, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001900)=[{0x0}], 0x1, &(0x7f00000019c0)=[{&(0x7f0000001c40)=""/250, 0xfa}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000001940)=""/56, 0x38}, {&(0x7f0000001980)=""/1, 0x1}], 0x4, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdd1, 0x3}, 0x208, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x311b008, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x88002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x3, 0x8, 0xff, 0x0, 0x5, 0x20021, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x8}, 0x221, 0x64f6ce3, 0x836d, 0x0, 0x268, 0x8000, 0x2, 0x0, 0x10001, 0x0, 0x81}, r0, 0x6, r1, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) 13:39:35 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0014abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:39:35 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)="ed9766a0914cc53404ba5e81f577368df18f4957d9fceaa73be34be2a38a7900291d162a0184085ebd66ff9284773a55dc7bdf10e415d463756029841617e897f4a308cb9ceb329abd363a50d9a7e52441c832d75ff21cf3eef8acc64d54f7aabab68078759069517f699cfb1992a5", 0x6f, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x3, 0x20, 0x7, 0x0, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x2, 0x800}, 0x2210, 0x6, 0x1, 0x8, 0x0, 0x10a0, 0x430, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000002c0)={0x1050, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x1d}, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@remote}, @generic="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", @typed={0x7, 0x14, 0x0, 0x0, @str='-#\x00'}, @typed={0xc, 0x1b, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x1050}, 0x1, 0x0, 0x0, 0x30000000}, 0x814) 13:39:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_complete(r1) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x800) 13:39:35 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x40000) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00'}) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000280)={{0x2, 0x4e20, @empty}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x42, {0x2, 0x4e20, @broadcast}, 'ip6tnl0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x3, 'team_slave_0\x00', {0x8b58}, 0xbd4}) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{0x8, 0x8d, 0xff, 0x5}, {0x2625, 0x80, 0x5, 0x46}, {0xe8, 0x81, 0x3, 0x7}, {0x7f, 0x2, 0x0, 0xca}, {0x9, 0x40, 0x40, 0x8}]}, 0x10) [ 1497.619121] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1497.619121] program syz-executor.1 not setting count and/or reply_len properly 13:39:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x158, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, 0x158}}, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/248, 0xf8}], 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000300)={&(0x7f0000000280)=""/85, 0x55}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001400), 0x40, 0x0) sendmsg$nl_generic(r3, &(0x7f00000016c0)={&(0x7f0000001440), 0xc, &(0x7f0000001680)={&(0x7f0000001480)={0x1f0, 0x2e, 0x300, 0x70bd25, 0x25dfdbff, {0x8}, [@typed={0xf, 0x35, 0x0, 0x0, @str='/dev/nvram\x00'}, @typed={0x8, 0x66, 0x0, 0x0, @uid=0xee01}, @generic="1856a7b5ec502b53fe55e58b372ba80a3ed04c4df7906ac4657e50a7e0916d8af119012b119770adcd2adbf1e3261474c5f544", @nested={0xaf, 0x44, 0x0, 0x1, [@generic="f7485c62df4cec917bbc5f007f2aed3a102ba4040f3bd1d5fe5b74d049670cb510c2781e5fef5b0df45e8a4bd32c82bc3923de8d6627694dcabaa8aea506918e251a0fad82f48acfb8f1cef534d797f6c9302dfe", @typed={0x8, 0x59, 0x0, 0x0, @pid}, @generic="6e0c45cdcf947cf88a6a9651206f8b187d72ea57e56301913b8c947a6d8ff72ac2629ccf2e251c3ba55752a04af746afb31cc8ccc07675c64b16156bffd239be09239a0d240e64a1d373c4ef9f4ddf"]}, @nested={0xdd, 0x76, 0x0, 0x1, [@generic="f20c7d7eb0caf8e16a035295d32c27fa88cf3763ee39c64c31032b5bce0e98fece89fdeaa7c4b9a351084315ead35d49e4e0acb474b86116389403b32b9c230be8aa78d0afcabba7f3d2e6cab7de9dd34c7a1d512a9ac10b4cd34ba3ace1ee0a3b4a04054df75b3755ce285c6cc0ce0abe9853e8ce8d7d634854157bd307e69e536c5155177c82f3f37d03e14db51530d33fe7215482fb34d2cd891dfa57f840eeb2dc4c644435e129e440b6f4d6cd52d46334af9d14c3726c24b092b75e66e3c7aa795a7f0c179b5549f10202b3806141", @typed={0x8, 0x23, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x9004}, 0x10) fcntl$setown(r0, 0x8, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) 13:39:50 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:39:51 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @loopback, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, r5}) listen(r1, 0x10000) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) 13:39:51 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0014abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:39:51 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e725f696e6f64f48174989c0068c36765"]) stat(&(0x7f0000000280)='./mnt\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) mount$9p_unix(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0xc58eeaa2c7e62b7d, &(0x7f00000001c0)={'trans=unix,', {[{@version_9p2000}, {@mmap}, {@version_L}, {@version_L}, {@version_9p2000}], [{@euid_eq={'euid', 0x3d, r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x32, 0x3e, 0x35, 0x30, 0x36, 0x32, 0x38], 0x2d, [0x63, 0x37, 0x38, 0x30], 0x2d, [0x63, 0x34, 0x31, 0x64], 0x2d, [0x31, 0x32, 0x33, 0x32], 0x2d, [0x34, 0x32, 0x35, 0x32, 0x35, 0x38, 0x39, 0x59]}}}, {@obj_role={'obj_role', 0x3d, 'tmpfs\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x1ff}}]}}) 13:39:51 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0015abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1513.455851] tmpfs: Unknown parameter 'nr_inodôt˜œ' 13:39:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)="ed9766a0914cc53404ba5e81f577368df18f4957d9fceaa73be34be2a38a7900291d162a0184085ebd66ff9284773a55dc7bdf10e415d463756029841617e897f4a308cb9ceb329abd363a50d9a7e52441c832d75ff21cf3eef8acc64d54f7aabab68078759069517f699cfb1992a5", 0x6f, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x3, 0x20, 0x7, 0x0, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x2, 0x800}, 0x2210, 0x6, 0x1, 0x8, 0x0, 0x10a0, 0x430, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000002c0)={0x1050, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x1d}, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@remote}, @generic="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", @typed={0x7, 0x14, 0x0, 0x0, @str='-#\x00'}, @typed={0xc, 0x1b, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x1050}, 0x1, 0x0, 0x0, 0x30000000}, 0x814) 13:39:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) [ 1513.467874] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1513.467874] program syz-executor.1 not setting count and/or reply_len properly [ 1513.480833] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1513.480833] program syz-executor.6 not setting count and/or reply_len properly 13:39:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313332313635343500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f2a953140c764271ad9be301789147cf010040000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000e85575eae85575ea00000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d1f4655fd1f4655fd1f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000d908479700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d1f4655fd1f4655fd1f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000090dc20e700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731333231363534352f66696c65302f66696c65300000000000000000000000000000000000000000000009d0860300000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="ed8100000a000000d1f4655fd1f4655fd1f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000224d02d700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310000ed81000028230000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800010000000af3010004000000000000000000000009000000600000000000000000000000000000000000000000000000000000000000000000000000000000004076a5e500000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0/file0\x00', 0xde, 0x1, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x1000, 0x950f}], 0x4000, &(0x7f0000001500)={[{@norecovery}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@dont_hash}]}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x2020800, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) 13:39:51 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0016abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:39:51 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="fe", 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)="ed9766a0914cc53404ba5e81f577368df18f4957d9fceaa73be34be2a38a7900291d162a0184085ebd66ff9284773a55dc7bdf10e415d463756029841617e897f4a308cb9ceb329abd363a50d9a7e52441c832d75ff21cf3eef8acc64d54f7aabab68078759069517f699cfb1992a5", 0x6f, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x3, 0x20, 0x7, 0x0, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x2, 0x800}, 0x2210, 0x6, 0x1, 0x8, 0x0, 0x10a0, 0x430, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000002c0)={0x1050, 0x29, 0x400, 0x70bd28, 0x25dfdbfc, {0x1d}, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@remote}, @generic="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", @typed={0x7, 0x14, 0x0, 0x0, @str='-#\x00'}, @typed={0xc, 0x1b, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}, 0x1050}, 0x1, 0x0, 0x0, 0x30000000}, 0x814) 13:39:51 executing program 0: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000000)=0x6e, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x42800, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1ff, 0x7}}, './file0\x00'}) r5 = openat$incfs(r2, &(0x7f00000016c0)='.pending_reads\x00', 0x180800, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001740)={0x20f6, &(0x7f0000000340)=[{0xd, 0x0, 0x7, 0x8}, {0x5, 0x1, 0x3, 0x5}, {0x7fff, 0x1, 0x84, 0xf4e}, {0x40, 0x0, 0x2, 0x3}, {0x80, 0x80, 0x48, 0x8}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653000ee2a12109ecc03a310ac9ddf17ec242c47c3d2f72b5fe75f03174d52ef0bc275ab73471dcf92c44733069d812c5567e830bda8f023f312885e9bff7b2297cf81f7a51cacacbb2df9609985f52b71ff1ab6fe1766c17c664dfff8fa3732e14ae9b07b62d54a76badca470657a8cab8ac63c63adee4ebd21050745308d0068b521835ebd846efaa3b4dca0e99145e5f5ada5773238a5066707fc86e5be0b81fa3bfb38f5fdf78c1df9df7625c24ac6767997e6af7702c80997b1291f0890ea4bd89fe073bcc28d15485b6014968461d800f560ff1dbd4b6b02ce4785a3e579c5a98cc5a100"/253]) r7 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) accept$unix(r0, 0x0, &(0x7f0000000380)) io_uring_enter(r7, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) unlinkat(r7, &(0x7f0000000300)='./file0\x00', 0x200) kcmp$KCMP_EPOLL_TFD(r3, 0xffffffffffffffff, 0x7, r4, &(0x7f0000001780)={r5, r6, 0x8}) openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x20400, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffd14, 0x0, 0x8400, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x2011441, &(0x7f0000000200)) 13:39:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [{@context={'context', 0x2c, 'unconfined_u'}}]}) 13:39:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {0x1, 0x1}, [{0x2, 0x7, 0xee00}, {0x2, 0x3, r0}, {0x2, 0x4, r1}], {0x4, 0x5}, [{0x8, 0x1}, {0x8, 0x2, 0xee00}, {0x8, 0x1, r2}], {0x10, 0x2}, {0x20, 0x4}}, 0x54, 0x0) [ 1513.656414] cgroup2: Bad value for 'context' [ 1513.665333] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1513.665333] program syz-executor.1 not setting count and/or reply_len properly 13:39:51 executing program 6: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, 0x0) mount$9p_unix(0x0, &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0/../file0\x00', 0x0, &(0x7f00000003c0)={'U-', 0x1ff}, 0x16, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20022100", @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x20044811) [ 1513.727732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 13:39:51 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0017abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1513.836345] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1513.836345] program syz-executor.1 not setting count and/or reply_len properly 13:40:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000402000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013a00)=ANY=[@ANYBLOB='V']) 13:40:05 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8000, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x10, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9cb}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xd1b59a00253994ec}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x446}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4004) bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x80200058}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') readv(r2, &(0x7f0000001940)=[{&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/254, 0xfe}], 0x3) [ 1528.302435] EXT4-fs (loop3): Invalid log block size: 67108866 13:40:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, 0x0, 0x9) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0xc0045878, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x7c44, 0xcf73, 0x0, &(0x7f0000000180)={[0x6]}, 0x8) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './mnt\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in=@local, 0x4e24, 0x1, 0x4e22, 0x0, 0x2, 0x20, 0xa0, 0x6, 0x0, r6}, {0x9, 0x3ff, 0xb698, 0x2, 0x4, 0x5, 0x1, 0x1}, {0x8288, 0xe87, 0x3}, 0x6, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@private1, 0x3500, 0x2, 0x2, 0x5, 0x4, 0x0, 0xd9}}, 0xe8) accept4$inet(r5, 0x0, &(0x7f0000000140), 0x81800) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) fcntl$getflags(0xffffffffffffffff, 0x40a) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffe}, {{@in6=@private1, 0x0, 0x6c}}}, 0xe8) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="6d656665720f00"]) 13:40:05 executing program 0: r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) read$usbmon(r0, &(0x7f00000001c0)=""/10, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@delpolicy={0x74, 0x14, 0x4, 0x70bd2c, 0x25dfdbff, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1000, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x33, 0x0, r2}, 0x6e6bb8, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e21, @in6=@empty}}, @XFRMA_IF_ID={0x8, 0x1f, r3}]}, 0x74}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/224, 0xe0}], 0x2, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000700)=""/148, 0x94}, {&(0x7f00000007c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/44, 0x2c}, {&(0x7f0000000900)=""/254, 0xfe}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/234, 0xea}, {&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/79, 0x4f}, {&(0x7f0000000cc0)=""/4, 0x4}], 0x9}}], 0x2, 0x40000000, &(0x7f0000000e80)={r6, r7+60000000}) setresuid(r4, r5, r8) [ 1528.320594] EXT4-fs (loop3): Invalid log block size: 67108866 13:40:05 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:40:05 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0018abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x1, 0xfffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x3}, 0x4) r1 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) sendto$packet(r0, &(0x7f0000000100)="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", 0xc00, 0x40000, &(0x7f0000001100)={0x11, 0x6, 0x0, 0x1, 0xff, 0x6, @remote}, 0x14) r2 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x1b2) r3 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private0, @loopback, @empty, 0x0, 0x39e, 0x0, 0x0, 0x0, 0xf00000, r6}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000d80)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x13, r1, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x80e01}, 0x18) openat(r7, 0x0, 0x14001, 0x40) [ 1528.399219] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1528.399219] program syz-executor.1 not setting count and/or reply_len properly 13:40:06 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8001, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) futex(0x0, 0x8b, 0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000440)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r1, 0x9e46, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000540)=0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = fork() ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000200)={{0x2, 0x7}, 0x100, './file0\x00'}) ptrace(0x10, r2) ptrace(0x4207, r2) 13:40:06 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0019abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x800}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x8) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, {0xa, 0x4e24, 0x8, @local, 0x8}, 0x8, [0x101, 0x5, 0x400, 0x0, 0xe107, 0x7f, 0x9, 0x8]}, 0x5c) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = syz_io_uring_setup(0x6fa4, &(0x7f0000000140)={0x0, 0xcbec, 0x0, 0x0, 0x11d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r6, 0x79db, 0xe7bc, 0x6, &(0x7f0000000300)={[0x5]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f0000000340)=@srh={0x29, 0x8, 0x4, 0x4, 0x5, 0x0, 0x7, [@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, @private2]}, 0x48) 13:40:06 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/228, 0xe4}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000000340), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000b80)=""/11, 0xb}, {&(0x7f0000000540)=""/101, 0x65}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x130}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000840)=""/108, 0x6c}], 0x2, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000980), 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000a00)=""/219, 0xdb}, {&(0x7f0000000b00)=""/94, 0x5e}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f0000000c00)=""/211, 0xd3}, {&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f0000001440)=""/248, 0xf8}, {&(0x7f0000000e80)=""/219, 0xdb}, {&(0x7f0000000f80)=""/92, 0x5c}, {&(0x7f0000001000)=""/132, 0x84}], 0x9, &(0x7f0000001180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001200), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001280)=""/240, 0xf0}, {&(0x7f0000001380)=""/117, 0x75}, {&(0x7f0000001400)=""/25, 0x19}, {&(0x7f0000001c80)=""/202, 0xca}, {&(0x7f0000001540)=""/88, 0x58}], 0x5, &(0x7f0000001640)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x40002062, &(0x7f00000017c0)={0x0, 0x3938700}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001800)=ANY=[@ANYBLOB="010000000100004718000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='./file0\x00']) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000001840)={'trans=virtio,', {[{@cache_none}, {@cache_fscache}, {@noextend}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@fscache}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r3}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_lt={'uid<', r4}}]}}) setresuid(0xffffffffffffffff, r1, 0x0) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=""/39) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 13:40:06 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1e4, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfff}, @CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="000326bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a2ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d3ff000000865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17cee26c0511551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) fsync(r0) 13:40:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xec) statx(r1, 0x0, 0x4000, 0x410, &(0x7f0000000240)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r4, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(0xffffffffffffffff, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000005eb40)={{0x0, 0x6912, 0x4, 0x3, 0x400, 0x100, 0x2, 0x9, 0x1, 0x0, 0x3, 0x6, 0x0, 0xff, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005fb40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "83da7ce32c2bd4"}) openat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x80100, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000060b40)={0x8, [{}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {r6}], 0x7d, "411ab0b7f6aaeb"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 13:40:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1528.609645] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1528.609645] program syz-executor.1 not setting count and/or reply_len properly [ 1528.618169] tmpfs: Unknown parameter 'mefer' 13:40:21 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:40:21 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8001, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) futex(0x0, 0x8b, 0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000440)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r1, 0x9e46, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000540)=0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = fork() ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000200)={{0x2, 0x7}, 0x100, './file0\x00'}) ptrace(0x10, r2) ptrace(0x4207, r2) 13:40:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r1, 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/193, 0xc1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'hsr0\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f00000000c0)={0x9, 0x3, 0x3, 0x8, 0xcd2, 0xff4b}}}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x50282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x20d315) 13:40:21 executing program 5: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)=0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 13:40:21 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0xfffffffffffffffe) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x49c0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'caif0\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x47, 0x4, 0x85, 0x8000, 0x1f, "41ccd0", 0x7f, [0x5]}}) sendmmsg$inet(r1, &(0x7f0000003500)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="3181", 0x2}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000001c0)="8475", 0x2}, {0x0}], 0x2}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e21, 0x401, @private2, 0x8}, 0x1c) 13:40:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r2, @ANYBLOB="04000000000000569a204ba8a477c68156ae21002e2f66696c65310099069617437f52914604c702686400dcd604b33cf72794280990514f16e895693ad320728749"]) sendfile(r1, r2, 0x0, 0x100000001) ioctl$CDROMRESET(r0, 0x5312) 13:40:21 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001aabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:21 executing program 2: unshare(0x2a040600) unshare(0x60020000) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x11128b8, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x104000, 0x0) [ 1543.812867] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue [ 1543.843432] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1543.843432] program syz-executor.1 not setting count and/or reply_len properly 13:40:21 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:40:21 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001babe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r1, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003fc0)=ANY=[], 0xc}, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 13:40:21 executing program 4: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "77004a6efdff000000deffff0100"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x52, 0x6) dup3(r0, r1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r2 = socket$inet(0x2, 0xa, 0x0) dup3(r2, r0, 0x0) [ 1544.238502] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1544.238502] program syz-executor.1 not setting count and/or reply_len properly [ 1544.293642] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 13:40:21 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001cabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:22 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1544.431743] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1544.431743] program syz-executor.1 not setting count and/or reply_len properly 13:40:22 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8, 0xa5, 0x93, 0xe7, 0x0, 0x6, 0x8, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x1, 0x1}, 0x4eb, 0x0, 0x1, 0x9, 0x1, 0x7, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) close_range(r0, 0xffffffffffffffff, 0x0) [ 1544.653932] device lo entered promiscuous mode [ 1544.676706] device lo left promiscuous mode 13:40:22 executing program 5: timerfd_create(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fsmount(r2, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000052c00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053bc0)={0x7, [], 0x0, "24ceddc0622c86"}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() [ 1544.734550] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 13:40:36 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x800741, &(0x7f0000000000)) statfs(&(0x7f0000001c80)='./file0\x00', &(0x7f0000002e00)=""/255) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') 13:40:36 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) ftruncate(r0, 0xffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1ff, 0xfa27, 0x4}) futimesat(r1, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000240)={{}, {0x0, 0x2710}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000140)={0x1, 0x9}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file1/file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000400)=""/114, 0x88}], 0xf1cee049a683d6ee, 0x0, 0x80) r6 = fsmount(r3, 0x0, 0x88) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r7 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r7, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r8 = openat(r7, &(0x7f0000000000)='./file1\x00', 0x200000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x3) sendfile(r2, r8, 0x0, 0x100000001) 13:40:36 executing program 5: timerfd_create(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fsmount(r2, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000052c00)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053bc0)={0x7, [], 0x0, "24ceddc0622c86"}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() [ 1559.177310] sit: Src spoofed 172.20.20.187/2002::60e9:ec02 -> 172.20.20.170/0:3a00:0:ffff:ffff:bb3f:e158:51 13:40:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r2, @ANYBLOB="04000000000000569a204ba8a477c68156ae21002e2f66696c65310099069617437f52914604c702686400dcd604b33cf72794280990514f16e895693ad320728749"]) sendfile(r1, r2, 0x0, 0x100000001) ioctl$CDROMRESET(r0, 0x5312) 13:40:36 executing program 4: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x0, 0x0, 0x101, 0x0, r2}) dup2(r0, r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0xde, 0x0, 0x1, 0x7fff, r2}) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000104010100000000000058d7e4d0bb6154f9000200000000000200000005000100010000000800054000000000"], 0x30}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x24048011) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 13:40:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:40:36 executing program 2: r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) r1 = openat2(r0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x10803, 0x40, 0x1c}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) io_uring_enter(r0, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) [ 1559.180398] sit: Src spoofed 172.20.20.187/2002::60e9:ec02 -> 172.20.20.170/0:3a00:0:ffff:ffff:bb3f:e158:51 sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000001c80)=ANY=[@ANYBLOB="d21a0000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250a000000bc0003006b18f1afb321ac216a2bab7aae889ba8d0a55b1cd3c07c0e06e71d7b02a7dd2b33cf5d98ebb12a6f0e48a32148bcfaa00780914607322f90ea1ee1fb8be84ebce790b432035535dade0e6a73fbe8d0a376b6b18ce993c6e2532c5802a785065bdff807f4cf826d4a993e81de5bd8b7515ebd56b8d270148f4ef22616c4f201ba969cfcbec7942d8766b72981ae2c360dc26289859d4886f90422818008b040dd41ff535cb31c673c1f5613e176c998efd842e0a019b850fa280001801400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1ad0}, 0x1, 0x0, 0x0, 0x24000040}, 0x80) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40884) syz_emit_ethernet(0x86, &(0x7f0000000100)={@link_local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "60e9ec0200003a000000ffffffffbb3fe1580051b16500dc00", "ef341e008fa00504f312e7b8462700f3", {"16000000000000000500", "c8aca1d59b8892d6f675cca0eefe4b0b"}}}}}}}, 0x0) 13:40:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @mcast1, 0xfffffffe}, 0x1c) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/228, 0xe4}], 0x5) sendmmsg$inet6(r0, &(0x7f0000002c80)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x7, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x3, @remote, 0xfffffbff}, 0x1c) [ 1559.269850] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 13:40:36 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4004011) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x56}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x68a}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000010000000000000021ba98337a81f814288d0013780ba4a034bc08147f48b5acf2478939e0d6cae8b09999ab7c8b514e3ca2ba71d28d6c06570086edc0c4fc97d5a6d3ebbb552d5cda67294bf999a02fa28bc198232f9992e86a802c4d35bbdcf202fd1d1a05007b9e2f8e23e14688ac5185af101e6654826606642caf111b9c8d0e0"], 0x4c}}, 0x0) 13:40:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64=0xfffffffffffffffc}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x1000, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80042, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)}, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001980)={0x0, 0x200, 0x100001}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000980)={r5, "7ac5a6d13c99bfa1f97215c2b721a1a6"}) 13:40:36 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001eabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1559.376465] perf: interrupt took too long (2513 > 2500), lowering kernel.perf_event_max_sample_rate to 79000 [ 1559.428362] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue [ 1559.430933] perf: interrupt took too long (3144 > 3141), lowering kernel.perf_event_max_sample_rate to 63000 [ 1559.438360] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1559.446376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1559.459768] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1559.459768] program syz-executor.1 not setting count and/or reply_len properly 13:40:37 executing program 6: r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd3\x19\x13\"\x97\xe3\xae\xf3\bc:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r0, 0x0, 0x0) 13:40:37 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0021abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:40:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x3fb, 0x804, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x1) process_vm_readv(r3, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x400, 0x0, 0x6, 0x0, 0x4}, r3, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x81, 0x0, 0x3f, 0x6, 0x0, 0x5c, 0xa02, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x402, 0x0, 0x9, 0x8, 0x7fff, 0x6, 0x1, 0x0, 0x6, 0x0, 0x8}, r3, 0xc, r0, 0x2) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x244, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in=@local, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x4}, [@algo_auth_trunc={0x119, 0x14, {{'sha384-ce\x00'}, 0x668, 0x180, "faa42a328de8bc9f415f5e16d11e92054ce16a6aea030a5ddc73b7519f28785bfb163b28a4880b6ed653a013d829055ed5c5bfab26806ad11722e12faee442b267607600e0ef56b3ec0f5c7c813be3f21674c2e5dcf80108a83e9d32df18d9e05f1eea953a85eb125ce27f42abae17b7ff7e75e7191e33f6a94ea7e4768c7312888a70db952b934349856e2571d3e458dcefe9eee31ae1d2a4e27f3850469b214ea46cebb32c19f3b794434e65dc8ed77f2521b8d3a2c01a6d1ed554a8497396ebd7dbac9d296536fbf65bf053"}}]}, 0x244}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYRESOCT]) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)) unshare(0x48020200) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') unshare(0xdf6a652d1d9cf799) unshare(0x10000000) [ 1559.723584] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1559.723584] program syz-executor.1 not setting count and/or reply_len properly 13:40:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f8326500000ad022cea3b5906ed71efbac71604114ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9064d68a1d688cb564c5100107341e4376c1319a3cb91015718c602f3acc8b637ceb7852dafdf71f385cfa97aa0b4888bc38b88bda6372e3668ad38b7f74f5579af15595a0c30cb611c48d698f5ab174fbc688112a84bc0f1ed5b30c723ba82fe7b97990c195ce0ab38880edd6e5a3ec6986122d762e9182637b26db43c04d57f6347516027"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E/\xc6\x17gB0Qim\x82u\x0fZ\xa9\x14\xf5\xc7X\xa9\x00\xb7\xaf\xcfouN\xbd\xb2\t^\xbe&~\xa7l\xfa\x036\x1c\"\x80\xfc/\x9b\x95\xf1!K\xc5{\xe7\xfdB[\xca\x87\x9bc\x98dg\x1a\xa1\xaa\xb4\x19\x7f\xa7\x90y\x9fq\xf5\x8a\xa9 \xa6\xdd\xf0+gb\xa6g\\\xec\tz\x06\xdf\x1a\x9c\xc9\xf7\xcc\x85\xb4G\xe9\xd3D\xf4\x8c\n\x17\xd5\x00\xf18\xb3T', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000a00)='\x009\x1c\xaf\x14\xe6\xeb\xe9\xf1\xccO@\xbd\xfc\xbdN\xfa\x93Z\x94\xfd\xc6]\xc3\x81g\x95\'\xb7\xf2\xe8\xbf\xd3\xf3\"\xf0Z\x93T\xa1\xc6\x10\x01\xba\xf0\x11\x01 \x94X\x7fQ\xa6\v\xfa\xc2\\$\xad\x96A\xd6\xdf|\x0e,c\xc4\x13\xfb\x91\xc5|{\xde\'xb\xcd\xb2\x177\x83\'\xdb\xf6y_\x10\x87\x01\xd4\xb1\x9b\xe4\xac\xf0D4\xe6v\x86\x02^bt\xbf!b\xd4k\x11\xf5Nj\x97P\b\xf2\xdd\r\xaa,g\xfc\x8f*\bq\x10wl\xe0\x02HG)\xa0\xb9%\x12\x9fx]\xf8Gz`\xfd\x00l\xe9<\xa5\xbd\x9f\x80\xa5\x0f\xd3\xf7\xc8\x98'], &(0x7f0000000840)=[&(0x7f0000000600)='[*\x00', &(0x7f0000000000)='\xff\xb1\xc2k\xc9\xbf1Q\x9e^\x9a\x9dOW\xa5\x0el\xd2~\xa7%\xa5 \rZ\x81l\xa6\x97\xc6\xb90S\x04\x9b\xcb', &(0x7f0000000680)='\x00', &(0x7f0000000940)=']\xadt\xe0\r\xa3\xd7\xe8\x91\x90\n\x03_\x85\xa9\'E\xae\"\xeb]DE\xa3w\x8b\x94\xf7Yf\x03\x00\xd2:-\xab7\xd0\xf6\x0e\x903U\xe1\xe2\x8cS*HC\x17\xa0}@\xf4.\x87]\xed\x1f\x1e\xe8;\xfd\xee$\x8f\xba\xa5@\"\x93\xf7yR\x95z\x95\xc4\x03{\x11\xbe\xb3e\xb8B\x13\xa3uh\xcf\x11\xc7{Y\x0fp\x031\xb1/b_mq\x96\xccc\xa7\xbb\xb4T\x00J\xd7\xb8\n\xd4\xd9B\xa9\xec\xc5\xb5\x0e\xf1Q\x03\xbcX\x8d\xb2\xf6^\xb9\xc8\xa5\xdc\xa5\xcb\xde\xd3\xd03\xcc\xbe\xed\x9b\xbd\xcbb\x91\x98\x80\xe1X(t\xda\xd3F\x02\xa9\xa0\x81\xce;{\xfa\xba\xa3,{\xe87\xf6\x0f\xf9M\xb5mz', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00', &(0x7f0000000100)='!