0x141) 03:36:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:36:35 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2b9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, 0x0, 0x4001) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}}, 0x1c) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x37, 0xa9, 0x1f, 0x4e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x1400, 0x0, 0x8, 0x6, 0x6, 0xffffffff, 0x8, 0x0, 0xfffffc01, 0x0, 0x1f}, 0x0, 0xe, r5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000380)=ANY=[@ANYBLOB="11961995630a98addc720667f2", @ANYRES32=r6, @ANYBLOB="05000000000000002e2f66696c653000"]) setsockopt$inet6_tcp_int(r7, 0x6, 0x1b, &(0x7f0000000340)=0xd83, 0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r6, 0x0) 03:36:35 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0003000000000090971d100a"], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) 03:36:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x2285, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:36:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000740000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2415.708767] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2415.708767] program syz-executor.3 not setting count and/or reply_len properly 03:36:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd_index=0x2, 0x2, 0x3, 0x3f, 0x10, 0x1, {0x2}}, 0x10001) sync_file_range(r1, 0x8, 0x5, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x74, 0x2b, 0x400, 0x70bd25, 0x25dfdbfb, {0xe}, [@generic, @nested={0x60, 0x83, 0x0, 0x1, [@generic="f776e8b9334c96c82ce3894f536c5f5e3639b64fe136b40049c4256a1ae801cca9eef0db7f99bd938737e322540e9fae8a08e180666347c3ace3830894a9cf0e41dab773c4f9280aceacd90f0e9289b6cc3f01ddfbcc2bf69a5ec0dc"]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) fallocate(0xffffffffffffffff, 0x30, 0xfe9, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x0, 0xffaffffc}, {0x0, 0xfffffffe}, 0x6, 0x6}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) [ 2415.788180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.789260] print_req_error: 760 callbacks suppressed [ 2415.789281] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 03:36:35 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x39ef5572ce3febce, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf3, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8a08, 0x0, 0x4, 0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) r2 = signalfd4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_xfrm(r2, 0x0, 0x880) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000000)=""/128) syz_open_dev$tty1(0xc, 0x4, 0x1) shmdt(0x0) r3 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77f, &(0x7f0000ffc000/0x4000)=nil) r4 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000380)=""/220) shmdt(r4) shmctl$IPC_RMID(0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x68, {0x2, 0xffff, @empty}, 'lo\x00'}) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) [ 2415.796868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.796935] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.800781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.800848] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.801003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.801063] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.801216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.801275] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.801434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.801550] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.801718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.801779] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.816903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.818255] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 2415.820146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.821490] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.823396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.824420] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2415.826346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.827509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.828604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.829876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.830965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.832174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.835982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.837206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.838532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.840578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.841990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.843393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.844508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.845937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.847147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.848408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.850554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.851737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.852939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.854120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:36:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x2, &(0x7f0000000000)) [ 2415.855392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.856961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.858105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.859291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.860659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:36:35 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000007a0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2415.862126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.864119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.865274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.866606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.868169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.869370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.870751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.871916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.873209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.874874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.876039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.877386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.879689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.880916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.882141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.883322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.884933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.886545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.887747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.888880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.890761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.892207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.893381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.894760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.896260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.897968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.899508