) inotify_add_watch(r2, 0x0, 0x4000040) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_rm_watch(r2, r3) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) pwrite64(r4, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES64=r3]) dup3(r4, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r4, 0x8000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 2330.118867] device veth0_vlan entered promiscuous mode [ 2330.149965] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2330.149965] program syz-executor.7 not setting count and/or reply_len properly [ 2330.159983] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2330.159983] program syz-executor.6 not setting count and/or reply_len properly [ 2330.160729] 9pnet: Insufficient options for proto=fd [ 2330.168992] FAULT_INJECTION: forcing a failure. [ 2330.168992] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.170380] CPU: 1 PID: 11883 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2330.171184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.172143] Call Trace: [ 2330.172455] dump_stack+0x107/0x167 [ 2330.172883] should_fail.cold+0x5/0xa [ 2330.173328] ? create_object.isra.0+0x3a/0xa20 [ 2330.173854] should_failslab+0x5/0x20 [ 2330.174296] kmem_cache_alloc+0x5b/0x310 [ 2330.174775] create_object.isra.0+0x3a/0xa20 [ 2330.175280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2330.175870] kmem_cache_alloc_node+0x169/0x330 [ 2330.176406] __alloc_skb+0x6d/0x5b0 [ 2330.176842] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2330.177378] unregister_netdevice_many+0x8e3/0x1490 [ 2330.177964] ? netdev_pick_tx+0xc70/0xc70 [ 2330.178453] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.179059] ? queue_delayed_work_on+0xb4/0xe0 [ 2330.179583] ? trace_hardirqs_on+0x5b/0x180 [ 2330.180087] unregister_netdevice_queue+0x201/0x2c0 [ 2330.180664] ? unregister_netdevice_many+0x1490/0x1490 [ 2330.181276] ? linkwatch_fire_event+0x63/0x190 [ 2330.181813] __tun_detach+0xfc1/0x12b0 [ 2330.182269] tun_chr_close+0xc4/0x250 [ 2330.182704] __fput+0x285/0x9f0 [ 2330.183068] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2330.183068] program syz-executor.5 not setting count and/or reply_len properly [ 2330.183086] ? __tun_detach+0x12b0/0x12b0 [ 2330.183106] task_work_run+0xe2/0x1a0 [ 2330.187855] exit_to_user_mode_prepare+0x186/0x190 [ 2330.188422] syscall_exit_to_user_mode+0x38/0x1d0 [ 2330.188979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2330.189575] RIP: 0033:0x7fa206731b19 [ 2330.190002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.192115] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2330.193001] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2330.193818] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2330.194635] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.195447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2330.196262] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:31:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x9, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:58 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmdt(r1) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x84060, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4, 0x1) 01:31:58 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x600, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:31:58 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000080)={0x1f, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00']) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x78, 0x3, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x814) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)) fspick(r3, &(0x7f0000000140)='./file0/file0\x00', 0x0) io_uring_enter(r3, 0x58ec, 0x11b2, 0x0, &(0x7f00000000c0)={[0x1000]}, 0x8) 01:31:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xffffff7f, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2343.295497] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.295497] program syz-executor.7 not setting count and/or reply_len properly [ 2343.316371] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.316371] program syz-executor.5 not setting count and/or reply_len properly [ 2343.324803] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.324803] program syz-executor.6 not setting count and/or reply_len properly [ 2343.329118] 9pnet: Insufficient options for proto=fd [ 2343.345032] ALSA: seq fatal error: cannot create timer (-22) [ 2343.350900] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 01:31:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x6, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:31:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 38) 01:31:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9c, 0x56, 0x8, 0x8d, 0x0, 0x6, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa7dc, 0x1, @perf_bp={&(0x7f00000000c0), 0x6}, 0x10, 0x5, 0x0, 0x3, 0x8, 0x9, 0x0, 0x0, 0x400, 0x0, 0x100000000}, 0xffffffffffffffff, 0xf, r0, 0x8) syz_emit_ethernet(0xb0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001600)={0xc8, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x801}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8810}, 0x40) syz_emit_ethernet(0x1015, &(0x7f00000005c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@llc={0x4, {@llc={0x4e1e6789bda82c07, 0x80, 'y', "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"}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xf80, 0xd88, 0xb4b, 0xb8f]}) r4 = dup(r2) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000010201a60b000000000600000a00000048fe01da3c73d3e2802c0001801400030000080000050000000062ed000007e7ffffff00003cdfcff575e38017ea0fdbb6e32c07c1b2a6f83c1c0122da059f200000002ddaf567740cd2e5697d18b0df14d18015521e6eb26d45e9bc9d00e6abd031f0a96669981806b85181343d762babf6fca235a0687647c9c51c9f0f76f2fe1794761571735f78f0310f19893f58d06054fb40f316ed34d78c7fbf9a94e0a9dfdec13873a90a4d7f9e21c17b534fc77b0000000000000000e20000000000000063cf46c35690cdee03520d52a11a8f4f85141fb733a9d4912041fa503a2ad0bee2468ed78e7f839f455db44cce00b82ca6b8e4c452600702a3a009f1655ac436ca957039427f8f2f67706583b90d03c6645d514e5b87fcd02f8ec35c3d04863b5f9432b06f0d629c3ef96dd368a405c507078996a00900deff36c30ad88261963042745fda34565d36ba5cd2", @ANYRES16, @ANYRESOCT=r2, @ANYRESDEC=r2], 0x50}}, 0x0) fsopen(&(0x7f0000000280)='nsfs\x00', 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000180)) [ 2343.369106] 9pnet: Insufficient options for proto=fd [ 2343.370520] ALSA: seq fatal error: cannot create timer (-22) [ 2343.373033] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.373033] program syz-executor.5 not setting count and/or reply_len properly 01:31:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 01:31:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x7, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2343.442608] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.442608] program syz-executor.6 not setting count and/or reply_len properly [ 2343.452571] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2343.468018] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.468018] program syz-executor.7 not setting count and/or reply_len properly 01:31:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 01:31:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xffffff9e, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2343.506860] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.506860] program syz-executor.5 not setting count and/or reply_len properly 01:31:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x400, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000900)=ANY=[]) statfs(&(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)=""/166) 01:31:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xf0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2343.571303] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.571303] program syz-executor.5 not setting count and/or reply_len properly 01:31:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4801000010000100000000000000000000000000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe880000000000000000000000000001ffffffff320000a424160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580002006362632861657329000000f87fffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000f24aa6b13c2e62f3556b1cbcfeac2a0"], 0x148}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x73, 0x20, 0x10000, 0x4d, @private2, @remote, 0x700, 0x8, 0x10000, 0x3}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x4647cd3bdf45c65e, r4}) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000400)=@expire={0x3ac, 0x18, 0x200, 0x70bd26, 0x25dfdbff, {{{@in=@rand_addr=0x64010100, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x71, 0x4e20, 0x1000, 0x2, 0x20, 0xa0, 0x32, r1, r2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x3c}, @in6=@mcast1, {0x7, 0x7, 0xfffffffffffffffb, 0x10000, 0x3, 0x9a, 0x1, 0x8}, {0x101, 0x2, 0x3, 0xcc}, {0x91e6, 0x1000}, 0x70bd2d, 0x0, 0x2, 0x1, 0x9}, 0xfc}, [@srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @algo_auth_trunc={0x11a, 0x14, {{'hmac(sha1-neon)\x00'}, 0x670, 0x100, "e35bd00e8cd787aef15192081c6e00d8453ac1ff063f5b406c93544e30d0434facdd132759c6e524f44dc47ad593528b4404b41a06c22da1a62744f1cc3b0ddd340582ac709ab688de0652c9eaebb7a54593d7f64d8aebea499f8913160a1cc835f9296526155527c9dc82884dbe3923053262daf0671d2330130138b4b1875166403eb43c7b6950a274be2638f1c021c47e5dcca3cc00d770a6477493c657e8b46120eca385b820703b59a3417b00fc7a1cc3573a8e3cc036f87abf140a8e0565e510add541f9cc0efe2fdfad00"}}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x0, 0xa}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2d, 0xcf}}, @mark={0xc, 0x15, {0x35075c, 0x2}}, @algo_crypt={0x105, 0x2, {{'fpu(ecb-cipher_null)\x00'}, 0x5e8, "e1f706f18cb2650ac784173e2a4c6f132a61b652cdb70ef67f6b67824eddd58e777e62bd4d7256ed159fa0e344a19f1270683bdee1b7fdb7b3337d560dd1c82b887f36b14ae6c253b18b8a104e5b8762748286dc4348423c17e4830d7b08d761237930afa152cdf824fcddc5255ad059729da411229967cfe3dfc35061d5054b6062f01c1af8baae979fe7ce421b7ddba693a770d6276312d1df653dcc9b592713e721b84ffd7bf3c09ead81fefbc9d1fa15715e950b4fe5610701d609"}}, @lifetime_val={0x24, 0x9, {0x1, 0x1, 0xff, 0x8001}}, @proto={0x5, 0x19, 0xff}, @XFRMA_IF_ID={0x8, 0x1f, r4}]}, 0x3ac}}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cfe621142f14968c000700e6ff28ea0000000400"], 0x14}}, 0x0) 01:31:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x9, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2343.596320] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.596320] program syz-executor.6 not setting count and/or reply_len properly [ 2343.642025] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2343.663206] device veth0_vlan entered promiscuous mode [ 2343.663722] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2343.663722] program syz-executor.6 not setting count and/or reply_len properly [ 2343.751651] FAULT_INJECTION: forcing a failure. [ 2343.751651] name failslab, interval 1, probability 0, space 0, times 0 [ 2343.753172] CPU: 1 PID: 11928 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2343.754085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.755166] Call Trace: [ 2343.755515] dump_stack+0x107/0x167 [ 2343.755990] should_fail.cold+0x5/0xa [ 2343.756488] ? create_object.isra.0+0x3a/0xa20 [ 2343.757088] should_failslab+0x5/0x20 [ 2343.757596] kmem_cache_alloc+0x5b/0x310 [ 2343.758123] create_object.isra.0+0x3a/0xa20 [ 2343.758686] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2343.759342] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2343.759996] ? rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2343.760618] __alloc_skb+0xb1/0x5b0 [ 2343.761093] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2343.761701] unregister_netdevice_many+0x8e3/0x1490 [ 2343.762353] ? netdev_pick_tx+0xc70/0xc70 [ 2343.762893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2343.763569] ? queue_delayed_work_on+0xb4/0xe0 [ 2343.764155] ? trace_hardirqs_on+0x5b/0x180 [ 2343.764714] unregister_netdevice_queue+0x201/0x2c0 [ 2343.765372] ? unregister_netdevice_many+0x1490/0x1490 [ 2343.766047] ? linkwatch_fire_event+0x63/0x190 [ 2343.766649] __tun_detach+0xfc1/0x12b0 [ 2343.767163] tun_chr_close+0xc4/0x250 [ 2343.767652] __fput+0x285/0x9f0 [ 2343.768078] ? __tun_detach+0x12b0/0x12b0 [ 2343.768624] task_work_run+0xe2/0x1a0 [ 2343.769121] exit_to_user_mode_prepare+0x186/0x190 [ 2343.769770] syscall_exit_to_user_mode+0x38/0x1d0 [ 2343.770403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2343.771070] RIP: 0033:0x7fa206731b19 [ 2343.771555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2343.773943] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2343.774912] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2343.775822] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2343.776729] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.777654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2343.778562] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2343.794666] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 01:32:13 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 39) 01:32:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) chdir(&(0x7f0000000000)='./file0\x00') 01:32:13 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340), 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r3, &(0x7f0000000040), 0x12) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 01:32:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x203, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xfffffff0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:14 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x700, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:32:14 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x708043, 0x11e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8020}) recvmsg$unix(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/71, 0x47}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/184, 0xb8}, {&(0x7f0000000600)=""/100, 0x64}], 0x8, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}, 0x400000c0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'}) accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000005c0)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001780)}], 0x1, &(0x7f0000001840)=[@dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x27}}], 0x48}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) [ 2359.003473] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.003473] program syz-executor.6 not setting count and/or reply_len properly [ 2359.020751] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.020751] program syz-executor.7 not setting count and/or reply_len properly [ 2359.030715] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.030715] program syz-executor.5 not setting count and/or reply_len properly [ 2359.080231] syz-executor.1 (11979): /proc/11979/oom_adj is deprecated, please use /proc/11979/oom_score_adj instead. 