\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00'], 0x1000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r10 = dup2(r6, r5) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x200040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r9, 0x0) [ 1559.752064] Module has invalid ELF structures [ 1559.785930] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 13:40:37 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0022abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1559.804911] perf: interrupt took too long (3940 > 3930), lowering kernel.perf_event_max_sample_rate to 50000 [ 1559.812555] Module has invalid ELF structures 13:40:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1559.892809] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1559.941942] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1559.941942] program syz-executor.1 not setting count and/or reply_len properly [ 1559.945059] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 13:40:37 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x800) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_emit_ethernet(0x71, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x11, 0x0, 0x0, @multicast2, "0000000100b6491dd6a23c487a13d229ca35767c7de986b8aa81a34bb8cf8a66376eb6f97b42c28c3b2b1ff7e228de10e21f3f44b914e6fb819b90821f33dca4172789ea60867d"}}}}}, 0x0) 13:40:52 executing program 3: r0 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x52189, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="d65bbdd4b49c05", 0x7}, {&(0x7f0000000740)='0', 0x1}], 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000500)={0x0, 0x4, 0x9, 0x1}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001bc0)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x35, 0x0, "e410401ee989bfe54fffaaa19d4ae4fa50dc56cb6e415ea3efe5ea17dffbb1fb96bf972c48ffb32807af374caa23c78cc1edc5b8758cdc00bf064d416793a5f9d8dfbe5947e1ea0846a477f728605bd9"}, 0xd8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x5, 0x3f, 0x3, 0x0, 0x6, 0x4, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x51d, 0x1f, 0x3, 0x80, 0xbe, 0x2, 0x0, 0x7bb4, 0x0, 0x4}, r3, 0x6, r1, 0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8, 0x80, 0x3, 0x0, 0x3, r3}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000540)) r4 = gettid() r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r5, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) openat(r5, &(0x7f0000000480)='./file0\x00', 0x200, 0xa0) process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/30, 0x1e}, {0x0}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000000340)=""/192, 0xc0}, {0x0}, {&(0x7f0000001c40)=""/159, 0x9f}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x7, 0x0) unshare(0x48020200) 13:40:52 executing program 6: r0 = syz_io_uring_setup(0x17f02, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0xc00) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r3, &(0x7f0000000040)={0x30000008}, r3, 0x3, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 13:40:52 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x40, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) dup2(r3, r1) fcntl$lock(r2, 0x0, &(0x7f0000000600)) io_setup(0x3, &(0x7f00000001c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) bind$unix(r7, 0x0, 0x0) signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x6, @private=0xa010100, 0x4e22, 0x2, 'rr\x00', 0x1, 0x9, 0x45}, {@loopback, 0x4e24, 0x0, 0x9, 0x7f, 0x1}}, 0x44) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x2000, r1, &(0x7f0000000040)='\x00', 0x1}]) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x92, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbcf, 0x4, @perf_config_ext={0x4, 0x85}, 0x2a, 0xea1, 0x0, 0x8, 0x5, 0x6, 0xc4a, 0x0, 0x8, 0x0, 0xef3}, 0x0, 0xb, r1, 0x0) io_setup(0x3, &(0x7f00000001c0)) 13:40:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:40:52 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0023abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:40:52 executing program 5: creat(&(0x7f0000000100)='./file1\x00', 0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x9, 0x204, 0x402}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000001c0)={0x1ff, 0x9, 0x52}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x4d51, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000003c0)=ANY=[@ANYBLOB="dec40435055d563240e91cbe2ec52bf52c3a9b19a717eb2bd800010000000000004086ca41ac9ff07767a3f450872989000000000000000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000002e2f66696c65302f66696c65302f66696c653000945aec278565c85a02fe5c55a516d9b78e79e4d3d87e003ccfb3eb5c9ad2b54ccd3a8d297d6a0d3f94e04617ef"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x52, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf8, 0xa4, 0xd3, 0xa, 0x0, 0x5, 0x40240, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x9}, 0x80, 0x20, 0x5, 0x3, 0x4, 0xfff, 0x8000, 0x0, 0x19, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x2) copy_file_range(r4, 0x0, r2, 0x0, 0x10001, 0x0) shutdown(r1, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x600280, 0x0) 13:40:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x80000}, 0x0, 0x80, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000300)={0x15127980, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:40:52 executing program 0: getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000100)={'nat\x00', 0x0, 0x4, 0xa4, [0xb8, 0x4, 0x5a, 0xffffffff, 0x1f], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000040)=""/164}, &(0x7f0000000180)=0x78) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x120, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)='ipvlan1\x00', 0x4000000000000000, 0xffffffffffff0000, 0xb7}) 13:40:52 executing program 2: mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="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", 0x1000, 0xffffffff, &(0x7f0000001040)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) 13:40:52 executing program 0: shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x3f, 0xb3}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x34, 0x0, 0x0, 0x0, 0x2, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) write$bt_hci(r2, &(0x7f0000000000)={0x1, @disconnect={{0x406, 0x3}, {0xc8, 0x40}}}, 0x7) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) [ 1575.094078] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1575.094078] program syz-executor.1 not setting count and/or reply_len properly [ 1575.118255] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 13:40:52 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r0, 0x8}, 0x14}}, 0x200400c0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:40:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:06 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x40, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) dup2(r3, r1) fcntl$lock(r2, 0x0, &(0x7f0000000600)) io_setup(0x3, &(0x7f00000001c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) bind$unix(r7, 0x0, 0x0) signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x6, @private=0xa010100, 0x4e22, 0x2, 'rr\x00', 0x1, 0x9, 0x45}, {@loopback, 0x4e24, 0x0, 0x9, 0x7f, 0x1}}, 0x44) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x2000, r1, &(0x7f0000000040)='\x00', 0x1}]) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x92, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbcf, 0x4, @perf_config_ext={0x4, 0x85}, 0x2a, 0xea1, 0x0, 0x8, 0x5, 0x6, 0xc4a, 0x0, 0x8, 0x0, 0xef3}, 0x0, 0xb, r1, 0x0) io_setup(0x3, &(0x7f00000001c0)) 13:41:06 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}], 0x0, &(0x7f00000000c0)={[{@nombcache}]}) 13:41:06 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0024abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:41:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:06 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) openat(r0, 0x0, 0x7b98c2, 0x7f) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x891a, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xfffff7ffffffffef, 0xffffffffffffffff, 0x3) r1 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000100)=0x20, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010402d6afd3a8b200e5a0458ef70200000000000000000cb01f31000e0608e904010048100340000000000a0002000000000100cdade9000000000000000000"], 0x30}}, 0x4044880) unshare(0x48020200) r3 = pidfd_open(0xffffffffffffffff, 0x0) flistxattr(r3, &(0x7f0000000380)=""/168, 0xa8) 13:41:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) creat(&(0x7f0000000140)='./file0\x00', 0x60) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x6) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r6, 0x0, 0x52, 0x6) r7 = syz_open_dev$hiddev(&(0x7f0000000180), 0x5, 0xa00400) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x12}, {0xffffffffffffffff, 0x700}, {0xffffffffffffffff, 0x608}, {r4, 0x6010}, {0xffffffffffffffff, 0x5}, {r4, 0x45}, {r5, 0xa210}, {r6, 0x1000}, {r7, 0x1}], 0xa, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0x9]}, 0x8) 13:41:06 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x4) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r2) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='W \x00\x00', @ANYRES16=r6, @ANYBLOB="020027bd7000fedf254400000008000308", @ANYRES32=r3, @ANYBLOB="0c00990000020000710000000c00238008001a00030000000a0018000303030303030000"], 0x40}, 0x1, 0x0, 0x0, 0x4008884}, 0x4044800) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000440)={0x0, @aes256, 0x0, @desc4}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf2510000000080003004fa3478ae9d2b4efbc1977a87b17042d20d1af3c1e579342c7627e8a11ec4053cdfdbd376cefc678ca216aac5b2a512745a6ca2178adbd4c77a09842f5627bb68c81d12979516237cac1", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @any, 0x1ff, 0x3}, 0xe) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r7, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 13:41:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) utimensat(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x100010, r0, 0x0) syz_io_uring_setup(0x25c0, &(0x7f0000000180)={0x0, 0xa36e, 0x10, 0x2, 0x104, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4}, 0x3) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x100, 0x1) [ 1588.462559] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1588.462559] program syz-executor.1 not setting count and/or reply_len properly [ 1588.524551] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue [ 1588.551122] EXT4-fs error (device loop5): ext4_fill_super:4962: inode #2: comm syz-executor.5: iget: special inode unallocated [ 1588.573407] EXT4-fs (loop5): get root inode failed [ 1588.574608] EXT4-fs (loop5): mount failed 13:41:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:06 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}], 0x0, &(0x7f00000000c0)={[{@nombcache}]}) 13:41:06 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:06 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0025abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1588.764758] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 13:41:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) utimensat(r1, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x100010, r0, 0x0) syz_io_uring_setup(0x25c0, &(0x7f0000000180)={0x0, 0xa36e, 0x10, 0x2, 0x104, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4}, 0x3) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x100, 0x1) [ 1588.875560] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1588.875560] program syz-executor.1 not setting count and/or reply_len properly 13:41:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:06 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f000000020000004836000000000000000000000000000057020000000000007bb16f"], 0x0) [ 1588.943574] EXT4-fs error (device loop5): ext4_fill_super:4962: inode #2: comm syz-executor.5: iget: special inode unallocated [ 1588.946554] EXT4-fs (loop5): get root inode failed [ 1588.947706] EXT4-fs (loop5): mount failed 13:41:06 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x8, 0x2, 0x2, 0xd0, 0x13, "3f81768a40049e6fb765a8f88936ced5b1c919"}) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$KDDELIO(r1, 0x4b35, 0x0) 13:41:06 executing program 4: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x40, 0xfffffffd, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) dup2(r3, r1) fcntl$lock(r2, 0x0, &(0x7f0000000600)) io_setup(0x3, &(0x7f00000001c0)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) bind$unix(r7, 0x0, 0x0) signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x6, @private=0xa010100, 0x4e22, 0x2, 'rr\x00', 0x1, 0x9, 0x45}, {@loopback, 0x4e24, 0x0, 0x9, 0x7f, 0x1}}, 0x44) io_submit(r6, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x2000, r1, &(0x7f0000000040)='\x00', 0x1}]) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x0, 0x92, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbcf, 0x4, @perf_config_ext={0x4, 0x85}, 0x2a, 0xea1, 0x0, 0x8, 0x5, 0x6, 0xc4a, 0x0, 0x8, 0x0, 0xef3}, 0x0, 0xb, r1, 0x0) io_setup(0x3, &(0x7f00000001c0)) 13:41:06 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80810}, 0xc, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c}}, 0x0) 13:41:06 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0026abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:41:06 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, 0xee00}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x3, 0x886a0) execveat(r2, &(0x7f0000000180)='./mnt\x00', &(0x7f0000000400)=[&(0x7f0000000240)=')%/[:(,-\\-\x00', &(0x7f00000002c0)='mountinfo\x00', &(0x7f0000000300)='mountinfo\x00', &(0x7f0000000340)='mountinfo\x00', &(0x7f0000000380)='%%-\\#,\x00', &(0x7f00000003c0)='-[@\x00'], &(0x7f0000000600)=[&(0x7f0000000440)='/dev/ptmx\x00', &(0x7f0000000480)='tmpfs\x00', &(0x7f00000004c0)='mountinfo\x00', &(0x7f0000000500)='mountinfo\x00', &(0x7f0000000540)='&\\\xff+!!\x00', &(0x7f0000000580)='tmpfs\x00', &(0x7f00000005c0)='gid'], 0x100) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x701f00, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './mnt\x00'}) 13:41:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:06 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:06 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x10020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000180), 0x5, 0x20e02) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x9) sendfile(r2, r3, &(0x7f0000000040)=0x1f, 0x7) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendfile(r0, r2, 0x0, 0x20d315) [ 1589.299311] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1589.299311] program syz-executor.1 not setting count and/or reply_len properly [ 1589.404977] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 13:41:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/mac80211_hwsim', 0x22902, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) 13:41:23 executing program 4: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x16dcc3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) ioctl$CDROMREADMODE1(r0, 0x5394, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000180)={"ed5b08a43924678de73392ba", &(0x7f0000000300)="91fd078be906f9379c09cdedd7f8dd0232c04c21593f59c197e5e244f96bf4747ad18cfaf3bb43632be0cf3c7fbb7835a096a3c31174753e12615907c0cf90880fce22de9d3d", 0x46, 0x4, &(0x7f0000000380)={0x23, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, "275cbf7d", 0xfa, "e78b6618", 0x9, 0x9, 0x6, '=%\b', "2d6cc4d3070e04009d39d10fe530da72983b76ec66ebd9c3c5711ea0e8b2caa9aea953d045887fb8da3cae01e0e8"}, 0x0, 0x6, 0xc8e9, &(0x7f00000003c0)}) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f00000001c0)={@msf={0xff, 0x8, 0x20}, 0x1}) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000080), 0x2cb, 0x28001) ioctl$CDROM_GET_CAPABILITY(r3, 0x5331) sendmsg$nl_generic(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000004540)=ANY=[@ANYRES32], 0x42b0}, 0x1, 0x0, 0x0, 0x8871}, 0x20000880) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000000)={0x1000200c}) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000040)=0x6, 0x4) 13:41:23 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0027abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:41:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) syz_io_uring_setup(0x4c9b, &(0x7f0000000140)={0x0, 0xdfcf, 0x1, 0x2, 0x236}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6, &(0x7f00000002c0)=0x80) sendfile(r0, r8, 0x0, 0x100000001) 13:41:23 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000180)='./file1\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84140, 0x2f) fallocate(r1, 0x48, 0x3ff, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0xc04c0, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x52000, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file1\x00') openat(r1, &(0x7f0000000000)='./file0\x00', 0x80, 0x12) 13:41:23 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="94a7b37205ce3e94efdcf6e75b2dd2f442d48c70e0da48a85ab57b89a5b9892698c95baac29b9456a4702e", 0x2b}, {&(0x7f00000005c0)="0cbecf10ecf3ad60c52090", 0xb}, {&(0x7f0000000600)="15ee1dc95bee73c7a4cf7d379e3bc320501792a6a23372c5ca9367b57dd7b7e6551de56a08f3c8300865d9769ab8acbc8abb4393e81f437ba2a4022ca458cec532616011e8a393c2ea4fd6b61cb747e87f71067b586bb25c86947eda1c68e754903f442a1a77ff3ddc59bb8eac689e97f905a90fe236e2433c29a306d97d5097805261f893e5c68c06c25d003be82663615991662b87", 0x96}, {&(0x7f00000006c0)="195b8c9af9714201543b0d09278e201e0ab5736a596dc88fe25941c6eacb382f1dd1ee3f982eb124f2a2c6cd83138aa8bbf509c87c4e299a62d84fc3f5c96fd9720e72af9dc95f374b77f1a53af899dfdfcb96f9ccfe6d7588d67e07e013f3297eb04faee3209c0bc2055a4fe243eb499635d65b89ab1be238a93147d6cbc622f6c73fdfacbbb521120dec31d6d5107f80ef4eb35b02e4b0abe0bdfb4a7583ab4af2da1ea206fdb716895427dc5b7e9ab62657b3075d7c97a09d3a1b7f9275fdcd396f62a53418c2fa2c2e3aa579ba642f9851fa4ef1b4b7ff5d4daeb69d03a7f863de22aeed02406cf1db8203f3511d", 0xf0}], 0x4, &(0x7f0000000800)=[@ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x76, 0x0, 0x9, [0x100, 0x3, 0x3, 0x3, 0x3]}]}}}], 0x28}, 0x20000800) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f0000000180)={0xa, 0x4e22, 0x7, @loopback, 0xe9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="5afd5f4b549b17a8300c8141db5f39f0fcd6a9d6672fbe103c0411efa464cc4974731acba2e4d67e1f963a0ce0421bdfc78a3d71583b7b2dae5d422c1fd646d0179c7256bc73c84e3df590779cc8fc3508d9fe772d7e3853017b1244008b07c3bc19a454148dd3c8e2ac1c0a8ee3967baa5e478ed464e69b29cde9c258e9", 0x7e}], 0x1, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r2}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x3b, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x6, 0x20, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x6b}, @generic={0x1, 0xff, "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"}]}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x62, 0x1f, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfe}, @pad1, @generic={0x3f, 0xdc, "535a51f8c1a70e80f200c2f5598a34a19ebab65ce7fdde2a2dca55c3d8914281ba7a418d00a7084d51fb8bcd1194f33c3a1f148155866305add26e3bda0997eee23be3ea98ac887dd0da7bba28be4d0d0807a904d3203289cd636f1e08849c26036a1b092394028464a873ec317321bd6edac3ae63a1cf1cf3ff966062421421a1c341e221a7f06fad2ee68a1cac06d792287cb5e358329e0be9a89bac2fe76ba0b708a474c2589270006782d3adf15615d85165fbe1adb69a6b362728c5f983bae5eed36c59e2f929721870055bee1c9584b5a935c59249b66586f9"}, @ra={0x5, 0x2, 0x4}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7f}]}}}], 0x2b8}, 0x810) r4 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) getpeername(r4, &(0x7f00000000c0)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80) lstat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x9, 0x2, &(0x7f0000001a00)=[{&(0x7f0000000900)="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", 0x1000, 0x2}, {&(0x7f0000001900)="13bc82cf6310e0972536865ea4be2855bc304061e96218733b929b99ef17ef03298ced89e983280b28ff45f03ad0b4ad7aba0a506df1f2e68e6a379e4e1a86c4c0f1c5ee4e22ae9e26e7a225f7a099ed90f32c53dd90aee73c7cb928a10c00302d9dd99067f3ba949c2140c7782d00a12a4074e6dd8a4c0b3d1a6f8d629067e59c5ec2fe470f94d1f9fcd83b28a608eaf33741ec530a7461055c11bd1a797cb2c103025947fb1332211ade6ec24f2e0dfe213ecd6d32c67e4330d5ee30dfcdef4140d6addd", 0xc5, 0x9}], 0x30810, &(0x7f0000001b00)={[{@shortname_lower}, {@shortname_lower}], [{@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@hash}, {@euid_eq={'euid', 0x3d, r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) sendfile(r1, r0, 0x0, 0xf88c) [ 1606.179052] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1606.179052] program syz-executor.1 not setting count and/or reply_len properly 13:41:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x400742, 0x13) write(r0, &(0x7f0000000240)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x240) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 13:41:23 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:23 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) syz_usb_connect$printer(0x1, 0xfffffd54, 0x0, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001900)=[{0x0}], 0x1, &(0x7f00000019c0)=[{&(0x7f0000001c40)=""/250, 0xfa}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000001940)=""/56, 0x38}, {&(0x7f0000001980)=""/1, 0x1}], 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4, 0x7d, 0x3f, 0x1, 0x0, 0xffff, 0x80000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x81, 0x10001}, 0x410, 0x0, 0x1, 0x7, 0x80000000, 0x80000000, 0x200, 0x0, 0x4, 0x0, 0x4948}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x8, 0x0, 0x2, 0x81, 0x0, 0xffff, 0x20c, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd5ac, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x8, 0x4, 0x7, 0x0, 0x5, 0xfffb, 0x0, 0x6, 0x0, 0x80000000}, r0, 0x3, r1, 0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), 0xffffffffffffffff) socketpair(0x11, 0x80000, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r2, 0x40049409, r3) 13:41:40 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000001140)={0x3, 0x0, [0x0, 0x0, 0x0]}) r5 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000000)=[{r0, 0xe23c}, {r2, 0x4}, {r5, 0x8100}, {r1, 0x200}, {r1, 0x140}, {r6, 0x80}], 0x6, &(0x7f00000010c0), &(0x7f0000001100)={[0x2]}, 0x8) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) pread64(r7, &(0x7f0000000040)=""/4098, 0x20001042, 0x0) 13:41:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) syz_io_uring_setup(0x4c9b, &(0x7f0000000140)={0x0, 0xdfcf, 0x1, 0x2, 0x236}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f00000000c0), &(0x7f0000000240)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6, &(0x7f00000002c0)=0x80) sendfile(r0, r8, 0x0, 0x100000001) 13:41:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r4, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) clock_gettime(0x0, &(0x7f0000000240)) utimensat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={{r2, r3/1000+60000}, {0x77359400}}, 0x100) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 13:41:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/schedstat\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0x4, 0xf75}}, './file1/file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000001240)=r2, 0x1) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0xa4) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) sendmsg$802154_raw(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)="97a80875cadbeaad4a119be8d666c230bad5342c57289eb897976851334e757df1506d049975e5559603c437e1330ab3c8860a1563bc96a724eeff2f113f6387ec7fd6c67a54030b94294c023700591e85e702e3b38758b7b42c9b2144070baf18ec3a02432fafc44806b31b1022f6f5019acb89b0a6f85f4b404bb2892bd8a0ba6c7c84934ccc176387b50b4865ab6b5c3dc4c11b2a017147b1ef48ceac90e166eaa933f8513df44a32bc7ea2c447520c58353d2780baa013e72345766522d8c2069cf12536bcc092a604109bee409b2070d4", 0xd3}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) 13:41:40 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0028abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:41:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x5}}, 0xe8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa00000000001190bd2b6f18e6ffffffffffff4d2000649078020000c432cbb4170cb2770060e9eca51b913db8f2e8c451c6493f93273f3e5a81aebb3fe1580051a1657cdcef341e018fa00504f312e7b88a1408516c76462700f336cd250a0cb728d6eec84085575dab02c8aca1d59ba192d6f675cca0eefe4b0b00"/140], 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x50a2c85c24d826fa) pidfd_getfd(r1, r2, 0x0) [ 1623.427959] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1623.427959] program syz-executor.1 not setting count and/or reply_len properly 13:41:41 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0029abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:41:41 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c8b0000210000022bbd7000ffdbdf2500000000000000000000000000080000000000000000000000000000000000004e24fff84e240004020000a002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x4000058}, 0x4045) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast2}, {@in=@remote, 0x20, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xf8}}, 0x0) 13:41:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1623.610222] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1623.610222] program syz-executor.1 not setting count and/or reply_len properly 13:41:41 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, &(0x7f00000001c0)=""/66, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) r3 = openat$incfs(r0, 0x0, 0x331100, 0x4) write(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 13:41:41 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0xa) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1568, 0x3796, 0x2, &(0x7f0000000200)={[0x9]}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfdef) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x230}, {r4}, {0xffffffffffffffff, 0x30c}, {r3, 0x408}, {r3, 0x108}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x8]}, 0x8) fallocate(r3, 0x8, 0x0, 0x8000) openat(r3, &(0x7f0000000180)='./file0\x00', 0x351201, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) 13:41:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) unshare(0x8000c80) r1 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x800) write(r1, &(0x7f0000000100)="014fc5f28ceec57142adb21ca79d6592a2c3e0f14be2f9e041881d6ffcc6d7e2b84172d127e47a346a6f4a0a148747c0b24cab67bcefc754b0817dfd0936bdd7d33544bef6919d840ed0a81ec8c1cb52c29a6103c54f54f933618236ed4562d59155d2ff93ed7356f0", 0x69) unshare(0x0) acct(&(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) unshare(0x48020200) fcntl$getflags(r1, 0xb) [ 1623.965598] Process accounting resumed [ 1624.008752] Process accounting resumed [ 1624.219274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 [ 1624.359124] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 [ 1624.374166] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 [ 1624.389106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 [ 1624.491160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 [ 1624.507150] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 [ 1624.525021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 [ 1624.529882] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=12215 comm=syz-executor.6 13:41:56 executing program 6: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x728) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x35, 0xffffffff}, 0x10010, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x200000) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 13:41:56 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="002aabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:41:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000001140)={0x3, 0x0, [0x0, 0x0, 0x0]}) r5 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000000)=[{r0, 0xe23c}, {r2, 0x4}, {r5, 0x8100}, {r1, 0x200}, {r1, 0x140}, {r6, 0x80}], 0x6, &(0x7f00000010c0), &(0x7f0000001100)={[0x2]}, 0x8) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) pread64(r7, &(0x7f0000000040)=""/4098, 0x20001042, 0x0) 13:41:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup(r0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="c80000001500020027bd7000ffdbdf25e00000bcd7a571000000000000000000fe8000000000000000000000000000bb4e2000004e2300000a00002087000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b96b6e00020000004c00120072666337353339657370286362632d6165732d63652c7368613232342d636529000000000000001800000000000000000000000000000000000000000000000000000000600000001c000400fdff4e244e210000fe88000000000000000000000000010108001600050000000800180000000000f42ea8eef0e461cd6a3fd051501b832eb05e61ebf4cb6c8d41e18f6c8544d9eac6ee"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x4) fchown(r0, r2, r3) 13:41:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:56 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1a) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x1000000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x7fffffff, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd6096153f00303a00fc0200000000000000000000ff02000000"], 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x52, 0x6) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001080)={'veth0_macvtap\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) dup2(r3, r2) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x5) 13:41:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17, 0x2}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') chroot(&(0x7f0000001780)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_setup(0x1, 0x0) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x19802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x201, 0x0) io_submit(0x0, 0x5, &(0x7f0000000900)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000001e00)="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", 0x1000, 0xffff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x610, 0xffffffffffffffff, &(0x7f00000003c0)="184d544094c5ca262ac503b0b9c7dc4e8cb007525dd6ccd341c192fd2cd5456e8c460f928ad246480a0f1ded56c25fe80072456cf9dcaef9199db4b4826a8e3af37ab1ff8e64c1f2a2e5db428725411a0d1c579a6840f7a7224d4e6f55fe0e49dca0b88fd5381eff5c3f258c404d2c2d0f5a8ec10e852b8601f565e613edc155aefb9205e625a5de9a191e8e89c89a66c9d72e12ad8c4eba7f61939d", 0x9c, 0x10000, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0xffff, 0xffffffffffffffff, &(0x7f0000000540)="de8befde26e644b3753a823d5e59b5a48c9da6afa773abde6790aa5abbd892198e0f847baaf7baeba9704e4593006dc2ec682a4aa63215a5ec8779609c0294e5f4c98b107e4e541865d8d28b6949d1980541d7c1e0043a59617e5074d016f8300946b26771b51d259d4847583463799e01d3e81c9d6599b200e5895a289c79794de8277dc9fb1eb076fc4f2cd8dce2a33477f2b2e20590c46afb18569c4073bda8c2b765afbb9171a6e35ccfd9bc9ecc7735f9f8190d37ffaf4c92c808cfc0316e636ab37a1d325567bbe1f11849f2ab171451e460077fc3a0b0ba5df60c9440d0cbe65d7c3436eda41ae676b09caa091c5da311bfa082f82b014e97b679a5", 0xff, 0x200, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f0000000680)="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", 0xfe, 0x3f, 0x0, 0x3, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x3, r3, &(0x7f00000007c0)="cf291c3c16e9aa5cf7dc780d2da8d3e35699a69f4a095239f177bac3227e5e50e622fa8dc67c987a8390c769ce63d8f7098aaa2143ce05345d9505a8037f686cd643c39af39cd2657ac5577f1ff711682a81308b75f5b14eb3fae23f3b6dde65ccaf2596b7316a91216d85fcbf99fc2b3585b4c70443b5be0c31fb099e28ae41c5566bc86b3d4a30a4e976702705efbc616ce930d11b8a41a9e81fd7f9044779", 0xa0, 0x4, 0x0, 0x0, r4}]) open_by_handle_at(r1, &(0x7f0000000180)=@orangefs_parent={0x28, 0x2, {{"33b11b932ab4f820322f84cc1378c989", 0x401}, {"ed299e020ce542c2c0cebe1c1d0d44b8", 0x1}}}, 0x80) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000d40)=""/244, 0x7ffff000}], 0x1, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000d40)=""/244, 0x7ffff000}], 0x1, 0x0, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r5, 0xffffffffffffffff], 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) 13:41:56 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0029abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1639.213583] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1639.213583] program syz-executor.1 not setting count and/or reply_len properly [ 1639.238540] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1639.238540] program syz-executor.1 not setting count and/or reply_len properly [ 1639.251323] FAT-fs (loop3): invalid media value (0x00) [ 1639.252491] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1639.266412] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1639.266412] program syz-executor.6 not setting count and/or reply_len properly 13:41:56 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="002babe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1639.284814] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1639.284814] program syz-executor.1 not setting count and/or reply_len properly 13:41:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:56 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="002cabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1639.334465] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1639.334465] program syz-executor.1 not setting count and/or reply_len properly 13:41:56 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:41:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:41:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1639.579897] FAT-fs (loop3): Unrecognized mount option "/dev/zero" or missing value 13:42:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000001140)={0x3, 0x0, [0x0, 0x0, 0x0]}) r5 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000000)=[{r0, 0xe23c}, {r2, 0x4}, {r5, 0x8100}, {r1, 0x200}, {r1, 0x140}, {r6, 0x80}], 0x6, &(0x7f00000010c0), &(0x7f0000001100)={[0x2]}, 0x8) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) pread64(r7, &(0x7f0000000040)=""/4098, 0x20001042, 0x0) 13:42:12 executing program 6: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x10) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0x7, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000800)=ANY=[@ANYBLOB="445fc230a9570fe3bf10b53d6308355767b1bc57564c294db2eb", @ANYBLOB="24ca0cc99bee10115912262dcee42228d5674bd33896b4f15ddd9024470f0d8fe4e649b9567d88d23c62233b4ca669ed593b047e87c6ea3e551ec5cbe14122516a86cae3b620ecea26d5288c4fc4cdbac5817c24c7a46a71ec8dbbf5e22f21528c80855909237e071b4cb04f8f607646258a9ce5de31aeaf4ecd2a77115c569ab59b01b90dbee45d5595135eefa36250847a8849faf7941c2a550252600eaf979d491ae28b560f40ad779e402e42defe861207fccc74b8", @ANYRESHEX]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000240)="9b7d372962add7f6274185b8c69c5dbb625070514d64f42032054b19d5b08d6518af5fd01e38439ae195a406dc4fd2a7920b2394b3989c30ea6a1735eead2c3856302fcfae323f5f913e691b656b5abdd0d93cf16b563793078f582ae64fdc6fb818dbe9650a3bd0fe23d72f219cd25d7b3b03e4d2579e013932d6fc17834d07e87a4a3ed76a983aa2e60734535e9afcafc8f63a001f678678b6fd8932d9ec998c0bd30f319b0452fe75f5510f6f4a689ef3f2") r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000002080)={{r4}, "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"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = dup(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000080)={@local, 0x78, r9}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x0, @local}}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000004dc413ea340007000000c4048f01000000001c00"/40, @ANYRES32=r5], 0x38}}], 0x1, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x84, 0x20000, 0x23456, {0x0, r10}}, 0x8000) 13:42:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x80000000000, 0x0, 0x0, 0x23000, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 