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.900595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.902009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.903282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.904625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.905825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.910920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.911761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.912502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.912621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.912819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.912961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.913082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.913208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.913328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.913490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.913657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.913765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.913954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.914094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.914231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.914355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.914504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.914646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.914814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.914924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.915116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.915680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.915831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.915995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.916120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.916246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.916370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.916542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.917041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.917223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.917350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.917552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.917677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.917795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.917932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.918039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.918484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.918638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.918761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.918879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.947899] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2415.947899] program syz-executor.3 not setting count and/or reply_len properly 03:36:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x2286, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2415.977734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.979166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.981175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.982328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.985892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.987000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.994812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.997676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2415.999087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.001663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.002825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.003875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.008900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.010033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.011821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.014679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.015895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.019613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.020742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.021779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.024693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.025947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.030656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.031796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.033158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:36:35 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x6, 0xffff, 0x80000001}) openat(r3, &(0x7f0000000180)='./file0\x00', 0x101200, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000440)={{r0}, "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1, 0x5, 0x80, 0x8e, 0x0, 0x1ff, 0x10420, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x68a80, 0x4, 0x80000000, 0x0, 0xe95, 0x94c, 0x6, 0x0, 0x0, 0x0, 0x154}, 0x0, 0x6, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 03:36:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 2416.036272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.036537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.036704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.036995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.037228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.042633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.042820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.042995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.043172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.043346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.043586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.043957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.044155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.044332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.044587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.044770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.045031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.045216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.045374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.046386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.048687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.048876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.049054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.049230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.049408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.049820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.049984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.050292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.050544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.052663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.052851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.053041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.053224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.053402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.053845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.054236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.054489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.056624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.056813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.056992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.057172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.057351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.057589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.057967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.058251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.099070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.099210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x430c, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x600, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x174, 