01:32:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0xab) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=@v2={0x2000000, [{0x0, 0x9}, {0xbd22, 0x5}]}, 0x14, 0x3976e37e8ddb131f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r3, &(0x7f0000000240)=""/170, 0xaa, 0x2101, &(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x3, 0x0, "09564c23bfba9eece7d441197205c9d04710252eb70f4f8904b6e2479300abe98cd0d9b469d37b7690fa19130f07cac6a86ca290cf357762754d7460b612db", 0x13}, 0x80) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2359.132321] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.132321] program syz-executor.7 not setting count and/or reply_len properly [ 2359.138673] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.138673] program syz-executor.5 not setting count and/or reply_len properly 01:32:14 executing program 2: r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x12, 0x1, {0x0, r7}}, 0x6) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000001040010000000000000000000000000005000000009f00000c00008008001600ac148a00"], 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2359.165954] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.165954] program syz-executor.6 not setting count and/or reply_len properly 01:32:14 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x900, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:32:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup3(r2, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1, 0x7a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0xfffffffffffffff7, &(0x7f0000000080)=[r1, r3, r0, r3, 0xffffffffffffffff, r4], 0x6, 0x0, 0x1}, 0x4) r5 = dup(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xff) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fsmount(r3, 0x1, 0x2) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000000)={{0x4658, 0x6}, {0x4, 0x4}, 0x1, 0x1000}) syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x90100) sendfile(r7, r8, 0x0, 0x4) recvmmsg(r5, &(0x7f0000007940)=[{{0x0, 0x200000, 0x0}}], 0x500, 0x0, 0x0) 01:32:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2c340, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x100, 0x100) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}}) 01:32:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xffffffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2359.348552] device veth0_vlan entered promiscuous mode 01:32:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x300, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2359.408642] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.408642] program syz-executor.7 not setting count and/or reply_len properly [ 2359.435873] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.435873] program syz-executor.5 not setting count and/or reply_len properly [ 2359.493284] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.493284] program syz-executor.6 not setting count and/or reply_len properly [ 2359.504316] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2359.504316] program syz-executor.7 not setting count and/or reply_len properly [ 2359.525144] FAULT_INJECTION: forcing a failure. [ 2359.525144] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.528243] CPU: 1 PID: 11988 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2359.529853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2359.531698] Call Trace: [ 2359.532296] dump_stack+0x107/0x167 [ 2359.533108] should_fail.cold+0x5/0xa [ 2359.533982] ? kobject_uevent_env+0x22b/0xfd0 [ 2359.534981] should_failslab+0x5/0x20 [ 2359.535829] kmem_cache_alloc_trace+0x55/0x320 [ 2359.536850] kobject_uevent_env+0x22b/0xfd0 [ 2359.537831] __kobject_del+0x27c/0x320 [ 2359.538705] kobject_put+0x215/0x270 [ 2359.539538] net_rx_queue_update_kobjects+0x370/0x470 [ 2359.540690] netdev_unregister_kobject+0x152/0x280 [ 2359.541804] unregister_netdevice_many+0xbb7/0x1490 [ 2359.542927] ? netdev_pick_tx+0xc70/0xc70 [ 2359.543854] ? queue_delayed_work_on+0x85/0xe0 [ 2359.544861] ? queue_delayed_work_on+0xb4/0xe0 [ 2359.545892] ? queue_delayed_work_on+0x88/0xe0 [ 2359.546911] unregister_netdevice_queue+0x201/0x2c0 [ 2359.548012] ? unregister_netdevice_many+0x1490/0x1490 [ 2359.549173] ? linkwatch_fire_event+0x63/0x190 [ 2359.550216] __tun_detach+0xfc1/0x12b0 [ 2359.551103] tun_chr_close+0xc4/0x250 [ 2359.551944] __fput+0x285/0x9f0 [ 2359.552665] ? __tun_detach+0x12b0/0x12b0 [ 2359.553593] task_work_run+0xe2/0x1a0 [ 2359.554480] exit_to_user_mode_prepare+0x186/0x190 [ 2359.555578] syscall_exit_to_user_mode+0x38/0x1d0 [ 2359.556657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2359.557827] RIP: 0033:0x7fa206731b19 [ 2359.558854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2359.563689] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2359.565391] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2359.567011] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2359.568591] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2359.570200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2359.571797] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2359.626576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2360.058377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2373.572424] sg_write: 2 callbacks suppressed [ 2373.572447] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.572447] program syz-executor.6 not setting count and/or reply_len properly [ 2373.578584] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.578584] program syz-executor.5 not setting count and/or reply_len properly 01:32:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:32:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x4000010, r0, 0x7894000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x4, 0x1, 0x1, 'queue1\x00', 0x10}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616bea899ca681009e7275563b", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="d27a4a079b0d1d350b39987c6c1f32b1aba20f5698d9426909b5cdf75354cba79ef1fbb47ce8a27258f72a247edffb76394d3353507569c171fd1d762ffad314807440595a836bacb2ec7fbb4b00ab715ce6772aa8247b154378ca3a47ace3971d001a1843e08301a53847f9c084a7bac56b5f57b0d1bc25c87dfa68a3518d"]) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x10001, 0x5, 0x8001}) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x600000000000) 01:32:28 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xec0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x302, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 40) 01:32:28 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x54) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x18, 0x6, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) read(r0, &(0x7f0000000400)=""/75, 0x4b) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24005046) r6 = fcntl$dupfd(r3, 0x203, r1) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000001", @ANYRES16=r2, @ANYBLOB="c46a888903f12700813ad30440000010d04bca6164bd169fc09c665944873c6cdc921ab5ddedd4d3cb392158f2c46200000000d6bbd0e888c3f7a9c57109787f0014b9e300086d0c2eacaeb9e1dfee0966bdfaf56364c274261565b39b28a1d8bbbb6d02616fbc665c5e3cfcd7841dadbb91c6cb0a87143c72a4cb7ca2939479fa6a540fad466fc48ae06c1241039a2da4a5b282277280d80580d3379758de7b640389a09e15038721fbb48f543dd837311b612a23394e21001e69695d1bc6f2187037fc59250fed3963d40191d16abf7620e51a880fb5a06dc253f1678388000000"], 0x18}}, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) 01:32:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0xbb, 0x80, 0xc2, 0x4, 0x1c}, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="64e7d326c1e3", @rand_addr, @multicast, @remote}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400037, r4}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @ipv4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80400037}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r10, 0xee01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)=@newsa={0x430, 0x10, 0x200, 0x70bd25, 0x25dfdbff, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x4e21, 0xa800, 0x4e22, 0xf801, 0xa, 0x80, 0x0, 0x33, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0x4d6, 0x3c}, @in=@private=0xa010101, {0x1112, 0x9, 0x400, 0x8, 0x7fffffff, 0x80, 0x7, 0xe6e}, {0x9, 0x0, 0x80000001}, {0x6d, 0xa9, 0xffffffff}, 0x70bd2d, 0x0, 0x2, 0x0, 0x3f, 0x6}, [@policy={0xac, 0x7, {{@in6=@local, @in6=@local, 0x4e20, 0x5, 0x4e22, 0xa2, 0x2, 0xa0, 0x0, 0xc, r4, r6}, {0x4, 0xfff, 0x7c00000000000000, 0x4a3afad9, 0xfffffffffffffffc, 0xffffffff7fffffff, 0x5, 0x9}, {0x3, 0x2, 0x8, 0xcb90}, 0xffffffe8, 0x6e6bb7, 0x1, 0x0, 0x2, 0x2}}, @tfcpad={0x8, 0x16, 0x9}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}, @sec_ctx={0x1f, 0x8, {0x1b, 0x8, 0x1, 0x3, 0x13, "52b29261a6b8e6c79a8fcd76e1d410d5b66e79"}}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e20, 0x3, 0xa, 0x80, 0x0, 0x3a, r8, r10}, {@in=@rand_addr=0x64010101, 0x4d6, 0xff}, @in=@empty, {0x2, 0x1ff0000000, 0x4, 0x8, 0x80000001, 0x100000000, 0x7ff, 0x4}, {0x7ff, 0x7fff, 0x8, 0x78a544bd}, {0xf0, 0x9, 0x7ff}, 0x70bd2c, 0x3506, 0xa, 0x4, 0xc8, 0x1}}, @migrate={0x180, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@private=0xa010100, @in6=@private2, @in6=@private0, 0x32, 0x3, 0x0, 0x3507, 0xa, 0x2}, {@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x3c, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast2, @in6=@mcast2, @in=@remote, @in6=@mcast1, 0x3c, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in=@rand_addr=0x64010100, 0x6c, 0x2, 0x0, 0x3506, 0x2, 0xa}, {@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, @in6=@remote, 0x6c, 0x4, 0x0, 0x3503, 0xa, 0xa}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x8015}, 0x4008800) [ 2373.596425] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.596425] program syz-executor.7 not setting count and/or reply_len properly [ 2373.644810] device veth0_vlan entered promiscuous mode 01:32:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)='system_u:object_r:crond_unit_file_t:s0\x00', 0x27, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$sndseq(r2, &(0x7f0000000340)=[{0x1, 0x40, 0x6, 0x5, @tick=0x7fff, {0x0, 0x3a}, {0x81, 0x20}, @raw32={[0x7, 0x6, 0x9]}}, {0x1f, 0x22, 0x5, 0x4f, @time={0x6, 0xa0}, {0xc0, 0x58}, {0xa2, 0x1}, @addr={0x1, 0x4}}, {0xca, 0xbe, 0x5, 0x20, @time={0x1, 0x7ff}, {0x52, 0x5}, {0x7, 0x40}, @result={0xfff, 0xbc}}, {0x81, 0x9, 0x3f, 0x7f, @tick=0x1, {0x8}, {0x5b, 0x5}, @result={0x1000}}, {0x0, 0x1, 0x0, 0x20, @time={0xea1c0927, 0x5}, {0x30, 0x80}, {0x9e, 0xff}, @quote={{0x7, 0x9}, 0x7ff, &(0x7f0000000280)={0x8, 0x1, 0x1, 0x1f, @time={0xff}, {0x3, 0x1f}, {0x1, 0xff}, @control={0x1f, 0x8, 0x7fffffff}}}}, {0xec, 0x0, 0x3, 0x4, @tick=0x9, {0x6, 0x1}, {0x3, 0x4a}, @addr={0x2, 0x5}}, {0x2, 0x0, 0x5, 0x9, @tick=0x5, {0x1f, 0x9}, {0xb2, 0x2}, @time=@tick=0x1}, {0x8, 0x2, 0x1, 0x3, @time={0x8, 0x8}, {0x4, 0x5}, {0x0, 0x9b}, @queue={0xa8, {0x8, 0x81}}}, {0x6, 0x7, 0x6b, 0x8, @tick=0x401, {0x5, 0x6}, {0x4, 0x2}, @note={0x7, 0x1, 0x0, 0x2, 0x80}}], 0xfc) lseek(r0, 0x40, 0x2) [ 2373.709143] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.709143] program syz-executor.5 not setting count and/or reply_len properly 01:32:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2373.717236] FAULT_INJECTION: forcing a failure. [ 2373.717236] name failslab, interval 1, probability 0, space 0, times 0 [ 2373.718811] CPU: 1 PID: 12038 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2373.719710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2373.720779] Call Trace: [ 2373.721132] dump_stack+0x107/0x167 [ 2373.721607] should_fail.cold+0x5/0xa [ 2373.722116] ? create_object.isra.0+0x3a/0xa20 [ 2373.722711] should_failslab+0x5/0x20 [ 2373.723207] kmem_cache_alloc+0x5b/0x310 [ 2373.723733] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2373.724352] create_object.isra.0+0x3a/0xa20 [ 2373.724915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2373.725576] kmem_cache_alloc_trace+0x151/0x320 [ 2373.726181] kobject_uevent_env+0x22b/0xfd0 [ 2373.726769] __kobject_del+0x27c/0x320 [ 2373.727273] kobject_put+0x215/0x270 [ 2373.727761] net_rx_queue_update_kobjects+0x370/0x470 [ 2373.728449] netdev_unregister_kobject+0x152/0x280 [ 2373.729088] unregister_netdevice_many+0xbb7/0x1490 [ 2373.729729] ? netdev_pick_tx+0xc70/0xc70 [ 2373.730269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2373.730946] ? queue_delayed_work_on+0xb4/0xe0 [ 2373.731529] ? trace_hardirqs_on+0x5b/0x180 [ 2373.732086] unregister_netdevice_queue+0x201/0x2c0 [ 2373.732739] ? unregister_netdevice_many+0x1490/0x1490 [ 2373.733425] ? linkwatch_fire_event+0x63/0x190 [ 2373.734026] __tun_detach+0xfc1/0x12b0 [ 2373.734542] tun_chr_close+0xc4/0x250 [ 2373.735042] __fput+0x285/0x9f0 [ 2373.735474] ? __tun_detach+0x12b0/0x12b0 [ 2373.736022] task_work_run+0xe2/0x1a0 [ 2373.736512] exit_to_user_mode_prepare+0x186/0x190 [ 2373.737137] syscall_exit_to_user_mode+0x38/0x1d0 [ 2373.737759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2373.738445] RIP: 0033:0x7fa206731b19 [ 2373.738926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2373.741294] RSP: 002b:00007fa203ca7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2373.742287] RAX: 0000000000000003 RBX: 00007fa206844f60 RCX: 00007fa206731b19 [ 2373.743216] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2373.744131] RBP: 00007fa203ca71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2373.745074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2373.746011] R13: 00007ffdbd24481f R14: 00007fa203ca7300 R15: 0000000000022000 [ 2373.751601] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.751601] program syz-executor.6 not setting count and/or reply_len properly [ 2373.756217] SELinux: Context system_u:object_r:crond_unit_file_t:s0 is not valid (left unmapped). 