13:42:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) dup(r0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="c80000001500020027bd7000ffdbdf25e00000bcd7a571000000000000000000fe8000000000000000000000000000bb4e2000004e2300000a00002087000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="b96b6e00020000004c00120072666337353339657370286362632d6165732d63652c7368613232342d636529000000000000001800000000000000000000000000000000000000000000000000000000600000001c000400fdff4e244e210000fe88000000000000000000000000010108001600050000000800180000000000f42ea8eef0e461cd6a3fd051501b832eb05e61ebf4cb6c8d41e18f6c8544d9eac6ee"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040000) getgroups(0x6, &(0x7f0000000080)=[0xee01, 0xee00, 0xee01, 0xee00, 0xee00, 0xee00]) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x4) fchown(r0, r2, r3) 13:42:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:42:12 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="002dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:12 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(0xffffffffffffffff, 0x49eb, 0x46d6, 0x1, &(0x7f0000000040)={[0x20]}, 0x8) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f0000007f80)=[{{&(0x7f0000002bc0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002d40)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000004280)=[{0x0}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/64, 0x40}, {&(0x7f0000003f80)=""/81, 0x51}, {0x0}, {0x0}, {&(0x7f0000004200)=""/108, 0x6c}], 0x7, &(0x7f0000004340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}, {{0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000008280)=""/248, 0xf8}, {0x0}, {&(0x7f00000075c0)=""/234, 0xea}, {0x0}, {&(0x7f00000077c0)=""/12, 0xc}], 0x5}}], 0x3, 0x40010040, &(0x7f00000080c0)={0x77359400}) [ 1654.581022] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1654.581022] program syz-executor.1 not setting count and/or reply_len properly 13:42:12 executing program 2: prctl$PR_GET_NAME(0x10, &(0x7f00000001c0)=""/18) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/187) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/175) 13:42:12 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="002eabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:12 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x7, 0x8000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x80000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan1\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x4000) socket$netlink(0x10, 0x3, 0xe) 13:42:12 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:12 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0xfffffff8, @dev, 0x81}}, 0x0, 0x0, 0x41, 0x0, "1051078c010000dac842e1bf018e1f20fe9c4557840fdeda1d3d07f909e1f8af2a212bb5a9b8c81c1461d600895f29e19e933a66e6f7ed55abd1f153b123b0d9ac97801e0ebf139118971485f60ed303"}, 0xd8) sendfile(r2, r1, 0x0, 0x9bbb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$bt_hci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x103) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000180)=0x401, 0x8, 0x1) stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000010000200000007d04a2734b3390ae09b6eab3dc269f5c3b9ef1fa88eafe2f327bc5fd1d302cbc970000000056dfab353ec93ec900000000b53df865e792f2b87bb9f95671ca84bd92c838bdca933d60dd3c321cfd00000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1f1ecd3df72e4a0000000000000000"]) 13:42:12 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) execveat(r0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000500)=[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='\x00'], &(0x7f0000000600)=[&(0x7f0000000540)='\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='ext4\x00'], 0x800) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40005, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index=0x6, 0xe30, &(0x7f00000001c0)="f0fb06ad25e6a99d197a24e682ddb5ae989f8538a9f29e7211f3e7d99813ebb570ebfa7d8d42bb9aa5620b5722b598001a35021ada825435a0bb1ce1", 0x3c, 0x8}, 0x3) write(r4, &(0x7f0000000240)="01", 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x1}}, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r2, 0x0) syz_io_uring_complete(r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x650483, 0x120) r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r6, &(0x7f00000000c0)=""/65) sendfile(r1, r3, 0x0, 0x20d315) 13:42:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'geneve0\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x400, 0x0, 0x6, 0x0, 0x4}, r4, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x5, 0x94, 0x7, 0x7f, 0x0, 0x8, 0x82000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x101, 0x0, 0x8, 0x7, 0x25012341, 0x3f, 0x1, 0x0, 0xb5, 0x0, 0x4}, r4, 0x8, r2, 0x0) r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r5, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x80000004}) [ 1654.751091] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1654.751091] program syz-executor.1 not setting count and/or reply_len properly 13:42:12 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1654.838852] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 13:42:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x5810c1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x202082, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x14, 0x2, 0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x1697, 0x2, 0xfffffffd, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005eb40)={{0x0, 0x6912, 0x4, 0x3, 0x400, 0x100, 0x2, 0x9, 0x0, 0x0, 0x3, 0x6, 0x0, 0xff, 0x9}}) io_uring_enter(0xffffffffffffffff, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000400)="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") perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 13:42:29 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="002fabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:29 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="15ca666bf6b659fabc3aa4dfd1720160336ebe13bccb5dc712713c8d5080742b0f67d461c6f4e1aab0a975d9cb1c8f09ce56edfb0c2abafdc9fafffae0b011d59fd6e827a5615a3ef3c09bce491e98f03f057b4e3a42118e808a3204212f4c64687484a916f6cc0eb591cc6762911312e2a6903447429aa51878791d9d211d2ad8deadb405589771782a7299d6c5da3b7171b78098fe3bbaf8ce7328751fc6861b4c7dd4a9737776e9433c11a4710e9cae6665fe91eb69892c4debfd4d74cca7213b5a8233e134", 0xc7}, {&(0x7f0000000200)="24930ebc0e05a74b7fbb12d55277405027937cf662ec51919806810537cc01fe0182eb5243f5a4587a737f6155b1", 0x2e}, {&(0x7f0000000640)="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", 0x4b4}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="2800000000000000000000000700000094081df269bc72a5000dc8a59447c3188ca774e535000000"], 0x28}, 0x0) 13:42:29 executing program 6: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)={[{@gid}]}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={{r0, r1/1000+60000}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81, 0x2}}, './file0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="8800dbdf25070000003835b5779e23bee466529bffea75ff55f4694ac37f87d01043e79af3310f5fb331fb932d3e54d11aca78d822a2d5a5f5f5f2ab0f9450c376a50f8f812965e30e4f2a3ed1193bc0405cd0a68a3ff61d14b94f7d78a739b7a927b1922c795de8574c6e63a3af7db214ae2cce61d4cde1be39000000"], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x4040001) mount$9p_unix(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x100000, &(0x7f0000000640)={'trans=unix,', {[{@aname={'aname', 0x3d, 'net/ip6_tables_matches\x00'}}, {@cache_loose}, {@access_uid={'access', 0x3d, 0xee00}}], [{@context={'context', 0x3d, 'user_u'}}, {@euid_gt}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'gid'}}]}}) close(0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x4f, 0x0, 0x20, &(0x7f0000000600)=ANY=[]) 13:42:29 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e21, 0xfffffff8, @dev, 0x81}}, 0x0, 0x0, 0x41, 0x0, "1051078c010000dac842e1bf018e1f20fe9c4557840fdeda1d3d07f909e1f8af2a212bb5a9b8c81c1461d600895f29e19e933a66e6f7ed55abd1f153b123b0d9ac97801e0ebf139118971485f60ed303"}, 0xd8) sendfile(r2, r1, 0x0, 0x9bbb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$bt_hci(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x103) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000180)=0x401, 0x8, 0x1) stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000010000200000007d04a2734b3390ae09b6eab3dc269f5c3b9ef1fa88eafe2f327bc5fd1d302cbc970000000056dfab353ec93ec900000000b53df865e792f2b87bb9f95671ca84bd92c838bdca933d60dd3c321cfd00000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1f1ecd3df72e4a0000000000000000"]) 13:42:29 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x404000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x3) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000004cc0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x409becb7bdf85d3, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000400)) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x2}}, 0x4) syz_io_uring_setup(0x5, &(0x7f0000000240), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) r2 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000001e00)="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", 0xfd2, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) 13:42:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:42:29 executing program 2: munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0xe00, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)={@multicast1, @loopback, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x43}]}, 0x14) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003c40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) fork() mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) [ 1671.889959] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1671.889959] program syz-executor.1 not setting count and/or reply_len properly 13:42:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32393232393032313400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e5ae81319b144b749b1668edf97c22c3010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000005a00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012600)="200000008442d6528442d65200000000dbf4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="8081000000c04000dbf4655fdbf4655fdbf4655f00000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000010000000000000000000000000000000000000020000000000000000000000000000000dbf4655f00"/160, 0xa0, 0x4600}, {&(0x7f0000012800)="c041000000300000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x4a00}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012a00)="ed4100003c000000dcf4655fdcf4655fdcf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000021b82489000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012b00)="ed8100001a040000dcf4655fdcf4655fdcf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c680ee85000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012c00)="ffa1000026000000dcf4655fdcf4655fdcf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3239323239303231342f66696c65302f66696c653000000000000000000000000000000000000000000000f2528e4f000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012d00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012f00)="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", 0x100, 0x5000}, {&(0x7f0000013000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013400)="504d4d00504d4dffdcf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033350075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000013a00)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x22) 13:42:29 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0030abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1671.988967] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1672.013434] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1672.013434] program syz-executor.1 not setting count and/or reply_len properly [ 1672.041695] EXT4-fs (loop7): get root inode failed [ 1672.042452] EXT4-fs (loop7): mount failed [ 1672.101025] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 13:42:29 executing program 6: semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x1, 0x2e8d}, {0x3a5c5d46d180f8d0, 0x3f, 0x1800}, {0x2, 0xa792, 0x800}], 0x3) semop(0x0, &(0x7f0000000040)=[{0x4, 0x8, 0x1800}, {0x3, 0xafe9, 0x1000}, {0x0, 0xba, 0x1800}, {0x3, 0x2, 0x800}], 0x4) semctl$SEM_STAT(0xffffffffffffffff, 0x2, 0x12, &(0x7f0000000080)=""/251) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000180)=[{0x4, 0x7fb0}], 0x1) semget$private(0x0, 0x1, 0x40) r1 = semget$private(0x0, 0x2, 0x218) semtimedop(r1, &(0x7f0000000240), 0x0, &(0x7f0000000280)={0x77359400}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) fork() r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x4}, {0x0, 0x4ffb}, {}], 0x3, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0x400}], 0x1) semop(r2, &(0x7f00000001c0)=[{0x2, 0x800}, {0x4, 0x9, 0x800}, {0x2, 0x2, 0x1400}, {0x3, 0x36, 0x1000}, {0x0, 0x1, 0x800}, {}], 0x6) 13:42:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:29 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0031abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:29 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioprio_set$uid(0x0, r2, 0x4004) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf\x00no=', @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC=r1, @ANYBLOB=',nodevmap,access=', @ANYRESDEC, @ANYBLOB=',cache=none,dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodevmap,loose,aname=,,noextend,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2551036233119378eb89ff51913e1f79792f2c657569643e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000780)={0x4, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x7fffffff, 0x8640e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x7, @perf_bp={&(0x7f0000000740), 0x8}, 0x8, 0x9, 0x8001, 0x5, 0xac9e630, 0xfffffffb, 0x357e, 0x0, 0x36, 0x0, 0x4f9}, 0x0, 0x4, 0xffffffffffffffff, 0x5) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x200800, 0x24) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',posixacl/uname=9p\x00,version=9p2000.L,euid<', @ANYRESDEC=r2, @ANYBLOB=',subj_role=9p\x00,\x00']) lstat(&(0x7f0000000280)='./file2\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000700)=0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000540)=ANY=[@ANYBLOB="0100020000000000000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fchownat(r6, &(0x7f00000006c0)='./file0\x00', r7, 0xee00, 0x1000) setresuid(r1, r4, r5) [ 1672.238022] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1672.238022] program syz-executor.1 not setting count and/or reply_len properly [ 1672.260276] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1672.260276] program syz-executor.1 not setting count and/or reply_len properly 13:42:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) close(r0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) 13:42:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) inotify_add_watch(r3, 0x0, 0x4000040) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_rm_watch(r3, r4) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3}, 0x8) dup3(r5, r3, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r5, 0x0, &(0x7f0000001600)={&(0x7f00000002c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/218, 0xda}, {&(0x7f0000001440)=""/150, 0x96}], 0x3, &(0x7f0000001500)=""/242, 0xf2}, 0x0, 0x100, 0x0, {0x2, r6}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 13:42:44 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x40, 0xa) write(r1, &(0x7f0000000240)="01", 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) splice(r1, &(0x7f0000000140)=0x1, r0, &(0x7f0000000180)=0x34e1ba89, 0x6, 0xc) sendfile(r3, r4, 0x0, 0x100000001) 13:42:44 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0032abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:42:44 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:44 executing program 2: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46e2, 0x44) ftruncate(r1, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fstat(r4, &(0x7f0000000a00)) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) openat(0xffffffffffffffff, &(0x7f0000000400)='./file0/../file0\x00', 0x119a00, 0x48) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x8, 0x0, 0x10}) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x4}, {0x5}]}, 0x14, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x80, 0x10, 0x1f, 0x400, {{0x35, 0x4, 0x0, 0x38, 0xd4, 0x68, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@timestamp={0x44, 0x24, 0x46, 0x0, 0x9, [0x2c, 0x800, 0x400, 0x800, 0x1f, 0x9, 0x4, 0x400]}, @ssrr={0x89, 0x1b, 0x4b, [@private=0xa010102, @private=0xa010102, @remote, @remote, @local, @local]}, @ssrr={0x89, 0x27, 0xd2, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101, @remote, @loopback, @empty, @private=0xa010100]}, @ssrr={0x89, 0x1b, 0x7e, [@broadcast, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_addr={0x44, 0x3c, 0xf1, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x50f3}, {@local, 0x7}, {@private=0xa010101, 0x80000000}, {@broadcast, 0x3}, {@local, 0x8}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1d4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_SOPASS={0x97, 0x3, "82cda0692f9a61e31e3951fc986fcdd86e7134a13d02dfbc141abd9f31fc26e5a6e66c78858eb3076c7adb0f621727d1ecb62eae932f778dbe0fa42bb51990cd5096683c0deec1b5742bf8f61c3c0cb4a68507f4e748b33e0a515b8c91f299efc379e231e7eb930e3f2c615bce18a43c2d3314c7fd989c398e3480997f47c8cc31771d9eecc18eb2eaddd33e5f6a25078fde35"}, @ETHTOOL_A_WOL_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x25, 0x3, "f9690f80914c841a0f014de6c256d7f798b2795651281e50922cc0986431c9477a"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x90}, 0x40000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:42:44 executing program 4: gettid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68d9, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unlinkat(r0, &(0x7f0000000840)='./file0/../file0\x00', 0x200) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x129) socket$packet(0x11, 0x2, 0x300) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0/../file0\x00', 0x2, 0x2, &(0x7f0000000300)=[{&(0x7f0000000180)="2565244f4c91220aff6bd0c89dfec17663e7189e7bc5671db5ff9730e36126fad2847b86935a4d9f7e249982b705e30d5390732c919a66860c9163eb56a6f39ce110e48f2a3b504523242bc6842caf13524f6dea6805f28af1ca75dbbfa6bb9fd27eb61db85fe290c5a6faeec44247d86e1910eaf06b70940435cb41845a0a73e5ced1d01d33c80685", 0x89, 0x8c8}, {&(0x7f00000003c0)="dac228db99e791808666accf85639abc8c51b38117c70b186e49f45fe6b339c2ff6e7db5ee4ff7b8e03195979686bc87c1d749dec3f21b169903bd598cc7d7faaff1852fd20f99e0bb9c18db717f177b261043991e3941035a44884a02962fd8fa4a14c7160e4ceab24dc0b182ee1db985915531544d5c805b1391ba57ea0fc8ca68f54931086129f778a9ac01188cf544c97703936da74506ce5d4f4d4abd959226b1939401376556a9a98b5fa1b557d9cfe24ec7d5183d2e95a70b75f7b9db46c294387796f12e8739d3", 0xcb, 0x8}], 0x20, &(0x7f0000000500)={[{@fat=@discard}, {@fat=@nfs}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@uid}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$\xfc'}}, {@permit_directio}]}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000007c0)) [ 1686.947749] cgroup2: Unknown parameter 'discard' [ 1686.966052] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1686.979088] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1686.979088] program syz-executor.1 not setting count and/or reply_len properly 13:42:44 executing program 0: syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1687.010310] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1687.010310] program syz-executor.1 not setting count and/or reply_len properly 13:42:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) close(r0) r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0xf533, 0x81) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 1687.087944] kernel write not supported for file /sg1 (pid: 9832 comm: kworker/1:2) [ 1687.142992] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated 13:42:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc6a07, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000000)=0x69, 0x4) add_key$fscrypt_provisioning(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) [ 1687.161029] EXT4-fs (loop7): get root inode failed [ 1687.161616] EXT4-fs (loop7): mount failed 13:42:44 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0033abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:44 executing program 0: syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1687.223169] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1687.223169] program syz-executor.1 not setting count and/or reply_len properly 13:42:58 executing program 0: syz_io_uring_setup(0x3a75, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:42:58 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0033abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:58 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0034abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:58 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:42:58 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) io_uring_enter(r2, 0x476c, 0x8c7b, 0x3, &(0x7f0000000300)={[0x3]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xd1, 0x3, 0x0, 0x4a, 0x0, 0x10001, 0x20f00, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f00000001c0), 0x3}, 0x10, 0x8, 0x800, 0x2, 0x100000000, 0x8, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0xa) ftruncate(r3, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r3, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r3, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, r1, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) 13:42:58 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3272, &(0x7f0000000380)={0x0, 0x0, 0x20, 0xfffffffc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x30, r0, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x1, 0x2, &(0x7f0000000180)="8ccbe7f81bcc8a9f9b72dda3319f15ffb27c51a32091f6c8aefeacadb037227dc1531c2282cc2678e3ffa284596517e4a5bfd97368cb7449d25bc77b77a5de1da5f8b4e74b917d4ede33a479b20f1fdb40dced0bd086b24c879679697d5676207c9ac6b2e25b3c9c5e85ad3e1ed70892b0", 0x0, 0x0, 0x1, {0x1, r7}}, 0xd9) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000340)={0x10000, 0x40, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffef50, 0x1c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x395}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) syz_emit_ethernet(0x46, &(0x7f0000001080)=ANY=[@ANYBLOB="bbbb86dd6096153f00103affe3dd4638592f51bc0000000000000000ff02000000bfe3000000000000000001"], 0x0) 13:42:58 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x107142, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x18000, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pata_amd', 0x40000, 0x10) ioctl$TIOCSPTLCK(r1, 0x40045431, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, r2, 0x321, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) unshare(0x48020200) 13:42:58 executing program 6: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x9, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000000)) unshare(0x48020200) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0) fcntl$getown(r2, 0x9) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x5) unshare(0x40000800) [ 1700.975787] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1700.975787] program syz-executor.1 not setting count and/or reply_len properly [ 1701.034896] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1701.034896] program syz-executor.3 not setting count and/or reply_len properly [ 1701.068163] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1701.071102] EXT4-fs (loop7): get root inode failed [ 1701.071792] EXT4-fs (loop7): mount failed 13:42:58 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:42:58 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0035abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:42:58 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:42:58 executing program 3: unshare(0x2a040600) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = gettid() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001e00)={{r1}, r2, 0x2, @inherit={0x68, &(0x7f0000000140)={0x0, 0x4, 0x7, 0x9, {0x0, 0x0, 0x7, 0x7f, 0x8}, [0x1400000000, 0x6, 0x3, 0x100000000]}}, @subvolid=0xe1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, r2, 0x10, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0x3b9e, 0x7fff, {0x22, 0x3c72, 0x2, 0x10000, 0x401}, [0x10001, 0x20, 0x6, 0x7fff]}}, @subvolid=0x2}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000680)={"5fbe5b8a05f2d5e96422f830f92504a1", r2, 0x0, {0x2, 0xf5}, {0x3f, 0x4}, 0x10000, [0x9a, 0x1, 0x3, 0x9, 0x40, 0x2, 0x5, 0x9, 0x6, 0xde, 0x3, 0x7, 0x100000000, 0x1, 0x401, 0x6]}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x52, 0x6) fcntl$notify(r3, 0x402, 0x12) rt_sigqueueinfo(r0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x80}) syz_open_procfs(r0, &(0x7f0000000580)='coredump_filter\x00') r4 = gettid() rt_sigqueueinfo(r4, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x80}) syz_open_procfs(r4, &(0x7f0000000580)='coredump_filter\x00') ptrace$peeksig(0x4209, r4, 0x0, &(0x7f00000003c0)=[{}, {}, {}]) clone3(&(0x7f0000000300)={0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1f}, &(0x7f0000000140)=""/176, 0xb0, &(0x7f0000000200)=""/153, 0x0}, 0x58) 13:42:58 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:42:58 executing program 3: set_mempolicy(0x0, &(0x7f00000000c0)=0x6c0e, 0x7fff) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) r0 = fork() fork() tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x4) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) r2 = fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="0e216f337fbbc7aff0628d7ee40080000000000000a2d400"], 0xa) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x8, r2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000400)) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000540)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{}, {0x6}, @device_a, @device_a, @random="4c8215a04c2e", {0xb, 0x7}}, @ver_80211n={0x0, 0x5, 0x3, 0x1, 0x0, 0x3, 0x1}}, 0x9, @val={0x8c, 0x10, {0x964, "753ee894cdd6", @short="3c568409a6ec0b10"}}}, 0x30) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) wait4(r3, &(0x7f0000000200), 0x1000000, &(0x7f0000000480)) set_mempolicy(0x0, &(0x7f0000000140)=0xffffffff80000000, 0x6) [ 1701.238422] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1701.238422] program syz-executor.1 not setting count and/or reply_len properly [ 1701.262592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.394341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.426865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.740015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1701.769379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:43:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:43:14 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0036abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:14 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={0x0, @xdp, @hci={0x1f, 0x0, 0x4}, @vsock={0x28, 0x0, 0x0, @host}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x3}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r5) syz_io_uring_setup(0x6d35, &(0x7f00000003c0)={0x0, 0x64a3, 0x0, 0x2, 0xdf, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000500)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16, 0x1, {0x0, r7}}, 0x7) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x4}, 0x1) syz_io_uring_setup(0x9d2, &(0x7f0000000340)={0x0, 0x1629, 0x10, 0x0, 0x2f4, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x8c1, 0x4767, 0x1, &(0x7f0000000040)={[0x6]}, 0x8) 13:43:14 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:43:14 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:43:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x95de, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x52, 0x6) r3 = dup2(r2, r0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xd, 0x80010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0xc5c324ce4c89a6ba, @fd_index=0x6, 0xffffffffffff8000, 0x9, 0x0, 0x0, 0x1, {0x1, r5}}, 0x0) openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x14d002, 0x25) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x902, 0x0) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 13:43:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) dup3(r0, r1, 0x0) 13:43:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000007) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r2, &(0x7f00000004c0)='./file0\x00', 0x40, 0x33) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xffffffffffffff71) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1716.839907] device lo entered promiscuous mode 13:43:14 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1716.848124] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1716.848124] program syz-executor.1 not setting count and/or reply_len properly [ 1716.853796] device lo left promiscuous mode [ 1716.863165] device lo entered promiscuous mode [ 1716.863912] device lo left promiscuous mode 13:43:14 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:43:14 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:43:14 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x5, 0x0, 0x0, 0x7ffc0000}]}) clock_getres(0x0, 0x0) readv(r0, &(0x7f0000000100), 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) ppoll(&(0x7f0000000040)=[{r0, 0x2000}, {r0, 0x4000}], 0x2, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') 13:43:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r0, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/181, 0x11}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0xc8, 0x6a, 0x0, 0x0, 0xfffffffffffffff7, 0x40008, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a8, 0x4, @perf_config_ext={0xff, 0x2}, 0x1b21, 0x0, 0x2, 0xe, 0x6, 0x2, 0x0, 0x0, 0x66b70405, 0x0, 0x4}, 0x0, 0xe, r0, 0x4) 13:43:14 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0037abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:14 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1717.078890] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1717.078890] program syz-executor.1 not setting count and/or reply_len properly [ 1717.110147] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated 13:43:14 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0036abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1717.118132] EXT4-fs (loop7): get root inode failed [ 1717.119897] EXT4-fs (loop7): mount failed [ 1717.172169] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1717.172169] program syz-executor.2 not setting count and/or reply_len properly 13:43:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x95de, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x52, 0x6) r3 = dup2(r2, r0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xd, 0x80010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0xc5c324ce4c89a6ba, @fd_index=0x6, 0xffffffffffff8000, 0x9, 0x0, 0x0, 0x1, {0x1, r5}}, 0x0) openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x14d002, 0x25) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x902, 0x0) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 13:43:28 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(r0, r1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x21e000, 0x88) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mq_timedreceive(r4, &(0x7f0000000140)=""/106, 0x6a, 0x2, &(0x7f00000000c0)={0x77359400}) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x202900, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r3, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:43:28 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:43:28 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:43:28 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0038abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:28 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x95de, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x52, 0x6) r3 = dup2(r2, r0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xd, 0x80010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0xc5c324ce4c89a6ba, @fd_index=0x6, 0xffffffffffff8000, 0x9, 0x0, 0x0, 0x1, {0x1, r5}}, 0x0) openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x14d002, 0x25) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x902, 0x0) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 13:43:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x95de, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x52, 0x6) r3 = dup2(r2, r0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xd, 0x80010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0xc5c324ce4c89a6ba, @fd_index=0x6, 0xffffffffffff8000, 0x9, 0x0, 0x0, 0x1, {0x1, r5}}, 0x0) openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x14d002, 0x25) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x902, 0x0) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 13:43:28 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1731.338714] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1731.338714] program syz-executor.1 not setting count and/or reply_len properly 13:43:28 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:43:29 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:43:29 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0039abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:29 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:unconfined_exec_t:s0\x00', 0x27) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100)) [ 1731.514621] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1731.514621] program syz-executor.1 not setting count and/or reply_len properly [ 1731.530150] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated 13:43:29 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1731.574495] EXT4-fs (loop7): get root inode failed [ 1731.575350] EXT4-fs (loop7): mount failed 13:43:29 executing program 4: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:43:29 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:43:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x95de, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x52, 0x6) r3 = dup2(r2, r0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xd, 0x80010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0xc5c324ce4c89a6ba, @fd_index=0x6, 0xffffffffffff8000, 0x9, 0x0, 0x0, 0x1, {0x1, r5}}, 0x0) openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x14d002, 0x25) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x902, 0x0) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 13:43:44 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:43:44 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0039abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x95de, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x52, 0x6) r3 = dup2(r2, r0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xd, 0x80010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0xc5c324ce4c89a6ba, @fd_index=0x6, 0xffffffffffff8000, 0x9, 0x0, 0x0, 0x1, {0x1, r5}}, 0x0) openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x14d002, 0x25) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x902, 0x0) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 13:43:44 