0xd, 0x0, 0x1, [{0x66, 0x0, "6d9726ca7fd7876691128b237bfe72ba8a5571950966104a400f03de5dac03c50dd357b3ea47db976487441ea076c331a8fbf4d29d97b6a743778df1c7db728d15730991b08c37291977ae9c17b7b5bc83dac10533c6a88cae85bc29bfb505c9eca6"}, {0xd2, 0x0, "edf8d059b41e65c847071f673836501a0720c18886449ee9d61db985e677fc01ea861ed5d2297cc07d5ec937703f1059108fb9f7caa49072a0694f3db0c85e37f59de0c52731d32b4cba74ca7ef9f299a13acf0df976e7a953230a33df59c5676e3c699d1a02aa99cfd4025fcb8a1c4a4fa44bcffbe54ce2e1a1f9675e241fda23ba35e866a8c73b01f9fd4b745758f93d8e562df0ab06ace7effda102ff23bef8f53e8f48a9600a2643c277770c4c90ef611c3b81765e99b45758f5a11ad10a49281aa409a9f4f2f82e59cc2919"}, {0x34, 0x0, "8f2bdee8f4f8675d2f960a62d6f058ce654b781d5c14171d6f41f652f13c0e6ad724066a751a30f75aff3407f725f7dd"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x224, 0xe, 0x0, 0x1, [{0xcf, 0x0, "2a1a0708c458e91308ad8bd20ab243237f1b711c25af148493fc5780e3d5a3df35784e680b756e824fa2b7beebdd7ddd53797f779f9969a00e44f53b8aebc02287fcb52b2af3a4dc8f6d8a01184b9a8b10cb39bae8976b0f67c983e3a0a3110c5b41f6bfad0ab6d89886040268c0a3a1f6b772f44d142abc32e22f115e81a19371a5afcbd5511d3fe0c31c2620c156932fbee21e653ee700b32c803230ebb0509ca2349194bd3a5d26e4b811657c72530c4a0903229d044dafd4ec1fdab691b4966fbb6f9a7e4c10fd4cb0"}, {0xe1, 0x0, "a4f5c0c8846b65424d797343c77fcaab3de7ef197db8834f9a8e532378240070a28d636644513735fbbc0421c9fb5c5cf1ef07d3485fcc1a5e26f2a93fad9d02c0fcb79fbe6c9c61a0fa75674597c7b62d10ccfd534ec98c332f130e369f587ea13aac14119724f33f79626cc3b5c92484df28b7468d913afac3635a03d1f2e089bf3305463214656416b229ebef695411f64235bbd31d89e439f200a41d02da44cb810719be9a70d0622a9474092af2dea680d12c43b20b815a13033caa3b165df09ea264768bec4dda3904d073e461c70f18a786d37b519dce2f2bcb"}, {0x6b, 0x0, "2c51dbe361852d22c904f3461e6bba6b6f28de46583935167db35bdcaf8eff0ac61368d70da23dedf7b7e86269d17ea7f5e3877d60a4d29623d34dedc38c23b5f43baa6c1aa08a1b05b1bc2c7c586643a835718d7a51d90465f813c22ab6291b086970d865fdaa"}]}, @NL80211_NAN_FUNC_SRF={0x24c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x230, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x218, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x69}]}, @NL80211_ATTR_NAN_FUNC={0x13b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x3a, 0xb, "00e9e3519f7ced01c4b791186d6a7523f5411e6bdf989cda32296fe24cc1d5388f2ecd854df4795e98aeb83255b5ad8b09cdec1b3154"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1370, 0xd, 0x0, 0x1, [{0x5a, 0x0, "bb05c9d57cf8692219d1230be3429dc4815aa3ab709b00b11e089fa204c85cbe41dada71598ee899b99435b5fa0a740e717cc5fd4dccf7aceeb749361890ffa76f23d85833c459a71b60880b3c2e3a140f4aaab0b9da"}, {0xab, 0x0, "2933959a1b70f8a9dccdc92ffc2baadd693584f822d202b574aa9215ca362d5850b439bfd75e200058bb314f598f9a6f3a5c56722645af7e14b3dd7221e3750ee5ccececde2ebedff7f9df1c6502167a44beffef65035575276aa450df32ae0a262cdeea6b0a53ab743900d1cc94f502c3fb53e0fffa933a31510053ac6bf554360f377962b58131568cee5d9c7500f782b4c06d3492b0f2e24c3980e99583bcdb8d659fd2f1c7"}, {0x1004, 0x0, "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"}, {0xc1, 0x0, "6d63df451452f9ee69355d93ca88bcbcd3f9eed3d5daa04236e647f1d4e2d5fb9334ebbeadf8edfe7224f9f62fa45221f6d9eda42880343c3a98e516775a7189673363181d6e840e91d74e46240c42e176b9d367b8af4302646309ee1eec42438aa90a54d9567290060b3b328a87f853825f102b3de0e4856544390139b2b7adec188ffc6a9153851a469c9eb32b7750863e53e1dc7b3f5f64b149e78067408b8dae93369ec15a593d3af07270ee467d2ca6ac4ba3a10c896693b33b05"}, {0x87, 0x0, "3a9544a18e9df075529541bc31a0b3e22873c53a7b075ccf43eae2b60d3928faaf423c75ae290700456c16d340e88228b03e824996a36571fc013c38804195bfd0bea49e331b820a059c2d228056af17c2ce2a3278c180a12980ed1de5b3a1e858a64e3f30297d47facd6f38ddb95fb363307889ccf8d77f302f2e64075b1cc467884d"}, {0x69, 0x0, "940f95df305f2979be19e8dec2ff393ed9251f1588192dbb0486f66d76cf2ea752e8e008a29abbf0adb14acd8529d26fac39dc28f3c41f1d9c7a9d42d3217bcf3af19ccdcc4a3fa85acac0881b4ddd3b7d74f5e698dc3ef5748ddd2e5feed2cf7ea7997125"}, {0x47, 0x0, "6592a4b4c0fe5e10eb1d5aa000beb52c0c36956e962e44614e0a4c630a722f4af02e0ad7644a054c9821858a2272f7995215f9adcaaca40e155a14d4356ad989a53f95"}, {0x24, 0x0, "e3317436ae3e989c965b5867841ff0583d403b7c98f329f7e3130f18b7adaf67"}, {0x3a, 0x0, "814cacd70c7b12fbb0f261eb21255b8bcdb84aa3ec510f537ed515faa9369af27ff807f94b71718ec025b4c9121b4536eee492b2db78"}]}]}, @NL80211_ATTR_NAN_FUNC={0x13c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x22}, @NL80211_NAN_FUNC_SRF={0x130, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "fad27f0db960e6b14b0e56347ea3c078394496ac252c82a18037c80e96125d2d3c2130c451dbbd9c93dbb5afe833939f99d723abc0fb31e898e471dc0011e9f20df1bcfab2cf307e1306b8397b996e99db44b3251e01e8b87710710cc87553d31492755e5f1394257656e6a182c8a1774bff99d315d8a22b0e29aea1dc5a893b3ea2e4bffb385af551508d5600d3896e9872b0008e0a43f0245505a45b5ef411e75213d7e13f9bd418f85a4e553b0ff5bf5215581098eaece93b92b9c2a3bd7a508fefd6e28bc162ed4954b00507ac8830e6f6fb50f382a050b3124cb685d6e905e4a24dcd5f18bfc1938f73446bc1dc1991bf2df4b1440760a86f63e931d7"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x140c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1c0, 0xe, 0x0, 0x1, [{0xb1, 0x0, "3cbca956fc44d0eafe51a1b70951f5ca9a99539ab3f15e6ba3c49da43575719f95e4dd6c1f01f51b6c340d118ca890f99c8c8635e01337c9edc1cc4bdf50f7e2d6642e22f69291609b75dd9e0fedb0023d0231027480472dddba2d979b950ee0480c060aefb459d273e98e4968c9af5f92879672d3117aee4099a8ff9db497c82f1d7a9ca349154a9356dc12aae0271652f84727e1ffdd83864db02e2ccd8fb82fc5b434552dfe89cbb8cd1d5e"}, {0x44, 0x0, "53d5a9f774f5d2e3fea228c6eca42ffe909c40ffaea8005ba605412c48cd0232adf580f79dfebfc003e0e7ee1b40fcb565c86aa113abc9c73eb1964262e2e139"}, {0xc3, 0x0, "649d33c5a75c2ac154939647ea1155b8bee67ca3382d1a31876d10288a23287967bca2ff7d896564115874fae94a60a8d403ca8f53a86b44174ef08d1639164fc18148113c5a77459dbb628658b4eecd98af9e0ddba214cf9aa34f9d73b8a3b7bde23df615671e83c25f6a3f523338d122ea7a4e084d4b7d4273e7a6dd2d9b7455035c8172ba45cac0498494882ecdc44a1ebeadafb7d72f3136c9f9be50c86816324bceec83b6a99c6a260dd99c3f5ff118acc30715cd505859a710b4ce29"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x121c, 0xe, 0x0, 0x1, [{0x9f, 0x0, "81967ff6b969f2ac4fc8344e2f7ec6c02d9d97024c408db8ebf17ffc0be687a7c2141aff0958d9dc9994d8fc3a3544574ff175b8dec3b2ab96b5b07a444f05069f5b8a60612ac94a25ff200efb0c30c9011cc72de00da6ab4186cd574a7ad1b75d56150d2d70f6d97f7b64920cfca9d0d2358d8ca9775459180b2b37c30b5476ef74d40446dd8ecebd1689f6c7c0264932cafb96248d611b082b2f"}, {0x10, 0x0, "574ca59ab8898eb50e84f400"}, {0x60, 0x0, "b205f24492a375e7881e847ebeeb13265154c5de23b6e18a116d0e1a4a3f664dd0ba749b6697b10beb0a8cffafb9069565ebf051e129038c0feaddd933b9e69f9c288159e36c3cac45445f9c24ae99655fb1006828fbb7c0bb3f2fc0"}, {0x1004, 0x0, "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"}, {0x101, 