01:32:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x2, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2373.826054] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.826054] program syz-executor.7 not setting count and/or reply_len properly 01:32:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x500, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:28 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 41) [ 2373.861740] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.861740] program syz-executor.6 not setting count and/or reply_len properly [ 2373.901950] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.901950] program syz-executor.5 not setting count and/or reply_len properly 01:32:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x110820, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) setxattr$trusted_overlay_nlink(&(0x7f00000002c0)='mnt/encrypted_dir\x00', &(0x7f0000000340), &(0x7f0000000480)={'U-', 0x1ff}, 0x16, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r3}, 0x14) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="020000360f0000000000008df3a42082fa0ae700000400000000000000"]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)) lremovexattr(&(0x7f0000000040)='mnt/encrypted_dir\x00', &(0x7f0000000280)=@random={'trusted.', 'lo\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) finit_module(0xffffffffffffffff, &(0x7f0000000240)='#\x00', 0x1) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@private0}, 0x14) 01:32:28 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x4000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x1d, 0x4}, {0x3, 0x4}, 0x34, 0x2, 0x4}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 01:32:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2373.937234] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.937234] program syz-executor.6 not setting count and/or reply_len properly [ 2373.943768] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2373.943768] program syz-executor.7 not setting count and/or reply_len properly [ 2373.963821] 9pnet: Insufficient options for proto=fd [ 2373.989883] 9pnet: Insufficient options for proto=fd 01:32:29 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x8701, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x3, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2a7766646e6f3d9528f696316ce78da3f30856ae284b105e3c568a44324ee7dc17508c6091e2adc4c6e15ccdb78c78880b4e2bc27ad0e2d3c808d50a787b72d7842ffc4f406edc6071c49b119f019e5fc60e517d657dc2080e5f13bf7f37df10f7b2400fdb7ebad722b74074835af4fceb19e4a66954648dc36d6cd338b830", @ANYRESHEX=r3, @ANYBLOB]) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000000)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) [ 2374.108335] 9pnet: Insufficient options for proto=fd [ 2374.127747] 9pnet: Insufficient options for proto=fd [ 2374.150476] device veth0_vlan entered promiscuous mode [ 2374.216379] FAULT_INJECTION: forcing a failure. [ 2374.216379] name failslab, interval 1, probability 0, space 0, times 0 [ 2374.217747] CPU: 1 PID: 12084 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2374.218535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2374.219470] Call Trace: [ 2374.219778] dump_stack+0x107/0x167 [ 2374.220192] should_fail.cold+0x5/0xa [ 2374.220625] ? kobject_get_path+0xc5/0x1f0 [ 2374.221107] should_failslab+0x5/0x20 [ 2374.221535] __kmalloc+0x72/0x390 [ 2374.221927] ? trace_hardirqs_on+0x5b/0x180 [ 2374.222425] kobject_get_path+0xc5/0x1f0 [ 2374.222888] kobject_uevent_env+0x251/0xfd0 [ 2374.223382] __kobject_del+0x27c/0x320 [ 2374.223825] kobject_put+0x215/0x270 [ 2374.224250] net_rx_queue_update_kobjects+0x370/0x470 [ 2374.224842] netdev_unregister_kobject+0x152/0x280 [ 2374.225397] unregister_netdevice_many+0xbb7/0x1490 [ 2374.225966] ? netdev_pick_tx+0xc70/0xc70 [ 2374.226450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2374.227048] ? queue_delayed_work_on+0xb4/0xe0 [ 2374.227562] ? trace_hardirqs_on+0x5b/0x180 [ 2374.228053] unregister_netdevice_queue+0x201/0x2c0 [ 2374.228615] ? unregister_netdevice_many+0x1490/0x1490 [ 2374.229214] ? linkwatch_fire_event+0x63/0x190 [ 2374.229731] __tun_detach+0xfc1/0x12b0 [ 2374.230178] tun_chr_close+0xc4/0x250 [ 2374.230615] __fput+0x285/0x9f0 [ 2374.230993] ? __tun_detach+0x12b0/0x12b0 [ 2374.231465] task_work_run+0xe2/0x1a0 [ 2374.231901] exit_to_user_mode_prepare+0x186/0x190 [ 2374.232456] syscall_exit_to_user_mode+0x38/0x1d0 [ 2374.233004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2374.233584] RIP: 0033:0x7fa206731b19 [ 2374.234005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2374.236092] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2374.236952] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2374.237756] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2374.238571] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2374.239375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2374.240188] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:32:42 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='tra=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c66736e616d653d63616368653d6d6d61702c6673636f6e746578743d73797361646d5f752c6f626a5f726f6c653d212c6f626a5f747970653d6361636865fc6c6f6f73652c00"]) execveat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', &(0x7f0000000140)='fscontext', &(0x7f0000000180)='cache=mmap', &(0x7f00000001c0)='$g\x00'], &(0x7f00000003c0)=[&(0x7f0000000380)='h\x00'], 0x400) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x400, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) execveat(r2, &(0x7f0000000440)='./file1\x00', &(0x7f00000005c0)=[&(0x7f0000000500)='fscontext', &(0x7f0000000540)=']l\x00', &(0x7f0000000580)=':\x00'], &(0x7f00000006c0)=[&(0x7f0000000600)='trans=fd,', &(0x7f0000000640)=']\x00', &(0x7f0000000680)=')[.)\xd8\x00'], 0x100) 01:32:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x600, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:42 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 42) 01:32:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:32:42 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xc00e, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x45) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x400001) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3df15f6947fd1088ba836a2a65d3008356c4eed8470af8ba21bf2e727371b3a388be2248f87a3fd8cb8cfccec451c2f8fdddd0819f3b0ff024e6a1f7a2f20d32725bd4cb9a61298bc6c00d7eac68cc70b17decba4f9489853bb443097c960880b2d8959d2b2afcdea06921d682465a077b1f86581760f61ef50681c6b588afc289b81cb2f417cd41dd77f66c9cf6dc", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 01:32:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x4, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2387.744025] sg_write: 6 callbacks suppressed [ 2387.744037] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2387.744037] program syz-executor.5 not setting count and/or reply_len properly 01:32:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000280)=ANY=[@ANYBLOB="010000001800fea9b904e6e061868d71aa695b000000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) fsetxattr$security_ima(r1, 0x0, &(0x7f0000000200)=@ng={0x4, 0x10, "e2"}, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000280), 0x10744a2, &(0x7f0000000640)=ANY=[@ANYBLOB="2d242c7266646e6f2c39777f4b44892c65756b643d", @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="3402aa35ffdf3c106cb7337025d057c621493a9ba5ba74d4a0889da1912c0a35a6fb3eff54526d9ecdb44851c51c935d053354603c03154fb380ae3b210b", @ANYRESDEC]) setsockopt$inet6_udp_int(r6, 0x11, 0xa, &(0x7f00000005c0)=0x6, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000100)) close_range(r7, 0xffffffffffffffff, 0x0) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x88, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYRES32, @ANYRES16=r4, @ANYRES64=r2]) [ 2387.748256] 9pnet: Insufficient options for proto=fd [ 2387.752704] 9pnet: Insufficient options for proto=fd [ 2387.769009] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2387.769009] program syz-executor.7 not setting count and/or reply_len properly [ 2387.796857] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2387.796857] program syz-executor.6 not setting count and/or reply_len properly [ 2387.808310] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2387.808310] program syz-executor.5 not setting count and/or reply_len properly 01:32:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x80, 0x8}, {0x7, 0x20}, 0x1fc, 0x5, 0x7e}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="6a33fc96a3b611", @ANYRESHEX=r2, @ANYBLOB="2ceea99c23ef98cb6a917a"]) [ 2387.822415] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2387.822415] program syz-executor.7 not setting count and/or reply_len properly 01:32:42 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x5, 0xfffffffffffffd2d, 0x0, 0x91, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x214287c, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYBLOB="6b3c972d7dc3e2830bb2b087d5f6897b", @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESHEX]) mkdirat(r1, 0x0, 0x2) umount2(&(0x7f0000000080)='./file0\x00', 0x4) lseek(r1, 0xfa2b, 0x0) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1]) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x4) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x1) getresuid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) symlinkat(&(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) mkdirat(r4, &(0x7f00000005c0)='./file0\x00', 0x2) [ 2387.858644] 9pnet: Insufficient options for proto=fd 01:32:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x5, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2387.879815] cgroup2: Unknown parameter '18446744073709551615k<—-}Ã⃠²°‡Õö‰{0xffffffffffffffff18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 2387.881915] 9pnet: Insufficient options for proto=fd [ 2387.914065] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2387.914065] program syz-executor.5 not setting count and/or reply_len properly [ 2387.917492] tmpfs: Unknown parameter 'ÿÿ00000000000000000000004ÿÿÿÿ18446744073709551615' 01:32:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0x7ff, 0x7f, 0x523a}) openat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x8e131130f439efcf, 0xd) [ 2387.922685] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2387.922685] program syz-executor.6 not setting count and/or reply_len properly [ 2387.943247] cgroup2: Unknown parameter '18446744073709551615k<—-}Ã⃠²°‡Õö‰{0xffffffffffffffff18446744073709551615ÿÿÿÿ0xffffffffffffffff' [ 2387.956486] tmpfs: Unknown parameter 'ÿÿ00000000000000000000004ÿÿÿÿ18446744073709551615' [ 2388.036240] device veth0_vlan entered promiscuous mode [ 2388.037152] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2388.037152] program syz-executor.5 not setting count and/or reply_len properly [ 2388.080165] FAULT_INJECTION: forcing a failure. [ 2388.080165] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.082688] CPU: 0 PID: 12131 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2388.084224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.086047] Call Trace: [ 2388.086635] dump_stack+0x107/0x167 [ 2388.087442] should_fail.cold+0x5/0xa [ 2388.088289] ? create_object.isra.0+0x3a/0xa20 [ 2388.089293] should_failslab+0x5/0x20 [ 2388.090135] kmem_cache_alloc+0x5b/0x310 [ 2388.091045] ? kmem_cache_alloc_trace+0x151/0x320 [ 2388.092130] create_object.isra.0+0x3a/0xa20 [ 2388.093093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2388.094218] __kmalloc+0x16e/0x390 [ 2388.095012] kobject_get_path+0xc5/0x1f0 [ 2388.095916] kobject_uevent_env+0x251/0xfd0 [ 2388.096882] __kobject_del+0x27c/0x320 [ 2388.097738] kobject_put+0x215/0x270 [ 2388.098567] net_rx_queue_update_kobjects+0x370/0x470 [ 2388.099729] netdev_unregister_kobject+0x152/0x280 [ 2388.100816] unregister_netdevice_many+0xbb7/0x1490 [ 2388.101922] ? netdev_pick_tx+0xc70/0xc70 [ 2388.102845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.104022] ? queue_delayed_work_on+0xb4/0xe0 [ 2388.105032] ? trace_hardirqs_on+0x5b/0x180 [ 2388.106007] unregister_netdevice_queue+0x201/0x2c0 [ 2388.107122] ? unregister_netdevice_many+0x1490/0x1490 [ 2388.108303] ? linkwatch_fire_event+0x63/0x190 [ 2388.109329] __tun_detach+0xfc1/0x12b0 [ 2388.110215] tun_chr_close+0xc4/0x250 [ 2388.111063] __fput+0x285/0x9f0 [ 2388.111803] ? __tun_detach+0x12b0/0x12b0 [ 2388.112730] task_work_run+0xe2/0x1a0 [ 2388.113586] exit_to_user_mode_prepare+0x186/0x190 [ 2388.114677] syscall_exit_to_user_mode+0x38/0x1d0 [ 2388.115754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2388.116875] RIP: 0033:0x7fa206731b19 [ 2388.117701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.121769] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2388.123461] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2388.125028] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2388.126603] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.128189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2388.129767] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:32:57 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 43) 01:32:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x6, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2402.858708] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2402.858708] program syz-executor.5 not setting count and/or reply_len properly [ 2402.870446] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2402.870446] program syz-executor.7 not setting count and/or reply_len properly [ 2402.888611] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2402.888611] program syz-executor.6 not setting count and/or reply_len properly 01:32:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="746e6f3dd03ce986dc4060e060b10a9ef51e158b38edad422ca2cbdf6645fe0476099867bb28ba83d2f4f742df062c36796322a329d624d2437700c8a569d27511cc7d7be5936ab9fdee62f8e5e425eec4bffb4dcf03fb9787c5b23afd0d41ad", @ANYRESHEX=r1, @ANYBLOB=',w\x00dno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000080)) 01:32:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:32:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xf000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:57 executing program 2: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) fallocate(r1, 0x8, 0x0, 0x8000) r2 = accept$packet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x14) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xb44e, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_fscache}, {@cache_loose}, {@mmap}, {@loose}, {@access_uid={'access', 0x3d, 0xee01}}, {@afid={'afid', 0x3d, 0xfff}}], [{@pcr={'pcr', 0x3d, 0x3d}}, {@context={'context', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x16500000}}]}}) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) 01:32:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x700, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2402.941433] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2402.941433] program syz-executor.5 not setting count and/or reply_len properly [ 2402.974892] device veth0_vlan entered promiscuous mode [ 2402.987764] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2402.987764] program syz-executor.6 not setting count and/or reply_len properly [ 2402.998047] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2402.998047] program syz-executor.7 not setting count and/or reply_len properly 01:32:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) accept$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) r1 = syz_io_uring_complete(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendfile(r2, r1, &(0x7f0000000100)=0xfffffffffffffff9, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000004c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004c80)=0x14) [ 2403.053133] FAULT_INJECTION: forcing a failure. [ 2403.053133] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.054819] CPU: 1 PID: 12168 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2403.055672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2403.056676] Call Trace: [ 2403.056999] dump_stack+0x107/0x167 [ 2403.057441] should_fail.cold+0x5/0xa [ 2403.057902] ? __alloc_skb+0x6d/0x5b0 [ 2403.058368] should_failslab+0x5/0x20 [ 2403.058833] kmem_cache_alloc_node+0x55/0x330 [ 2403.059529] __alloc_skb+0x6d/0x5b0 [ 2403.059975] alloc_uevent_skb+0x7b/0x210 sendmmsg$inet6(r3, &(0x7f0000005980)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000180)="18bdca30734de46bbe44f6aacb75bc3d906cca22eb04fd4008fcb43eb84689c68e043e6145fa3237993200d36eab233ccb6e273bc24e58a61811f9364455a1d38cff869cc9e195703e37c1f2969ba40f462773bc0e18c9c83ee7c18de20ff25a73efe642a0dc72a7c82d97ab048eea9596b30326fbba5dc5e9535805b3c20be113938a81d2826ed8389a86db754d", 0x8e}, {&(0x7f0000000240)="a847f83b768f815e1a1fd11c45cc4ab76f852727fd0f84eff8cde30afee99171c461bb605a218de46b8ba81cc3e6638a9738f5f9be9d48b362e96bef378ab918b96eb51b2aad6311615a1e4aaf7db731d3fae613a99969467524ed4b4a65e7e1b71890f15bf31a0a96e8bf02b4a3", 