executing program 2: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(0x0, 0x7, 0x10001) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000580)={0x9, "ca78f97d33c6f4cd290388fb5e8368b6583a844d53be08556930a6e6728b99b26dacf4b1501871a77d5200b38ac2f73d0d4c13f67105f48f63f867225089ba03"}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x100, 0xfffffffa, 0xfffffff7, 0x80000000, 0x2}) io_uring_enter(r5, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) getpeername(r5, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000040)=0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x7ff}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c00000300000000000000020008000c0000000000"], 0x1c}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x228000, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x2e, 0x400, 0x70bd2c, 0x25dfdbff, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x890) 13:43:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_setup(0x0, 0x0) openat(r0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0xfd, 0x80, 0x0, 0x8, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x1980a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:43:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:43:44 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:43:44 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="003aabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1747.308114] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1747.308114] program syz-executor.3 not setting count and/or reply_len properly 13:43:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000e9e33029eb6d42da8108d2f3e6000000000000000000"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1b4, 0x41, 0x1, 0x70bd2b, 0x25dfdbfc, {0x8}, [@typed={0xc, 0x48, 0x0, 0x0, @u64}, @nested={0x7d, 0x6c, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @ipv4=@empty}, @generic="60691ba746a773744d5c2764fabbe5a70c6f7465fa8fb023ccb0489c4a8a89bebfcd182a7786a415b1352e9e61fe61a031ef3b20aa3593423e6e", @generic="07110c584e7f28c3fd622829c58da864d7b4a082f5d20177b41a710d0ead74f1720dc730327d78e7b830f6ae007f0ea93e55713b5c61bc"]}, @generic="41062a8341f41cb27359217b1139c3d4e8a912a6aaa6fb0088690da9e29a3d9026", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0xdf, 0xa, 0x0, 0x1, [@generic="53304e61383d3b358a86cae77d60c545c412c33bc9f45fae9e09bda6bacb781fa6c0b25d7f8ec3b11035078934a27c5b794f5e09544f87e06a723aba776d664a536f649b817d378458800d2bf06dac7a6cdf62f092d583da57d4cf7c7d05e4a82f41585b047ce0594f9078dac7aadec1a59f94cf7f8935b9a9c8002a010698a4b2c609333bc84ec0026f90c104d762474ab5e6321bf6d90abd272c1ca840ad6c666a897fb52ac6f225978a28708ac5faaea1fca390e2061061a5fbf55f8de7c2d3889187fd1edca9aefa7f05a2e47a3b539be06716f8c8", @typed={0x4, 0x32}]}]}, 0x1b4}}, 0x20000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="0773b8a7e54434901f8ea40b88674da92b4c33ea1a1dba3dca3ac724cbe5b637200cc92916078e7a9cdec819a7e12933659c21724882c884f78dc62a6b8c7251906d31abdfbd6663db7f0eb7d1c1580ef778e9379402d0b298630e0c53c27a91f31cf757de87a185dcea515100dd31ea90edba49d2532831a9", @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) unshare(0x48020200) [ 1747.384620] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1747.384620] program syz-executor.1 not setting count and/or reply_len properly [ 1747.394900] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 13:43:45 executing program 5: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:43:45 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1747.430134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=12675 comm=syz-executor.2 13:43:45 executing program 3: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101003, 0x0) pread64(r0, &(0x7f0000000280)=""/178, 0xb2, 0x9028) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xa000) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r2) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, r2) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x4001, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000004c0)={0x35, 0xf, 0xd, 0xa, 0x7, 0x5, 0x4, 0x21}) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000140)) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x5, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000300)="2f4617e70f40156123379b2ae38feb58d775d52ef726b55d533b03ea1a75646493b0d5d356cbc9a50cad3408064085910d9f03847eb68b44edb6189bf40517080b5572beffcc80f3020993c447627044460e0823f80ed68f65dde651f22bb2e86a1a90a7d795c3c9ff5dbac327bd789df45452328c6b896ced69289de230a5e533b8a7e45f20cd1677b689c1f2c3b155271962d4d5487b2003effd4899b4a0f65552aaef247a779ce5f5bad2676efa0d324118d6d5525be05c59c8231b73db5a7a503b038c7c5507067560daefad3f26ee595eea9f3feb26813bb3120b0622095cc6f6437789517273a38a70b11c9321a1", 0xf1, 0x5}, {&(0x7f0000000940)="db2cb19a97d3a85ab79933902c2e99225d4e6c6bdf9512d6e02146bc9ab6184ca48bbe95060d894c6899567719701a7c03a3f8a28aeb55f4a8d5394c1dd24c7eb2f866180f3cb6756d28e5185405d8c975e6609b3bc41221c4aee3a1c9d1a09e9a67726de6dc89a5198e278a03bbcb11b4be4337be4f854194a2f8a05dd31c4947d55937f5a5527d81dc5f74b99e6659cbd2a5b689d56b3ae5ce5254a5f7d82fd4f18404efcdf50617d43be0c39470938c12edb42c675664b7fa57438e88575172f3d9e2debe300b428f5ff601b818e5fa3408c730071dd36002910837ec8b20cb25b19690b27d6a98964d320a42c7c7d8342954af31815df00f3702e7ea2bb46de6e73aa3c01bfe08d0590514dddfee5e9c1633e5ad01ce8e31fd3542f52a2cd1573e3f066ae9f6f3f7f20300acb8613963de9a86cbf52c16b48f6fecc831e54e0bf1ec5b8ffeff72c98c36d3f3fbf3662a649b381a1c3f94a91f4da800a0736e3c001e45b5b64268dc96f2e2de33c3d6369256fdd134611beebc1eb1b8191f4cb7a95ead22b318f269764e6b267929f77cde5f777a365f1c8560dd2a45e2530fe46d99bba0de7690578c512126eadb3868b6cc675f123c151ff834ee9a23d6707364dfdfde4fc17e48a22fd8515256af2cb7019f565b256094c1ec618b24064e23d1ebf8d6ec518b07e6f128040303d754e7a35a4208a584fa6b227b8563cbb7d67dc3094f28d6b09aff5b7d5e8611aa27b94ea89ecd4e4020a72e576fbd3b4826bf32a6c1087b1ec93489b198fd30a231312dec4590d75051e29243ecd3399dec76eaa1a8d552f20cf707f93e3ba588d97ca208efb1a01d707730cc5301d72018c5fc6fe175d4d8c83a4c7b4122fec2dba7dfb3588b9763ae9830a9fb2bd74f94cb9863871d9dfa7165d68fcb341cc3445a344903175bed2bb69320b8a52c225e94ed9c2df0a487029eb5e3030e583a707fa95ecec2a32574f95622c1c58543abd69ca8f1052bca3caafbf0baabd795b4ab222f6520e36377e8ff03f59b9a2c0863ada7f1d4dd01c0097b8ac7e4f0d8f3d95bc16310d21fdd5c8ce80134d8f55b58d6714f481f79c0da2eb6ec18efdda48aa92b5fb3e0d107dd8de4d4b0f8058309980dd9aa0fdda016a8e77055b86f51edef39c494687db0d16c763db9c85653c8c2e06ab0296d9e84edd40bb3ab6ec740251b2206c5612a0fdff124f3a88b6f131f6224edb97176768b0dab416073364caba970b00306d5fd7c42a66ef355001aad4a9d4f7f8f55b299dd615c643b2e2f516358b334528ae1529fc0b08327b430b6c4470289257a618a871cab0c5686facd08b86d854ea75046b583777c943b8ec55f14102a7fbb66dc3555859bbbd502d46ddd52201a875b5bb409d9f78f3e125845e27d124dd9c554267c1f93160a67db28dd51f163629e34c06d1bf4d4468d94fba0daa12aac2e7db3d3dc6c40ab27bf35838b5d3e72f4c9c8d9c2886342846a877a2032297336b6de362b5f25bc84a8ef69fe0ba49f8c77330c76a4db413de5c52615206f64a1fa717940901c3df72204e80f3423d8c1007237d66a81eb8b4a7444f9b65f60868c3e78369dcf45bebcbe30722eda18a5cdfbcbe68a863368f26cb1ebcecc3b5faf143fd61025872e07f3db749fd071e7f685b09bfa50b118d1fa38aba6404a92da91da66395ca35639a575e820fa9daa2ddd89f4cb241b8369ae7e8c454d88f4cc88d88139583c1a421deaab73d918ec0fd7602dd430866d655b8b7a4d92805dea27e8259d3bea725b5b5c3e6b3e036de60ccca841f1aaf804091882d9f301178138cec5556454f0eb62be4300152302513f785920181747d0b03aaf569ae86ee48473b1573d0e64b3cfa85e84a9117339ab7ad0576888692b99c34600cbad1a173f18fc4f98b59cff49d6f834fdcbf08afca55135ec751469724d0789f5fe0778ec8b27b40e0c95b6aa2825cabe3ded6a61ee713b20d8ddcb95683f50cef0c18d3d518456db7423a2b6011a697f9ea7d5eccd072d64ed4a0e71a304e23e555ebc01395c09c291d634f301fe0cd04f2984ff8483f1a970c3b95d932f59977028b8d81fe9670270c62dd95e81921b4b053672f6ccd73a72e965df6d693ac98cb1ca7134c5680360d8d1be0fc0cdd873d2fdabd76c4c516ca036a35ee564e5a08df403b8d8ffc8eb7701bc769ed1804448cd05af4b5a90f2194f0072e8c2bc7cff37a7c41415f51aebb5ad035bc9ddf64422ee5e6b41964f67a9954cbaab5e6f669ab6cb0de762d0649109eab4aa6269e2da845a0cd196254a989f247822e12c49a45ed91292e1143549edfeab46fbeac8cf52ae148bf692761d31ca5b4e3ef5f3cca18c4e96f8a580cc349373e4ef5a68f599b4f56097195ae9c9cb2289cd2199194f2d5e246b5c104ef781d827bbff55d1f3d8a3def54ddb4b79ecb75d6d56dc67fc36215237672c81e9d0c109723c3d2484bfa96f9b6b6333dfc42d4ecd7afa1a764907f25f697add40540c3aacb082377b0c2f151a1b31d20a6ab600176a4e64d81111c9f0a8a645ac8b7ee0018fcd6a7df784fc1a4b54267f49bceb597510d1a687e9a496ab34373aace6c2daa98cd798d499459c638047412850ed4a3be06b0b13fba72b09aac206d3b8f9afcb5673665e0dff915bd46daa8cc3a8ac7aeb1aa949b070268611ad56e3248d46e37d881db8f92aaa28e4e6849c54462f69cf4c43030651995b4546c58f4f0560b12f9f4772e4b61f61d11a907b933f910a71a80d96048d153418a4c0c2002055beac95bea1624a9a7fc5839cff0acd26c277415c1b8db2ea8b0485739eb7769a5bc03d566e71412b1532c1ea29208ffa34c97b75081585e4be0d1935f92eaded7550e7e87d766bdfa978ec8044364b900b6d8370d716f1a7f04f25d30876865040ee4de85b03ba39b36103d8dbe516502a48a68a665f866de1792e8501dcd7375eab83c7735e2416801013a4a4e7af4e8c73fd0b5d3d9ca674343f5701f528601d398c4277604c13cb404d21ec389d993cbf5a2c3e5dd5ea095c91e3485d44ecf447f0caf5a441623fd612203fa5e009461b244d31cdee4595de91e9df66323c738cbdaaaf449ca00005db92803aad74c64be56a5459468783f3db054426f6a874e5f60219689ab25fcdb8c838e5e24c9f620a6ed034435fcfc9b281474506b7ef92c9f071a6844561a83550ceecf56c8e2762c9a40469e7ace167555e0d10ea622963306b68ad9e3ea7d7e55882fbce868ea01446a2e2c7f0f86f6d586cf14ae5dd605c14b50b3f823bc8118b66e3dc2ca7eb8309ae3a2166354bd49ae458528e4ecc6633d6faf1d01558f3b34faa52327821cccf65be8d915d5168b1de9460d0c3ee0a3a7357b8d7473fa90d020c92af81119e544150f4b911ecd9a0cc392d66a73d52b03a78213f30dcdb9f34b7b9fdc6ee77b3993aed977710be06018089951db4f9e7776952c5dd20b939ccb06d1dde97d0a6566fa54bc30baf4b79ea78cb3ab1437753eba25bf19d67c9edd270938e8e40b38a8e20c40c239becc52bc6ca277fc268fbde6c43b54e4fd68e7570873bd6cdf6c23fdf8ba76ec49fd34ca69b2e6fd4ad5b24cbb8c772e2e99d9f1a5c0a37f934f87ee2b7e26799e678d8ba7a1c4c4177913c628d73956e782693b3c1273a7ce9c6a0964308af67c802003e9d69fd59f54bda5054282075f429de8c1c09c4d47bb9bab9ffea4b5121603d20a319609f433a4568057dde959efc6e9fcd5433c6202c1b4707fc1b472093524d81fc696da10e7a0456bde9c7bfb61c63750d31a3b136a85a9a6db6ddb7776b1665808d61d6d7b0bbfeaa1cb4a5b5500dfd93281236831dde87053422af622dcda6a9210f30f26a3be598e4f7e7e81226382566f0a14d3ef5ffecd5e6c50edac7b8845884e4f4eccef6d62c6340cdcf72e1ef75b1905740734bd49f2db508cae8fc44e68511936240e4663aeeff4d4813f28199c32df4e2a8bf93ccb708df4613ff520d5061ceabddaf6faa9f7ec8c5771c858b1d75bbf00c2c40f4ddb47fde82468b17ab226e0b023f79597d53bd6e8f66ff33a25e5f328632bb7d7e83051441b67f39303d2958f960d6d0a3d31d2fc3ae432ea7422502356175eb36029047547d2eb1477c2b6b9d83d00ea7ad04707ff56d80731cdc30e13aa29283ac1808aab24273657aac28786ff261692d62c99e8f874d5cc7946442184f13cd93391621d0eb9d63868d3cf525c6af4224bcf5dc4eb847755081e7244cd27284c3201679ce7578162b196f7e25dbc7741a7cc8d88da6fb0c1e1fe2844507943264c157648f96e85c28faa906516c8ed9fa6576e7c694148ddb8138ad03f0168567e9c6144ea4c5101718963e995cfb96a4da50daa28e92c0dbf0ef6fead20a9765aa8f909f9c48f318532833c17a8fcb6b29f065be1c580e6d624d96a9ad3ef951a0640abdd5d4e0fe832beb4da49d671c231f714ced796d28bb0b0fdcc870b71cacd7a9e0fb85a5397f888fa8f6e4645d9544097bb7aa9a0e1cc2afa63237d6a9ae430ee8f2c775bef62c84095a1786ad8ba425b47717ef1f34652763bb4382ca6a826db7f02790970cfd6abff6e5b1ca01d9e37504b2bd8fa1d543f1410ecfd6770977d9b826e984ca853ee1369a323adf848c870019294dd3730aecdcb87fec86922e581b08d1e3cedae02f62bb3ae8b4ce55f8b8a81fe046d8300c868e3d3b28331d90e8a3457f46bd1e46e8e7fd6e7a10ff3ab594665e550d952b6e43c0a47fa2085efa1277b5c8bee64616364b65341c717f154dd84a59c7730861a844d43511eda9a5a16aa1d0a232fde49b3d469ab4568b569901d4e12bea7f1a5ba64762361fc4593edb3cd499ba7f8768ef80e123f32f6b19fa60298bb4cf9dd398e33b178a949262cc081a1f0128ffb08b94173eaa0e1b9526d5f17c5e4087d99b8cc2cc5ba5eda75419772ec6fe335f179ff92e31b0e69769b699415edfab2de74212565711274c2ee9fb3f581400e8bcd446f6fee4592b42c5b4acbfe074ba464a438a37cefb6693d6754ce3fd4d45e6e2b62521b5a578d0664811f33042304e74ffd59f41961b2eac1c3bfef7bbc8b3f9310582d5d85df3c6676a09f0b96cab1e84f4df75b2cbbf7fced43370f2e35e3d6d572faf59073196984c04eddb499a0dbd99ac07687176d2f35f18e0963aa3aa4a1cd881be327decda7ea623136a03270dae02fb5067b01a6b1fc5477ab00081973cd9ad571a19cb2b44838d891fcd9a0f71c38f775e324e885d4d2f5e683fc2d3a1d5a7eda1d02e56b0c9af67f9022cf922fc7fe2fc93a900dcc902deeef5beab3319481e5bd01025870a8e6eea7bc476a30e2c358bd0e83e29e954c30f8b7c861bd10ebcc15a4bacaae58b4cd7916a1755dff1abcfea38f239b51af8fa67d2ef683eaee5eb86c83b9caf9f41cf10516423dd11dc360fdc63b2d1ea15f3fa504ee24ba4f353abcf81602d3f058b9e2b03a8de3afcc1e2be4ca54c408aeca78aa2107bdf8edc1992f3d8c0102972cfe4cf9bb04bb82bea0071787b66a816324fdb129164af8852bcaa246c9f6ed475cbdd68adc02404b2c3a9f8c58e0a10d87e380ce8b78fb6c60628004a338a3b557f23a09bd4c0ced0e189128a9ac3d58402b680f1d8dd4fa98b16fc65aed7a33c74d4c04a7a495842a1d189aead4ba43f9ce04fad5319e3d174d5ea5ce45e843557f5caf77286f998a4a9e00791f75d6a5de76ad27a4630ecfa74f3f986285cf2c79411b0647188ca756aae", 0x1000, 0x3}], 0x4000, &(0x7f0000000400)={[{}, {@nodots}, {@fat=@gid={'gid', 0x3d, r4}}], [{@seclabel}]}) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x800, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0), 0x0, 0x1000000000}], 0x1000, &(0x7f0000000540)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x21}}, {@min_batch_time={'min_batch_time', 0x3d, 0x759}}, {@jqfmt_vfsv1}, {@noblock_validity}, {@resgid={'resgid', 0x3d, r4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6a48}}], [{@dont_measure}]}) 13:43:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3fffc, 0x4, &(0x7f0000000200)=[{&(0x7f0000000280)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000040000000000000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) getsockname(r0, &(0x7f0000000140)=@nl=@proc, &(0x7f00000000c0)=0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20d315) [ 1747.480581] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated 13:43:45 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="003babe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1747.493343] EXT4-fs (loop7): get root inode failed [ 1747.494248] EXT4-fs (loop7): mount failed [ 1747.529646] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1747.529646] program syz-executor.1 not setting count and/or reply_len properly 13:43:45 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="003aabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:45 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="003cabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:45 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:43:45 executing program 5: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1747.610621] EXT4-fs (loop6): bad geometry: block count 256 exceeds size of device (255 blocks) [ 1747.684640] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1747.684640] program syz-executor.1 not setting count and/or reply_len properly [ 1747.688962] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1747.688962] program syz-executor.4 not setting count and/or reply_len properly 13:43:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:43:45 executing program 5: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:43:45 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="003dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:43:45 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1747.777399] EXT4-fs (loop6): bad geometry: block count 256 exceeds size of device (255 blocks) 13:43:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x130c9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') chroot(&(0x7f0000000280)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat(0xffffffffffffffff, &(0x7f0000001a00)='./file1\x00', 0x42, 0x4) io_setup(0x5, &(0x7f0000000040)=0x0) chroot(&(0x7f0000000440)='./file2\x00') io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x2, 0x0, r2, 0x0}]) unlink(&(0x7f0000000340)='./file2\x00') sendfile(r0, r1, 0x0, 0x100000001) [ 1747.837501] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1747.837501] program syz-executor.1 not setting count and/or reply_len properly [ 1747.843931] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz-executor.3: bad orphan inode 301979167 [ 1747.861206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 13:43:45 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1747.893350] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1747.916948] EXT4-fs (loop7): get root inode failed [ 1747.920832] EXT4-fs (loop7): mount failed [ 1748.022109] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz-executor.3: bad orphan inode 301979167 [ 1748.027598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1748.033977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=12737 comm=syz-executor.2 [ 1748.123811] FAT-fs (loop3): invalid media value (0x6c) [ 1748.125046] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1748.164788] FAT-fs (loop4): Unrecognized mount option "./file2" or missing value 13:44:00 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:44:00 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000009340)=[{&(0x7f0000008100)="1ca15b76", 0x4}], 0x1}}, {{&(0x7f0000003300)={0xa, 0x0, 0xffffffff, @loopback, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="43cad121296927206529ffa9f4d3ddcd623628ef9ee0fb0432f8e7", 0x1b}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1260}}, {{&(0x7f0000001400)={0xa, 0x4e22, 0xb7, @mcast2, 0x4}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001440)}, {&(0x7f0000001480)="6982011d351f68e839d0e97b5aff38522e866fe97d770f72bb7d4e85e32e0e062f548193488510ed4ec01e12b4b828f0c23247a725e4ddefd8d2a40a478c10043047e9a3bb12695d900aaeff670841afaf22fdbeb1b35ac50361a244cde79b4c6b93c38d668af870cf98cf8ecc073e3e56f477f788bcd5ac1618a5eb0497f7d02484a3c6b5e1f1fce29bd15d6abce91bd8300b78ff9aa95bc77d53a291b6b7123b9758a37990056cf26e4d02093db98068015f8091d0b51ccedcfaac49b6d55ed2d38dbc7c558e31ff88b9", 0xcb}, {&(0x7f0000001580)="57bb4f970a7f945b25c9547d605f569a03c2d1", 0x13}], 0x3, &(0x7f0000001600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x33, 0x10, 0x0, 0x1f, 0x0, [@loopback, @mcast1, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1]}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x33, 0x1f, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x2, 0x74, "6605087c6c23b2b78fe95aed592139bac718342f3d52c6c28bcda77081f94958d212ff1a19f6d7a7e349dd4ebc62114b52fcf86a63f68ce31a0d5194acb1989d31557049c8a7d4430538fd3d5d409373f273cc9bc9c3bfe1cc722894b040dbf6269d9caf5d0999ffa87e1ce82896a873c3fcba54"}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x50, {0x2, 0x12, 0x4, 0x5, [0x1ff, 0xfffffffffffffe01, 0x8, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffffff8, 0x80]}}, @hao={0xc9, 0x10, @local}, @pad1, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x80000000}, @jumbo={0xc2, 0x4, 0x81}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8000}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x208}}, {{&(0x7f0000001840)={0xa, 0x4e22, 0x9, @remote}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001880)="f008d2e6023ad22a16ab2867fe789b78eb416b11905e15c69e624c94891c4f26307f3db875acae7f8c8432fe2f756f11364a81e990950981439911f283177e783afa39eb037232a61b9c0bd42b4b8fc3626fb3e7b17c6f12291480e8", 0x5c}, {&(0x7f0000001900)="224143bf09e6b988fb2e28bf70a4e8b958cf63a56d6dce076ddc7758dc9ae397088ffb2dba0b080007ea2dcc0a255559261ec1beb56e6ee34828c9bcb6040cf3aaad390e0360396ad806b1832b4d63af0e314acce152d18b339fb71c8d16118a5df76bde7a1eb8bca94a1a6dcce1ff5aafe1ba7a54eea5132b8b604160accdb01e12a30bf3ae9490b54aeed78d34bdeea844fed7f5d555dab87fff108f555c130f3369db0d97585ff7bf7c4c3b15718fcf81ba5d504761916c2ed87d95595ef528cc9e8af36bad5c98da8d2dfdb8d4ef90c013796a0263ed32daef0ebe522cd3d5", 0xe1}, {&(0x7f0000001a00)="dfd44da08de74ed26bafb562546227d2ca270c95c16622b7e6e2a99feb3c56fbd1cafdfc48d79f126920a2abe62abeafe2bc9e4871561c82e1aa5fafd18cffa0f8332f59d4154cf95226f2b5a908aa152391b2eb49e538ea2e1c71a7551f8924b5425189f199bd756d4ea23d491bf601b5d8a43ea2d6440fc4bec05522dbcc138fa1339dfd5b33685c680d3728f9a7c9e8131d603ac53342037554c3576a3585a46a4e33907baea1bfedcd81795c7c34b5917f5c03e281c443b385", 0xbb}, {&(0x7f0000001ac0)}], 0x4, &(0x7f0000001b40)=[@hopopts={{0x48, 0x29, 0x36, {0xc, 0x5, '\x00', [@ra={0x5, 0x2, 0x1000}, @calipso={0x7, 0x28, {0x1, 0x8, 0x40, 0x74d8, [0x8, 0x6, 0x5, 0x166]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x1158, [0x0, 0x223c, 0x0]}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x20}, @ra={0x5, 0x2, 0x1d3}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @empty}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x87, 0x10, 0x2, 0x66, 0x0, [@private1, @rand_addr=' \x01\x00', @private1, @local, @local, @private2, @remote, @mcast2]}}}], 0x158}}, {{&(0x7f0000001cc0)={0xa, 0x4e22, 0x3e, @local, 0x8}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000001d00)="e11928ebf3134e965c593864a5cbe0782eb36a8095effc5763b565ad11a662934bd729f0fe8e07a39d79cd15896cee2f58eeeb8cd3ee1c2d0478f82833d3f0da8aa7fcac4307e5e6c13fb357d9757c067dcf4d44acb10b9989b9dff396294839a8ce70cfc279d6bd8e8d80250e0a671c05748d9261f7fbb073ded7", 0x7b}, {&(0x7f0000001d80)="f4f1930dba85543695656584ea25e31555a5ee28b79ad3388c789e28d820ec7075ff88eee0d278897c9df8c504466dde2af06fd2d7ed", 0x36}, {&(0x7f0000001dc0)="cb98eb4091ee31ccf8cd17760cbd252b85bf2a9dd8efbf19977160bfa43bd32efa3b521883c5455d16f03d3cbdbd", 0x2e}, {&(0x7f0000001e00)="f68a4d775f125c49a52427796eb1b87db6c76e0736f5f6a91d72394af387dc5d0a8352bf5bda00239a6a3edd2d459c3f3019cfa6b34708299425b420583a2d9f2da7c42a6bd2fb856f18eab992322c05ffd1e1297d96a4162800b7d39ff14f57f237bafc9d87964844c02da016923a75626fe07244a7f7f663fa0403d62b0e0f7b0a7d22a61b43d597b67a2d4b3277986e1600dc89df6bea281729c3f2e5b1593ccf30aa5c9bdfe273eb621b57106b75d75cb192f1cb8180e74027d414b7775680048a447a7dd3459962dc03ce7d970a0d8e", 0xd2}, {&(0x7f0000001f00)="7ab035a1f49c758a76339055244505f611421f5502244b10b65cd7f24fb454376ce1a3c418c84ad31a97c9a55e86b409350d397c58b4614c28a58dc87ea5ffce79834264b40d5807ab6255ebdc06ea71db60e64e5f0852e1b7e0e343fc90683a070f0ae76ddb140edfa94f454abf7258e30c87b66f269d8eb9da9b6ac45c78d6e3eb210bf0526c183bd3a67ab3e1e36a7dac6c3a4f618cc3b316", 0x9a}, {&(0x7f0000001fc0)="7623556b0277616dac21b4642997cf9bd3863d241f26a9ce7a99f2d38371c5e1b78fc809af8eadc1a679bc52d614113c2b8949770fc4d913a4fdb10e12b5d235f7637e4d756a896f97a6233df72db48ab38a076ed2ff503585d3852050000f60f8206dc3b77b140a319e7ca53b25978eb38cbc0296b6a92f86fd6d8527a76e2deab53beb", 0x84}, {&(0x7f0000002080)="10887981a61bc15cdd74976a8c12cfcc7bb29b83609235f17d7e73247e3596285c2b2deac8c59d52cdc412de", 0x2c}, {&(0x7f00000020c0)="153ca1cad83576fa412c6df51b3dd42dfdc56bc5770c3da00de1d48027539e806ba71116e83dd9e4a15ecd85b7b6f9fcc5f22ce324468cd126b83bbc8b332c91463269c01dd0b8896de8bb18d96026c9de739a5514a010211e1244d1fd568f9de19f4bda6650a459b09f4187ce464eb34c5eeed2d42072b119890b2362c48e1ea6977b39abe857d5e5f265a820ee8e38c491e744ef016604ec8d3295eb1495ba2ab710ad385eb3599c95fdf732ff6436fa54395cff942fcb0a8d839f3cb0994f328f387dd1f33eaa3b976a3d6b28ecbfced3f278e21edf63769fd847501acd77c18f2be08aed1bf21d0d6f6663ec0dfa10f350", 0xf3}, {&(0x7f00000021c0)="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", 0x1000}], 0x9}}, {{&(0x7f0000003280)={0xa, 0x4e20, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x27}, 0x10001}, 0x1c, &(0x7f0000003340)=[{&(0x7f00000032c0)}], 0x1, &(0x7f0000003380)=[@hopopts={{0x118, 0x29, 0x36, {0x3c, 0x20, '\x00', [@generic={0x9, 0xfe, "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"}]}}}], 0x118}}], 0x5, 0x0) 13:44:00 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="00b3abe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:44:00 executing program 5: clone3(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:44:00 executing program 4: ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6096153f00283afffe800000000000000000000000000000146a3a7807d04fd124e6166323ff2e3fff0200e490000000000000001000000189009001ea000000fc0200"/94], 0x0) 13:44:00 executing program 3: r0 = creat(0x0, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x40, 0x40800) ioctl$FICLONE(r1, 0x40049409, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r0, 0x10001, 0x0, 0x4}, 0x8001) syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x0) 13:44:00 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:44:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600), 0x0, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1762.776436] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1762.776436] program syz-executor.1 not setting count and/or reply_len properly 13:44:00 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',posixacl,loose,versi', @ANYRESHEX=0x0, @ANYBLOB=',version=9p200', @ANYRESDEC, @ANYBLOB]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c0000000000000000040002000800316cec490000"], 0x1c}}, 0x0) [ 1762.970852] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1762.972975] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1762.974379] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1762.975738] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1762.977285] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 1762.980839] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1762.982267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1762.983942] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1762.986119] buffer_io_error: 2078 callbacks suppressed [ 1762.986130] Buffer I/O error on dev sr0, logical block 0, async page read [ 1762.989816] EXT4-fs (loop7): get root inode failed [ 1762.990361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1762.990986] EXT4-fs (loop7): mount failed [ 1762.991776] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1762.994542] Buffer I/O error on dev sr0, logical block 1, async page read [ 1762.997996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1762.999209] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1763.001482] Buffer I/O error on dev sr0, logical block 2, async page read [ 1763.003776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.004992] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1763.007027] Buffer I/O error on dev sr0, logical block 3, async page read [ 1763.023930] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1763.025933] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1763.027412] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1763.028737] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1763.030270] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 1763.032292] Buffer I/O error on dev sr0, logical block 4, async page read [ 1763.033707] Buffer I/O error on dev sr0, logical block 5, async page read [ 1763.035138] Buffer I/O error on dev sr0, logical block 6, async page read [ 1763.036553] Buffer I/O error on dev sr0, logical block 7, async page read [ 1763.136140] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1763.138104] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1763.140079] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1763.141417] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1763.142953] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 1763.146084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.147613] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1763.149261] Buffer I/O error on dev sr0, logical block 0, async page read [ 1763.152063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.152956] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1763.154481] Buffer I/O error on dev sr0, logical block 1, async page read [ 1763.155913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.156911] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1763.158774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.160026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.161201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.162500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.163758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:44:14 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x1020, 0x0, 0x3, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x7fff, 0xb5e46223464a3991) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x4, 0x2, 0x1, 0x0, 0x2, 0x10000, 0xb63e87eefee15054, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc368, 0x0, @perf_config_ext={0x5, 0x7}, 0x16, 0x6, 0x6, 0xa, 0xffffffffffffffff, 0x2, 0xff, 0x0, 0x504, 0x0, 0x4}, r2, 0xa, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000180), 0x40800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x8) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 13:44:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_mount_image$nfs(&(0x7f00000000c0), 0x0, 0x95de, 0x0, 0x0, 0x0, 0x0) r3 = openat(r2, &(0x7f0000001740)='./file0\x00', 0x0, 0x0) r4 = dup2(r0, r1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xd, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd_index=0x6, 0xffffffffffff8000, 0x9, 0x0, 0x0, 0x1}, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/232, 0xe8}], 0x1, &(0x7f0000000580)=""/240, 0xf0}, 0x0, 0x40002027, 0x1, {0x2}}, 0x7ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x10) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 13:44:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:44:14 executing program 5: clone3(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:44:14 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040b3e0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:44:14 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r0, 0x3, 0x900500, 0x30000000000) r1 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fallocate(r1, 0x3, 0x900500, 0x30000000000) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000100)=@generic={0x2, 0x3, 0xfca5}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x183000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000001400)=@keyring) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) fchown(0xffffffffffffffff, 0xffffffffffffffff, r3) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') 13:44:14 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:44:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x60, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00'}) signalfd(r4, &(0x7f0000000200)={[0x7]}, 0x8) syz_open_procfs(r3, &(0x7f0000000180)='attr/keycreate\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) [ 1776.870003] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1776.870003] program syz-executor.1 not setting count and/or reply_len properly 13:44:14 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0240000000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:44:14 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc02000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:44:14 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:44:14 executing program 5: clone3(0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:44:14 executing program 6: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3f, 0x2}) fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) waitid(0x0, r0, 0x0, 0xb, 0x0) ptrace$getregs(0xe, 0x0, 0x2, &(0x7f0000000080)=""/173) 13:44:14 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setresuid(0xee00, r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) 13:44:14 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1777.146166] sg_write: data in/out 187568/8 bytes for SCSI command 0x3f-- guessing data in; [ 1777.146166] program syz-executor.1 not setting count and/or reply_len properly 13:44:14 executing program 2: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'sit0\x00'}) setsockopt$inet_mreqn(r0, 0x0, 0xcb, 0x0, 0x0) 13:44:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) write$bt_hci(r2, &(0x7f0000002d00)=ANY=[@ANYRES64=r4], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x154, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fc5bbba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6557c1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15606fa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2597b81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb7d50dc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc67ab1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c5bfd49}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x110fadb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d6dedec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc008fb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5700d1ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b135d0e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'phy1\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400d0}, 0x800) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x434, 0x3f3, 0x100, 0x70bd25, 0x25dfdbfd, {0x1, 0x2, 0x0, [0x10efd2fe, 0x8, 0x4, 0x7f, 0x6, 0x1, 0x125700, 0x6, 0x5, 0x3, 0x9, 0x7fff, 0xff, 0x800, 0x3, 0x0, 0xd65f, 0x0, 0xfffffffe, 0x1, 0x6, 0x7, 0x0, 0xa6d6, 0x0, 0x200, 0xc73, 0x80, 0xfffffffa, 0x101, 0x10001, 0x61ad, 0x8001, 0xfda, 0x5, 0xffff0000, 0x6, 0x1, 0xfffffff9, 0x1, 0x80000000, 0x2, 0x1, 0x8, 0x0, 0x1, 0x35fe, 0x0, 0x8198, 0x2, 0x38, 0x331, 0x8, 0x3, 0x4, 0x0, 0x3, 0x0, 0xeb11, 0x8, 0xbf, 0x1f, 0x9d, 0xa8b], [0x100, 0x400, 0x18000000, 0xfffffffb, 0x4, 0x20, 0x3f, 0x8000, 0x31b6, 0x3, 0x1000, 0x6, 0x5, 0x4, 0x3, 0x20, 0x0, 0x80, 0x3f12c872, 0x8, 0x6, 0x80000000, 0x4, 0x6, 0x9, 0x91f, 0x401, 0x8, 0x200, 0x7f, 0x8001, 0x4fc, 0x5, 0x7, 0x101, 0x3000, 0x3, 0x4, 0x80000001, 0x4, 0x0, 0x3, 0x2, 0x400, 0x4, 0x9e, 0x3f, 0x4, 0x8, 0x7, 0x1, 0x1, 0x8, 0x7, 0x2, 0x1, 0x9, 0x61, 0x0, 0x7f, 0x8, 0x1ff, 0x80], [0x20000000, 0x9, 0x3, 0x100, 0x0, 0x0, 0x9, 0x3ff, 0x6, 0x5, 0x0, 0xee, 0xffff8000, 0xff, 0x3, 0x800, 0x81, 0x6, 0x8000, 0x7, 0x2, 0x10001, 0x3e42e7bf, 0xa5, 0x5, 0x4, 0x3, 0x1, 0x6, 0x20, 0x26, 0x9, 0x100, 0x2, 0x100, 0x8, 0x2, 0x5, 0x10000, 0x7f, 0x7, 0x3, 0x4, 0x20, 0x1fdf5920, 0x2, 0x1, 0x2, 0x372, 0x80000001, 0x8, 0x8, 0x80000001, 0x8, 0xfff, 0x1000, 0x10000, 0x5, 0x7, 0x400, 0x1000, 0x401, 0xe41, 0x5], [0x81, 0x3, 0x3f, 0xdc8, 0x10000, 0xaa, 0x86a, 0x5, 0x5, 0x80000001, 0x5, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x2, 0x1ff, 0x3e, 0x4, 0x9, 0x2, 0x7, 0x400, 0x8, 0x101, 0x8, 0x8, 0x1f, 0xec, 0x40, 0x8, 0x5dab, 0x0, 0x5, 0x0, 0xace, 0x3, 0x90b2, 0x6, 0x0, 0x7fffffff, 0x5, 0x9, 0x7f, 0x0, 0x6, 0x7ff, 0x6, 0x1, 0x6f, 0x7, 0x1, 0x9, 0x20, 0x37bdc000, 0x9b0, 0x80000000, 0x9, 0x8, 0x400, 0x0, 0x86c], 0x12, ['phy1\x00', '802.15.4 MAC\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x800}, 0x413dc87100da660d) 13:44:14 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1777.277104] sg_write: data in/out 187568/8 bytes for SCSI command 0x3f-- guessing data in; [ 1777.277104] program syz-executor.1 not setting count and/or reply_len properly [ 1777.302876] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1777.303850] EXT4-fs (sda): re-mounted. Opts: (null) [ 1777.322919] EXT4-fs (loop7): get root inode failed [ 1777.324278] EXT4-fs (loop7): mount failed 13:44:29 executing program 5: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:44:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:44:29 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:44:29 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc04000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:44:29 