0x0, "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"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8322b05f3a3d"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffff7}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1f}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "da80cdcc0947"}]}, @NL80211_ATTR_NAN_FUNC={0x1190, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xff}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1168, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x6d, 0x0, "42c594ce06adceaa92c9c320bf6a6fbb4d1796c4b5bff6a17d7a754ffb65edfeb27654f37c4ba592a8855a5e9b4c50d1a9f8c267626c7c52dd9e68345d75a38e6ca92e1d0ec37cfae14c2d964845d2075a7eeed576aeb9bd5340d9b11e172e31d5ee3a88c9e228ac43"}, {0x58, 0x0, "290fc9912931b7b5968a6918b150bf49de54e2175e9131ade8b3a176524c10b2ec44bfec41632fcf8546a69b36e6de36ae100bcb20c64e3d7465ed426f09a3c0c7fb2f8cb7c8f6a3225e8ee0de1436e60f36a1b3"}, {0x97, 0x0, "8f9d7d76bae0a35007e7297c5053bf7f66ad17d8a0aad601a4b2e6e5a2a95df04cbf770c64d4a61cb8bd360a8a8c6d8057d7f9c7282afe29db845148a75351f367d6ddd51a25a10d3b2fde2acd741f5b7263d5319e2e494488da9bf1547a0dc835e82dfb357ec5442ef2b124eed5e77b002dd81cc6caac5062a9f09f615b5e1f442b2c67a3d11914294f15f4113721d7180ad0"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}]}]}, 0x430c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="10005080050002003f"], 0x2c}}, 0x0) 03:36:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x4b47, &(0x7f0000000000)) [ 2416.099328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.099594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.099706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.099804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.099999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.100167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.100280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.100385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.100522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.107701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.107817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.107911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.108080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.108202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.108314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.108438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.108583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.108715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.111044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.111146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.111317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.111473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.113249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.113361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.113500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.115429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.116617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.116717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.116915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.118915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.119029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.119138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.119248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.119356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.119595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.119693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.123934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.124056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.124162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.124266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.124370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.129409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.130696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.130809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.131765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.131885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.131992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.132098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:36:36 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2416.132206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.132313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.132416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.132553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.137174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.137295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.137407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.138129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.142922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.143034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.143151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.143248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.143416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.147260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.147369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.147705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2416.148414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.148575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.148683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.148786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.148888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.149074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.149190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.149298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.149425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.154020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.154127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.154239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.154330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.156776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.156898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.157003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.157108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.158835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.159793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.159943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.160065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.161861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.161983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.162087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.162202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.162330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.164701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.164811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.164903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.165082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.167368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.167796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.170109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.170231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