0x6e}, {&(0x7f00000002c0)="3ed34ca079cfa57ee64cf04718aaa2d6e902e4a26f347107f2d876addcb2462ea582dd10151695b553bce7ed7998a068300f67ec75937f7229fbd5224d7047c66e5eb408d199c682cd7cb1c6bd0415eca41246521466003d3d8cda64e503f340dd33414d96a9a1b789472b0e785e40156b33ba5977a04e16fe407bb9e4606927dd646dbfca612043b20241b46ea4c7f564ff97fa21eb7e82a8cec19ef6a976b342a168d12c24fbf2207c97ed5a1a25256d0a3ff1da0544b2b4e6979e2654b15d5db4bb681460d5011afa85a64f485cda9e31a5c07c90def1ecf538d7fef362080f", 0xe1}, {&(0x7f00000003c0)="110b8b1f49ece95cf679", 0xa}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000400)="9d4d1652f30c3e9f2d", 0x9}, {&(0x7f0000000440)="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", 0xfb}], 0x8}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002600)="b95e5ca0ea1afd65f11a1709c7e5be010b9788ea90759bad89aaaec6e3c9f21fb48155813dc2dc23f4fcfc27a80d81ccada4ea653e8e1cba2b54123dbe60", 0x3e}, {&(0x7f0000002640)="6de3f8713cb303596c8ee19ec5d0d40b5576e9f3a3976385a281e2cf962cd56146ed7fc5b1cdcb43acf2e5175be4055ad025b0b326a38c607060bbb30c21cb81f09d54643a7cba20d3414355b8576c99", 0x50}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="61ed7a709b325a50ec55b449446af64087549e4ff9229486f5d4", 0x1a}, {&(0x7f0000003700)="5f528ed6694c5a8097fbc2ab6484304172981d570000b07ac81ead2852e8b596834862b2ca9fa4a19a0ab46d6ad1903aa2548b7e30252fbc43a797b42964cfef42a2f6748e29aaea68770a4e4e3a68096b322b4166bf171f5f27cd2b90d68504499e830a446a8f620c6812886adfdcb60e42e20358a19b4cb3f6d1ee69ff5238daba1abb708313a225cdee6124fc2abdd58813c540396abf640d3c96cb7e383c6f795ce21b641ee899ce14c819659fed1d37322105e93b390219a33b5231c944a9d7572801613ba5f16b6777d62551e896eceff2c7c7c9f0720b56b4043a0f47922605ce0bf0a24f3fa530cead7824f761d40e", 0xf3}], 0x5, &(0x7f0000003880)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x0, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x38}, @ra={0x5, 0x2, 0x3a}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x20}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x11, 0x10, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @local, @local, @remote, @remote, @remote]}}}], 0xd8}}, {{&(0x7f0000003980)={0xa, 0x4e23, 0x101, @private1, 0x7}, 0x1c, &(0x7f0000004b80)=[{&(0x7f00000039c0)="eb6ae250408fcc59a2340373b2ec7b05000f12c2df8695941ed7b2c56a91645f6eeff2c048d03d288985da870b183bbbc0dbffc1591e6e49e9e402551c5e514d80c4e13b92ee8d7a64cda47e2a78d7f3d8c74ea7458b0a16f8529e94526b16d7ef5dc1608f8582f6821d57e6b9933e848a6949aebfd85df4c057f26ffa540916cff1d03e", 0x84}, {&(0x7f0000003a80)="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", 0x1000}, {&(0x7f0000004a80)="1b6cfd39d362e4c180af0870d8f2c292eff9e01c350e99f1179c366adfe01a973088daa0c542dff84023363c11534c3d9b110e1b0191515e3bb4387ebcfefd612d226885a1197796c1274f5fbf95a47f9461161e48a1dee8ad9b685dd23aa1315af703eb1c1d66324e2365b6a0b889e1764c91046c9169ad839439d0d30d18f9a356237852a184f0ef5c71efaff3d67304f5babb1e94f9d40541aa1f69ab783655cce66ab5d1eb365e0d809a29c0508afe1cb7ecbd18133409adb70a3fc54642ee4cce759eb691586392ebe8a9404c33959dacff527ae544dcb9328c41cd7c1e097c3c036b1fd9d39940ec8ec7ed5c", 0xef}], 0x3, &(0x7f0000004cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x16, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hopopts={{0x170, 0x29, 0x36, {0x1, 0x2a, '\x00', [@generic={0x1, 0xd8, "b4e044a7b4d10d07095ba086673558e46635975b7038feb2643f511eb2e0cd1aa66cdd6c20c9fc059b9172a6be7cfd33cf1a1661db7eefb974ff6caf2aa9418665de31a1dc4842a853408c369d94d5dbc5c384b26dcafbd35a784b09706579bfd398b741e6937e54a68907e583f5ecc3ecd381e90028f6fae0643ed65bb608eca1cb610d380710790ecbe2684fb1f616d49b521775147ec73637913b2fcc90437230563bda4bb76325ee70af4b7ea3445a7c6f2f26590ad3e3ffb42e7b5b4cde1fee01468a78cd0a28da493900e5b67f843688ce5aba5b35"}, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0x58, "b0c4d7f220ba834db9341a29ff7f6431ad9db117986cb2c180b37feedd1164c3a7c985b710dd6d2b613e54326fea3fc0c7584ee702b78932934d742be133d06b103218825fb1d5dd41659f23eb87149bafe1d47bf4ae7420"}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts={{0x88, 0x29, 0x37, {0x2b, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x90}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x7, [0x0, 0xb9e, 0x401, 0x4, 0xfffffffffffffe01, 0x3f]}}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x8000}, @enc_lim={0x4, 0x1, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r4}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x2, 0x52, 0x0, [@mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x20}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x1, 0x12, 0x1, 0x4, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @local, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x3b8}}, {{&(0x7f0000005080)={0xa, 0x4e22, 0x200, @remote, 0xc5e}, 0x1c, &(0x7f0000005880)=[{&(0x7f00000050c0)="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", 0xfa}, {&(0x7f00000051c0)="14f0590ac92df5c2bf33ad51d07015a81da6364e934a0f491182f09fcc74d2a6ece0af88c84165aa45dac171702011fb653e220097ae8b4f17814a33d7ab1c7272bad27ab90662b0951b174cc2670cb19481538c70a6a62b34332eda3029f8c5d54c15318cc65ca2874ca18d4e65ea59f1489355069386a95576fd0d047d808fdfd229d483261b2a5f9d6c0185d6f90c5c8d91e7c8945e5ef409b59cd047d9f492b0a13ee5c15327c643fc5da7ba", 0xae}, {&(0x7f0000005280)="015d0984ae66847dd086078f1cb00ba15850da273d530b06d0b1f76d7d793385bc152438ab6895ffc4950bcf33f77ae121d4f839e7c223474b8b984b81ff7037542cb5fb29367af0d6170af51fb9b5b2c3", 0x51}, {&(0x7f0000005300)="f983c17428cf4b7dcac9caed173e8aa8c087442aeefa50aa22c1dfa40ff5d181beecd9f9f5c76f21ba04197425add06c51c7659a32b2a8c5359ee114ae500a154421867bee4129f2d4fd8c18fc95225e1702ee9360347784fc5951a88ee22eb27bf762c485189ff54de34527e8e9756366a02632e03a62ed75ede71552bc575941105812b4d3b37a02d037c55673da5f21fe25ebcec7693174c9fdebf88b424294765e7ff46e42f914d6a451fd3ff9f1c2", 0xb1}, {&(0x7f00000053c0)="83df7f09bf487907bde3d69943953a401b4461fb91c668e7c86f41c8d97070cf19f3cc892e13e5d9d53d7bef419de019b79b578accd3d89707e2acce796dbe4384e29d860954e142849add48edff8d0669a2615fdaa3e6b66a999b3d01feab65a5b61fa9bdf71c4fe29910f0cf873b4def51c897d46e654ef6609172d080037693f226d73f4756ef149e31d6b4d3a7154ef67caed47c6a6a62128bf0aa55c52e437618", 0xa3}, {&(0x7f0000005480)="127d72065e5054d9c22240b104e79aa476f7dfdd7679c1c509e5b425e513c8f3cf26d771b1b6c811e601f351ab82ff71532538525406e59128da5de7aa5f967542f198d12de1c2d19340021a89d03e255d7f3e84fbe9e9c0aa91aece9f6cf1daabf1662ecbbf4d65730345112ee4f31839c19a12ea6a20edeab03d2849df7b20a63a", 0x82}, {&(0x7f0000005540)="67e404cf0e3b1b78a3833a6f726abc050f4d9f92e9ce546b9f64c165883945c76d21a133023fe18957f772a6e39f8e1e8baf727c5e8c71317e10e5443f0745c0d8910d047c179d249c22f17dd96507d2bc596586ffe2fa21fb8f4e508722ee9a7934f3c84e012c3da8d6af7eaa1cca9a5b0c2fc47d2c58ec9c67892f2dec30c484746bc9eefd8ff4e36ae97029bbfcaf1fd79804b01c915b27a8794986edb15e34659abefead24479f17e168f5d3a8dd027e2eab18b49c17e020e0860276426799276c0c171c86da7e5d238e3f86bb3044e4b165f374799f862a8fceec616d3677e04c8430aa4dc3ed4f370294dadb91326073", 0xf3}, {&(0x7f0000005640)="a7fea3d2da2e8b7ef26c2b7b79ff9f83f1a34bafb2e6fcadebfc146609ef9ed5a44cec6d812668fdacfe9a85ac1f8658114e8075081263c833378a5ad8", 0x3d}, {&(0x7f0000005680)="bfea49a0707963c676286221e9b298a2ee6cc24479cd0dae480e9a4901dc1e6fe32752b008ca5316e0f61359397e3e9a3985eecf67e65769cfbd14e6f3364c309fb346fcb8f20345fa13875a9a352d208db8c63f4e409ac7876ec58220d16fa41d38b2db863953c2cced7fa612e6f302e42930960ec83fe77f232eb5681152f1d4fb86e76ed17c94047f92d52543f90f314bec5d8a4be814023312eeed9a508d3527f8016fa00146e50b851ea6d3a6a57960392ba087adc9d8e6f83cea32395590618ce01f5dda058b925a4346748ba5e92afe14260067ded2f852bda3535c862e", 0xe1}, {&(0x7f0000005780)="f2a37ecddbcdbee6f949f2b85e758b11cb0064ecf995e75b303ecd54f87e405b21f9789194f284f0cddb8ac80fa3de62da321476b0e0484f0c9af0c1ebcee7e3eab3dea9a1aff29f180f1739e886aa8d207b340f1cf044b3eb234d9306d9e9af34f01f9d303ddfb51af5762eb9f7aab9a29b91926486c2fad6f9c29e510cc9ac848e47df8860ffd2879ce80cc9ba5ba3595f9e5a948847e52d12c8ee23e0b97fe695ea2e81f857227db6137e2e7cd2366619ed472e608bc199a36f52fbcdb3768c", 0xc1}], 0xa, &(0x7f0000005940)}}], 0x4, 0x20004080) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000005a80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005940)={&(0x7f0000004c00)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x56c2, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010040}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 01:32:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x96) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xb1084d6d1ff41da3) fcntl$dupfd(r0, 0x0, r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), 0x2020000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x65, 0x37, 0x62, 0x33, 0x63, 0x31, 0x36], 0x2d, [0x61, 0x38, 0x66, 0x1], 0x2d, [0x64, 0x61, 0x32, 0x6c], 0x2d, [0x63, 0x38, 0x37, 0x64], 0x2d, [0x34, 0x32, 0x31, 0x38, 0x30, 0x36, 0x33, 0x61]}}}]}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000000)) write$bt_hci(r3, &(0x7f0000000000)={0x1, @le_create_cis={{0x2064, 0x9}, {0x2, [{0x7, 0xee1}, {0x3, 0xab9e}]}}}, 0xd) 01:32:58 executing program 2: read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001700)='net/arp\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/134, 0x86}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="328263b1f2e3ac61900a81bb7ad4c0666be556cb3e4bac9a925ee703acb4b088b009f5236cc250c955e0cd988cebf8c44ea20f4063badf71a18e73ee2284d6278a1e0b2c9b0534ddafa70ece18750046c87cf02588ba67cdcbca97ea5638f70ee3a88d1171f4d0ccb71572f2bf4e6b87e333f0d7083a5db8b39643368d", 0x7d}, {&(0x7f0000000300)="4a6d4a327169c7804d79275ffe4cd831813a73cdd0dc0ab979b9f1005d6087f23bcc73e684e018e4f67e970f13fd9cd6cef2b3ce94e9b14e27b11a730ae59c650d50f533b0844c917ba1bb6c6cd303fd", 0x50}], 0x2, 0x9, 0x3) [ 2403.060656] kobject_uevent_env+0xcdc/0xfd0 [ 2403.061369] __kobject_del+0x27c/0x320 [ 2403.061861] kobject_put+0x215/0x270 [ 2403.062315] net_rx_queue_update_kobjects+0x370/0x470 [ 2403.062949] netdev_unregister_kobject+0x152/0x280 [ 2403.063551] unregister_netdevice_many+0xbb7/0x1490 [ 2403.064157] ? netdev_pick_tx+0xc70/0xc70 [ 2403.064667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2403.065302] ? queue_delayed_work_on+0xb4/0xe0 [ 2403.065851] ? trace_hardirqs_on+0x5b/0x180 [ 2403.066376] unregister_netdevice_queue+0x201/0x2c0 [ 2403.066998] ? unregister_netdevice_many+0x1490/0x1490 [ 2403.067668] ? linkwatch_fire_event+0x63/0x190 [ 2403.068244] __tun_detach+0xfc1/0x12b0 [ 2403.068821] tun_chr_close+0xc4/0x250 [ 2403.069294] __fput+0x285/0x9f0 [ 2403.069703] ? __tun_detach+0x12b0/0x12b0 [ 2403.070221] task_work_run+0xe2/0x1a0 [ 2403.070701] exit_to_user_mode_prepare+0x186/0x190 [ 2403.071312] syscall_exit_to_user_mode+0x38/0x1d0 [ 2403.071922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2403.072563] RIP: 0033:0x7fa206731b19 [ 2403.073027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2403.075315] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2403.076272] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2403.077157] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2403.078043] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2403.078932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.079826] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2403.116643] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2403.116643] program syz-executor.5 not setting count and/or reply_len properly [ 2403.147351] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2403.147351] program syz-executor.5 not setting count and/or reply_len properly 01:32:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x7, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:32:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c00f472cb36c054587896c100cadff79e9d4ba178c6489b32fd2635f113b05828f3b9d3f7b1c14e15991a0bdd662de8440ed7cae05ea6b0e3669748e08d570190ff02ab906b829cfc3b5c2deeec98efa9e538f001afd21eecca91fa43365c572b3d06d5d63bb5f830caffbc1c06082c4a46863cb9d1df8f2f7ed336f76c30b1a1dc3c0c8ea247c430f1321eb8eea7edac382e724759bf28e6e12f36"]) signalfd(r3, &(0x7f0000000080)={[0x5a]}, 0x8) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) openat(r4, &(0x7f0000000000)='./file1\x00', 0x4480, 0x10) [ 2403.189894] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2403.189894] program syz-executor.5 not setting count and/or reply_len properly 01:32:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x900, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:58 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x5, 0xfffffffb, 0x0, 0x0, 0x64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/279], 0x20}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000014) 01:32:58 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 44) 01:32:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x8, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:32:58 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x34000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2403.238573] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2403.238573] program syz-executor.6 not setting count and/or reply_len properly [ 2403.293470] device veth0_vlan entered promiscuous mode [ 2403.320698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2403.325665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2403.366307] FAULT_INJECTION: forcing a failure. [ 2403.366307] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.367731] CPU: 1 PID: 12206 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2403.368557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2403.369513] Call Trace: [ 2403.369820] dump_stack+0x107/0x167 [ 2403.370238] should_fail.cold+0x5/0xa [ 2403.370675] ? create_object.isra.0+0x3a/0xa20 [ 2403.371194] should_failslab+0x5/0x20 [ 2403.371637] kmem_cache_alloc+0x5b/0x310 [ 2403.372098] create_object.isra.0+0x3a/0xa20 [ 2403.372591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2403.373170] kmem_cache_alloc_node+0x169/0x330 [ 2403.373690] __alloc_skb+0x6d/0x5b0 [ 2403.374109] alloc_uevent_skb+0x7b/0x210 [ 2403.374569] kobject_uevent_env+0xcdc/0xfd0 [ 2403.375066] __kobject_del+0x27c/0x320 [ 2403.375512] kobject_put+0x215/0x270 [ 2403.375938] net_rx_queue_update_kobjects+0x370/0x470 [ 2403.376530] netdev_unregister_kobject+0x152/0x280 [ 2403.377084] unregister_netdevice_many+0xbb7/0x1490 [ 2403.377650] ? netdev_pick_tx+0xc70/0xc70 [ 2403.378124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2403.378714] ? queue_delayed_work_on+0xb4/0xe0 [ 2403.379228] ? trace_hardirqs_on+0x5b/0x180 [ 2403.379726] unregister_netdevice_queue+0x201/0x2c0 [ 2403.380290] ? unregister_netdevice_many+0x1490/0x1490 [ 2403.380886] ? linkwatch_fire_event+0x63/0x190 [ 2403.381406] __tun_detach+0xfc1/0x12b0 [ 2403.381852] tun_chr_close+0xc4/0x250 [ 2403.382286] __fput+0x285/0x9f0 [ 2403.382660] ? __tun_detach+0x12b0/0x12b0 [ 2403.383134] task_work_run+0xe2/0x1a0 [ 2403.383627] exit_to_user_mode_prepare+0x186/0x190 [ 2403.384185] syscall_exit_to_user_mode+0x38/0x1d0 [ 2403.384730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2403.385308] RIP: 0033:0x7fa206731b19 [ 2403.385727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2403.387819] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2403.388677] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2403.389479] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2403.390282] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2403.391083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.391898] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2416.527668] sg_write: 