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x4, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="22f92bfbd17c944bea67bf6c6116c6a1c851909243c4c144a2ca373db1e6b3917f68158a5325d01b32d55bb068ccc498033092d39e1cae639a8d41460a516a9fa91c0fc3b6f678ec63", 0x49, 0x8000}, {&(0x7f0000000200)="87475ab15a30da8d268b506af12855fa391b1ba461ce33c5d5b2608a9cd77f23a57480497e84cddee0", 0x29, 0x2}], 0x8000, &(0x7f0000000280)={[{@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@discard}, {@fat=@nocase}, {@nodots}], [{@subj_user}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@audit}, {@measure}, {@subj_user={'subj_user', 0x3d, '+%{\'s\\:'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x48000, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x40, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r4, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000040)=0x62ab5003, 0x4) sendfile(r1, r3, 0x0, 0x20d315) 13:44:29 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000000000000000000000500000000000000b20d5f13000080487fec864b245e0f3f9be149f8d65d20c3fcf35d29bc50e2970787aa50661508725c391553a10ac329f228a4ecdcbf1f6963052f3351f9dde59442b4b0bf27aaf14a1e025d4dbe7a1275b210fdea34bd1d74404d404bd572bd3ad148d3d5f2f48693c2fc1e4889d5501041647feb9ecddc70670d94252454f66a1a6945c364f2c7e716a9476393d5c7e50ea91bb8343155259b2a14b3855f6043ab78cf8ae36fce000000000000000033c79f6cb52f5e4973e3c6f4c32986571d4742e821cd65bc5965b271b91afe76ca4750fa56be4c71360a"], 0x30}}, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x6c0e, 0x7fff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x64}}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) fork() fork() r1 = gettid() ptrace(0x4207, r1) tkill(0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000640)=ANY=[@ANYBLOB="0e210000010a5ad71655116edd6bcd7f4c741af2277adf3b5f1fad7e0800f451b4ebab0f4bde7120a4a09571ebe0d214ca1656a61305ad096326046de8f45ae01d9dcd018b514694a8a58e99a337862af1bb7cb0fed9133ed4f6cb1b171141b128e93b886da78a030d4a93a5032579aa9076dca25ab3164c2847b0c769c6ada924a82239e0eb86656cda02cebe7fb186c1d5f3036cdc0cca3bd8d168311157bc8095e4085fc2a200000000000000000000000000000000450cc1ca467c910aa42e7efc815a18cb9ba29f"], 0xa) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x8, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1\x00'}) wait4(r2, 0x0, 0x8, &(0x7f0000000480)) 13:44:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) dup3(r1, r2, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'sit0\x00'}) listen(0xffffffffffffffff, 0x6) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000001c0)={0x0, "1169feeb427ab0e2253af9114f0f7422"}) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000011c0)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='hsr0\x00', 0x0, 0x400, 0x40}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) 13:44:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup2(r1, r0) getresgid(&(0x7f0000000240), 0x0, 0x0) [ 1791.519419] sg_write: data in/out 318640/8 bytes for SCSI command 0x3f-- guessing data in; [ 1791.519419] program syz-executor.1 not setting count and/or reply_len properly 13:44:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001f0020002cff0f00000000000001000004d20a0061002d245ec72ab9e0ba000000000000000003000000000000000000800000000000000000000000f276dd5e25621b30d0fa5e5397cffae35422e87c262ae7c9bbe4c349da3283b66d479f0027466dcc9df222808a6f84023df91c522b2ebe80e508a5"], 0x40}}, 0x4000041) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0xf0, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@private=0xa010100, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x88, 0x0, 0xee01}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x2000, 0x3}, {0xffffffffffffffff, 0xffff, 0x0, 0x40}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2}}, 0xf0}}, 0x4008005) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84dd00be", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d6d30000008000b0080000000080001007063690011000200303030303a30303a31302e300000000008000b00aeffffff"], 0x84}}, 0x24000091) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/48) dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r8, &(0x7f0000000440)={0x60000019}) write$P9_RREADLINK(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000017010007002e2f664169"], 0x10) [ 1791.582168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:44:29 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1791.655533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1791.790898] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1791.795999] EXT4-fs (loop7): get root inode failed [ 1791.797817] EXT4-fs (loop7): mount failed [ 1792.073506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.075878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1792.099906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 13:44:46 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010100)="000000000000000000000000da61426b81ed44a9ac5d6d8d66d52a0c010000e40b09", 0x22, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00'}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x40000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@fscache}, {@cache_mmap}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}, {@cache_mmap}, {@nodevmap}, {@cache_fscache}], [{@permit_directio}]}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0252c5939e04d2b5c877eed46c653000"]) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x7, 0x1e, 0x2, 0x0, 0x8, 0x29, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x4}, 0x40024, 0x1f, 0x7, 0x9, 0x3, 0x9c, 0xfff7, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xf, r3, 0x0) 13:44:46 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:44:46 executing program 3: io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, &(0x7f0000001640)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000c40)=@updsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private1, 0x0, 0x32}, @in6=@private0}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @extra_flags={0x8, 0x18, 0x4}]}, 0x140}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r1]) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f00000003c0)) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @mcast1}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x9, r2, &(0x7f0000000180)="d91603fab130e38a513ea8440725c04602009ec2e73436b678fb65deb1bbe5f58e9ba5300c61f802cccac6e4300e1588b5242fa1305574447f7bd5cdf33b0ad99d2ce9637d4aad6e76e0625adbd2facca209a263ed5e3543066c5bb16a80356a38e43fde2facdc225de2cb3d690a229512fc6c2112e7e17e5eb88190cf50078010cf57d30c0df42f918e97c318b560aaa68afcaf8d0de79c1fee91fbd725031fc7917bcc58fdc63757ac80df0a9de3", 0xaf, 0x5, 0x0, 0x2}]) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000008df1d6a15f96faf38dbf96e44940003e816b40553982d67e0ff5918445aad8811a8e1ffeb3a0c5602e4c01e21ee1841753286bd9445c8f4f82450b6f0ae619f1bd7ced64066819532ff81c2f5790c9bf476ed0568aaa0cdb38a4b588cd4b0e68095e1bd91f9bef8ad534ff730c99581d62635557a279d339caaf", @ANYRES16, @ANYBLOB="00082dbd7000fedbdf2512000000050033000100000008003b0000040000"], 0x24}, 0x1, 0x0, 0x0, 0x24000090}, 0x4044840) 13:44:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f465", 0xf, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:44:46 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc05000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:44:46 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc04000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:44:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000013000080487fec864b245e8f3f9be149f8326500"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x4080, 0x1) write$cgroup_pid(r1, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 13:44:46 executing program 5: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1808.797437] sg_write: data in/out 384176/8 bytes for SCSI command 0x3f-- guessing data in; [ 1808.797437] program syz-executor.1 not setting count and/or reply_len properly [ 1808.809844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1808.824400] sg_write: data in/out 318640/8 bytes for SCSI command 0x3f-- guessing data in; [ 1808.824400] program syz-executor.6 not setting count and/or reply_len properly 13:44:46 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:44:46 executing program 2: syz_mount_image$nfs4(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB]) 13:44:46 executing program 5: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:44:46 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1809.016130] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1809.024962] EXT4-fs (loop7): get root inode failed [ 1809.026874] EXT4-fs (loop7): mount failed 13:44:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$unix(r2, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0xdc, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x3, r3, 0x3) stat(&(0x7f0000000380)='./file1\x00', &(0x7f0000001c00)) sendto$unix(0xffffffffffffffff, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58edd", 0xc1, 0x840, 0x0, 0x0) getresgid(&(0x7f0000000440), &(0x7f0000000580), &(0x7f00000005c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@access_client}, {@msize={'msize', 0x3d, 0x6}}, {@mmap}], [{@uid_eq={'uid', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, '\\{[/#\xb7+@'}}]}}) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)) sendto$unix(r1, &(0x7f00000002c0)="ce0813beb7bf55b0b9a56e6cdd3fec28fae2cb397217d56ae8d9c31add474d197a251be91dc81a8537e2458a41b8b5b994d6344e6f690cdf2a5ddabbea1efa79c7d6f9545c94dd676144ca42338207d7e9ea606545f77f63d60f26", 0x5b, 0x1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 13:44:46 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x4c, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000700)={{}, "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"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x54) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00'}) write$bt_hci(r1, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/384, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES16=r0, @ANYBLOB="acfacdbee03875aae4028ada579bcd73f868ad858d5e5428cab5fdd8ab94813e5d7967cbc336cd36c3b5c8b18775ae8d34b2943bcd90c2011a3ad862ffe8f9cbf4019297a87a1cc6097b2209453686ebbf33f5eb7c711e702d3fff4379ec0fe299f8c16687cdf6f6a812520a90d97f18af50e420e0", @ANYRES16], 0x106) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0xffffff8a) setgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2692, 0x0, @perf_config_ext={0x0, 0x71}, 0x0, 0x0, 0x0, 0x0, 0x26d9}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 13:44:46 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1809.147144] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 13:44:46 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:44:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:44:46 executing program 2: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x80000000, 0x4, 0x1}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001800210c00000000000000000a0002000c00068008000000e4000002"], 0xfffffffffffffd76}}, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000000700)={0x13a4, 0x35, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@nested={0x1129, 0x71, 0x0, 0x1, [@generic="6f1a9bebc1afea94663976284a02092779f6915b4a5a51a5b15ab4045dfaed590ee5a4a93110bdc02128686516eb2156589d847c9cccf1be4075e9e7104886457e7edbcf5295e9b45e83ae0a9d869a724687ae86eb67545810ada0bb8d85932de25e99292619454f", @generic="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", @generic="5086f4527a5ab2a0a570e61d3f49e0990f8ff948c12249459d9079cd8e4982f4534669570ebead2a746380de55bde4b3074bcbea9c02918360505f457c56727ff0922c3a06bcf302af8217d9d0ef2110c31c6cd5d982d3b133cfd4a03118fcbc581ce009a208667b212f2d6c8fae97696749dde5d3ef4c391819cf4ccbd02b528208890c828152db0dcabe43f659b88660cbb7d52b92a327ea0f01a644e79bc987c7ede80a0e671312", @typed={0x8, 0x61, 0x0, 0x0, @uid}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0xff}]}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x200}, @generic="086185052a8d3135580d1c0f3c5be7ce7956c25112e8360c89cf814b43a4a0ae964730fbd5fd6ba58b8aecc32fe8d178845a11d8305443117c1ca6e33d602a7e4e2a6ea93000a0066ff15704e66a3f906633a024f134851e3eae865d1ff51cf0878f2daa81658da4aab356758668377a33ff3f1b6ef25b23a6bb32dc62b849a670e0079550276f31a6c2d6d4119a62a525c6062eaf0604b1ea0d35ee0751d9349e6bf0098a3dc3a7a263b57b6a28d8712289d03ace4b8d891ecb7698ab7eea9ca4612354b4a3a1cbce43be9d3c1ed2f006e695c104ca20c6a8cdaddd85729cc3ee417cce353b817782a943c3e5eb23e5f04253787f629351690846ee8e50d54e392637a913a05b305c9260cc6cda2cdb9ecae0471fa4fa760c3fa3e4ca837dfad1036a7faa8c8a9313662471291f832b0d72f358c3c2e89f834a4db909803a75025c9667027ef0ada9358563c88c22c066b7f25325b86bde7056eadae2404d2b", @generic="73571cfdf991502214d92b7ae469a2932f63716c535a0bcfe17bea16f4d4eb107da054322fbb4758c0ca828000b126eb395615f94eea7efb6e9b22020a47cfa53b5625c67851e1651cd02ceef927fda86bf565384e4c9ab4877d67dfebad78c6fa8cb72cad649767f9bb74012cf289787b648667bd1b9e30f1e41a4aed0c7e09655b89b29843da9691d4ef6901562c71a13e7f94d04b8d6c84561f41ce5a989457ca31b8269884dde34ba77a20babeb0f83a67bc014b7b05eedba74a030e368c32594a2a1d18ebd21c2820a64e426472d3382844815ecdac74c61d350aa56c67299153086aaf65d576", @typed={0xf, 0x11, 0x0, 0x0, @binary="ad07f8b73b7392b9f91132"}]}, 0x13a4}, 0x1, 0x0, 0x0, 0x93ded5bff17e6957}, 0x40880) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0xff, 0x48, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)=0x4, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000001f00)=ANY=[@ANYBLOB="39647bfd5e060f3443f48b3d209e6eb5af3e16b573c199f7bf44d3b7a005f4515ae7f6e4aaa2446339", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf251200000004000480b40004800900010073797a31000000000c00078008000100010000003c00078008000400070000000800020007000000080002008772000008000200030000000800010008000000080002000300000008000100010000000900010073797a31000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00002800078008000100080000000c0004000600000000000000080002000600000008000200040000002400038008000200ffff0000080002000180000008000200000200000800030000000000880004801300010062726f6164636173742d6c696e6b00000900010073797a30000000003400078008000200ff01000008000100100000000800040009000000080003000900000008000300ff07000008000400001000000900010073797a310000000024000780080001000b0000000800020006000000080001001400000008000300050000002c0004801c0007800800030003000000080004000700000008000300030000000900010073797a3000000000180101801c000280080001001c000000080002000700000008400200080000002c0004001400010002004e22e000000100000000000000001400020002004e200a01010000000000000000000c000280080001000200000008000300d86b5d00080003000800000054000280080001000a0000000800020005000000080004000100000008000200ffff0000080001001c00000008000200cf000000080004000900000008000100170000000800030003000000080001001f0000001400010069623a76657468305f746f5f687372000e00010069623a64756d6d793000000038000400200001000a004e23fffffffbfe880000000000000000000000000001000100001400020002004e20ac14140f0000000000000000280005800c00028008000200070000000700010069620000070001006962000008000100756470008b0b9267d15a0e8ce11835d126510d55a59e44b4ab62534b773e77"], 0x30c}, 0x1, 0x0, 0x0, 0x40080}, 0x40508c0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x24, 0x9, 0x13, 0x8, 0x0, 0xffffffffffffffe1, 0x40222, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x1, 0x1}, 0x4004f, 0x0, 0x9, 0x4, 0x2, 0x7fffffff, 0x3, 0x0, 0x6, 0x0, 0x9}, r5, 0x2, r1, 0x2) dup2(r2, r4) 13:44:46 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1809.283827] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1809.283827] program syz-executor.1 not setting count and/or reply_len properly 13:44:46 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x5) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 13:44:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x80000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x40, 0x9, 0xb6, 0x0, 0x4, 0x80100, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x70, 0x4, @perf_bp, 0x100, 0x70, 0x3, 0x7, 0xffff, 0x4fa, 0x7, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) creat(0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000100)="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", 0x1000) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3e}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x80) [ 1809.556131] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1809.560903] EXT4-fs (loop7): get root inode failed [ 1809.560916] EXT4-fs (loop7): mount failed 13:45:01 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x4002, 0x0) getsockopt(0xffffffffffffffff, 0x4, 0x7, &(0x7f0000000240)=""/62, 0xffffffffffffffff) 13:45:01 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:01 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:01 executing program 6: mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x5917, 0xa322, 0x0, &(0x7f0000000200)={[0x5]}, 0x8) faccessat2(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0x100) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x100) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8e0000e6050000002dbd3004004fac77495fdee908002803c5dc0429a92871498e45ba8de4eacba9eba97f81a695c155d753469f9bd5c20bf7637c1b8ceeeaf8fe626f34950d26569f0b94630735937a0008f3b032efe4d0ffbdebafcb64dafbe935c9b97b40557044bfc9b0fccc46b235919dacea5e8015a4ceb638fa15c5cda3346511648b9f8749e1feaf3d112a4ded9f07b0436a62bd28c3fb312ecc016cea2410020d70366f0c53e08af03b7f7c1c12bd4b86ccd73d337a84df8a6abaa71e5e01a8208d9865366d8303e28946d84cbfe005a020458e5dbd34b659f3c1afcbf74368304e4512359caaf736b9659402b2c801f181ae90370c76874bb15095a1cf25fa86757fe03ccd8748e038b5cf43a3d0c92eba5813867efeafe560810dc6559671987242c8ddfb4e1bfc09280c17d434017866d9e2d2379de7ac2dea517f3747645c7147212923b8bbb636c9397876548a142e415b9fcf1916c0209b06df2459a1f3716dcd72c1e81109bf7c4b468a0ae0ae5261fb2c9ea6ba8c5b1954dbb7a59efb25b201000000e312b3de8b8e5f6978b570c641b2512012ed878c593a3ff6e7e4aabfb27c24a5336f558d55c7a6141c41bf7da4ee903709b8332a3b6dedb138783d38185af7d81cfc3c1fba964768afca93203cb3b472770f11488aa26e28dca44092fa5ad5cddc0bf5e00327b85dbe1d7fcfe2db366f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r6, r1}}, 0x9) syz_io_uring_setup(0x40d1, &(0x7f0000000140)={0x0, 0x67df, 0x4, 0x1, 0x2d7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r8 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'sit0\x00'}) syz_io_uring_submit(0x0, r7, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd=r8, 0x9, 0x4, 0x5, 0x19, 0x0, {0x2}}, 0x385c0b3a) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400000000000070, 0x0) 13:45:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000013000080487fec864b245e8f3f9be149f8326500"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x4080, 0x1) write$cgroup_pid(r1, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 13:45:01 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:45:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:45:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dcb3000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1823.968294] sg_write: data in/out 11787440/8 bytes for SCSI command 0x3f-- guessing data in; [ 1823.968294] program syz-executor.1 not setting count and/or reply_len properly [ 1824.013874] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1824.042171] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1824.042171] program syz-executor.2 not setting count and/or reply_len properly 13:45:01 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:45:01 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:01 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03020000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1824.292523] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated 13:45:01 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1824.332689] EXT4-fs (loop7): get root inode failed [ 1824.334076] EXT4-fs (loop7): mount failed [ 1824.498151] sg_write: data in/out 33807536/8 bytes for SCSI command 0x3f-- guessing data in; [ 1824.498151] program syz-executor.1 not setting count and/or reply_len properly [ 1841.705299] sg_write: data in/out 11787440/8 bytes for SCSI command 0x3f-- guessing data in; [ 1841.705299] program syz-executor.4 not setting count and/or reply_len properly 13:45:19 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dcb3000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:19 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:19 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:45:19 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:45:19 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dcb3000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:19 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03030000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:19 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0xfff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x4002, 0x0) getsockopt(0xffffffffffffffff, 0x4, 0x7, &(0x7f0000000240)=""/62, 0xffffffffffffffff) 13:45:19 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1841.768188] sg_write: data in/out 50584752/8 bytes for SCSI command 0x3f-- guessing data in; [ 1841.768188] program syz-executor.1 not setting count and/or reply_len properly 13:45:19 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1841.834160] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1841.834160] program syz-executor.2 not setting count and/or reply_len properly 13:45:19 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1841.858552] sg_write: data in/out 11787440/8 bytes for SCSI command 0x3f-- guessing data in; [ 1841.858552] program syz-executor.6 not setting count and/or reply_len properly 13:45:19 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dcb3000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:19 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1841.904832] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1841.913065] EXT4-fs (loop7): get root inode failed [ 1841.914837] EXT4-fs (loop7): mount failed 13:45:19 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03040000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:19 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dcb3000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:19 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1842.077798] sg_write: data in/out 11787440/8 bytes for SCSI command 0x3f-- guessing data in; [ 1842.077798] program syz-executor.4 not setting count and/or reply_len properly [ 1842.099107] sg_write: data in/out 67361968/8 bytes for SCSI command 0x3f-- guessing data in; [ 1842.099107] program syz-executor.1 not setting count and/or reply_len properly [ 1842.148134] sg_write: data in/out 11787440/8 bytes for SCSI command 0x3f-- guessing data in; [ 1842.148134] program syz-executor.6 not setting count and/or reply_len properly 13:45:33 executing program 3: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xf7, &(0x7f0000000000)=0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)=ANY=[@ANYBLOB="20c2721600b1b5d70efa20eb004c603176ff28b7934978e4e847b7e46e590736e8f80208db97d15d1c3d68fb4e4fc6dd341cbec31e0b30ae3eaeacaef75449dad350bb5e6d0879c90db1ab72fb687bca8c7e03547038876c9c4d1b6990dd55d0db2c90778277a3b02c670080a19efd7de0e0848c6e2f782c968f1fe62eccc6619046bc16315a46b7f5c376ec846ffaed84339b7c7729fbffe6243e403cca706d59189b68e9f997e67c2b056b43f781cc9037640adaf4f1d942", @ANYRES32=r2, @ANYRES16]) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x163a90252fc78a1b, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/55, 0x37, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "53e73264eba58c5de5d2384abbe8dd8ea72be01bfcd6daa041050a23a5ec27d5dcf0aed87f9bcc869c6ebf1c3630de884b54dd6680e1dea34f661675f984828459321f42fb83d749067850004e9da3375748fa74a4330a66e3ea1e62f2f6413aef353e78ed2acf544d3beb96eefde8336ba9c02208396979ec975179883dacee433aefb6ff1cd41b6438d2f32e0763cdc310e834afb6b92ba385e602882f705da688e37726aef9cc058a02dab68133c46f77e2355193c18fc3c0d70c5856ca61d344026973f15aa81b370a08537ef3733f3c6e5ca3c7b5de9386956019ec0bba0cd387dd3f63606989591987a9dfb27d9225a164158997325d0ef88eae9e1fc00645611ce229cf3e40de15b3798048876412e5224b27b51f15785fc3f6dd8af730312e558319274b8ada98580edfb7097b11502fce5a5abc504db249764eef116b808513d550660c186ed0f5f4921fb7b6cc0529c1eb72438455c1f667d0bd0b171b89b519612913b0152cd1b420b2a9a4df55199a0ebe110d1fcf5eebb46b91e7ae1c5c95c48038dd738f8cf670c2de9bb3d3a6f092d5738fa7ed3d6a657841bb3bed0dee2895781d82e4e2dc6b51998e88e86ff53f21a4ae8ac780306d35e90eb2dc5a3f3a7d43f5dd7ce3807cb00600f7e8754eabcc815bbef1a5382cd7ca73cc85d53020c051882911aecdf9b0ce7c1bfdfa8d820d5efd4b60bacb7e64d98fac78810f085c51a19b89289772196915c93a0503694ed2af76b6960aecf0f1af22ada485b6ac62befdf35a0916678df405ca99925089cd3812d7b09e3f91f4daa94d464df0725249ede75cc626be7a8ed7cb87c0ed46675ed79618746c44729fe831f1cf4e485815bd9f7cdf455f6437f736858cf3026b18ba39d1bddbf58e9952b7d4b566955b80cc3c058fca3cb7e6c5159c3e7367d09ef3e8881179f51c10baf5cf29c8dcdbebdfa73cda0d9ccf8ab5af9240f88f78633be5d7d91da541cfcc01d59ac4936edf9920b67d19a1a093cfd4e594a8b369da465604212c6af340f0ade89223c631ba2db120ac9cfa9bda5b00358cea4c63d66f2b99dd3d575657609224a8874f12e80025173bfe43d35072e1ca14d097201178a8e27e62d4ecad1833aef65d12690ab97e0a15fd60302d1e7e516c3a9440e8535d0d4615d173607be209fcf2b91227519a808f51bc24197c0d63d0e522cf60427c95fae6e6c4bff0f4adb0902b8746738b1098bcf3a884850b7d18856d5ed07580965a693c8f95654cba9fb33f8c46b01347b074e5709fe982852e0f23e5a83215b3547edca8386bd9ebeda5807f3e6fe9dd1b3030abe916e3b7ba9c0b6130acd60f0c9719b3eb136bc8f3690b3f8e8f0d99f88bc6492024e59be459d5a08eaff70c6be9aa884faf2b69a915e191dd6ad34c75e30a06a714969e7a679756d8a76b1c8524deb5d6c868ef5e216369e6bb5207052fd7e5df3fcf8763ca2bfd9db080558571e851862dcd200491138dfd8e5b285f2e68d5e4968d8259c3df6d28fc5fb636ecc7d3fcb3f4af712c8b1d69f9012b07f7e34d8e5e76708c0a50b75d880b65fff32b4cd092fd1c6b2c36c36bea6a1308144ffc8ef9f6f717fe63dbfdfc0a95fc89ada3cb322a9033c5e72b5bc4cf8aadc1f730955fffde0a2881779e1d61b2874269bf1aec2fd075a1616cd3908edcd912f86a8003f39ad8330cde56d5875d495fa2d0941a07b20502f4211ed029b6546bfc50aa2299f8bcf6d524fac760cb74ed195f9cd8f99a027ab4556ccbb486d6a8a0914e654b6add10e68084c6f2e4c66a001bc09de3bf665642833680e4452a21f4686b865ba8e7ed9ac6a5cb932b25aa71a7b1e0146a4cf6390b96bd66fe6f26117b215a1262c8b8fbeed354937d55ca22a8c5927e20a620f4999bd91c0b523188a22efde8809abd90628c9593df695e4e3aad21831ff7db1d39b8839f476342c77cbeb15d12ed034c483c13cde875dc01fd14c1a8ec5529686d957b061f935cb9dbc24a8396cbc705cf7fb9d2169f7e3558ac7869fbd1c43aa9c9399ef0034366833c275000b59870c2ae4f2589c3c0d6b85b74b0a32a04bb5252e1e5201a3d082755a09720377361c5969e67842091fb92b6f7dc38abfb821bd40d0f1040595eb9481e5d28aa25605d87827e0905b350d9fd2750390f5d9025ef6ea30d15f616e932a4559d5c72b873300c8ff0dd44d4df7cd74f4f12f22d2855b2648bb6ecf492cc967cf9c32197c8ba8ec9d1e71aaf612a4dc4bc77aa49d858a6a0086160d0cabc5b31f8873d76cd4106f6a23031e75f6b97ec47a2fd26761ede9d980e40432d797da8e6e923d8bae939d925b84b944da98cd262a3009049d6983c2c17ddb1e693a24302b03497906af4323d0c5b2fb58eb6f9f5c256e56ec880e4d90e82ccc4b722e8f506217c9831d59e9de32e8f36163a43bb2ceb5cdcad19632d9d12bc64b2516cc8a28ddfb84f5c77e2aac8e1d45a7f31cae51f9fbc8a6629144518c291f2b5d5e7612d72213936c09653a91978a678eed3c90b9234ed165f581bfd1dd1dcf0c1286c1c3ce6fa77cced6db8c7ab033a565aa05193d6435ac3e45cd9957f0215cf0b45e71627f0b67dd979d04b916ac5317e73787704936f14a07988abfdc676b7a2cc5e2ace9e4a8b6773617c9067a01b984fcac1ad4d254c21c3259953e5c63fd3353cc4cb41b109c24280e7f40e8ee7f4dd232f6f774f37484cc9c7b5a7bcee9a1a9fef639d691592f63986777812c2e922a5ce336a8600856f94fd5eb3773794b252b971035b604d375cbd7ae53a42e0d1245b351bd11c02e0aaaa4ee7734c31be793398ef7a01d80a9f10d1265a3ec1f20bfb7434567b0a3e63a4a31edd15fc92eaee1e765c7dc8937a716e095bb1a6ac9cd63c5ad726c3d9b92d56a0f678a36c3ace4184139f2218f2b579458d94eb2c286e8ec8e098e62b76df1c4c9b5a8ece01172a75aadee376586c4b76de4d7b07c703eb35ffc7be32d78a94b0c8eddba4d4d6ff8712791a53ca61a92416afc7005c83193c4258a05d8a4aae34bc3d770a083df1badc1629659804152a351552c66265197ea63cc0ae3712b38b8b88ab1674ebeafd41211e62fb2bf1036c7865456478470a3e7276f2c60343d2a90b4a2799720f3a602930b656f369f59fbfd991d9c9d74fa0f46f8e7b8a37f78e212b03a9de446ef4f6d44e75f754dab9d5f0314ec30a302ba619b5bb85a474695ceef68a9b6669669387656e19335918d3d8537759b79f5a368b4b603f2891f151b8c828340811f87509f269ef4390e3b2a58fc8167b5ae7413d35d55667cab25636790be0beea3fc242af0d4a3a9c7d663fad6dbea1909ebf24fb38e95e014cc6afa979e83c21f5961a674c50300d9f9cb7e73708c316e66a9417719b3d9ae63e1ce33c437e900830c65825354ee88b17dec89dde804b7dc17203fa18072afa405a3add8a56cffb7fb691fac87c79bc09fb238e797f5a12e19ba70ef8f167ba0f45c46f32169295a5e6d86f566be3ee415b14e846bf358681ec554fa9d92f3573f41656a50b88596337ef766f98c5df83ff4f33185694a63d429e152b9f11c954f08f21b2607445be9d533c32fdb637537e94c4bd05ec69eb031c63cdccaa90ac852b0ce95d13ffa86ee708da2463d3d122dc235d50d92dfb55b49db8d6b6dc15701ec36006f55cbf4bdc45a67dc20874484175801514654a01a553b06817b179f92a9c8c34fe0d66529f6ca7f2b9b3f3724b80b6421448b96fd394a2f027864308f2b5788cd7b5098387cdeae1cb2ed26a4452ca0c5e28ef5c3c384181e9431ae5e0dfc7542a2a6037cb70468ee5787648223dc9c05696b9b28e1b8f78446798aed0f98e0092d32c356608b71d0716810fa247886f59eb360370221e8b2720654c6352da009c4bb0e7855a65d40e458739567c6f23b2c519126e012afa244d8a99733a1d1598b6c59f3ec9062e0c892f99540768bc9fe6bcb163577f05a7c1817b1806d3f766169aa1590fccc26b696a3e5ff5e338fd076f36e9713fd2b284ffd5ccbb68cc45d00249cbacf293908ccd47bfe1ce91329c75750762e91be71ef76ad2dddbea7ba8edaf70bf860a80ea8acc7183532b8f3498b1b2de9538e40b6cbc9b7f88c73b8952abd9c2d832d4d92bd2d00830d37418f33e58de35b49321654c762510b54c216a9f698772ddfe5082c8539e8158f3ea4e5b6fb4ce48dbac281fc20a7aebb5ecb021fede4c9c17e01e7fe5d8bda4e6fc6844a6014551044632654be6c519778ab18e28a67107163fff2ee942d2257d5dbeb3e19d6190ce4f9fc117e1d23f1f317baa0c377ea3b72d49ae28ecba77277a516cae36ba6ee91bcef308871efb5245cd9420bac262f3e91c96645ec5097ee802f0f103e9fcf8de5d809404006c91613e5eac580a05b135844e09e412fc728213a15ef64c035ce57c5c68724242d7f039c9b139609f523b9d8b2e90e3c85367ab09133d8c319b2d70b6d85ae0662b37a280ba8d02f80cb62e49dff9d062f536de074992998f0fe94a4a96310f262f3363d084ff5bf8bd0769a6c1f73a241b962310f21af08a8f7849ad64dfd37f665a3cedc817a788fcce1e739f784d8e336f5b83b6a1cf73225be911355e65945af07fef1190e31080d6b177b716f2244167e6eec76a275b4a3125df0eb196fd4fde958924282b47094497c1ffe0a128d6d9e409c69bb0c20a4fdc19a8b7ec4c4a54afb8746554c2846b2b713a91f678e688493db73e46ea8359357fe93e5f62542ecf874a56d7f7417f18b4fd0327b231ab73ad60d6532e533ccff78926faaab23722516a6525588c8b7fd064d12fe22994a19d20303f0761d4b6b59101884adeee090519df00f79b066bcfabbc92de6e9a6e8bf2fa5fb57d0c8cfa0448c61532f77faab33b25291bdd300a2c64c341c2a5a96a326e1a4216b4723c849ce2b6cd084693d0792571751a44ba30b80b62b4ff0cefcb5d508b93688abaf3283f8918861b35468ed4a44d4e2db9196531d9ad4d2ed8cd47457732e522289cc8cb3e45ac065075394826abcdf9787d8f0a89e79e3a053df27007f3316459cc7acb571486fae3e81238c8a329cfc2f2655bd349b29856babab75908b7d07657ffaa6e02981772e328465c2a82871fc1bc63ddbf12e2b124ace7a646e1412f95d04346e4ad5580e4de7a0b5c9deaf8e4449e222504a3d08825d30e745b7e875783cc8127f628c158e39333f07d6b1a14570b0632e1defa0803dbf8d6f987ffd3ac29243facf91ae4fdff11ea015b95df174438984598dea0ff3e820f973a987c6fa69a31fc6e5ba4920e6d7db43fa0cc6765351d781259d05caac19ee5d01d14101e369a567fc67dce565c42c1b16ab3c38a34bff78d64c7df1de4"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "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", "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"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r5, 0x1, {0x0, r1}, 0x1, 0x2, 0x1, {0x0, 0x0, r2}}, 0x80000000) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 13:45:33 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03050000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:33 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:45:33 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000", 0x16, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:45:33 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:33 executing program 6: rt_sigqueueinfo(0x0, 0x17, &(0x7f0000000140)={0x0, 0x0, 0xfffffffb}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)) r1 = syz_io_uring_complete(0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xa) capset(0x0, &(0x7f0000000200)={0x93, 0x80000001, 0x3f, 0x0, 0x0, 0x51c0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000007c000000", @ANYRES32=r1, @ANYBLOB='\x00@\x00\x00\x00\x00\x00\x00', @ANYBLOB="eb4a7c001f2182fd754902a67d474e2dd5ec867b5109cd7fef8949ee086d648273d2a629b141f76fef7c6c29647707f9efb82c0643c835b005e63a671353eb4421220760976794a9e5ee64fc5191a4174c6bec240a57a92306bea02608ae5d82439b321f7f92a1b20dfe14a1ed1e61c1fc32dc85de2f8e46dd4d4129bdb9b69da0e863618b4bff5ce1deee1524fda3af7feb36023c1c76659c796e22eccce168ad0e29c0681ece578cb045631da836fb9cdaf0124d8056efe52e54c156c2f27a90f26556605479bf7351993594942cf2b5277655f16bfa9eeb355631c049540fd66d"]) finit_module(r2, &(0x7f0000000180)='#\x00', 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x401070cd, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000002ec0), 0x4) sendfile(r1, r1, &(0x7f0000000040)=0xfffffffffffffeff, 0xffff) unshare(0x48020200) 13:45:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1856.358352] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1856.358352] program syz-executor.2 not setting count and/or reply_len properly [ 1856.378287] sg_write: data in/out 84139184/8 bytes for SCSI command 0x3f-- guessing data in; [ 1856.378287] program syz-executor.1 not setting count and/or reply_len properly [ 1856.437081] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: special inode unallocated [ 1856.451369] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1856.453330] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 13:45:34 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1856.454687] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1856.456256] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1856.457800] print_req_error: 5 callbacks suppressed [ 1856.457819] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 1856.465172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.466990] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.469012] buffer_io_error: 6 callbacks suppressed [ 1856.469023] Buffer I/O error on dev sr0, logical block 0, async page read [ 1856.474900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.476066] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.478069] Buffer I/O error on dev sr0, logical block 1, async page read [ 1856.480904] EXT4-fs (loop4): get root inode failed [ 1856.482262] EXT4-fs (loop4): mount failed [ 1856.485933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.487082] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.489078] Buffer I/O error on dev sr0, logical block 2, async page read [ 1856.494914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.496294] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.498307] Buffer I/O error on dev sr0, logical block 3, async page read [ 1856.509887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.511047] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.513072] Buffer I/O error on dev sr0, logical block 4, async page read [ 1856.531920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.533094] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.535116] Buffer I/O error on dev sr0, logical block 