.170333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.170471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.170581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.173252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.174352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.175652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.175761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.175863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.175971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.176073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.176165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.176331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.176488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.181582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.181713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.181826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.181925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.182024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.182114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.183605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.183720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.183837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.187179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.187288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.187388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.188843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.188941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.189103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.192850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.192962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.193063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.193168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.193271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.193370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.193483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.193655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.193773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.195551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.196387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.202395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.204008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.206638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.206739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.208862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.209047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.212751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.212855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.212953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.213051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.213151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.213259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.213348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.213638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.216576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.216683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.216784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.216886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.218158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.218275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.218363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.219259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.219372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.219879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.219980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.220083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.220205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.223948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.224042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.224199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.224309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.224408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.224806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.288661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.289871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.291079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.292274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.309434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.310690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.311851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.312999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.335876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.350707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.352057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.353164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.370836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.372027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.373183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.377672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.378923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.382708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.383995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.385202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.389297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.391740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.394865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.402398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.403658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.404806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.405949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.407166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.408583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2416.409702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:36:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x2287, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:36:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0x6888}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0xfffffffb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x31010, r1, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x6, 0x6, 0x0, 0xffff8001, 0x6, 0x1}, 0x5ad3) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x1}, 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r6}}, 0x2) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r3, &(0x7f0000000340)={0x0, 0xc5, 0xf}, &(0x7f0000000380)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x55, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x4810, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) 03:36:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03fffffff50000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:36:49 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:36:49 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) timerfd_gettime(0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xff, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x10000, 0x4368, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) close_range(r0, r7, 