4 callbacks suppressed [ 2416.527687] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.527687] program syz-executor.7 not setting count and/or reply_len properly [ 2416.540078] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.540078] program syz-executor.5 not setting count and/or reply_len properly 01:33:11 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 45) 01:33:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:33:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xec0, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x9, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c00f472cb36c054587896c100cadff79e9d4ba178c6489b32fd2635f113b05828f3b9d3f7b1c14e15991a0bdd662de8440ed7cae05ea6b0e3669748e08d570190ff02ab906b829cfc3b5c2deeec98efa9e538f001afd21eecca91fa43365c572b3d06d5d63bb5f830caffbc1c06082c4a46863cb9d1df8f2f7ed336f76c30b1a1dc3c0c8ea247c430f1321eb8eea7edac382e724759bf28e6e12f36"]) signalfd(r3, &(0x7f0000000080)={[0x5a]}, 0x8) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) openat(r4, &(0x7f0000000000)='./file1\x00', 0x4480, 0x10) 01:33:11 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) [ 2416.555526] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.555526] program syz-executor.6 not setting count and/or reply_len properly write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x80000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:11 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./0\x00\x00\x00\x00\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r6 = accept4$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ff0200000000000000000600000008000200", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x3cf8c9a3b24136b2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb792, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c0}, 0x48010) openat(r7, &(0x7f0000000380)='./file0\x00', 0x20000, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000002c0)={0x8, 'batadv_slave_1\x00', {'syzkaller0\x00'}, 0x7ff}) 01:33:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r4, 0x34d6, 0x0, 0x0, 0x0, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000500)={{r4}, r6, 0x1a, @unused=[0x8000, 0x200, 0x8000, 0xb48d], @subvolid=0x1fc}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000340)={"f2e8a4367aa3db683f0e99714da49cfd", 0x0, r6, {0x100000001, 0x10001}, {0x6d5, 0x10000}, 0x5, [0x3, 0x9, 0x4, 0x3, 0x2, 0x184d5a2, 0x0, 0x8, 0x80, 0x20, 0x401, 0x80000001, 0x8, 0x7, 0x8, 0xc6]}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="df0000000000004a59802114f27fc6901e724a2dc77ce23dd5e40cfb4a367b59d761c5dde8a45d753243dc162a3230e62aa7b99e314fbc0fe69586ea5d1c836dd678", @ANYRESHEX=r7, @ANYBLOB=',\x00']) [ 2416.573387] 9pnet: Insufficient options for proto=fd [ 2416.573853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2416.603446] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.603446] program syz-executor.5 not setting count and/or reply_len properly [ 2416.628158] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.628158] program syz-executor.7 not setting count and/or reply_len properly [ 2416.656617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:33:11 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x400000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x12, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x40009, 0x0, 0x0, 0x0, 0x4, 0xa00}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, r2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r2) preadv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000001900)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4106, 0x100a}, {&(0x7f0000000180)=""/86, 0x56}], 0x2, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x6, 0x7, 0x8, 0x2, 0x8]}, &(0x7f00000000c0)=0x54) [ 2416.716258] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.716258] program syz-executor.6 not setting count and/or reply_len properly 01:33:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xb}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:33:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="747261076e733d66642c7266646e6f63ba843fd72f54e9e1baa8a30a52b0afe5af5023b75e416300d486b60a59b8130cd926089c1c9be1542a6329dc8317872380ad67ee1f757cfec5bb04edb2d07949729ad6395a3ca27050", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 01:33:11 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./0\x00\x00\x00\x00\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r6 = accept4$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ff0200000000000000000600000008000200", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x3cf8c9a3b24136b2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb792, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c0}, 0x48010) openat(r7, &(0x7f0000000380)='./file0\x00', 0x20000, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000002c0)={0x8, 'batadv_slave_1\x00', {'syzkaller0\x00'}, 0x7ff}) [ 2416.783793] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.783793] program syz-executor.7 not setting count and/or reply_len properly 01:33:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xf0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x4000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="41f46506d1369e43fa526efa35433466eb45ff4d4b958a0cf5a800a5353204e3cb65a17befd7e8702b27861c0519559eeb6a3b40da705843309c6762643858b922f87891ec97e09cdd590747dea707c5054e9709f88687680e4027774d6c253be33cc61b69b2f8e3059c61f1583866f47ea93de5e4fae6f961dcf1e5f213a0056735d235ff", @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 2416.891893] device veth0_vlan entered promiscuous mode [ 2416.912644] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.912644] program syz-executor.7 not setting count and/or reply_len properly [ 2416.938300] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.938300] program syz-executor.5 not setting count and/or reply_len properly [ 2416.964272] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2416.964272] program syz-executor.6 not setting count and/or reply_len properly [ 2416.980278] 9pnet: Insufficient options for proto=fd [ 2417.010704] 9pnet: Insufficient options for proto=fd [ 2417.011043] FAULT_INJECTION: forcing a failure. [ 2417.011043] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.014577] CPU: 0 PID: 12243 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2417.016173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.018033] Call Trace: [ 2417.018628] dump_stack+0x107/0x167 [ 2417.019448] should_fail.cold+0x5/0xa [ 2417.020322] should_failslab+0x5/0x20 [ 2417.021178] __kmalloc_node_track_caller+0x74/0x3b0 [ 2417.022299] ? alloc_uevent_skb+0x7b/0x210 [ 2417.023253] __alloc_skb+0xb1/0x5b0 [ 2417.024085] alloc_uevent_skb+0x7b/0x210 [ 2417.025004] kobject_uevent_env+0xcdc/0xfd0 [ 2417.025985] __kobject_del+0x27c/0x320 [ 2417.026860] kobject_put+0x215/0x270 [ 2417.027716] net_rx_queue_update_kobjects+0x370/0x470 [ 2417.028897] netdev_unregister_kobject+0x152/0x280 [ 2417.030003] unregister_netdevice_many+0xbb7/0x1490 [ 2417.031133] ? netdev_pick_tx+0xc70/0xc70 [ 2417.032082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.033252] ? queue_delayed_work_on+0xb4/0xe0 [ 2417.034268] ? trace_hardirqs_on+0x5b/0x180 [ 2417.035235] unregister_netdevice_queue+0x201/0x2c0 [ 2417.036359] ? unregister_netdevice_many+0x1490/0x1490 [ 2417.037533] ? linkwatch_fire_event+0x63/0x190 [ 2417.038575] __tun_detach+0xfc1/0x12b0 [ 2417.039463] tun_chr_close+0xc4/0x250 [ 2417.040346] __fput+0x285/0x9f0 [ 2417.041094] ? __tun_detach+0x12b0/0x12b0 [ 2417.042030] task_work_run+0xe2/0x1a0 [ 2417.042890] exit_to_user_mode_prepare+0x186/0x190 [ 2417.043998] syscall_exit_to_user_mode+0x38/0x1d0 [ 2417.045094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.046241] RIP: 0033:0x7fa206731b19 [ 2417.047080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.051210] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2417.052926] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2417.054523] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2417.056133] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2417.057732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2417.059327] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2417.076316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:33:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 46) 01:33:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) unlinkat(r1, &(0x7f0000000040)='./file1\x00', 0x0) r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') fallocate(r2, 0x0, 0x0, 0x1000002) 01:33:27 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0xdc84, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b820000", 0x68, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040000c00000000000000dbf4655f00", 0x2d, 0x4e0}, {&(0x7f0000010200)="010000000000050040000000000000", 0xf, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f", 0xf, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400800000", 0x1f, 0x4080}, {&(0x7f0000012700), 0x0, 0x8004500}, {0x0}, {0x0}, {&(0x7f0000013000)="504d4d00504d4dffdcf4655f000000006476", 0x12, 0x40000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00be418413e3805ba29c30e1e58939644163dcc70634e06428033f7eea6992748c08e9a010683550fc49a980398fb978ccb66f8797354d4d71325a71dd1768d3b251fedc9d991a56902c"]) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x0, 0x80, 0x4, 0x3, 0x4, 0xee, 0x0, 0x999, 0x0, 0xb, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x4, @perf_bp={&(0x7f00000001c0), 0x5}, 0x1100, 0x5, 0x6, 0x5, 0x1, 0x5, 0x392, 0x0, 0x3, 0x0, 0x3}) 01:33:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xc}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:33:27 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x400300, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x1a7, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xc00e, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2432.936839] sg_write: 2 callbacks suppressed [ 2432.936857] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2432.936857] program syz-executor.6 not setting count and/or reply_len properly [ 2432.951218] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2432.951218] program syz-executor.7 not setting count and/or reply_len properly [ 2432.966021] 9pnet: Insufficient options for proto=fd [ 2432.966171] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2432.966171] program syz-executor.5 not setting count and/or reply_len properly 01:33:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x100, 0x0) openat(r1, &(0x7f00000002c0)='./file0\x00', 0x468080, 0xe0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="6f202659c395b42dcb45962ea8d168a325129a476605619683757bc344803014f985ca4807bcf1cd591c4f89040a7ce26eef4c2522f779e284d9ea76dc72919f1f2efb7264545e67ed34da931737698372b3f86629a9a936de65e453ebcded4ac195cca27f8672b47ca63467a1b9e84f3e1e90235e0df61d394922a1915b79467ff8e5396fa92403a45f1428ba0f163516cd915c4c081802bb07b517323a85ff330b84b9298f42ac8155227130", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000240)={0x0, 0x2, {0x0, 0x0, 0xfffffffc, 0x1}, 0x10000}) fspick(r5, &(0x7f0000000140)='./file0/file0\x00', 0x0) getsockname$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) [ 2432.998713] 9pnet: Insufficient options for proto=fd [ 2433.070651] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2433.070651] program syz-executor.5 not setting count and/or reply_len properly [ 2433.075622] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2433.080939] ext4 filesystem being mounted at /syzkaller-testdir998661330/syzkaller.uFgTs1/333/file0 supports timestamps until 2038-01-19 (0x7fffffff) 01:33:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000340)="2cb6a4e1f39b3246347685192cded41ea74cc6e8ada4a77792ed8390afa30bd231dea09beb7a1a7f1be06417b1e170421244209d59d459148665469aaae56d1ec4c27faab89eacdd23666b2a28e854cda10c6c758358cefce25fb50666c3a0349f7a646319370c64cce0f2da60fa1ab2e0f70e892b7390287ba9adef379ddc033eb1f79c9c0cf9da96ecbf57363cec56649ca4fc53413fefb4101bbc8fbc800a876eed47b725c29d4a2097463db6ef0c3e8769042bcdac5ff336c949f22340bd87f82fecaf0d68805d70177fe71cc6569c657d278c6c822055cfe193245e57024c49") mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2433.126889] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2433.126889] program syz-executor.6 not setting count and/or reply_len properly 01:33:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) sync_file_range(r0, 0x7, 0x36b0, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x4b45, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) copy_file_range(r0, 0x0, r2, &(0x7f0000000040)=0x5, 0xff, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x8400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r3, 0x9, {0x0, r1}, 0x7fffffff, 0x7, 0x1, {0x0, 0x0, r4}}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880) memfd_create(&(0x7f0000000100)='\xd4#-\x00', 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c1700005a987be490f48cec04c59a3cf41c6a60446e620cff00"/36], 0x1c}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x34a40) [ 2433.149450] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2433.149450] program syz-executor.7 not setting count and/or reply_len properly 01:33:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xd}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:33:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x300, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2433.269274] device veth0_vlan entered promiscuous mode 01:33:28 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xf0ffff, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2433.309206] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2433.309206] program syz-executor.7 not setting count and/or reply_len properly [ 2433.329753] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2433.329753] program syz-executor.5 not setting count and/or reply_len properly [ 2433.343198] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2433.343198] program syz-executor.7 not setting count and/or reply_len properly 01:33:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x28340, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 01:33:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xf000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2433.422110] FAULT_INJECTION: forcing a failure. [ 2433.422110] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.424659] CPU: 1 PID: 12295 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2433.426144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.427897] Call Trace: [ 2433.428454] dump_stack+0x107/0x167 [ 2433.429235] should_fail.cold+0x5/0xa [ 2433.430037] ? create_object.isra.0+0x3a/0xa20 [ 2433.431000] should_failslab+0x5/0x20 [ 2433.431808] kmem_cache_alloc+0x5b/0x310 [ 2433.432693] create_object.isra.0+0x3a/0xa20 [ 2433.433653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.434753] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2433.435849] ? alloc_uevent_skb+0x7b/0x210 [ 2433.436804] __alloc_skb+0xb1/0x5b0 [ 2433.437600] alloc_uevent_skb+0x7b/0x210 [ 2433.438478] kobject_uevent_env+0xcdc/0xfd0 [ 2433.439420] __kobject_del+0x27c/0x320 [ 2433.440269] kobject_put+0x215/0x270 [ 2433.441090] net_rx_queue_update_kobjects+0x370/0x470 [ 2433.442197] netdev_unregister_kobject+0x152/0x280 [ 2433.443262] unregister_netdevice_many+0xbb7/0x1490 [ 2433.444347] ? netdev_pick_tx+0xc70/0xc70 [ 2433.445260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2433.446386] ? queue_delayed_work_on+0xb4/0xe0 [ 2433.447368] ? trace_hardirqs_on+0x5b/0x180 [ 2433.448303] unregister_netdevice_queue+0x201/0x2c0 [ 2433.449382] ? unregister_netdevice_many+0x1490/0x1490 [ 2433.450518] ? linkwatch_fire_event+0x63/0x190 [ 2433.451506] __tun_detach+0xfc1/0x12b0 [ 2433.452359] tun_chr_close+0xc4/0x250 [ 2433.453183] __fput+0x285/0x9f0 [ 2433.453890] ? __tun_detach+0x12b0/0x12b0 [ 2433.454792] task_work_run+0xe2/0x1a0 [ 2433.455605] exit_to_user_mode_prepare+0x186/0x190 [ 2433.456673] syscall_exit_to_user_mode+0x38/0x1d0 [ 2433.457718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2433.458829] RIP: 0033:0x7fa206731b19 [ 2433.459631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2433.463603] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2433.465254] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2433.466773] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2433.468312] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2433.469856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2433.471393] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2433.489081] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2433.489081] program syz-executor.6 not setting count and/or reply_len properly 01:33:41 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x1000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2446.251849] sg_write: 2 callbacks suppressed [ 2446.251876] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; 01:33:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x20, 0x0, 0x70bd2d, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}}, 0x200400c1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '{+-[*%-'}}]}}) 01:33:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) getpgid(0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file2\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)) fork() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000000)) fcntl$dupfd(r1, 0x406, r3) 01:33:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x34000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:41 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xee01, 0xee01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 01:33:41 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 47) 01:33:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x500, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xe}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2446.251876] program syz-executor.7 not setting count and/or reply_len properly [ 2446.287447] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.287447] program syz-executor.5 not setting count and/or reply_len properly [ 2446.288287] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.288287] program syz-executor.6 not setting count and/or reply_len properly [ 2446.301158] device veth0_vlan entered promiscuous mode 01:33:41 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x400000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ftruncate(r0, 0x100) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472586cf3da616e733d66642c7266", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) ioctl$RTC_WIE_ON(r1, 0x700f) r5 = socket$inet(0x2, 0x80000, 0x89) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000002840)) recvmmsg(r5, &(0x7f0000002540)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/24, 0x18}], 0x2}, 0x5}, {{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001340)=""/118, 0x76}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f00000013c0)=""/49, 0x31}, {&(0x7f0000001400)=""/175, 0xaf}, {&(0x7f00000014c0)=""/182, 0xb6}, {&(0x7f0000001580)=""/223, 0xdf}, {&(0x7f0000001680)=""/140, 0x8c}], 0x7, &(0x7f00000017c0)=""/163, 0xa3}, 0x7}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/148, 0x94}, {&(0x7f0000001940)=""/142, 0x8e}], 0x2}, 0x3}, {{&(0x7f0000001a40)=@nfc, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001ac0)=""/139, 0x8b}], 0x1}, 0xfffffff8}, {{&(0x7f0000001bc0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/210, 0xd2}], 0x1, &(0x7f0000001d80)=""/218, 0xda}, 0x80000000}, {{&(0x7f0000001e80)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f0000001f00)=""/237, 0xed}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/155, 0x9b}, {&(0x7f0000002180)=""/71, 0x47}, {&(0x7f0000002200)=""/124, 0x7c}, {&(0x7f0000002280)=""/123, 0x7b}, {&(0x7f0000002300)=""/161, 0xa1}, {&(0x7f00000023c0)=""/80, 0x50}], 0x8, &(0x7f00000024c0)=""/95, 0x5f}, 0x8}], 0x6, 0xc0000040, &(0x7f00000026c0)={0x77359400}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e0, &(0x7f0000000000)) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000002880)="0b23a0adea4caa308aa1b870f66aeb8cb18b0433da0be3ee05ee34c3fb06557f85232aa92f6c0dda61a6eb3699ac9344eb74b8e191d61dc85015c082a7ae1a2333afcf64f8f06745a55a29223df349315db58c7768bda1088ed7243c2d5d07bf0f9eb328c3f999c5a310b6a404f84438e793") r8 = signalfd(0xffffffffffffffff, &(0x7f0000002740)={[0x6]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000002780)={0x3, 0x8, 0x0, 'queue1\x00', 0x1aa4}) [ 2446.367753] FAULT_INJECTION: forcing a failure. [ 2446.367753] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.370178] CPU: 1 PID: 12339 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2446.371646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.373421] Call Trace: [ 2446.373985] dump_stack+0x107/0x167 [ 2446.374761] should_fail.cold+0x5/0xa [ 2446.375576] ? kobject_uevent_env+0x22b/0xfd0 [ 2446.376534] should_failslab+0x5/0x20 [ 2446.377349] kmem_cache_alloc_trace+0x55/0x320 [ 2446.378326] kobject_uevent_env+0x22b/0xfd0 [ 2446.379259] __kobject_del+0x27c/0x320 [ 2446.380088] kobject_put+0x215/0x270 [ 2446.380887] netdev_queue_update_kobjects+0x2a1/0x3e0 [ 2446.382001] netdev_unregister_kobject+0x15f/0x280 [ 2446.383047] unregister_netdevice_many+0xbb7/0x1490 [ 2446.384121] ? netdev_pick_tx+0xc70/0xc70 [ 2446.385023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2446.386138] ? queue_delayed_work_on+0xb4/0xe0 [ 2446.387110] ? trace_hardirqs_on+0x5b/0x180 [ 2446.388031] unregister_netdevice_queue+0x201/0x2c0 [ 2446.389103] ? unregister_netdevice_many+0x1490/0x1490 [ 2446.390222] ? linkwatch_fire_event+0x63/0x190 [ 2446.391204] __tun_detach+0xfc1/0x12b0 [ 2446.392049] tun_chr_close+0xc4/0x250 [ 2446.392858] __fput+0x285/0x9f0 [ 2446.393574] ? __tun_detach+0x12b0/0x12b0 [ 2446.394468] task_work_run+0xe2/0x1a0 [ 2446.395287] exit_to_user_mode_prepare+0x186/0x190 [ 2446.396333] syscall_exit_to_user_mode+0x38/0x1d0 [ 2446.397372] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2446.398464] RIP: 0033:0x7fa206731b19 [ 2446.399258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.403200] RSP: 002b:00007fa203ca7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2446.404816] RAX: 0000000000000003 RBX: 00007fa206844f60 RCX: 00007fa206731b19 [ 2446.406335] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2446.407849] RBP: 00007fa203ca71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.409370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2446.410886] R13: 00007ffdbd24481f R14: 00007fa203ca7300 R15: 0000000000022000 [ 2446.439493] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.439493] program syz-executor.7 not setting count and/or reply_len properly [ 2446.457560] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.457560] program syz-executor.6 not setting count and/or reply_len properly [ 2446.472080] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.472080] program syz-executor.5 not setting count and/or reply_len properly 01:33:41 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 48) 01:33:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:33:41 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x2000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) getpgid(0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file2\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000000c0)) fork() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000000)) fcntl$dupfd(r1, 0x406, r3) 01:33:41 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f000000a740)=[{&(0x7f0000003bc0)}, {&(0x7f000000a680)}], 0x2, 0x7) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open_tree(r0, &(0x7f00000000c0)='./file1\x00', 0x88800) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000140)=""/225) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000003c40), 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='macvlan0\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r6, r5, 0x0, 0x7ffffff9) 01:33:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x600, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2446.589985] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.589985] program syz-executor.7 not setting count and/or reply_len properly 01:33:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x80000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2446.638379] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.638379] program syz-executor.5 not setting count and/or reply_len properly [ 2446.662183] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.662183] program syz-executor.6 not setting count and/or reply_len properly [ 2446.666552] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2446.666552] program syz-executor.7 not setting count and/or reply_len properly [ 2446.691677] device veth0_vlan entered promiscuous mode [ 2446.755742] FAULT_INJECTION: forcing a failure. [ 2446.755742] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.757200] CPU: 0 PID: 12379 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2446.758036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.759047] Call Trace: [ 2446.759377] dump_stack+0x107/0x167 [ 2446.759819] should_fail.cold+0x5/0xa [ 2446.760286] ? create_object.isra.0+0x3a/0xa20 [ 2446.760839] should_failslab+0x5/0x20 [ 2446.761323] kmem_cache_alloc+0x5b/0x310 [ 2446.761814] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2446.762402] create_object.isra.0+0x3a/0xa20 [ 2446.762931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2446.763547] kmem_cache_alloc_trace+0x151/0x320 [ 2446.764122] kobject_uevent_env+0x22b/0xfd0 [ 2446.764647] __kobject_del+0x27c/0x320 [ 2446.765135] kobject_put+0x215/0x270 [ 2446.765595] netdev_queue_update_kobjects+0x2a1/0x3e0 [ 2446.766221] netdev_unregister_kobject+0x15f/0x280 [ 2446.766811] unregister_netdevice_many+0xbb7/0x1490 [ 2446.767413] ? netdev_pick_tx+0xc70/0xc70 [ 2446.767920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2446.768558] ? queue_delayed_work_on+0xb4/0xe0 [ 2446.769119] ? trace_hardirqs_on+0x5b/0x180 [ 2446.769654] unregister_netdevice_queue+0x201/0x2c0 [ 2446.770255] ? unregister_netdevice_many+0x1490/0x1490 [ 2446.770887] ? linkwatch_fire_event+0x63/0x190 [ 2446.771446] __tun_detach+0xfc1/0x12b0 [ 2446.771920] tun_chr_close+0xc4/0x250 [ 2446.772389] __fput+0x285/0x9f0 [ 2446.772785] ? __tun_detach+0x12b0/0x12b0 [ 2446.773300] task_work_run+0xe2/0x1a0 [ 2446.773761] exit_to_user_mode_prepare+0x186/0x190 [ 2446.774352] syscall_exit_to_user_mode+0x38/0x1d0 [ 2446.774934] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2446.775549] RIP: 0033:0x7fa206731b19 [ 2446.775996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.778216] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2446.779132] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2446.779994] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2446.780847] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.781720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2446.782575] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:33:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x4100, 0x40, 0x1}, 0x18) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 01:33:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x3000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:33:57 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000140)=@random={'user.', '\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2c, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080)=r4, 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000002ec0)=0x3, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000003c0)=0x492, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000340)) r6 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x583a00) getsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 01:33:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x700, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:57 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 49) 01:33:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xfffffffffffffffe, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000000)) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000080)) 01:33:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) [ 2462.443164] sg_write: 2 callbacks suppressed [ 2462.443182] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.443182] program syz-executor.6 not setting count and/or reply_len properly [ 2462.446368] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.446368] program syz-executor.5 not setting count and/or reply_len properly [ 2462.456292] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.456292] program syz-executor.7 not setting count and/or reply_len properly [ 2462.462750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x400000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:33:57 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2182, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000)) close(r1) r2 = fsmount(r0, 0x0, 0x6) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x33}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1f}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x48044) 01:33:57 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x15, 0x9, 0x7, 0x4, 0x0, 0x0, 0x3005, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0xa3f}, 0x40001, 0x1, 0x9, 0x8, 0x2, 0x5, 0x1, 0x0, 0x2, 0x0, 0x2}, r0, 0xb, r0, 0x8) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x132, r0, 0x10000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000240)) fspick(r3, &(0x7f0000000140)='./file0/file0\x00', 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x1, 0x0, r3, &(0x7f00000002c0), &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x100, 0x400, 0x1}, 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="041f00000000e0000502fff8040103050200010792"], 0x108) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x4, 0x3, &(0x7f0000000680)=[{&(0x7f0000000480)="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", 0xfc, 0x6}, {&(0x7f0000000240)="3bc90fa50df7a8850ca8d8f8efff955632c04f9f421e516cc7616afb6893079fb44cc33436c79cf1a223012e4e7354852317259b2f1f07e01e5e913316e2857e0bedac831cd5e78c2e0e7300f1208682e825b87a7d582bb7b89bc34c97", 0x5d, 