5, async page read [ 1856.537883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.539030] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.541081] Buffer I/O error on dev sr0, logical block 6, async page read [ 1856.543199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1856.544349] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1856.546364] Buffer I/O error on dev sr0, logical block 7, async page read 13:45:34 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:34 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03060000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:34 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xffffffffffffff04, 0x6, 0x1, 0x100}) write(r1, &(0x7f00000000c0)="e50430076100fbb27e566c8d9f600921633afaba07838e9ae2de26d44adca97f8c8efacc4a5cba17cd2dfd7d1cb2ec4fc6b6a6923055d9ddc9a3aebc2a014d08d3bdf4679b19c2b469d700e2f6a1e8d099916c15bfdcdad8fed2", 0x5a) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x1f, 0x0, 0x1, 0x3, 0x3, 0xa8, 0x95, 0x40, 0x148, 0x1, 0x7ff, 0x38, 0x1, 0x7, 0x101, 0xde3}, [{0x7, 0x76b, 0xfffffffffffffffd, 0x8, 0x8, 0x6, 0x7, 0x3ff}, {0x6474e551, 0x8, 0x3ff, 0x5, 0xba9, 0x0, 0x0, 0x8}], "8c0f1dac94d0d60a66ad13119edbcb3a8af0066460d61cc6611c58f8c30095d1cbe198cc7a6a828d16b1945f7acd00e8fa20861bb6fd803cce4cde575efdf4fb24bd74380b7c33c0ac81d33141f87d98e771e581755ddefeeaca3aaeeac2a5428f14a5529573a8e6ba93a0c0e3dbb07993ee5bba0ca57c069a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa29) 13:45:34 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 1856.757955] sg_write: data in/out 100916400/8 bytes for SCSI command 0x3f-- guessing data in; [ 1856.757955] program syz-executor.1 not setting count and/or reply_len properly [ 1856.764338] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1856.787206] EXT4-fs (loop7): get root inode failed [ 1856.788869] EXT4-fs (loop7): mount failed 13:45:34 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:45:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00'}) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000b80)="20000000000100000c000000d40000000f0000000100000000000000000000000020000000200017aa62ac7000e90bacf306000000000000005fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000", 0x63, 0x3}], 0x8000, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRES64=r0, @ANYRES32=r1, @ANYRES16, @ANYBLOB="fa6d40fdb89dba8b2759f995f1cc272e796964ad1c0956aa99626fb3b7fce280493520af859094f894a33b47106616c56ad33c9a994a58d2a709eca58cd5b6eade99d936ef622402f4cd61cd4e671feb2ddde195cdd3dc7ef81c18cdd52306b234860bdabcbc7aab4edf3153335350b36170092e7b8fe63ce10022ef02ac462207711ffbf2dcfc852e0d4756c3b3eeeb197df33c88c7f07790e00812391aa516", @ANYRES32, @ANYRESOCT=r1, @ANYRES32=r2]) openat(r3, &(0x7f0000000040)='./file1\x00', 0x10d000, 0x2) [ 1873.718104] sg_write: data in/out 117693616/8 bytes for SCSI command 0x3f-- guessing data in; [ 1873.718104] program syz-executor.1 not setting count and/or reply_len properly 13:45:51 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:51 executing program 3: r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000100)=""/88, 0x58) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0x110, r1, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 13:45:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:45:51 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:45:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000000000000df704c895b9d717dc8658a8661c84ab505db2f094c504eb0f1a722574074be31a611fceb913a7b090a910118eeca7afb"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x4, 0x0, 0x0, 0x8000]}, &(0x7f00000002c0)=0x78) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8000, 0x2, 0xa9, 0x0, 0x9]}, &(0x7f0000000240)=0x54) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000007c0)="3f7623c0fd5713364c", 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setresuid(r2, r3, r1) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x105000, 0x88) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x40, @loopback}}, 0x0, 0x0, 0xc, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) 13:45:51 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03070000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:51 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000", 0x1a, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:45:51 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, 0x0, 0x0, 0x0, 0x1100) 13:45:51 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03090000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:45:51 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) 13:45:51 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1873.858171] EXT4-fs error (device loop7): ext4_fill_super:4962: inode #2: comm syz-executor.7: iget: special inode unallocated [ 1873.866597] EXT4-fs (loop7): get root inode failed [ 1873.867832] EXT4-fs (loop7): mount failed 13:45:51 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, 0x0, 0x0, 0x0, 0x1100) 13:45:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:45:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb400"/143]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc0100, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000440)=0x9, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 13:45:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000400000000000000df704c895b9d717dc8658a8661c84ab505db2f094c504eb0f1a722574074be31a611fceb913a7b090a910118eeca7afb"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x4, 0x0, 0x0, 0x8000]}, &(0x7f00000002c0)=0x78) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8000, 0x2, 0xa9, 0x0, 0x9]}, &(0x7f0000000240)=0x54) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000007c0)="3f7623c0fd5713364c", 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x7) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setresuid(r2, r3, r1) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x105000, 0x88) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x40, @loopback}}, 0x0, 0x0, 0xc, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) [ 1873.991127] sg_write: data in/out 151248048/8 bytes for SCSI command 0x3f-- guessing data in; [ 1873.991127] program syz-executor.1 not setting count and/or reply_len properly 13:46:07 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, 0x0, 0xf8e) 13:46:07 executing program 3: ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x43}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa20000c3) creat(&(0x7f0000000040)='./file0\x00', 0x0) 13:46:07 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03090000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:07 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:07 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:46:07 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc030a0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:07 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, 0x0, 0x0, 0x0, 0x1100) [ 1889.518192] sg_write: data in/out 168025264/8 bytes for SCSI command 0x3f-- guessing data in; [ 1889.518192] program syz-executor.1 not setting count and/or reply_len properly 13:46:07 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) [ 1889.584618] sg_write: data in/out 151248048/8 bytes for SCSI command 0x3f-- guessing data in; [ 1889.584618] program syz-executor.6 not setting count and/or reply_len properly 13:46:07 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 13:46:07 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) [ 1889.647457] sg_write: data in/out 168025264/8 bytes for SCSI command 0x3f-- guessing data in; [ 1889.647457] program syz-executor.1 not setting count and/or reply_len properly 13:46:07 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc030d0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:07 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1889.691217] sg_write: data in/out 218356912/8 bytes for SCSI command 0x3f-- guessing data in; [ 1889.691217] program syz-executor.1 not setting count and/or reply_len properly 13:46:07 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:07 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc030a0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:07 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, 0x0, 0xf8e) [ 1889.750376] sg_write: data in/out 168025264/8 bytes for SCSI command 0x3f-- guessing data in; [ 1889.750376] program syz-executor.3 not setting count and/or reply_len properly 13:46:07 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc030e0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1889.851078] sg_write: data in/out 235134128/8 bytes for SCSI command 0x3f-- guessing data in; [ 1889.851078] program syz-executor.1 not setting count and/or reply_len properly 13:46:07 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x1000}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000800)=ANY=[@ANYBLOB="070607000000000000000010000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)) lsetxattr$security_evm(&(0x7f0000001b00)='./file0\x00', &(0x7f0000000080), &(0x7f0000001b40)=ANY=[@ANYBLOB="0413efa4bd2c53237a91a4fe384e2aeef78b1810e89caef9c13918e6e7c6941efe30f8ac719891aaba2221feeb4d31d30326bc7b5f69e7d9280f184e7b84cc5b41df7fc75d4fb3c87c216ad5ad200dce5ffd5c37d4c3477d03312115f35b3daf454cb9fb3ceab6438b0be399c9827edb19d2a2372dc0bb6a1d96d4fda228d51cd41e22a3e8825e09f376a1130d31f42e44ca47cc1700b247cf020b811346230df199341035f2c0af73086c032902"], 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) chown(0x0, 0xee00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000440)=ANY=[@ANYBLOB="0309000000000000000000eda577b74cf8c13c7ff04266e723a45091714b17c77fa0831f177b51fc819559a2eceea3893d94020bfc32e6f150be1df02846c27c63f23e6e07f6cf2af9fbe8212768ba373069b0c94a3b5d19178e98ac005e175953aaa4154ecaab6b328af6750291727132834c2c6d0fdcd98ebbea66d3643e21ad47eb31a8104674b6ade1951fe0be674d68c571162af56f9e816edd59f1fd12ed42a8b25dde2de8c6658b5a84e008b5578351814faa9d2e8f434760fa183b51ea7f4ab6d6ef7adc1245ef339e9957880ec5632fe655bb42cdefc124572813e08e8ab2ccb2398c9b8e4c12dc1ad896b18bcc3bed7843abfbefb66401a2f759c3f3e67f9ce3e3df6882511bfd762dd1cddb0250957e79cc735284a874636d8dbfa7760aa6e4111602e52709879c6d9bf6bccdaeecef613bbcecaef887202f9e89b5e11830dad2b6f9d71b8a555a6ea28ebbcb6fd0cca141337e26d57f0e7835ffbd375904c861ea4c37812adb43b0e2b5242b52dc00000000000000000000000000dff5628cb7f7a9f32b4f966d2ecefb025b320f7d14d748384c35f47411a2538384dc26bae4c11df89e9417ef9ec3b902480546c883c0e434709efc459d91fc443dc1ed7dc5c67646ef8439711107e05c792abd2aa60f1e8f11decfc65a103288adcf1d3463f009e6739aff83860b62a89e4ca41a625a4af50ae3c496319586752555301a2be5d27183362cf6468873b52d06e7d1aa7c950d34795e9bd9429d8b78ff8c8551f5fb4ddeff64ea58fc00d322d05c6788656f5eaab17310b977a19751"]) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) acct(&(0x7f00000001c0)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file1\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0xb60082, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xe65, 0x0) dup3(r0, r1, 0x80000) r3 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'sit0\x00'}) sendmsg(r3, &(0x7f00000007c0)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="a8b7e3a0c22aa98b9a90ddc0fb6f7092f3715ee315cee0142e2a6af2322c0b48f189b3d04529b6eaaafa557ffe7185c997c8fb7861dfd55fa06b6557cb9e86f966613551fc892b23aeabeba8b40c751fcfec8ae16d21c6144a2af2e8", 0x5c}, {&(0x7f0000000300)="213a6737ed914e352893a80dc25e632d53f09043d16553c2e8d591bd3f8d97de982fd3ae1c0bf266264573c72aafe059b52a0d0379bd62904abba2d138d1c80df5f82657ce3bf13692395294aef636e960681dbe6c0efa016b640a15e5262520ec8f75bd57dce215fd0bc5dbdb2073a9d97580", 0x73}, {&(0x7f0000000840)="2bd132584cd59da72cd48ac1df06cc081bfe929e51a5362ea6cfb66e594c29cad7580009f3ed7aebc779d7d939b0e494c3acd069f514cbb86782d4904eaf94c76e353e30aad0ad8fe8c756f2ef1af9319758918fa3d662e1835bcf634beee089aef3f49adfd96fc1b966e6db8c22f285a6c1be152d9deac86dcebb0c1669b13657f857c5cb82595c35e7fe9a0dea05caf9dc15030281ed7467fed3c915b4d716ad312783e501a9f0b382e69ca242952b52", 0xb1}, {&(0x7f0000000900)="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", 0x1000}], 0x4, &(0x7f0000001900)=[{0x80, 0x10a, 0x39, "ac2eb63098d093ba2f1aaf032fad0d4e74a652fc1b1f7a5cb9d6025f5053071543cd61b6d25d440b3158cf3608630ab9ebfedbb7ff3b470d119094ea84409cc50fe545c7e4996ac4e7242217048cd35945bdecc162947ec09543ee9039dc324c1cf37cd8aa905c37a3b1"}, {0x58, 0x102, 0x40, "2384afd591d0b8018bc683d4a9a44cd41acd5eca543b9607a57aef11e601e7b3ddfa20f4b23b32af15bcea2527e429a429e886323998419a840cf0ec52e131c5cb82f817a6"}, {0xf0, 0xff, 0xfff, "d303604d957c1a530effc82047d8f31ba18cdab8749e1f6ab548638fca368873d49da14b4e365ee9316f8e08bfa968b330857da679d293cfad62a4949c4f341a750d0b50e9935c7855fbf9fcf9dec27334c4d223a0e48d361fd7e964b04c3000471799dc97e9e524cc34a4cb50de10ce02ee0778174aeeca580c6d40da495727370c12c1cf19eda5133a937cba12617e4bbe559dcd7e30c495f7e968f1f2d8ae7f09d647e0ed7cf8bcd0a83256537eab8d17d276c09483b22f0b24ef04d192ea13a1b12867b3bf38bb5fe61aba49f57e4bd2c4c200dbe677ea77dfe2b86123b0"}], 0x1c8}, 0x800) openat(r2, &(0x7f0000000180)='./file0\x00', 0x8000, 0x194) 13:46:07 executing program 3: flock(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0xfffffea8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x14, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x7ffe, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x2c10, &(0x7f0000000140)={[{@noacl}]}) 13:46:07 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 1) [ 1889.891049] EXT4-fs (loop7): corrupt root inode, run e2fsck 13:46:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000340)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x114c, 0x11, 0x1, 0x0, 0x0, {0x7}, [@typed={0x5, 0x3fff, 0x0, 0x0, @str='\x00'}, @nested={0x1130, 0x0, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @fd=r0}, @typed={0xfb, 0x70, 0x0, 0x0, @binary="d8cd84ef66e26490e817f6b8d7b49684e98c6849afaf308cc923437fdf75560d754e7eaa039652d55711eba6002a72ef5cfac8761f0699812a32befe4d9478e788e631443f5cf3f493fddf6d484a32e6837feb0698f78b1b1f0ccc2d6b46e89cd69ede9d7080140ec62cc0d45e7ce12e30e0c42956ca79d8bf13c00015ce1de80040d5090d66a408e65de6ee6cb76355f89fc6ddf1bef636fe47e505f2750c95064e1b45b3465ccfa3d4e9276ffc09750b2b95513b93525b005aa3d5aa0a088e88c049216b48eb60b4b096c13c8b0aa7610761f271db5e4a2fb2b61e7ec7c4ea5262ada8c9ef2a81d28c54fc44dd15d4337a4ee62f8eb0"}, @generic="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", @typed={0x8, 0x2f, 0x0, 0x0, @uid=r1}, @typed={0x4, 0x95}, @typed={0x8, 0x1b, 0x0, 0x0, @uid=r2}, @typed={0xc, 0x48, 0x0, 0x0, @u64=0x200}, @typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}]}]}, 0x114c}}, 0x0) [ 1889.918961] EXT4-fs (loop7): mount failed [ 1889.949340] FAULT_INJECTION: forcing a failure. [ 1889.949340] name failslab, interval 1, probability 0, space 0, times 1 [ 1889.950732] CPU: 1 PID: 13271 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1889.951490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1889.952404] Call Trace: [ 1889.952726] dump_stack+0x107/0x167 [ 1889.953128] should_fail.cold+0x5/0xa [ 1889.953547] ? getname_flags.part.0+0x50/0x4f0 [ 1889.954039] should_failslab+0x5/0x20 [ 1889.954449] kmem_cache_alloc+0x5b/0x310 [ 1889.954887] getname_flags.part.0+0x50/0x4f0 [ 1889.955364] getname_flags+0x9a/0xe0 [ 1889.955779] __x64_sys_execveat+0xd6/0x140 [ 1889.956238] do_syscall_64+0x33/0x40 [ 1889.956647] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1889.957200] RIP: 0033:0x7f74ad4f0b19 [ 1889.957604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1889.959611] RSP: 002b:00007f74aaa66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1889.960480] RAX: ffffffffffffffda RBX: 00007f74ad603f60 RCX: 00007f74ad4f0b19 [ 1889.961284] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1889.962104] RBP: 00007f74aaa661d0 R08: 0000000000001100 R09: 0000000000000000 [ 1889.962876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.963670] R13: 00007ffed8916edf R14: 00007f74aaa66300 R15: 0000000000022000 13:46:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x2, 0x0, 0x0, 0x1081802, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf04, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x110, 0xffffffffffffffff, 0x8000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x6, 0x1, &(0x7f00000000c0)="8ed82049e41e9bdfdba130c02c6eaba79019e621fe196ac9f07ccdd50f8dd69dcd6bc627522693360e2ae5b5b94cb178212390910647f458c4a593addf55da76cab4578f6d52e2d13ea21331089c79ec003dcd769094d6d71c1bd50f666d0fc4f89be10511c9bd801b2e2ed09a3b2c1b5a8f2db8f70bf438aee6", 0x800, 0x0, 0x0, {0x1, r2}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7fff, 0x800}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 13:46:22 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:46:22 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (fail_nth: 2) 13:46:22 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/notes', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) sendfile(r1, r0, 0x0, 0x1) 13:46:22 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, 0x0, 0xf8e) 13:46:22 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc033e0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:22 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x110, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000004c0)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5", @ANYRES32=r0, @ANYBLOB="0852000004d3735500c761460f666900"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) r6 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xe7, 0x4, 0x50, 0x7f, 0x0, 0x7d, 0x5584, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x465, 0x80000001, 0x4, 0x2, 0x1f, 0xe62c, 0x2a8, 0x0, 0xffc, 0x0, 0x7}, 0x0, 0xa, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r7) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x2}) getpid() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0xfffffffffffffffe, 0xffffffffffffffff, 0x6, r8, 0x1) dup2(0xffffffffffffffff, r8) [ 1904.573447] FAULT_INJECTION: forcing a failure. [ 1904.573447] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.575883] CPU: 0 PID: 13292 Comm: syz-executor.5 Not tainted 5.10.199 #1 [ 1904.577346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1904.579077] Call Trace: [ 1904.579633] dump_stack+0x107/0x167 [ 1904.580403] should_fail.cold+0x5/0xa [ 1904.581213] ? create_object.isra.0+0x3a/0xa20 [ 1904.582172] should_failslab+0x5/0x20 [ 1904.582974] kmem_cache_alloc+0x5b/0x310 [ 1904.583857] create_object.isra.0+0x3a/0xa20 [ 1904.584819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1904.585917] kmem_cache_alloc+0x159/0x310 [ 1904.586815] getname_flags.part.0+0x50/0x4f0 [ 1904.587772] getname_flags+0x9a/0xe0 [ 1904.588572] __x64_sys_execveat+0xd6/0x140 [ 1904.589498] do_syscall_64+0x33/0x40 [ 1904.590289] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1904.591383] RIP: 0033:0x7f74ad4f0b19 [ 1904.592199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1904.596051] RSP: 002b:00007f74aaa66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1904.597700] RAX: ffffffffffffffda RBX: 00007f74ad603f60 RCX: 00007f74ad4f0b19 [ 1904.599227] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1904.600769] RBP: 00007f74aaa661d0 R08: 0000000000001100 R09: 0000000000000000 [ 1904.602303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.603765] R13: 00007ffed8916edf R14: 00007f74aaa66300 R15: 0000000000022000 [ 1904.615992] sg_write: data in/out 1040440496/8 bytes for SCSI command 0x3f-- guessing data in; [ 1904.615992] program syz-executor.1 not setting count and/or reply_len properly 13:46:22 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x1}, 0xf8e) [ 1904.721928] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 1904.724183] EXT4-fs (loop7): mount failed 13:46:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r4, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000300)=[@mss={0x2, 0x8}, @timestamp, @mss={0x2, 0x80}], 0x3) sendmsg$inet6(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0xa, 0x4e22, 0x20, @mcast1, 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="48ca51b75ada7853b595739e2ce2c73b5decb77e9bdd36e6bfccec7cff05919f0e42f97856e479a21bc9a929977f385b519420f61339bec43ebd78396cdd74ce17b9e67328df5152782fd3be577af6211636cfd4358bd731cfd80edf0d60f5a8aa53eedcdc132cfd923fcdfe63072718b285abf37e63ee3c8c46db6cdeceaefad1fe272a3a1efc4dbe30b387e120", 0x8e}, {&(0x7f0000000440)="e2e91b0f65cd57650fdad794e5201eaa2b35834776267533606b98c47c8d9befdead7badb19ecbadb4b6a093dd8699393109f4713c9547aa21022339ef475397031b237ee0eefde5ac96292335c91ebc518d22aa7b39b7c4af049f1fa1a56081a4d687194d0dce26f73833833cee125b0907ef96ff24d59ce7ed0fcf09", 0x7d}], 0x2}, 0xc081) close(r3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3, 0x400, 0x2, 0x58}) sendfile(r0, r2, 0x0, 0x80000001) 13:46:22 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:22 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03480000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1904.796552] sg_write: data in/out 1208212656/8 bytes for SCSI command 0x3f-- guessing data in; [ 1904.796552] program syz-executor.1 not setting count and/or reply_len properly 13:46:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x2, 0x80, 0xd2, &(0x7f00000000c0)=""/210}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000001c0)='>') 13:46:37 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:37 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2100, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3, 0xff, 0x0, 0xfe, 0x0, 0xffffffffffffed2a, 0x5281, 0x1a, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0xc0, 0x100000000, 0x42b, 0x7, 0xae56, 0x6, 0x20, 0x0, 0x10000, 0x0, 0x8}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) flock(0xffffffffffffffff, 0x0) io_uring_setup(0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x1000) r2 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xd5, 0x842, 0x23456}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000100)={0xbb, 0x8, 0x9, 0x1, @msf={0x1f, 0x5}}) dup3(r2, r0, 0x0) 13:46:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:46:37 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf8e) 13:46:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:46:37 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:46:37 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc034c0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) dup3(r0, r1, 0x80000) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) pwrite64(r2, &(0x7f00000002c0)="b3fce95618ffd4", 0x7, 0x1b9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) r3 = signalfd4(r1, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x8, 0x80000) getpeername$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000100)=0x1c) 13:46:37 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1102) [ 1920.201471] sg_write: data in/out 1275321520/8 bytes for SCSI command 0x3f-- guessing data in; [ 1920.201471] program syz-executor.1 not setting count and/or reply_len properly 13:46:37 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) [ 1920.245745] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1920.245745] program syz-executor.2 not setting count and/or reply_len properly [ 1920.285204] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1920.295003] EXT4-fs (loop4): mount failed 13:46:37 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1103) 13:46:37 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000081}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xb6, 0x9, 0x81, 0x1, 0x0, 0x4, 0x49c9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x408, 0x3, 0xfffffffd, 0x0, 0x80000000, 0x0, 0x42, 0x0, 0x100, 0x0, 0x75bc34c5}, 0xffffffffffffffff, 0xe, r0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x7, 0x8, 0x6, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8001, 0x220b}, 0x2100, 0x1, 0x7c00000, 0x9, 0xff, 0x1024, 0x1, 0x0, 0x4, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r3, &(0x7f0000000700)=""/189) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0xffffffff7fffffff, 0x4}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00003c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000000000fd00"/112], 0xb8}}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) 13:46:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:46:38 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x81, 0x7, 0x3d, 0x6, 0x0, 0x7fff, 0x180, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0xdfe9, 0x3ff}, 0x400, 0x8001, 0x7, 0x8, 0x5, 0x1, 0x6, 0x0, 0x40000000, 0x0, 0x8}, r2, 0xffffffffffffffff, r0, 0x3) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x800) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1) ftruncate(r3, 0x7f) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r4}, &(0x7f0000000040)=0x0) syz_open_procfs(r4, &(0x7f00000001c0)='net/dev_snmp6\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) timer_delete(r5) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) signalfd4(r6, &(0x7f0000000180)={[0x5]}, 0x8, 0x800) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 13:46:38 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 13:46:52 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:52 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1104) 13:46:52 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 13:46:52 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)={{0x108, 0x3, 0x9, 0x272, 0x13a, 0xffffffc1, 0x3b7, 0xffffffff}, "3d31ee94994ce29464921799e10d23d06374d127c19a725bebe08a3075856f87dc1fb8f1804f2ba4b9158683a0407930d0a01cb0e7e40805bc50bcb967e4a903d75b2de199c27fc9239a21", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x66b) sendfile(r1, r0, &(0x7f0000000040)=0x5, 0x80000001) 13:46:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r2, r3], 0x2) r4 = clone3(&(0x7f0000000000)={0x115061900, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r5, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r6 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000140)=[r2, r6, r2], 0x3) r7 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r7, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xff, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x10020, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180)}, 0x21, 0x4, 0x6, 0x3, 0xffffffff, 0x928, 0x7fff, 0x0, 0x5, 0x0, 0x9}, r4, 0xc, r7, 0x9) 13:46:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:46:52 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000081}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xb6, 0x9, 0x81, 0x1, 0x0, 0x4, 0x49c9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x408, 0x3, 0xfffffffd, 0x0, 0x80000000, 0x0, 0x42, 0x0, 0x100, 0x0, 0x75bc34c5}, 0xffffffffffffffff, 0xe, r0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x7, 0x8, 0x6, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8001, 0x220b}, 0x2100, 0x1, 0x7c00000, 0x9, 0xff, 0x1024, 0x1, 0x0, 0x4, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r3, &(0x7f0000000700)=""/189) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0xffffffff7fffffff, 0x4}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00003c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000000000fd00"/112], 0xb8}}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) 13:46:52 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03680000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1935.393597] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1935.393597] program syz-executor.2 not setting count and/or reply_len properly [ 1935.442233] sg_write: data in/out 1745083568/8 bytes for SCSI command 0x3f-- guessing data in; [ 1935.442233] program syz-executor.1 not setting count and/or reply_len properly 13:46:53 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 13:46:53 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1105) 13:46:53 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) statx(r0, &(0x7f0000000180)='./file1\x00', 0x800, 0x8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) fstatfs(r0, &(0x7f00000001c0)=""/201) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4001c0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, r4, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002480), 0x800, 0x0) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000ac0)={@msf, 0x1, 0x1, &(0x7f0000000a80)=""/1}) dup3(0xffffffffffffffff, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 13:46:53 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000081}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="81b7a71e652957ed2302955f466e5c6d557e22ea675c4434c5b62afed5124f37cf4c6458799a154f2990a48f27bcd91ca6911a58ae727bc9767d678edf9cc3c6a768d2dfe2ebc032dafc2489993c72e2a567269c1f4a0724f86a28665f09c782e1782235bd7aeb7a90775760792902dcb363e4ea2eea1648c981800753d54fb4c1a4e77c2c7ee0482e48b25d8eb31039a58efc61d2825c79a4e141e551965ddd03f2a082962ad9214e32dadf7af02d9bdf9b8aad479419fa35e08e49b54e4b2ca029d0d67709368d603ee62823a68c9737f8f999c8da77ba0cc9f2ed634580e4c9433879e72844f25dee13d5096f1cf9c82397f7d9ebc8f6feab14b16e4ca875b66234ab8e36cbb77eb12b1360df91d3b0f10162891ead5760419f095f64d69fd9a8631213fc00f709d39772576614fc4048d5fd5fa441de8514f52393f6bcda6a58350689cd039e9922d9ad44783643b76f0163a3dd037ce70c23e21a26e48315c9a4b06d9958b4a4eb1f9cc31252056d6de201622fcd7e040f636fe8bc1efcac4608c6a72f346dc7c779d7249e8a0af05b64149c433408548462108cff2bf900168046df4d7ae012e10e25c42b1b28b6e8e96dde54a3091403f8a0a2748eec464f0527ab881eafc5d60afbcab1ec195af0049e98aa2707f34ecc55b4e761ee5e2f33ff3d2d08529359dd43bdc2d6d3f9256cc4fd2d3fcec810964be677fd9da00c1f5c6702394eb1aa29d860ff4af94aa54dd36c0429a6de8ecd95ca799182b9c93282f796f8f8b4b90ccedae821d49293f3d15187e1eab1c44f1ee645fad7f504607fe8ede36990a983f12bf58a8eaa2efc2055a8e1c7ef86a57363c3566991379849ceea710dd87523c45689b63a576c1077aa7f0883312af3d45ca5c0e97f1579d677aa1fc2d23d2496c24d638a080095000a010101000000060039007b0000005865853d551e056a4bcdd80c3fb951de8479a8f549dda108f4eca3d707fff7f31fbd595964fd52007f01006b2d8480982f0d3a067ebfcb6222d381d457e273e18bb72337b2046fd8c0f77144c258c9fdf125959cc648c94035ef33de0b70dc11e9100183a5d790f3e41c0b64fec26eb90587a1946c7fe5fe49164c3ace71dfdcfdff2bc8fcf6dd02afec9a741ed8c49c8c461d9159ab4541acd6354b218ef8c7743a0800860007000000000000"], 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xb6, 0x9, 0x81, 0x1, 0x0, 0x4, 0x49c9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x408, 0x3, 0xfffffffd, 0x0, 0x80000000, 0x0, 0x42, 0x0, 0x100, 0x0, 0x75bc34c5}, 0xffffffffffffffff, 0xe, r0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x7, 0x8, 0x6, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8001, 0x220b}, 0x2100, 0x1, 0x7c00000, 0x9, 0xff, 0x1024, 0x1, 0x0, 0x4, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r3, &(0x7f0000000700)=""/189) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0xffffffff7fffffff, 0x4}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00003c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000000000fd00"/112], 0xb8}}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) 13:46:53 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc036c0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1935.593146] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1935.595946] EXT4-fs (loop7): group descriptors corrupted! 13:46:53 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03680000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1935.693184] sg_write: data in/out 1812192432/8 bytes for SCSI command 0x3f-- guessing data in; [ 1935.693184] program syz-executor.1 not setting count and/or reply_len properly 13:46:53 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:53 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1106) 13:46:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 1935.788474] sg_write: data in/out 1745083568/8 bytes for SCSI command 0x3f-- guessing data in; [ 1935.788474] program syz-executor.4 not setting count and/or reply_len properly [ 1935.820512] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1935.820512] program syz-executor.2 not setting count and/or reply_len properly 13:46:53 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03740000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:46:53 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03680000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1935.942025] sg_write: data in/out 1946410160/8 bytes for SCSI command 0x3f-- guessing data in; [ 1935.942025] program syz-executor.1 not setting count and/or reply_len properly [ 1935.982140] sg_write: data in/out 1745083568/8 bytes for SCSI command 0x3f-- guessing data in; [ 1935.982140] program syz-executor.4 not setting count and/or reply_len properly 13:47:15 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000081}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xb6, 0x9, 0x81, 0x1, 0x0, 0x4, 0x49c9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x408, 0x3, 0xfffffffd, 0x0, 0x80000000, 0x0, 0x42, 0x0, 0x100, 0x0, 0x75bc34c5}, 0xffffffffffffffff, 0xe, r0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x7, 0x8, 0x6, 0x0, 0x0, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x8001, 0x220b}, 0x2100, 0x1, 0x7c00000, 0x9, 0xff, 0x1024, 0x1, 0x0, 0x4, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fstatfs(r3, &(0x7f0000000700)=""/189) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x0, 0xffffffff7fffffff, 0x4}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00003c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000000000fd00"/112], 0xb8}}, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000000)) 13:47:15 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) (fail_nth: 1) 13:47:15 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:47:15 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:15 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1107) 13:47:15 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc037a0000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:15 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03680000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1958.434062] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1958.435366] EXT4-fs (loop7): group descriptors corrupted! [ 1958.445799] FAULT_INJECTION: forcing a failure. [ 1958.445799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1958.447414] CPU: 0 PID: 13475 Comm: syz-executor.6 Not tainted 5.10.199 #1 [ 1958.448215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1958.449176] Call Trace: [ 1958.449505] dump_stack+0x107/0x167 [ 1958.449945] should_fail.cold+0x5/0xa [ 1958.450403] _copy_to_user+0x2e/0x180 [ 1958.450874] simple_read_from_buffer+0xcc/0x160 [ 1958.451426] proc_fail_nth_read+0x198/0x230 [ 1958.451937] ? proc_sessionid_read+0x230/0x230 [ 1958.452477] ? security_file_permission+0x24e/0x570 [ 1958.453071] ? perf_trace_initcall_start+0x101/0x380 [ 1958.453687] ? proc_sessionid_read+0x230/0x230 [ 1958.454237] vfs_read+0x228/0x580 [ 1958.454652] ksys_read+0x12d/0x260 [ 1958.455073] ? vfs_write+0xa70/0xa70 [ 1958.455531] do_syscall_64+0x33/0x40 [ 1958.455972] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1958.456572] RIP: 0033:0x7fe95891a69c [ 1958.457012] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1958.459147] RSP: 002b:00007fe955edd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1958.460030] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe95891a69c [ 1958.460853] RDX: 000000000000000f RSI: 00007fe955edd1e0 RDI: 0000000000000005 [ 1958.461687] RBP: 00007fe955edd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1958.462505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.463312] R13: 00007ffc4f95e76f R14: 00007fe955edd300 R15: 0000000000022000 13:47:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x5205, 0x0, 0x0, 0x4, 0x3, 0x7ff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a00010100000000000000000400003bdf8d6c361b1615d210168bc0efdf0a0000e25b"], 0x1c}}, 0x20000000) unshare(0x48020200) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file1\x00'}) close_range(r3, 0xffffffffffffffff, 0x2) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x402100, 0x55) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x8f, 0x7, 0xf8, 0x0, 0x6, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x50302, 0x7, 0x0, 0x1, 0xfffffffffffffff7, 0x4, 0x9f2, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x4, r2, 0x0) [ 1958.495211] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1958.495211] program syz-executor.0 not setting count and/or reply_len properly [ 1958.500608] sg_write: data in/out 1745083568/8 bytes for SCSI command 0x3f-- guessing data in; [ 1958.500608] program syz-executor.4 not setting count and/or reply_len properly 13:47:16 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) [ 1958.517861] sg_write: data in/out 2047073456/8 bytes for SCSI command 0x3f-- guessing data in; [ 1958.517861] program syz-executor.1 not setting count and/or reply_len properly 13:47:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:47:16 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1110) 13:47:16 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:16 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0184c200000000001c00000086dd6096153f00306200"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x8847}, @void, @mpls={[{0x7fff}, {0x3}, {0x1, 0x0, 0x1}, {0x3}], @generic="ca17c497c7b833ac4d7071490d92e47ec849adb74400633699b6de6a555071439885d92b493649bb8bf04c923093339a60c2547a4184ece2b48c7b664db0c4c69c3909be30058c0b3d0188a8002c1b43acf1d9db4d2750b5b9eb310f212633acf31d71b524b957526651961eddbabc2ce6660d98bb483dfde32aa60485a01256edcd4358186d897f06c80e097c49427b90ec7dd877662efe65b868bd25795c2f47f2f2d7a67566fb776a61086f4c25eb1929d0c99fd8da3d8fd1e2cb8b7356f9f3c115ee8406cd66cd3cfe424ba39c4f7649e83a13c4116291e59f149a5f7ee4dbadbde0dfc69e99a407a593c6a2da"}}, 0x103) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 13:47:16 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:16 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) 13:47:16 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000300000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:16 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:16 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x112f) [ 1958.733532] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1958.733532] program syz-executor.0 not setting count and/or reply_len properly [ 1958.771652] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1958.771652] program syz-executor.1 not setting count and/or reply_len properly 13:47:16 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0}, 0xf8e) 13:47:16 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1958.819805] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1958.822896] EXT4-fs (loop7): group descriptors corrupted! 