0xae}, {&(0x7f0000000580)="c309904dcd216d20ddd67798b8d498fe39967b51387f03be61d329bff30d3aaa18bfad231a07ca6c1e6ca0006c08eb06a0b485bc387e5f82b66db8efa051bd0abf98399b9035a7386f90639dbba6d445e5d6fe3cf75967940362960918931e27e93e4883f190832d8b8d807f65ede5960247eaba7ea15cfd8e7cafe2eb7d3762a4f9f25d37c339ab4d0f1c04b98b879686d1f1a16f3691184170a1c248205f8bf8051446f621fd5ba50b68657b0138e59f05dddbbcce43ef525d67da2115a1d3a152c1965b62c5b747eb478f7b6377ca52f21a86d1a2a162ddfdc9187e1d4db58dddfcf51a1769c226cdac5409bacfe0474feb2c", 0xf4, 0x800}], 0x40000, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="5cb7b1b1f62835cd91a8feaf4ded1dc6b2786c797ac994d1c873de47bcca0878b9398d1c5a99e90e2995eb9d7f70891f67d0a67e00e53e0194aabd", @ANYRESOCT]) [ 2462.572339] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.572339] program syz-executor.6 not setting count and/or reply_len properly [ 2462.578413] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.578413] program syz-executor.7 not setting count and/or reply_len properly [ 2462.599693] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.599693] program syz-executor.5 not setting count and/or reply_len properly 01:33:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$sndseq(r5, &(0x7f0000001b00)=[{0x5, 0x2, 0xa4, 0x0, @tick=0x3f, {0x1f, 0x40}, {0x4, 0x9}, @control={0x12, 0x5, 0x3ff}}, {0x6, 0x5, 0x98, 0x8, @time={0x8b, 0xbbb2}, {0x3, 0x9}, {0x3f, 0x7f}, @raw8={"fc78f4cb87e2de67b9538b72"}}, {0x7, 0x0, 0x2, 0x0, @tick=0x15, {0x6, 0x81}, {0x7f}, @raw8={"da3ad85af3b033b78762abd1"}}, {0x7f, 0x0, 0x3f, 0x3f, @tick=0x400, {}, {0x7, 0x7}, @raw32={[0x3, 0x7, 0x2]}}, {0x1, 0x7f, 0x1f, 0x3, @tick=0x81, {0x4, 0xfd}, {0x9, 0x40}, @note={0xb2, 0x4, 0x8, 0x4, 0x9}}, {0x3, 0x7, 0x8, 0x1, @tick, {0x1, 0x76}, {0x9b, 0x3}, @ext={0xc9, &(0x7f0000000a00)="db8cd19313ef5d4d4e5b7aed1372c8a58fba46d04348f10d01d29e4f7d3e58cbd2006baa5516b44c7a20f2f9ab2baebd010b49aeac793b1ca6b1c693eb2ffaead14a90d3c06739445b597f5fdcf9b5123509abc3193632fe1e1e4133dbb2f0c3e57c261968a30afd2643f1564ddfaae36690f7c03ff9d2c4e91a99303483b57ec5077da080e1e6cbadfcc556c790424cf2061c2b25e0fd31ffb92c6f69eff35bde275a6c84a3acbd3d919dcc2b5ab2489bf09faf00ce21cbcb4a43036cbb41e6af62e8831e9ef5df20"}}, {0x1f, 0x9, 0x7, 0x9, @time={0x0, 0x3}, {0xe6, 0x3}, {0x4c, 0x7f}, @ext={0x1000, &(0x7f0000000b00)="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"}}], 0xc4) recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/182, 0xb6}], 0x5, &(0x7f0000000900)=""/216, 0xd8}, 0x80000000}], 0x1, 0x10001, 0x0) fcntl$dupfd(r2, 0x406, r6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x0, 0x9, {0x2, 0x6f5}, 0xcca7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x1, 'queue1\x00', 0xfff}) 01:33:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x11}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2462.681706] ALSA: seq fatal error: cannot create timer (-22) 01:33:57 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x4000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2462.736728] device veth0_vlan entered promiscuous mode [ 2462.795834] ALSA: seq fatal error: cannot create timer (-22) [ 2462.814584] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.814584] program syz-executor.7 not setting count and/or reply_len properly [ 2462.832016] FAULT_INJECTION: forcing a failure. [ 2462.832016] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.834834] CPU: 0 PID: 12426 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2462.836517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.838536] Call Trace: [ 2462.839182] dump_stack+0x107/0x167 [ 2462.840064] should_fail.cold+0x5/0xa [ 2462.840988] ? kobject_uevent_env+0x22b/0xfd0 [ 2462.842091] ? dev_uevent_filter+0xd0/0xd0 [ 2462.843115] should_failslab+0x5/0x20 [ 2462.844038] kmem_cache_alloc_trace+0x55/0x320 [ 2462.845152] ? dev_uevent_filter+0xd0/0xd0 [ 2462.846191] kobject_uevent_env+0x22b/0xfd0 [ 2462.847250] ? software_node_notify+0xf8/0x2f0 [ 2462.848367] device_del+0xa8f/0x1180 [ 2462.849282] ? uevent_show+0x390/0x390 [ 2462.850262] unregister_netdevice_many+0xbb7/0x1490 [ 2462.850408] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2462.850408] program syz-executor.7 not setting count and/or reply_len properly [ 2462.851472] ? netdev_pick_tx+0xc70/0xc70 [ 2462.851503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.851529] ? queue_delayed_work_on+0xb4/0xe0 [ 2462.858149] ? trace_hardirqs_on+0x5b/0x180 [ 2462.859210] unregister_netdevice_queue+0x201/0x2c0 [ 2462.860416] ? unregister_netdevice_many+0x1490/0x1490 [ 2462.861712] ? linkwatch_fire_event+0x63/0x190 [ 2462.862828] __tun_detach+0xfc1/0x12b0 [ 2462.863799] tun_chr_close+0xc4/0x250 [ 2462.864716] __fput+0x285/0x9f0 [ 2462.865514] ? __tun_detach+0x12b0/0x12b0 [ 2462.866534] task_work_run+0xe2/0x1a0 [ 2462.867463] exit_to_user_mode_prepare+0x186/0x190 [ 2462.868654] syscall_exit_to_user_mode+0x38/0x1d0 [ 2462.869825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.871072] RIP: 0033:0x7fa206731b19 [ 2462.871980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.876425] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2462.878276] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2462.880004] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2462.881745] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.883469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.885200] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2462.897654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 01:34:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x118) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@remote, @loopback, 0x1}, 0x10) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000080)) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) openat(r1, &(0x7f0000000380)='./file1\x00', 0x20800, 0x1ab) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) 01:34:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 50) 01:34:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8008, &(0x7f0000000240)=ANY=[@ANYBLOB="76705e950a305389dcff7e7f3d0100080066646e6f3d00000000000000000000000000000000ebf73b867dd8d231eba0b00a5f499f51560d12f44c5e0ad83594d8fb2d95079180897999d78ffd6c34177e7818f32327eca305f890cf94f3cd1dceea0610b05cc013dfc3fe69bb9470326d20eb734497c1757831", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES64=r1, @ANYBLOB="78db66429202fff527d32a87b7d200e3e1a3f88ccdd0602c00"]) 01:34:12 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x400300, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x900, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x12}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:34:12 executing program 2: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x1ff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x300) sync_file_range(0xffffffffffffffff, 0x82, 0x5, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2001, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c) dup2(r2, r1) r3 = socket$inet(0x2, 0x3, 0x6) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000000), 0x400000d, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) [ 2477.101990] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.101990] program syz-executor.5 not setting count and/or reply_len properly 01:34:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x5000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2477.109396] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 2477.122196] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.122196] program syz-executor.6 not setting count and/or reply_len properly [ 2477.147249] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.147249] program syz-executor.7 not setting count and/or reply_len properly [ 2477.197604] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.197604] program syz-executor.6 not setting count and/or reply_len properly 01:34:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 01:34:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x13}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2477.237468] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.237468] program syz-executor.5 not setting count and/or reply_len properly [ 2477.245308] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.245308] program syz-executor.7 not setting count and/or reply_len properly [ 2477.269894] device veth0_vlan entered promiscuous mode 01:34:12 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0xf0ffff, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2477.341196] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.341196] program syz-executor.6 not setting count and/or reply_len properly [ 2477.384807] FAULT_INJECTION: forcing a failure. [ 2477.384807] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.386221] CPU: 0 PID: 12471 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2477.387060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2477.388079] Call Trace: [ 2477.388405] dump_stack+0x107/0x167 [ 2477.388839] should_fail.cold+0x5/0xa [ 2477.389298] ? create_object.isra.0+0x3a/0xa20 [ 2477.389846] should_failslab+0x5/0x20 [ 2477.390314] kmem_cache_alloc+0x5b/0x310 [ 2477.390797] ? kmem_cache_alloc_trace+0x151/0x320 [ 2477.391373] create_object.isra.0+0x3a/0xa20 [ 2477.391914] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2477.392523] __kmalloc+0x16e/0x390 [ 2477.392954] kobject_get_path+0xc5/0x1f0 [ 2477.393448] kobject_uevent_env+0x251/0xfd0 [ 2477.393977] __kobject_del+0x27c/0x320 [ 2477.394451] kobject_put+0x215/0x270 [ 2477.394900] netdev_queue_update_kobjects+0x2a1/0x3e0 [ 2477.395521] netdev_unregister_kobject+0x15f/0x280 [ 2477.396128] unregister_netdevice_many+0xbb7/0x1490 [ 2477.396726] ? netdev_pick_tx+0xc70/0xc70 [ 2477.397226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2477.397854] ? queue_delayed_work_on+0xb4/0xe0 [ 2477.398404] ? trace_hardirqs_on+0x5b/0x180 [ 2477.398927] unregister_netdevice_queue+0x201/0x2c0 [ 2477.399518] ? unregister_netdevice_many+0x1490/0x1490 [ 2477.400174] ? linkwatch_fire_event+0x63/0x190 [ 2477.400724] __tun_detach+0xfc1/0x12b0 [ 2477.401195] tun_chr_close+0xc4/0x250 [ 2477.401648] __fput+0x285/0x9f0 [ 2477.402051] ? __tun_detach+0x12b0/0x12b0 [ 2477.402558] task_work_run+0xe2/0x1a0 [ 2477.403018] exit_to_user_mode_prepare+0x186/0x190 [ 2477.403604] syscall_exit_to_user_mode+0x38/0x1d0 [ 2477.404201] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2477.404812] RIP: 0033:0x7fa206731b19 [ 2477.405256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2477.407456] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2477.408381] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2477.409237] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2477.410096] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2477.410951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2477.411849] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 [ 2477.459269] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.459269] program syz-executor.7 not setting count and/or reply_len properly [ 2477.484513] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.484513] program syz-executor.5 not setting count and/or reply_len properly [ 2477.510186] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2477.530923] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2477.530923] program syz-executor.6 not setting count and/or reply_len properly 01:34:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xec0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c010}, 0x48010) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x10000000c) syz_io_uring_setup(0x77d5, &(0x7f0000000140)={0x0, 0x6d73, 0x0, 0x2, 0xbb, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=r7, @ANYBLOB="c0ffffffffffffff090000000000000009000000000000000000361500000000000000000000000500000000000000040000007747000004000000e0ffffff0001000000000000050000000000000009000000000000000700000000000f002000000000000000000000000000000000000000000000000000000000000000000000000000000026ce72f95122e1e5718ab9767043cec498378c5f3a110bac716943ed974f09bb5c81356b79cad7187434ed0f03edd2bf35a3425198f760b623001e33a67fc36d60f172be312829f18654b38c76a337563e83668e2891c106e2c23fe48c3795a1c96a"]) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x0, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000440)) 01:34:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x6000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:12 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 51) 01:34:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x14}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:34:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x74, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x7}, @generic="ba678782385e04f823fce1d199f8172660e87ecee33f4f61e225c61eaf9bc260c4539c7c4f81567fb2a5ea30c8bdde432ec3245b90fad64574f35c01e65de4137d4a49d71a2eb87addae299cbf8c864ca46cf21451d6a96e"]}, 0x74}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6) getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) getdents64(r3, &(0x7f0000000340)=""/130, 0x82) getdents64(r1, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000001240)=ANY=[@ANYBLOB="a8080000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="140002007866726d3000000000000000000000001400020065727370616e300000000000000000001400020076657468315f6d616376746170000000140002006970766c616e310000000000000000002802028078010380380001800400030008000100ff000000090002007d5c27ed000000000d0002002f6465762f76637300000000080001001f00000004000300180001800c0002006d6163736563300008000100040000001400018008000200267d5c00080001000000000014000180040003000400030008000100ff0700002c000180080001000300000008000100fe00000008000100120800000d0002002f6465762f76637300000000180001800800010005000000040003000500020000000000100001800400030008000100484e00005000018008000100080000000d0002002c2a7d2428407d400000000008000100080000000400030008000100090000000c0002006d616373656330000c0002006d61637365633000060002007b00000058000180080001000101000005000200000000000800010001800000060002002800000008000100090000000400030007000200233a00000d0002002f6465762f766373000000000500020000000000080001000800000004000500950005000f7e24b5e87774572a3c99cb19d8e72e44e30ec03d449b450186856558239cec3fa958bcdb342f6cae2468a21d9098bd87900b159b34971e6ac73b20bc7b92d6ca417d7a366fb2868d0fc9466b895777f77bcecd8b0d24f4d5e99b82deec8d7fed021434ab7930c2fb6106d405ccbc6afe2c145708eed55885c7457d2117d9aa0c740f33aed0cbc7f3b4515054132cc204000000040001000400010008000200ff000000"], 0x8a8}, 0x1, 0x0, 0x0, 0x10}, 0x4) unshare(0x48020200) [ 2477.698700] device veth0_vlan entered promiscuous mode [ 2477.703340] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2477.732657] FAULT_INJECTION: forcing a failure. [ 2477.732657] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.734077] CPU: 0 PID: 12510 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2477.734919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2477.735936] Call Trace: [ 2477.736259] dump_stack+0x107/0x167 [ 2477.736696] should_fail.cold+0x5/0xa [ 2477.737156] ? __alloc_skb+0x6d/0x5b0 [ 2477.737616] should_failslab+0x5/0x20 [ 2477.738085] kmem_cache_alloc_node+0x55/0x330 [ 2477.738630] __alloc_skb+0x6d/0x5b0 [ 2477.739088] alloc_uevent_skb+0x7b/0x210 [ 2477.739577] kobject_uevent_env+0xcdc/0xfd0 [ 2477.740127] __kobject_del+0x27c/0x320 [ 2477.740598] kobject_put+0x215/0x270 [ 