13:47:30 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:30 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0184c200000000001c00000086dd6096153f00306200"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x8847}, @void, @mpls={[{0x7fff}, {0x3}, {0x1, 0x0, 0x1}, {0x3}], @generic="ca17c497c7b833ac4d7071490d92e47ec849adb74400633699b6de6a555071439885d92b493649bb8bf04c923093339a60c2547a4184ece2b48c7b664db0c4c69c3909be30058c0b3d0188a8002c1b43acf1d9db4d2750b5b9eb310f212633acf31d71b524b957526651961eddbabc2ce6660d98bb483dfde32aa60485a01256edcd4358186d897f06c80e097c49427b90ec7dd877662efe65b868bd25795c2f47f2f2d7a67566fb776a61086f4c25eb1929d0c99fd8da3d8fd1e2cb8b7356f9f3c115ee8406cd66cd3cfe424ba39c4f7649e83a13c4116291e59f149a5f7ee4dbadbde0dfc69e99a407a593c6a2da"}}, 0x103) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, &(0x7f0000001040)='numa_maps\x00') mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 13:47:30 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:30 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1148) 13:47:30 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) 13:47:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:47:30 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000500000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1972.796427] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1972.796427] program syz-executor.1 not setting count and/or reply_len properly [ 1972.826013] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1972.827549] EXT4-fs (loop7): group descriptors corrupted! [ 1972.884768] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1972.884768] program syz-executor.0 not setting count and/or reply_len properly 13:47:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:47:46 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x114c) 13:47:46 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r2, 0x0, 0x4000007ffffffc) io_uring_setup(0x6fad, &(0x7f0000000240)={0x0, 0x7311, 0x1, 0x2, 0x25b, 0x0, r1}) 13:47:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x98}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x10010, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r4, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) write(r0, &(0x7f0000000440)="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", 0x1000) statx(r4, &(0x7f0000000180)='./file1\x00', 0x2000, 0x1, &(0x7f00000002c0)) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r5, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/uevent_seqnum', 0x40000, 0x62) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe2(0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x20000) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:47:46 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000600000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:46 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x2, 0x0, 0x0, 0x0}, 0xf8e) 13:47:46 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:46 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:47:47 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1989.430556] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1989.430556] program syz-executor.2 not setting count and/or reply_len properly [ 1989.449502] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1989.451637] EXT4-fs (loop7): group descriptors corrupted! 13:47:47 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1168) [ 1989.524766] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1989.524766] program syz-executor.1 not setting count and/or reply_len properly 13:47:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:47:47 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x4000, 0x0, 0x0, 0x0}, 0xf8e) 13:47:47 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313332313635343500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f2a953140c764271ad9be301789147cf010040000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000e85575eae85575ea00000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d1f4655fd1f4655fd1f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="21000000000000000000000000000000d1f4655f0000000000000000f8ff00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000d908479700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d1f4655fd1f4655fd1f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000090dc20e700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731333231363534352f66696c65302f66696c65300000000000000000000000000000000000000000000009d0860300000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f00000004c0)="001e000000000000000000000000000000be386ca07ff4aba98773eae904bcbb692d8c86fb7ec2f1a3eb25c2ce9f8d06c41699883c798a969dff2e13df3e42b9e38be6c14fc4fa3b0223c0cb78e82dc7c64a22e3d4cf10afd485f27417e250d3a1d25d1e3e351a222078da3bdf5ffaac46e377fe0d06dbea96782c34541a4df353633b71b4315453a019b6a67f23f25c99a7042cae4e696ec3bddbb842c2693e831398d8e33a62a85fa92791f610766827497837c860a08fbc3f565f8192b2387d46b5f034f517ef9ba4ded37ddead4330ae1486461fa23f3df2a45a694306430665faa5aaf162245b01cda13995a2d7cf", 0xf1, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="820a515b957fe06202c25e0415cac74ffcf1447a18096f775638a7"]) r1 = socket$inet(0xa, 0x3, 0xff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00'}) fadvise64(r0, 0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)=@ethtool_eeprom={0xc, 0x26fa, 0xfffffffa, 0x29, "8ca1cc4850bab15acac9d0e02054fad58a2d0980a529e72c62670b89b66a57e4deb8e101fba72feb54"}}) 13:47:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') recvmmsg$unix(r0, &(0x7f00000014c0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000500)=""/64, 0x40}], 0x5, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000880)=""/185, 0xb9}, {&(0x7f0000000940)=""/222, 0xde}, {&(0x7f0000000a40)=""/92, 0x5c}], 0x5}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000bc0)=""/45, 0x2d}, {&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/207, 0xcf}], 0x3, &(0x7f0000000e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000f80)=""/186, 0xba}, {&(0x7f0000001040)=""/135, 0x87}, {&(0x7f0000001100)=""/106, 0x6a}, {&(0x7f0000001180)=""/141, 0x8d}, {&(0x7f0000001240)=""/75, 0x4b}, {&(0x7f00000012c0)=""/188, 0xbc}], 0x6, &(0x7f0000001400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}], 0x4, 0x140, &(0x7f00000015c0)={0x77359400}) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r2, r3) socket$unix(0x1, 0x2, 0x0) 13:47:47 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:47:47 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x116c) [ 1989.650436] EXT4-fs (loop3): Unrecognized mount option "‚ [ 1989.650436] Q[•ŕbÂ^ĘÇOüńDz owV8§" or missing value 13:47:47 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000700000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 1989.679888] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 1989.679888] program syz-executor.2 not setting count and/or reply_len properly 13:47:47 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) [ 1989.781042] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1989.783003] EXT4-fs (loop7): group descriptors corrupted! [ 1989.800102] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1989.800102] program syz-executor.1 not setting count and/or reply_len properly [ 1989.877676] EXT4-fs (loop3): Unrecognized mount option "‚ [ 1989.877676] Q[•ŕbÂ^ĘÇOüńDz owV8§" or missing value 13:48:01 executing program 0: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f4000000000"], 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r2) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r4) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0] \x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r5) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r5) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r3) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, 0x0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:48:01 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x3) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000440)={0x330, 0x0, 0x0, "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"}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) r5 = fcntl$dupfd(r1, 0x80c, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7f, 0x9, 0x1, 0x20, 0x0, 0xcd61, 0x1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x46}, 0x80, 0x87d6, 0x1ff, 0x4, 0x1, 0x48, 0x7ff, 0x0, 0xf7, 0x0, 0x5}, 0x0, 0x0, r5, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r0, r6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) 13:48:01 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x2, 0x0, 0x0}, 0xf8e) 13:48:01 executing program 4: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x2010, 0xffffffffffffffff, 0x2fbcc000) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="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", 0xff, 0x10020, 0x0, {0x0, r0}}, 0x7) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) close(0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r4 = openat(r3, &(0x7f0000000380)='./file0\x00', 0x280901, 0xfc) r5 = openat(r3, &(0x7f00000003c0)='./file0/file0\x00', 0x488200, 0x5) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x8000, @mcast1, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x1, @empty, 0xfffffff8}, 0x1c) umount2(&(0x7f0000000480)='./file0\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x200040, 0x20) fcntl$lock(r4, 0x25, &(0x7f0000000500)={0x2, 0x3, 0x0, 0x2}) close(r1) r6 = dup(r5) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000540)={0x81, 0x7, 0x4}) sendmsg$inet6(r4, &(0x7f0000000ac0)={&(0x7f0000000580)={0xa, 0x4e20, 0xffff, @empty, 0x7}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000005c0)="ba223e66b4988a36e6ab9343f298ee8464ffac546e70f22443414d9b75e20d1a280a0f5e629661f662e03b3b54", 0x2d}, {&(0x7f0000000600)="d3465941451d8bf5626d2451275f711bd559dd7f76f837ecca8cd70810812fe72a4307462b586950a8cb67bcad24705cc3c818e63508aabd5e6070142c271b712742bec6f7", 0x45}, {&(0x7f0000000680)="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", 0xfa}, {&(0x7f0000000780)="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", 0xfc}, {&(0x7f0000000880)="70aa1ebf5837000e9d46465771160f5e335e842c8f85917724d945434a0791699ac8706afb0ff25230fdddd4b8c50aacb2578e02780c83814d6a5c6f0f287caa11d3ea13142858bd06dc0c3efadfdfcebb3adc9cc1a53591ff526cd5d68c6e72a810dc6e857092187052f48dc7b9a9c056acdf0871ac29e5d9006ab47331e6b20b40405ace16f8798034170f5d6a5daee063da26299a2c957e21f74355a1209128062185a794052e8cc4019ddaf87fb1", 0xb0}, {&(0x7f0000000940)="6b6e84176dac5feb3210d128194fb288cb7fccd5a82d57a11cdabb78e0617e01d65b3b73de9aa3551f242c0826934ab23979ee55e8ea01dd6bd08125abbbc1d1c31e47817596e35b629c709479319d71f87bfe04b6eaf2f18233319655bdbfe4fdeefe49f4", 0x65}], 0x6, &(0x7f0000000a40)=[@tclass={{0x14, 0x29, 0x43, 0xffffff89}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x48}, 0x0) 13:48:01 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1174) 13:48:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000900000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:01 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 2003.785037] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2003.785037] program syz-executor.2 not setting count and/or reply_len properly [ 2003.826216] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2003.826216] program syz-executor.1 not setting count and/or reply_len properly [ 2003.848091] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 13:48:01 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x4000, 0x0, 0x0}, 0xf8e) 13:48:01 executing program 4: mq_notify(0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) mq_timedsend(r0, &(0x7f00000000c0)="a14bd21b87abe249035a440a5dfe9f15522833a48dead479ace391e9344413eff67cdc5b85e826f2e4652f9170571a24fa09abedb09ec60fb0421eda6fb1dd18fe72c9638e991583e278635a1fcc8beaf2ea504c768802f5dff86429fc66de07f61ceccd1ec4", 0x66, 0xe3, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x260d01, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x82d53c939385e7a, 0x65) linkat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/rcupdate', 0x440, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000fea000/0x13000)=nil, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000001c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) fchmod(r3, 0xa) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 13:48:01 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x117a) 13:48:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2004.042278] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 13:48:01 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x2000000, 0x0, 0x0}, 0xf8e) 13:48:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000a00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2004.121063] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2004.121063] program syz-executor.2 not setting count and/or reply_len properly 13:48:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 2004.196451] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2004.196451] program syz-executor.1 not setting count and/or reply_len properly [ 2004.282780] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2004.285149] EXT4-fs (loop7): group descriptors corrupted! 13:48:16 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:16 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syncfs(r0) 13:48:16 executing program 0: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_setup(0x512b, &(0x7f00000002c0), &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101040) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1}, 0x0) io_uring_enter(r0, 0x186e, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x10000000) r6 = socket$packet(0x11, 0x3, 0x300) dup2(r6, r0) 13:48:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:48:16 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x40}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xf6de, 0x0, 0x1000, 0xfff, 0x3}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="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"]) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f00000001c0), 0x0) fallocate(r2, 0x8, 0x0, 0x8000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2000000000000005, &(0x7f00000000c0)}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x15, 0x0, 0x0, 0xfffffffffffffff9, 0x20, 0xfffb}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) 13:48:16 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x40000000, 0x0, 0x0}, 0xf8e) 13:48:16 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03cb0c00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cd, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) [ 2019.456749] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2019.456749] program syz-executor.2 not setting count and/or reply_len properly 13:48:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/loop', 0x22982, 0x100) write(r0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)="9ca256793e04cf0da7b4d6f1e3c57d581db1cb2ccebf5b5c14dab758ba458dff8b68fff6ddd1dd7c3349999fae90074edc8526b88658df093ceb7f90b1a1f675e55676a8a8f0ed9e2711b684ad35effa26c18da219d61331580231571ba7966beca78a4875de17685bfb7c192245568a6006f25a00e46ec544bc95d86169e30e6a5bafceefb64337388b", 0x8a, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x2, 0x2, 'client1\x00', 0x6, "fee6b03974ba2221", "831d7e2f722b045d418bbcaa0af53b20a98a4aba6f801bc7bfb9772bbcd14f14", 0x9, 0xcee}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x5) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/pid\x00') io_setup(0x7, &(0x7f00000002c0)) fsmount(r1, 0x0, 0xd) unshare(0x48020200) 13:48:17 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x2, 0x0}, 0xf8e) 13:48:17 executing program 5: r0 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = pidfd_open(r0, 0x0) pidfd_getfd(r2, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:48:17 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000d00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:17 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x4000, 0x0}, 0xf8e) [ 2019.722643] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2019.722643] program syz-executor.1 not setting count and/or reply_len properly 13:48:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:48:32 executing program 3: process_vm_writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000000280)=""/67, 0x43}], 0x2, &(0x7f0000001a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000980)=""/19, 0x13}], 0x6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x400, 0x0, 0x6, 0x0, 0x4}, r1, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6, 0x6, 0x6, 0x2, 0x0, 0x5, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1505b91ad3c5b1ae, @perf_bp, 0x2000, 0x1000, 0x0, 0x5, 0x1f, 0x1f, 0x0, 0x0, 0x6, 0x0, 0x963}, r1, 0x7, 0xffffffffffffffff, 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x101000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_dev$tty1(0xc, 0x4, 0x1) 13:48:32 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000e00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf7}, 0x10106, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clock_gettime(0x6, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f0000000100)={r1}) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0xffffff7f, 0x9}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x4000010, r2, 0x8000000) r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r5, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[r2, r2, r2, r0, r0, r5], 0x6}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r6, &(0x7f0000000140)="ee", 0x35, 0x10000}]) 13:48:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:32 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) io_uring_enter(0xffffffffffffffff, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ftruncate(0xffffffffffffffff, 0x93e) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0) lseek(0xffffffffffffffff, 0x38, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000240)="28547673bc48d451f6f586759b2b6508165311384524251caa480837050c7d2921668c02fbbbd1eac36cf8b0e7ed5996dabb7b1d4326f41efa82f5875a488528fe0ea98e3798e3420df6fd15bac52527eb60a875e35167acee100c0ffdf365773a4fde2dd35159b0bf4589454cba83281abc5c3a8a1c62a00b374dcca42351726471f7b6ddb90477f943984b6f4c39bec0c3845604837a2edca2415bbfa59bad789b4437cb3f9e94cf8703ee3abaf3b7dda03bd5b00ed989afc1ce9bb3b6c7bc6fe7af152ac1129896f614c92488a7d703fad63386790a530f2ff536b4e204508d7072c4e75499ec43f9b10763d944d900") 13:48:32 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x2000000, 0x0}, 0xf8e) 13:48:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:48:32 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x140}}, 0x0) close_range(r0, r1, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x430}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f00000001c0)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x9, 0xfb, 0x0, 0x885, 0x400d, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2000, 0x100000001, 0x400, 0x9, 0x8, 0x6, 0x4, 0x0, 0x4, 0x0, 0x7f}, 0x0, 0x1, r3, 0x18) [ 2035.323218] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2035.323218] program syz-executor.1 not setting count and/or reply_len properly [ 2035.339647] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2035.339647] program syz-executor.2 not setting count and/or reply_len properly 13:48:33 executing program 3: semop(0x0, &(0x7f00000000c0)=[{}, {}], 0x2) semget$private(0x0, 0x2, 0xf3e5d0c8db5da91) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000300)="2f4617e70f40156123379b2ae38feb58d775d52ef726b55d533b03ea1a75646493b0d5d356cbc9a50cad3408064085910d9f03847eb68b44edb6189bf40517080b5572beffcc80f3020993c447627044460e0823f80ed68f65dde651f22bb2e86a1a90a7d795c3c9ff5dbac327bd789df45452328c6b896ced69289de230a5e533b8a7e45f20cd1677b689c1f2c3b155271962d4d5487b2003effd4899b4a0f65552aaef247a779ce5f5bad2676efa0d324118d6d5525be05c59c8231b73db5a7a503b038c7c5507067560daefad3f26ee595eea9f3feb26813bb3120b0622095cc6f6437789517273a38a70b11c9321a1", 0xf1, 0x5}, {&(0x7f0000000940)="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", 0x1000, 0x3}], 0x4400, &(0x7f00000002c0)={[{}, {@fat=@showexec}, {@fat=@gid={'gid', 0x3d, r1}}], [{@seclabel}]}) lstat(&(0x7f0000000100)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r0, r1, 0xee01, r2, 0x80, 0x3ce}, 0x9, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x401}) 13:48:33 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03003e00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2035.476300] FAT-fs (loop3): invalid media value (0x6c) [ 2035.476937] FAT-fs (loop3): Can't find a valid FAT filesystem 13:48:33 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xf0) creat(0x0, 0x0) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0xffff}, 0x100, './file1\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xfff, 0x0) io_uring_enter(r1, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r4, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000000007000fc000e22a73cac204aa24808c3ba951ac97a765f582cf1c905f703a9de499c18332a00"/55], 0x8000) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, 0x0) r5 = epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) fcntl$setlease(r6, 0x400, 0x2) 13:48:33 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x40000000, 0x0}, 0xf8e) 13:48:33 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) 13:48:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x10001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fsmount(r1, 0x0, 0x71) sendfile(r0, r0, 0x0, 0x20d315) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r3 = accept4(r0, &(0x7f0000000a40)=@nfc, &(0x7f0000000ac0)=0x80, 0x80000) fcntl$setflags(r3, 0x2, 0x1) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = dup3(r1, r1, 0x0) pwrite64(r5, &(0x7f0000000940)="25cbe89dea5970f6624cdf7252eacde05b49e430f0c7ea56cacafed4634ad6c6f19a4ab350993bf51368f179afebaacc45c6f4aac39cf129e63ac58b33b91c655c20fcce989bef7a33f4a3d8321d77000bd6a1b813d659f83cd9bbdce5df4d7fed936f2b383726483f8e3950398c63aa97acd8e77c297a0e53d99c4c5d6a95003d68d6c957c3dc1a7d9fef2725b802ae91d93b278936529cbe7188a837f61cb260f68a5ef3817938186bb7360fcee23db178da8be56706fb5b1f64e0d60494f24a1b3ce5bccf4f30e19407783a07797d065b5fd1d1d205ccce1384be80a692a8082cf1c724923b5e5f89", 0xea, 0xde) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000b00), 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r5, r4, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x464a80, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000540)={r7, 0x3, 0x1, 0x1}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000040)={0x5, 0x7, 0x7}) 13:48:33 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2035.586097] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2035.586097] program syz-executor.1 not setting count and/or reply_len properly [ 2035.593802] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2035.593802] program syz-executor.2 not setting count and/or reply_len properly 13:48:33 executing program 3: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0x1000, 0x10000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2284, &(0x7f0000000000)) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000380)={0x7cb6, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @local}}}, 0x108) r2 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000240)={0x7, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e24, @private=0xa010102}}}, 0x108) io_uring_enter(r2, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 13:48:33 executing program 4: r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@private2, 0x2}) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}], 0x2809400, &(0x7f0000000100)={[{@resuid={'resuid', 0x3d, 0xee00}}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) 13:48:33 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:33 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03004000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 2035.709678] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2035.709678] program syz-executor.2 not setting count and/or reply_len properly [ 2035.757499] EXT4-fs (loop7): bad geometry: block count 128 exceeds size of device (1 blocks) 13:48:33 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xf0) creat(0x0, 0x0) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0xffff}, 0x100, './file1\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xfff, 0x0) io_uring_enter(r1, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r4, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000000007000fc000e22a73cac204aa24808c3ba951ac97a765f582cf1c905f703a9de499c18332a00"/55], 0x8000) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, 0x0) r5 = epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) fcntl$setlease(r6, 0x400, 0x2) 13:48:33 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x200000000000000, 0x0}, 0xf8e) [ 2035.784991] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2035.784991] program syz-executor.1 not setting count and/or reply_len properly 13:48:50 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0}, 0xf8e) 13:48:50 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xe4, 0x1, 0x10, 0x70bd2d, 0x25dfdbfc, {0xb}, [@generic="7cc908123ca2c6929f049778eb4aff5d09a38c3ff0e604743c238049e8be35479931ac16e85d9ed73f0592fe01c76ed593d1515f3d26301bd6a280c489cc8dff58fe7e782cf9670b174da83b5b67e92a8a588af6447ef77668fedcd7b39c7f08434b333b992dcb3260ff47a8ab7400d8012a41873bc5add4d9daed62507a0e4cd004f6435be3ca80249407a41d809e2fd15e40345e6d1f95901824cc968fc91b596158645c340a61250193f420857e464bf7e9b93bc52f4de45e075008c139e2966cd8cc68938b3df855b211a9"]}, 0xe4}, 0x1, 0x0, 0x0, 0x20048081}, 0x60000) 13:48:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f080045000078000000000011907800000000ffffffff00004e20006490780200000000000000000000006bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a5007d60fa6d1c0779e6cb3d5656f39594619e6946ecbd671680e02dcef9b573ee4cea9e52a8c1613f41ebf64e747375bc12"], 0x0) recvmmsg(r0, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000006e80)=[{0x0}, {0x0}, {&(0x7f0000006c80)=""/159, 0x9f}], 0x3}}], 0x1, 0x0, 0x0) 13:48:50 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb360405a9e7e10a341377fa4d84bb199f91bf8f5c0a1dd67b6faaf86c56d473cfe45e5eae3b2c62571934bf1002866d62eb60a0ca72d96a7ee6c3b426ba3108119cf2e3277d822d20e1ad342ce639a2a1eb298105692d5928e5285c8083e467130da14f4893a9ea5c0f6d60c3b55e265773c73f9670e299f3"], 0x36, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) setxattr$incfs_size(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=0x5, 0x8, 0x3) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x4, 0x0, 0x9, 0x0, 0x7fff, 0x80, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x2}, 0x8020, 0x6, 0x0, 0x1, 0x4, 0x6, 0x2fa, 0x0, 0x4, 0x0, 0xebd3}, r0, 0x4, 0xffffffffffffffff, 0xb0d61127401d9e82) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000009c0)={0x0, 0x0}) process_vm_readv(r5, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x8, 0x0, 0x6, 0x0, 0x4}, r5, 0x2, 0xffffffffffffffff, 0xa) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x1, r5}) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0xff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x11001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r2, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 13:48:50 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xf0) creat(0x0, 0x0) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000300)={{0xffff}, 0x100, './file1\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') pread64(r1, &(0x7f0000001100)=""/4095, 0xfff, 0x0) io_uring_enter(r1, 0x5cf8, 0x34aa, 0x3, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r4, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000000007000fc000e22a73cac204aa24808c3ba951ac97a765f582cf1c905f703a9de499c18332a00"/55], 0x8000) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, 0x0) r5 = epoll_create(0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) fcntl$setlease(r6, 0x400, 0x2) 13:48:50 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 2052.617040] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2052.617040] program syz-executor.2 not setting count and/or reply_len properly 13:48:50 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03004800000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:48:50 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2052.730431] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2052.730431] program syz-executor.1 not setting count and/or reply_len properly [ 2052.739801] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2052.739801] program syz-executor.1 not setting count and/or reply_len properly 13:49:06 executing program 5: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x52, 0x6) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x1000, 0x3d, 0x5, 0x1f, 0x40, 0x8}) 13:49:06 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:06 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB='\x00'/13, @ANYRES16=r0, @ANYBLOB="01002bbd7000fcdbdf253a00000008000300f60d1084d33e40849158622555c3413c3246fe86d5ef6809f96a989ceda1998f0f4e0235d9f077fdb19f0f3c03dfad5ceee50908c7fbecdafa4d45d09310f8819263304468c886f642201f3aa62cdcf44564e8", @ANYRES32=0x0, @ANYBLOB="81005b00ba38ed850ea58de81c7def760f2cdba1eaa197522f5ac73896570842ce86fc8f2e06a9e50aa78b1617633db8f0f67025a28704bd05f1dc190e8c4be57c892a056ee01b09b8bb6106447aeaaefb1373f88a24c36c3e9d5be9bd7f74c7b22021f0575ed04bb0889016a2f2429bcb0cda4a8cdc90c4ff4fd8e755ac6f058200000065005b00eaf571b34d95ebcea0b75bf150014833ea201392ad088fc7bf782a8f116697bfc5be10efbc0cebac35594f9c89595c65e2a05009f0697d2b574f94943063a01e2f28bb95572c4390c12218b2754460f176f619c3875c081edd621f8c7aafbe1e000000000600650008000000"], 0x110}, 0x1, 0x0, 0x0, 0x810}, 0x40001) msgget$private(0x0, 0x8c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="fdff0000", @ANYRES16=r3, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x28, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x4d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000100)=""/215, &(0x7f0000000200)=0xd7) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x44}, 0x9030, 0xd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7, 0x10001, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x2}, 0x1c) 13:49:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:49:06 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) 13:49:06 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03004c00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb360405a9e7e10a341377fa4d84bb199f91bf8f5c0a1dd67b6faaf86c56d473cfe45e5eae3b2c62571934bf1002866d62eb60a0ca72d96a7ee6c3b426ba3108119cf2e3277d822d20e1ad342ce639a2a1eb298105692d5928e5285c8083e467130da14f4893a9ea5c0f6d60c3b55e265773c73f9670e299f3"], 0x36, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) setxattr$incfs_size(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=0x5, 0x8, 0x3) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x4, 0x0, 0x9, 0x0, 0x7fff, 0x80, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x2}, 0x8020, 0x6, 0x0, 0x1, 0x4, 0x6, 0x2fa, 0x0, 0x4, 0x0, 0xebd3}, r0, 0x4, 0xffffffffffffffff, 0xb0d61127401d9e82) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000009c0)={0x0, 0x0}) process_vm_readv(r5, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x8, 0x0, 0x6, 0x0, 0x4}, r5, 0x2, 0xffffffffffffffff, 0xa) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x1, r5}) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0xff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x11001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r2, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 13:49:06 executing program 