2477.741046] netdev_queue_update_kobjects+0x2a1/0x3e0 [ 2477.741680] netdev_unregister_kobject+0x15f/0x280 [ 2477.742279] unregister_netdevice_many+0xbb7/0x1490 [ 2477.742891] ? netdev_pick_tx+0xc70/0xc70 [ 2477.743393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2477.744050] ? queue_delayed_work_on+0xb4/0xe0 [ 2477.744597] ? trace_hardirqs_on+0x5b/0x180 [ 2477.745113] unregister_netdevice_queue+0x201/0x2c0 [ 2477.745709] ? unregister_netdevice_many+0x1490/0x1490 [ 2477.746395] ? linkwatch_fire_event+0x63/0x190 [ 2477.747007] __tun_detach+0xfc1/0x12b0 [ 2477.747484] tun_chr_close+0xc4/0x250 [ 2477.747957] __fput+0x285/0x9f0 [ 2477.748353] ? __tun_detach+0x12b0/0x12b0 [ 2477.748854] task_work_run+0xe2/0x1a0 [ 2477.749314] exit_to_user_mode_prepare+0x186/0x190 [ 2477.749900] syscall_exit_to_user_mode+0x38/0x1d0 [ 2477.750493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2477.751105] RIP: 0033:0x7fa206731b19 [ 2477.751549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2477.753758] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2477.754676] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2477.755526] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2477.756395] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2477.757244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2477.758099] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:34:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x8) syz_open_procfs(r1, &(0x7f0000000100)='maps\x00') r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1) 01:34:26 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0xe99, 0x80000001, 0x2a22, 0x1ff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x2001c0, 0x4) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000000c0)={0x97, 0x5, 0x9}) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf250400000044000180140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="78000180080003000200000014000200726f73653000000000000000050000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d61637674617000000008000300000000000800030003000000080003000400000020000180080003000000000014000200766c616e3000"/76], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ftruncate(r3, 0x58) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000140)={0x81}) sendfile(r3, r5, 0x0, 0x100000001) 01:34:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c340, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@obj_type={'obj_type', 0x3d, '&'}}, {@subj_role={'subj_role', 0x3d, 'rfdn\x86\x06\x18;\xfc\xf1\xf2sT\x98d2_0\x136\x1a\x99\x18\xc3\xe1\x1a\xdc\xd3\xee\xaa\x7f\x93\xa2\x86:]\x84\xe6{\xcf\xbc\xda\xfb\x19UI\xd5\x82\xa3\x83\xd4\xa2\x9f\x0fc\x96\x05\xea\xc3\x93W\xba\xc5\xf1^\xc0\x11H\xc9(\xa28\x10\x82N\x18\x1a\x04\t\xcdT\xc01\xf6D\xd2+9\xe6\x11\xb2A\xe8F\x16e\x93_O\xcbt\xeb\xd1\x88\xc7\xfe\xba\xe6G\xf9Q\xc8N\x8a\x14M&\xe2%\x17\x13\x84\xafJ\xa7K?\x9dp\x1b$\x8c\xb1\x9a*$\xeb\xba?O=x\xa1\a\\\\N\x0e2C\xf4\xbb\xc2\x11\xafpOC\x98S\\\xfe\xdfG\xb5\x95\xcd\xf7qj$\x8fUT\xf2\xa6\xc1\x97 \xdb7\xda\xee\xec\xa6_Nk\xb1\xf9\xc0<\xf6\x99\xe8j\'\xbdr\x1a\x1b)u\x048\x8b\x03\xeb\x05j&\x8c\x05\x8e4r-\x1b2\x9b\xd2\a\x92,]Y0\xf1\x10@v\xf1]\x1e\x8d\xb9&\xb5\xf9\as\xe4\xb9Z\xd3\x91f\x92\\'}}, {@appraise_type}]}}) 01:34:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x15}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:34:26 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x1000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:26 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x7000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x4000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:26 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 52) [ 2491.903102] sg_write: 2 callbacks suppressed [ 2491.903119] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2491.903119] program syz-executor.5 not setting count and/or reply_len properly [ 2491.912175] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2491.912175] program syz-executor.7 not setting count and/or reply_len properly [ 2491.912464] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2491.912464] program syz-executor.6 not setting count and/or reply_len properly [ 2491.980517] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2491.980517] program syz-executor.5 not setting count and/or reply_len properly [ 2492.005385] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2492.005385] program syz-executor.7 not setting count and/or reply_len properly [ 2492.010019] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2492.010019] program syz-executor.6 not setting count and/or reply_len properly [ 2492.057132] device veth0_vlan entered promiscuous mode 01:34:27 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000340)='cifs.spnego\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0xfc, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000780), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0xfffffffffffffff9}, 0x800, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000380)=""/245) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) [ 2492.152288] FAULT_INJECTION: forcing a failure. [ 2492.152288] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.154021] CPU: 1 PID: 12538 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2492.155037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2492.156246] Call Trace: [ 2492.156632] dump_stack+0x107/0x167 [ 2492.157160] should_fail.cold+0x5/0xa [ 2492.157881] ? create_object.isra.0+0x3a/0xa20 [ 2492.158705] should_failslab+0x5/0x20 [ 2492.159286] kmem_cache_alloc+0x5b/0x310 [ 2492.159878] create_object.isra.0+0x3a/0xa20 [ 2492.160521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2492.161265] kmem_cache_alloc_node+0x169/0x330 [ 2492.161953] __alloc_skb+0x6d/0x5b0 [ 2492.162487] alloc_uevent_skb+0x7b/0x210 [ 2492.163077] kobject_uevent_env+0xcdc/0xfd0 [ 2492.163704] __kobject_del+0x27c/0x320 [ 2492.164268] kobject_put+0x215/0x270 [ 2492.164805] netdev_queue_update_kobjects+0x2a1/0x3e0 [ 2492.165555] netdev_unregister_kobject+0x15f/0x280 [ 2492.166270] unregister_netdevice_many+0xbb7/0x1490 [ 2492.166991] ? netdev_pick_tx+0xc70/0xc70 [ 2492.167592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2492.168341] ? queue_delayed_work_on+0xb4/0xe0 [ 2492.168989] ? trace_hardirqs_on+0x5b/0x180 [ 2492.169609] unregister_netdevice_queue+0x201/0x2c0 [ 2492.170323] ? unregister_netdevice_many+0x1490/0x1490 [ 2492.171097] ? linkwatch_fire_event+0x63/0x190 [ 2492.171758] __tun_detach+0xfc1/0x12b0 [ 2492.172332] tun_chr_close+0xc4/0x250 [ 2492.172891] __fput+0x285/0x9f0 [ 2492.173370] ? __tun_detach+0x12b0/0x12b0 [ 2492.173976] task_work_run+0xe2/0x1a0 [ 2492.174537] exit_to_user_mode_prepare+0x186/0x190 [ 2492.175242] syscall_exit_to_user_mode+0x38/0x1d0 [ 2492.175930] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2492.176656] RIP: 0033:0x7fa206731b19 [ 2492.177180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2492.179789] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2492.180863] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2492.181869] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2492.182892] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2492.183896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2492.184903] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 01:34:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xa701, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x16}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) 01:34:27 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c464f60050000040000000000000200060003000000b5020000000000004000000000000000c003000000000000faffffffff0038000100f3ff0101a3bb51e57464090000001302000000000000ff7f000000000000060000000000000006000000000000000500000000000000050000000000000000000060ff7f000002000000000000000700000000000000db180000000000006f00000000000000ffffff7f0000000007000000000000001e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7142799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b6cbedb5e3550c7cad7f36fd2d3a4a327000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb529de4f4bd08900"/2962], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x9000000, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2961], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x200000, 0x8, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x2000000, 0x0, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) [ 2492.252140] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2492.252140] program syz-executor.5 not setting count and/or reply_len properly [ 2492.252365] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2492.252365] program syz-executor.7 not setting count and/or reply_len properly [ 2492.281682] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2492.281682] program syz-executor.6 not setting count and/or reply_len properly [ 2492.288547] sg_write: data in/out 352299/2920 bytes for SCSI command 0x0-- guessing data in; [ 2492.288547] program syz-executor.5 not setting count and/or reply_len properly 01:34:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, &(0x7f00000000c0)=0xba, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000580)={0x0, 0x2, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000980)={0x2, 0x1, {0x80, @usage=0x7, 0x0, 0x4, 0x6, 0x81, 0x8, 0x8, 0x6, @struct={0x80000001, 0xe454}, 0x1, 0x0, [0x6, 0x5, 0x2, 0x8, 0xffffffff, 0x1000]}, {0x3, @usage=0x8, 0x0, 0x984, 0x1, 0x5, 0x8, 0x3ff, 0x20, @struct={0x9a, 0x1}, 0x6, 0x8, [0x2, 0x3, 0x4004, 0x3, 0x7, 0x9]}, {0xb46, @usage, r6, 0x3, 0x3, 0x7fffffff, 0xfffffffffffffffd, 0x1b6, 0x533, @usage=0x8001, 0xffffffff, 0x7fff, [0x50, 0x8, 0x8, 0x0, 0x364a, 0x40]}, {0x6, 0x40, 0x4}}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x4040020) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 01:34:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2957], 0xb92) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0xc00e, {0x7, 0x0, 0x40}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x0) 01:34:27 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) fcntl$dupfd(r0, 0x0, r1) fallocate(r2, 0x8, 0x0, 0x8000) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 01:34:27 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f55e5a770495c8599700"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0xfffffffffffffff9) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x14}, 0x18) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r1, r0, 0x0) (fail_nth: 53) [ 2492.362870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12563 comm=syz-executor.2 01:34:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB], 0xb92) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001008000180085005529311faa54defc329cff6528a1dc43571e3dd2c9f134687a3df19fc9d00ed24583a6dd53af76065d0501806f3c6bec4f964ae0eb4782dfb0e8ec848e698c44889cf90023d7da32bb73078e4efeae1e12c8dad9d1d9b1ee7f35cf3d47ee845be981af99410b14497346b9e437fcfc996c1f35f946e1363b386fc5d68722f42acb14bba358a8c5d1e6274d501786af8bf6432957afb1a0f313fe8df3917d57b11215b8adae52af90905d6b069862d0ff96087f05fb932700771070f4a5f84a4d", @ANYRES32=r0, @ANYBLOB]) kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, r2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x17}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) [ 2492.365630] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12563 comm=syz-executor.2 [ 2492.394491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12570 comm=syz-executor.2 [ 2492.398315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12570 comm=syz-executor.2 [ 2492.539856] device veth0_vlan entered promiscuous mode [ 2492.598292] FAULT_INJECTION: forcing a failure. [ 2492.598292] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.602563] CPU: 0 PID: 12581 Comm: syz-executor.0 Not tainted 5.10.230 #1 [ 2492.604318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2492.606398] Call Trace: [ 2492.607077] dump_stack+0x107/0x167 [ 2492.608000] should_fail.cold+0x5/0xa [ 2492.608967] should_failslab+0x5/0x20 [ 2492.609926] __kmalloc_node_track_caller+0x74/0x3b0 [ 2492.611178] ? alloc_uevent_skb+0x7b/0x210 [ 2492.612253] __alloc_skb+0xb1/0x5b0 [ 2492.613170] alloc_uevent_skb+0x7b/0x210 [ 2492.614192] kobject_uevent_env+0xcdc/0xfd0 [ 2492.615301] __kobject_del+0x27c/0x320 [ 2492.616278] kobject_put+0x215/0x270 [ 2492.617226] netdev_queue_update_kobjects+0x2a1/0x3e0 [ 2492.618536] netdev_unregister_kobject+0x15f/0x280 [ 2492.619777] unregister_netdevice_many+0xbb7/0x1490 [ 2492.621027] ? netdev_pick_tx+0xc70/0xc70 [ 2492.622076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2492.623397] ? queue_delayed_work_on+0xb4/0xe0 [ 2492.624537] ? trace_hardirqs_on+0x5b/0x180 [ 2492.625616] unregister_netdevice_queue+0x201/0x2c0 [ 2492.626861] ? unregister_netdevice_many+0x1490/0x1490 [ 2492.628169] ? linkwatch_fire_event+0x63/0x190 [ 2492.629318] __tun_detach+0xfc1/0x12b0 [ 2492.630286] tun_chr_close+0xc4/0x250 [ 2492.631216] __fput+0x285/0x9f0 [ 2492.632033] ? __tun_detach+0x12b0/0x12b0 [ 2492.633063] task_work_run+0xe2/0x1a0 [ 2492.634006] exit_to_user_mode_prepare+0x186/0x190 [ 2492.635206] syscall_exit_to_user_mode+0x38/0x1d0 [ 2492.636385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2492.637647] RIP: 0033:0x7fa206731b19 [ 2492.638552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2492.643011] RSP: 002b:00007fa203c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 2492.644850] RAX: 0000000000000003 RBX: 00007fa206845020 RCX: 00007fa206731b19 [ 2492.646576] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2492.648306] RBP: 00007fa203c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 2492.650029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2492.651763] R13: 00007ffdbd24481f R14: 00007fa203c86300 R15: 0000000000022000 VM DIAGNOSIS: 01:39:32 Registers: info registers vcpu 0 RAX=ffffffff83e7c900 RBX=0000000000000000 RCX=ffffffff83e644dc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7cf08 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7c90e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a082a44678 CR3=000000000d4f6000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000100000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000011060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00a202fe016c6c6f502e726567616e61 XMM02=7a7a75662063657865090a0100010101 XMM03=6574616469646e616320636578650e00 XMM04=78650b006873616d7320636578650a00 XMM05=20636578650d00656761697274206365 XMM06=6820636578650a00657a696d696e696d XMM07=736465657320636578650a0073746e69 XMM08=646e616320636578650e007a7a756620 XMM09=73616d7320636578650a006574616469 XMM10=0d0065676169727420636578650b0068 XMM11=650a00657a696d696e696d2063657865 XMM12=20636578650a0073746e696820636578 XMM13=61746f7420636578650a007364656573 XMM14=7473657220726f74756365786511006c XMM15=00006e65672063657865080073747261 info registers vcpu 1 RAX=ffffffff83e7c900 RBX=0000000000000001 RCX=ffffffff83e644dc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7cf08 RBP=ffffed100112f000 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7c90e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6def5b9010 CR3=000000000d4f6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004116ab0000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000