0: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0}, 0xf8e) [ 2068.718316] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2068.718316] program syz-executor.1 not setting count and/or reply_len properly 13:49:06 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03006800000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2068.842415] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2068.842415] program syz-executor.2 not setting count and/or reply_len properly 13:49:06 executing program 5: sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="40020080", @ANYRES16=0x0, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r1, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x30c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xab3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x83}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2008000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @empty, 0xfffffffe}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xda5, @private0, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private2, 0x8000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8d9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4388}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdda5}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a55}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf559}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x8051}, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r3, 0x0) syz_io_uring_complete(r4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001540)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x9) syz_io_uring_complete(0x0) r6 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x44eda6c34ef74ee6, 0x88) recvmsg(r6, &(0x7f0000001500)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000180)=""/161, 0xa1}, {&(0x7f0000000240)=""/219, 0x138}, {&(0x7f0000000340)=""/121, 0x7c}, {&(0x7f0000001640)=""/4111, 0x100f}, {&(0x7f0000001580)=""/190, 0xbe}], 0x6}, 0x40000000) dup(r0) 13:49:06 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0xf8e) [ 2068.887282] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2068.887282] program syz-executor.1 not setting count and/or reply_len properly 13:49:06 executing program 0: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x602, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f00000000c0)=""/22) [ 2068.903125] cgroup: fork rejected by pids controller in /syz5 [ 2068.914977] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 13:49:06 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000}, 0xf8e) 13:49:06 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:06 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03006c00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:06 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:49:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb360405a9e7e10a341377fa4d84bb199f91bf8f5c0a1dd67b6faaf86c56d473cfe45e5eae3b2c62571934bf1002866d62eb60a0ca72d96a7ee6c3b426ba3108119cf2e3277d822d20e1ad342ce639a2a1eb298105692d5928e5285c8083e467130da14f4893a9ea5c0f6d60c3b55e265773c73f9670e299f3"], 0x36, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) setxattr$incfs_size(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=0x5, 0x8, 0x3) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x81, 0x4, 0x0, 0x9, 0x0, 0x7fff, 0x80, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x2}, 0x8020, 0x6, 0x0, 0x1, 0x4, 0x6, 0x2fa, 0x0, 0x4, 0x0, 0xebd3}, r0, 0x4, 0xffffffffffffffff, 0xb0d61127401d9e82) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x10001, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000009c0)={0x0, 0x0}) process_vm_readv(r5, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x8, 0x0, 0x6, 0x0, 0x4}, r5, 0x2, 0xffffffffffffffff, 0xa) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000280)={0x1, r5}) dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0xff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x11001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r2, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) unlink(&(0x7f0000000180)='./file0\x00') [ 2069.199797] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2069.199797] program syz-executor.2 not setting count and/or reply_len properly [ 2069.217084] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2069.217084] program syz-executor.1 not setting count and/or reply_len properly [ 2074.061385] Bluetooth: hci4: command 0x0409 tx timeout [ 2076.108308] Bluetooth: hci4: command 0x041b tx timeout [ 2078.156323] Bluetooth: hci4: command 0x040f tx timeout [ 2079.204594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2079.206465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2079.210481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2079.256393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2079.257978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2079.260669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2080.204323] Bluetooth: hci4: command 0x0419 tx timeout 13:49:32 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) pidfd_getfd(r0, r1, 0x0) dup2(r0, r1) 13:49:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x0, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x301080, 0x2) 13:49:32 executing program 3: timer_gettime(0x0, &(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0800457f0000000000000011907800000000e000000100004e6020004d90589a616e1210d58396a88b3ec978958ccf5bd50b398f2e73c1d90cd08ab1a4dbefcf656aa41d91824dae9e4e638d47ba8f0bd52ebcea9a10fe9ef0241ec2468abfe3c354de04db795934586487703a097ee24350fe00000000"], 0x0) recvfrom(r0, 0x0, 0x45, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) r2 = accept4(r1, &(0x7f0000000180)=@tipc=@id, &(0x7f0000000100)=0x80, 0x80000) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0xffffffffffffff69) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\xa6', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 13:49:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000004c0)=ANY=[@ANYBLOB="004eacec960ffb88f61a07b8c3f3c1aa396415dd0a7f001ad8f12a0550226bd1e28d879881662de6e6455c10101413dd1af65629c18457a48018181c0886b1f44bfb08b4ddcdc7e2fe379d5decb37f7b439736147bf79be0eb4803c5799422b638a525a1cb52d17f45d89e61b08b2c11cc305f4594694657ec2683dc024b53e71166a303b4824dd8940676954b9f387670b4913b3d203cf2f2bd754e3106bf"]) setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x1) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x3) creat(&(0x7f00000000c0)='./file1\x00', 0x144) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x40) write(r2, &(0x7f0000000240)="01", 0x1) r3 = openat(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0x15100, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) bind$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r4, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) 13:49:32 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0xf8e) 13:49:32 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03007400000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:32 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:49:32 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) syz_io_uring_setup(0x512b, &(0x7f00000002c0)={0x0, 0xc4d9}, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000080)={0x20a00, 0x151}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x6) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2094.692795] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2094.692795] program syz-executor.1 not setting count and/or reply_len properly 13:49:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2025c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private0}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(0xffffffffffffffff, &(0x7f0000000200)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(0xffffffffffffffff, &(0x7f0000000a00)) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x2010, 0xffffffffffffffff, 0x8000000) sync() 13:49:32 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000}, 0xf8e) [ 2094.786991] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 2094.797870] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2094.797870] program syz-executor.2 not setting count and/or reply_len properly 13:49:32 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000680)=[{0x0, 0x0, 0x101}, {&(0x7f00000005c0)="77115a9ad700499cb9f709ed", 0xc, 0x3}], 0x0, &(0x7f0000000740)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', r0) [ 2094.826697] device lo entered promiscuous mode [ 2094.833434] perf: interrupt took too long (4932 > 4925), lowering kernel.perf_event_max_sample_rate to 40000 [ 2094.834612] device lo left promiscuous mode 13:49:32 executing program 5: clone3(&(0x7f0000000080)={0x200040100, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2094.961665] device lo entered promiscuous mode 13:49:32 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03007a00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2094.976654] device lo left promiscuous mode [ 2094.980956] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2094.980956] program syz-executor.1 not setting count and/or reply_len properly 13:49:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:49:32 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xf8e) 13:49:32 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:32 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03007400000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2095.070805] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2095.070805] program syz-executor.0 not setting count and/or reply_len properly [ 2095.083848] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2095.083848] program syz-executor.2 not setting count and/or reply_len properly [ 2095.123731] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 13:49:46 executing program 4: r0 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xc}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x80, 0x0, 0xa10, 0x0, 0x74, 0x40080000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r5 = socket(0x2c, 0x2, 0x1) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0x6, @loopback, 0x7ff}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) creat(&(0x7f0000000340)='./file1\x00', 0x19) 13:49:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:49:46 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) write$bt_hci(r0, &(0x7f0000000080)={0x1, @user_confirm_reply={{0x42c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) 13:49:46 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000}, 0xf8e) 13:49:46 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1f4, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "075fadaabc6b49fb21e928610a84eafc3d22efd9d5411fc58d106b893c92282f"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x1a0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "659edc966cbe6e07816cfc697b793bec530bd0247669f40a708bf276e31588a3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x199b8901bfb8240c}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x862}]}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "263f4762542c85b20e945089fde03640"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x404c010}, 0x804) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x125}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x24000084) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/hidraw', 0x412e00, 0x0) execveat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\'-*+./+\\\x00', &(0x7f0000000180)='.}@.\x00', &(0x7f00000001c0)='}%&%\xa3[&/\x00', &(0x7f0000000200)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000280)='/)\',#\x00'], 0x1000) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:49:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f00000001c0)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000002c0)={'vcan0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdc01, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wg2\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="02000000dcefca5d9086b94e78e35ad9a4adbf2e2b3a872857103595b72c079dc6fabec97b50c4983495dadbfb0fd08adac8824c017801f526a42ecf094b0343e0c628fd06a12fb91ed2a9fc04f9af65c6bd7576d174eaab4df5b590bc65d1c9b7ef833125aebf67645b271329ee503ccc4fc2764ce40e817d0dea9070efc983492a33a765741be86cab7cecb7b79b0e7d863d12271628359baacba9792b9d90769155760640add46784f05ee763b580a8eec136aa76a5d05973b16ba19aa2f82c57e34f7c9f4c129e0500"/213, @ANYRES16=r5, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="59c32ba04be657050000007631301e7790b65d0168a2cc4f67f002ed480470cc197670435746e994146ab2e75f43999d52412f725f4de1ebd72d59b5f91f03e0a2f1118f6efe0eb8faf40d738951ea55abd5b3368b0b6d1707f4ff689d166d75a1b99deeeefeff044121dfa0ac1fee6e97f0fdde8c9a5ead4b8644cd413f90832fc8d7f008b2a97e7fa481126c2159d5d3a73f25a1118828fe6e7a7762dfc7889358ecfecb27d502355308382563deccbb547ef0d9ab301d207e1e27a4c1581a8977c6ccc8361f5aedbab65e7e539a46f64f4e8c52b7f94919587d4321"], 0x1c}}, 0x4000010) 13:49:46 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:46 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc030ccb00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2109.243121] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2109.243121] program syz-executor.2 not setting count and/or reply_len properly [ 2109.248141] sg_write: data in/out 201579696/8 bytes for SCSI command 0x3f-- guessing data in; [ 2109.248141] program syz-executor.1 not setting count and/or reply_len properly [ 2109.319053] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 13:49:46 executing program 5: r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x7f58, 0xa8c1, 0x3, &(0x7f0000000200)={[0x6]}, 0x8) r1 = signalfd4(r0, &(0x7f0000000040)={[0x7]}, 0x8, 0x0) clone3(&(0x7f0000000080)={0x1040100, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:49:46 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000}, 0xf8e) 13:49:46 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03ffffe0000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:49:46 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x5, 0x0, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000280)={{}, "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"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="130000010100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001e00)={{r2}, 0x0, 0x2, @inherit={0x68, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000004000000000000000700000000000000096c97da9646000000000000000000b1fcf8ec4a93192fdfc6000000000000000000000000000006000000bc3552000000000000007f000000000000000800000000a74248e2c0f6099af15b0000000000000014005ef358b500060000000000000000"]}, @subvolid=0xe1}) readahead(r0, 0xfffffffffffff046, 0x5b) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x300, 0x100) recvmsg$unix(r2, &(0x7f00000015c0)={&(0x7f0000000100), 0x6e, &(0x7f0000001540)=[{&(0x7f00000014c0)=""/60, 0x3c}, {&(0x7f0000001500)=""/49, 0x31}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="1c00000000000000010000003ed2409e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x23) r3 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r3, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r4 = syz_io_uring_setup(0x1084, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000180), &(0x7f0000000040)) sendfile(0xffffffffffffffff, r4, &(0x7f00000001c0)=0x1, 0x6) 13:49:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:49:47 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2109.536908] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2109.536908] program syz-executor.2 not setting count and/or reply_len properly 13:50:01 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)) 13:50:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:50:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000010000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:01 executing program 5: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000001480)) r0 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001280)={0x0}, &(0x7f00000012c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001400)={0x0}, &(0x7f0000001440)=0xc) r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r5, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) pidfd_getfd(r5, r2, 0x0) getpgid(r4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001340)=ANY=[@ANYBLOB="01000000d91139ab8af38309", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f0000001380)={0x80, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x2a}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/218, &(0x7f0000001300)=[r0, r0, 0x0, r0, r3, 0xffffffffffffffff, r0], 0x7, {r6}}, 0x58) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:50:01 executing program 3: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000}, 0xf8e) 13:50:01 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000}, 0xf8e) 13:50:01 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03ffffe0000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2123.567019] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2123.567019] program syz-executor.2 not setting count and/or reply_len properly 13:50:01 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2123.613491] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2123.613491] program syz-executor.2 not setting count and/or reply_len properly [ 2123.622632] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2123.622632] program syz-executor.1 not setting count and/or reply_len properly 13:50:01 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000006c0)=0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0/../file0\x00', 0x20, 0x8, &(0x7f0000000600)=[{&(0x7f0000000240)="dc41c0d6b97c0aa12ce55877b8df8bcab0372e659c006c4cbae7ca5a6d0cca79bca8a84fa2afc9c76c8cef13f9d23c4f10c9d90cbeb376c243f90a", 0x3b, 0x233}, {&(0x7f0000000280), 0x0, 0x70}, {&(0x7f0000000300)="04b2ad61a434fa2850ef788bee477dafe7c5a5d65f2ca0cebc217eb6b2b07784fc", 0x21, 0x1df}, {&(0x7f0000000340)="99e96bd248f3497b8be12585159a251a39ad46d06ddaea01447040f90a7281f5cf30955851c84200b75c1bf3ecf08c101c78b989e97904ce8a52cecc7f67c9cf03f94963e14b368aa521d1c822b996265e7f1b103751895fe1c12ac5bb1a74e8a569147c5d21c39526eaebb0824e6aa60f3f", 0x72, 0x26a}, {&(0x7f00000003c0)="68198f2854ff9e672e77616dcbc9f9321eb0fc4d3d80aa8b75ad4da281dc3a7fe19d168b4317ba1229aacfae6410fd199f940f4f866c", 0x36, 0xffffffff}, {&(0x7f0000000400), 0x0, 0x31d7}, {&(0x7f0000000440)="458e19981264a6caa5eb41bce9488af07ad01faee10eb611702a69b8fb236ba6091cbcb739ee58965ce3e9a50c04be34a81389d062e2d7fa2d9d5ca374691dc869b0cc14edca3cabe1c043deeb79e3a056a4a8cfe996cfe5e6174596c3a37402c0ecc4e272e5235964cc0087d6f98ce794f8eedb77254bcbbcd2c23f903a994f6a8a13ae8894be50d00da3d17b", 0x8d, 0x2}, {&(0x7f0000000500)="5e752e1a84beef5d4c50eb7c9a6b63b66936c50c7b10efe25d5d89f753d31c7dc874c48242cb4183431a715cd5af89c09778f37f8b9e08442bbb774f332c49cbcacf4420859d4d6621d83c0377fab25088e32177dd08e8082de4ec74ffeb80883e72afd0224a545dd2f2474721a860fa4ca5be03805499e40afd936d22b1377ec989e527b3f50dc73dc28466313aa7d92becb0e2f7c9a2229886ee1bdd378258b7a53a137e263e56b1d77d7add50622b802ba944861db15575b1b92e9143bc8ac7638d7fa5ebea76f24ab0fdaa58da", 0xcf, 0x6a2b}], 0x1000000, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x35, 0x30, 0x37, 0x31]}}], [{@pcr={'pcr', 0x3d, 0x1}}, {@subj_type={'subj_type', 0x3d, 'ext3\x00'}}, {@subj_type={'subj_type', 0x3d, 'ext3\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}) openat(r0, &(0x7f00000000c0)='./file0/../file0/file0\x00', 0x200000, 0x8e) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000040)=ANY=[@ANYBLOB="696e69745f697661626c653d307830303096318d3b04d666c08152d222446d66303030303030", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 13:50:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000020000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:01 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000000000000}, 0xf8e) 13:50:01 executing program 3: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3f, 0x0, 0x1, 0x9, "600000000000164000"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth1_vlan\x00'}) flock(r1, 0x2) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x0, 0x1cf}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(r2, &(0x7f0000000580)={0x11, 0x10, 0x0, 0x1, 0x7, 0x6, @random="9ba495311612"}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1000}}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x9, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/561], 0x190}, 0x0, 0x80, 0x0, {0x0, r3}}, 0x9) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r0, 0x0) 13:50:01 executing program 0: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r1) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1, 0x9, 0x3) unlink(&(0x7f0000000080)='./file1\x00') stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dbd4e8f9752a80d07aed9d94d1a93ed88db46e41d69765922c66259bcdc1543fe96608372fd858b06b00925d56b38c0c11a77328ad06af06b87df3c8e0630b5bf4d2bd454374b3875f5daee7b30b1e73ae274f1", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,\x00']) [ 2123.782946] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2123.782946] program syz-executor.1 not setting count and/or reply_len properly [ 2123.789233] sg_write: data in/out 4119728/8 bytes for SCSI command 0x3f-- guessing data in; [ 2123.789233] program syz-executor.2 not setting count and/or reply_len properly [ 2123.791620] 9pnet: Insufficient options for proto=fd [ 2123.798889] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 2123.801099] 9pnet: Insufficient options for proto=fd [ 2123.815565] device veth0_vlan entered promiscuous mode 13:50:01 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000000000}, 0xf8e) 13:50:15 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:15 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f0000002040)={@random="09ee7c7f9012", @dev, @void}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xb2ac22, 0x0) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) io_setup(0x3, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x1, 0xffffffff80000000, 0x0, 0x0, 0x1d, 0x1}, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000280)='./file0\x00', 0x20401, 0x164) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x6}, 0x4) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c63616368653d0f6d00000000616368653d6e6f6e652c00"]) 13:50:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000b0000004467b31629a677be0dd2816b9f66720d00000200000002000000008000000080000020000000d5f46d5fd5f4655f0100ffff53ef", 0x4a, 0x71}, {&(0x7f0000010400), 0x0, 0x1000}, {0x0, 0x0, 0x2}], 0x2000, &(0x7f0000013a00)) 13:50:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:50:15 executing program 5: r0 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = gettid() process_vm_readv(r1, &(0x7f0000001900)=[{0x0}], 0x1, &(0x7f00000019c0)=[{&(0x7f0000001c40)=""/250, 0xfa}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000001940)=""/56, 0x38}, {&(0x7f0000001980)=""/1, 0x1}], 0x4, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x400, 0x0, 0x6, 0x0, 0x4}, r3, 0x2, 0xffffffffffffffff, 0xa) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x100) clone3(&(0x7f00000012c0)={0x71780c5155ab6e8, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x4}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/169, &(0x7f0000001240)=[r0, r0, r0, r0, r1, r3, r0], 0x7, {r4}}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r5, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r6 = openat(r5, &(0x7f0000000100)='./file1\x00', 0x80743, 0x88) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:50:15 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000030000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:15 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf8e) 13:50:15 executing program 4: bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) io_uring_enter(r0, 0x5915, 0xa322, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x55}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r4, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 2138.117209] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2138.117209] program syz-executor.1 not setting count and/or reply_len properly [ 2138.132123] 9p: Unknown Cache mode m 13:50:15 executing program 0: msgrcv(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/78], 0x61, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)={0x2, "3bababd725c4286ebc9d3185fd01053716fc631caec32df91cfb541027a3a8d34067c06821660d308b20f2d7193e25fa14d611a957e157bc7c3348b0d0a386c5aca1135b73f3fd7292aefb09d686cc62fb3ce2cee0eb5a615fec102ab7846fa9022ef80f92046f3d7be19b33971d603726c17c2df0725a744cecd479fe59f8b3d79c9aaa24d4573fa63ad21f472b126f0e12217aa5a83141a7c5c983f108003da26d2ca74f6c4de357780cbd126ebf68b6882b41ca57d4d1191dd0c6a2d60190ec4c00db"}, 0xcc, 0x0) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00), 0x0, 0x12001, &(0x7f0000001c40)={0x0, 0x989680}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5e, 0x400f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) [ 2138.161137] [ 2138.161383] ====================================================== [ 2138.162168] WARNING: possible circular locking dependency detected [ 2138.162934] 5.10.199 #1 Not tainted [ 2138.163383] ------------------------------------------------------ [ 2138.164162] syz-executor.4/14632 is trying to acquire lock: [ 2138.164848] ffff88800eae4b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2138.166118] [ 2138.166118] but task is already holding lock: [ 2138.166840] ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2138.167940] [ 2138.167940] which lock already depends on the new lock. [ 2138.167940] [ 2138.168945] [ 2138.168945] the existing dependency chain (in reverse order) is: [ 2138.169866] [ 2138.169866] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2138.170694] __mutex_lock+0x13d/0x10b0 [ 2138.171239] rfkill_register+0x36/0xa10 [ 2138.171826] hci_register_dev+0x42e/0xc00 [ 2138.172410] __vhci_create_device+0x2c8/0x5c0 [ 2138.173039] vhci_open_timeout+0x38/0x50 [ 2138.173615] process_one_work+0x9a9/0x14b0 [ 2138.174207] worker_thread+0x61d/0x1310 [ 2138.174773] kthread+0x38f/0x470 [ 2138.175267] ret_from_fork+0x22/0x30 [ 2138.175811] [ 2138.175811] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2138.179740] __mutex_lock+0x13d/0x10b0 [ 2138.180309] vhci_send_frame+0x63/0xa0 [ 2138.180895] hci_send_frame+0x1b9/0x320 [ 2138.181489] hci_tx_work+0x10af/0x1660 [ 2138.182065] process_one_work+0x9a9/0x14b0 [ 2138.182685] worker_thread+0x61d/0x1310 [ 2138.183295] kthread+0x38f/0x470 [ 2138.183833] ret_from_fork+0x22/0x30 [ 2138.184382] [ 2138.184382] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2138.185504] __flush_work+0x105/0xa90 [ 2138.186153] hci_dev_do_close+0x131/0x1240 [ 2138.186860] hci_unregister_dev+0x149/0x430 [ 2138.187584] vhci_release+0x70/0xf0 [ 2138.188221] __fput+0x285/0x980 [ 2138.188793] task_work_run+0xe2/0x1a0 [ 2138.189438] do_exit+0xb6f/0x2600 [ 2138.190031] do_group_exit+0x125/0x310 [ 2138.190691] __x64_sys_exit_group+0x3a/0x50 [ 2138.191417] do_syscall_64+0x33/0x40 [ 2138.192070] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2138.192915] [ 2138.192915] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2138.193869] __mutex_lock+0x13d/0x10b0 [ 2138.194530] bg_scan_update+0x82/0x500 [ 2138.195195] process_one_work+0x9a9/0x14b0 [ 2138.195926] worker_thread+0x61d/0x1310 [ 2138.196598] kthread+0x38f/0x470 [ 2138.197129] ret_from_fork+0x22/0x30 [ 2138.197667] [ 2138.197667] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2138.198802] __lock_acquire+0x29e7/0x5b00 [ 2138.199426] lock_acquire+0x197/0x470 [ 2138.199999] __flush_work+0x105/0xa90 [ 2138.200560] __cancel_work_timer+0x368/0x4c0 [ 2138.201176] hci_request_cancel_all+0x73/0x230 [ 2138.201850] hci_dev_do_close+0xd9/0x1240 [ 2138.202467] hci_rfkill_set_block+0x166/0x1a0 [ 2138.203124] rfkill_set_block+0x1fd/0x540 [ 2138.203736] rfkill_fop_write+0x253/0x4b0 [ 2138.204319] vfs_write+0x29a/0xa70 [ 2138.204828] ksys_write+0x1f6/0x260 [ 2138.205341] do_syscall_64+0x33/0x40 [ 2138.205862] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2138.206574] [ 2138.206574] other info that might help us debug this: [ 2138.206574] [ 2138.207575] Chain exists of: [ 2138.207575] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2138.207575] [ 2138.209292] Possible unsafe locking scenario: [ 2138.209292] [ 2138.210051] CPU0 CPU1 [ 2138.210614] ---- ---- [ 2138.211197] lock(rfkill_global_mutex); [ 2138.211706] lock(&data->open_mutex); [ 2138.212505] lock(rfkill_global_mutex); [ 2138.213326] lock((work_completion)(&hdev->bg_scan_update)); [ 2138.214057] [ 2138.214057] *** DEADLOCK *** [ 2138.214057] [ 2138.214810] 1 lock held by syz-executor.4/14632: [ 2138.215402] #0: ffffffff85619468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2138.216584] [ 2138.216584] stack backtrace: [ 2138.217152] CPU: 1 PID: 14632 Comm: syz-executor.4 Not tainted 5.10.199 #1 [ 2138.218008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2138.219055] Call Trace: [ 2138.219381] dump_stack+0x107/0x167 [ 2138.219844] check_noncircular+0x263/0x2e0 [ 2138.220372] ? register_lock_class+0xbb/0x17b0 [ 2138.220929] ? print_circular_bug+0x470/0x470 [ 2138.221500] ? find_first_zero_bit+0x94/0xb0 [ 2138.222033] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 2138.222587] __lock_acquire+0x29e7/0x5b00 [ 2138.223136] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2138.223845] ? SOFTIRQ_verbose+0x10/0x10 [ 2138.224377] ? __lockdep_reset_lock+0x180/0x180 [ 2138.224988] ? mark_lock+0xf5/0x2df0 [ 2138.225480] lock_acquire+0x197/0x470 [ 2138.225984] ? __flush_work+0xdd/0xa90 [ 2138.226489] ? lock_release+0x680/0x680 [ 2138.226996] ? __flush_work+0x78c/0xa90 [ 2138.227517] ? lock_downgrade+0x6d0/0x6d0 [ 2138.228074] __flush_work+0x105/0xa90 [ 2138.228580] ? __flush_work+0xdd/0xa90 [ 2138.229082] ? lock_chain_count+0x20/0x20 [ 2138.229636] ? queue_delayed_work_on+0xe0/0xe0 [ 2138.230235] ? mark_lock+0xf5/0x2df0 [ 2138.230720] ? mark_lock+0xf5/0x2df0 [ 2138.231202] ? lock_chain_count+0x20/0x20 [ 2138.231756] ? perf_trace_lock+0xac/0x490 [ 2138.232299] ? lock_chain_count+0x20/0x20 [ 2138.232845] ? mark_held_locks+0x9e/0xe0 [ 2138.233384] __cancel_work_timer+0x368/0x4c0 [ 2138.233958] ? try_to_grab_pending+0xe0/0xe0 [ 2138.234544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2138.235230] ? cancel_delayed_work+0x24d/0x2b0 [ 2138.235844] ? trace_hardirqs_on+0x5b/0x180 [ 2138.236403] ? cancel_delayed_work+0x1b8/0x2b0 [ 2138.237004] ? cancel_delayed_work_sync+0x20/0x20 [ 2138.237644] hci_request_cancel_all+0x73/0x230 [ 2138.238240] hci_dev_do_close+0xd9/0x1240 [ 2138.238793] ? rfkill_set_block+0x18f/0x540 [ 2138.239356] ? hci_dev_open+0x350/0x350 [ 2138.239892] ? mark_held_locks+0x9e/0xe0 [ 2138.240428] hci_rfkill_set_block+0x166/0x1a0 [ 2138.241012] ? hci_power_off+0x20/0x20 [ 2138.241519] rfkill_set_block+0x1fd/0x540 [ 2138.242063] rfkill_fop_write+0x253/0x4b0 [ 2138.242606] ? rfkill_sync_work+0xa0/0xa0 [ 2138.243146] ? security_file_permission+0x24e/0x570 [ 2138.243811] ? rfkill_sync_work+0xa0/0xa0 [ 2138.244357] vfs_write+0x29a/0xa70 [ 2138.244832] ksys_write+0x1f6/0x260 [ 2138.245315] ? __ia32_sys_read+0xb0/0xb0 [ 2138.245855] do_syscall_64+0x33/0x40 [ 2138.246344] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2138.247021] RIP: 0033:0x7f0510938b19 [ 2138.247524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2138.249989] RSP: 002b:00007f050deae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2138.250997] RAX: ffffffffffffffda RBX: 00007f0510a4bf60 RCX: 00007f0510938b19 [ 2138.251949] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000005 [ 2138.252908] RBP: 00007f0510992f6d R08: 0000000000000000 R09: 0000000000000000 [ 2138.253853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2138.254803] R13: 00007ffcb8f083ef R14: 00007f050deae300 R15: 0000000000022000 [ 2138.270702] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 13:50:15 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000040000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) 13:50:15 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:15 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x2}}, 0xf8e) [ 2138.342768] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2138.342768] program syz-executor.1 not setting count and/or reply_len properly 13:50:15 executing program 5: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x88) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2138.375648] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 13:50:15 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc3e000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:15 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) accept$inet6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @local}, &(0x7f0000000780)=0x1c) fallocate(r0, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4307, 0x80880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d78, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000000540)=""/72, 0x48}], 0x5, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x100) setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32, @ANYBLOB="02000700", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="040000000000000008000000", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="257daf85", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="1000664a000000002000010000000000"], 0x6c, 0x0) fsmount(r1, 0x1, 0x8) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:50:16 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) stat(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0040abe0d4dc03000000050000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 13:50:16 executing program 6: syz_io_uring_setup(0x3a75, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x4000}}, 0xf8e) [ 2138.459025] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2138.459025] program syz-executor.1 not setting count and/or reply_len properly 13:50:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x1b2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0x3, 0x4) [ 2138.549956] EXT4-fs (loop7): VFS: Can't find ext4 filesystem VM DIAGNOSIS: 13:50:16 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff85a1c63c RDX=1ffff11003288ece RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88801944766d RSP=ffff888019447560 R8 =ffffffff85a1c641 R9 =ffffffff85a1c642 R10=0000000000032042 R11=1ffff11003288eb4 R12=ffff888019447680 R13=ffff888019447638 R14=1ffff11003288eb4 R15=ffffffff85a1c640 RIP=ffffffff8110750d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7d9df3b8c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055828c1e4478 CR3=000000000e0ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055828c172820000055828c195f30 XMM06=000000000000000000000004ffffffff XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822ca14c RDI=ffffffff879e81e0 RBP=ffffffff879e81a0 RSP=ffff88803f69f188 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d088 R14=fffffbfff0f3d03e R15=dffffc0000000000 RIP=ffffffff822ca1a0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f050deae700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056070c861a50 CR3=0000000040dd0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000