0x2) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:36:49 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x104) lseek(r2, 0xfc6a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x9, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b010520b602000092030000050000002d0100000001000000000000000000003ba85978c36073b949b985bc13486b99ba55421ad12756352434d69ebdde9301003b98"], 0x43) shutdown(r1, 0x1) fallocate(r1, 0x0, 0x0, 0x7e) sendfile(r3, r1, &(0x7f0000000140), 0x800) sendfile(r2, r1, 0x0, 0xffffffff000) r4 = creat(0x0, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000200)="42b29597a78450261209c5d46c8519cb286801e0e6c5a311dd7b41cb98d07bf633643a4ae4da7864ab9b1a35381a77048e6b9d5f561921562eb95347d8ef681023f25cf41e279add7fbef3d0345d51bccaaaaaa8549d0a398b1afd851a2acdb4dd42c1f144cf3543f08e0add20a585365054b9cfe318aecec8760497eb925aa3f7a46d7086296e5b44a92fe6856e5311c18691e33f9f44230d8256eee4e3fbbe06cc6ae1cef12386cd261ec11fccc08844324ae27ed203b9d6bd158c70317fa558aee1bad849efe1afccfe1bbedfec9f7ee6580373ec788f1aecf7ee3eea5df381932c88fa80be92a4b4cf1f0718", 0xee, 0x2}], 0x1001, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_winnt}], [{@measure}, {@permit_directio}]}) sendfile(r2, r5, &(0x7f0000000380)=0x3, 0x4) fcntl$setlease(r4, 0x400, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES16=r4]) 03:36:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x4b49, &(0x7f0000000000)) 03:36:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000200)={{r2}, 0x0, 0x1c, @unused=[0x8, 0x20, 0x2, 0x6], @devid}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002700)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x121080, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4040114) 03:36:49 executing program 1: mknod$loop(&(0x7f0000001d40)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x8c) acct(&(0x7f0000000080)='./file0\x00') mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x200b012, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 03:36:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5409, &(0x7f0000000000)) 03:36:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03ffffefff0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:36:49 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x32) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x3648}}}, 0x0) 03:36:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x2288, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2429.736921] Process accounting resumed [ 2429.768986] Process accounting resumed 03:36:49 executing program 1: r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) lseek(r1, 0x0, 0x1) write$binfmt_elf64(r0, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x3, 0x3f, 0xb, 0x2, 0xb9d20457b4e306ad, 0x2, 0x1b0, 0x40, 0x173, 0x3ff, 0x0, 0x38, 0x2, 0x51, 0x4, 0xfff}, [{0x0, 0xffff, 0x3, 0x0, 0xbb, 0x87da, 0x7f, 0x6}], "4c9d847d19a11caf3edba042ecdccc862050c0f5db", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x78d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}, 0xc3a}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000300)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x7ff, 0x7ff, 0x4}) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4420032, r5}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) syz_open_dev$vcsa(&(0x7f0000000840), 0x401, 0x28180) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:36:49 executing program 5: ftruncate(0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000301010200000000000000000c000000060012400002000008000840000000002c0010802f12fe01400000040008000240000100000800024000000081080001400000000508000340ffffff"], 0x50}}, 0x4000801) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) keyctl$link(0x8, 0x0, r3) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) request_key(&(0x7f00000008c0)='logon\x00', &(0x7f0000000900)={'syz', 0x1}, &(0x7f0000000980)='\xfeO\x1f\xf1Z,\x9ao\xc5\\\xab\x81\xfbF\t\xab\x1f\xed\x1e\x9a\x1cQ\xbcg\xd5$*$\x84=\xab\x02}-\xf9)g\xc3u\\^+\x00aY\xbf\xe2\xab>\xd3kPf^\xb3N\xd7\xcf2IAJ\xe8\xa2pm\xefP~\xed.\xfc\xf9\xe1\x81t\x1bGt\xd1\x06\xb3\x8cG\xf9rH\x18\x19\xe91\xa6H\x96\x9az9\x06I\xe8\xce|\x1c\xcc\x02n\xf3\xc4v\f\x12\x1cBP4\bo\x85<\xc9\x02\t\xce\xef\xe0\xec\xc4\'\x85\xa51\x7f\x9e\xd4\xfc\xa3x\xfaW\xc1\x18\xe7\xbc\a\xfb-\x1d\x89\xfc\xbdpm4\x18\xa7Vp\xcfgw\x95\xbbR\xc3I\x85\xaa\xa4\xc5\xf4\x8cR\x19', 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x151180) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:36:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x540b, &(0x7f0000000000)) 03:36:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03ffefffff0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:03 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:37:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x4686}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x28, 0x18, 0x0, 0x9, 0x2, 0x84, 0x4, 0x62, 0x1}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8f6}) r1 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000100)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) ioctl(r5, 0xffffffff, &(0x7f0000000100)="986e4877e7b6b9ea8ca7e167ed52baf80b868cc4e11c21db121eb7168c890a136e5ce6ae68c0f72b85de44bafb316403678164b7bde7330d72e3a178efe3b9a7cdf08d6b4c46aaf6aee740129baa70311e49bc93b395f097e512915dffca4d7ca5eaede4fcc45f77db784b675fac6a511d51cce7dd803e6efcbe240ee393b971d2f73d12d8e1f58070c070f00d66f8f79bedf149077a7956900f3b3dfccb1195c2cb104489ebb522b0947d84abb8e9") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB='Q\x00']) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000380)) 03:37:03 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1d0900", 0x30, 0x88, 0x0, @private2, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}}, 0x0) syz_emit_ethernet(0x27, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @broadcast, @val={@void, {0x8100, 0x2, 0x1}}, {@llc={0x4, {@llc={0xf0, 0xe, "1e33", "781fb99bb93dbc663152d8e309c556057b"}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x2b7, 0x74, 0x96c, 0x6e3]}) 03:37:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x540c, &(0x7f0000000000)) 03:37:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x2289, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:37:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r4, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x204, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r9, 0x101, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 03:37:03 executing program 1: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key(&(0x7f0000000280)='blacklist\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e776948c30407f746b4bce4fe1dfd22cfc491372bfef696cb8114417300486c7dc67510f255163554a8b1c56f99015cff18dde6bfd24cab6fc6fe129421a032a", 0x17}, 0x48, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000400)=@chain={'key_or_keyring:', r1}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(0xffffffffffffffff, r2) keyctl$describe(0x6, 0x0, &(0x7f0000000580)=""/199, 0xc7) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000008d0800000000000000c75b96adf2060b3e44331743e947f52f5131e8755d5ced99c291a77ce80e59dc1a5f57b7654e74d230373cdf92a8005dd46b9e4fbc6e9494fedb4923142fe269b2450016f12146da951d0b643c0f976cc3020fd6d901861e63a7c05b4c6f5b9eb48f0f7200bb69c1e45343f5916b9b0d43fcc4ca263e7231b05c606895742af49806f007746f3ceab2e0fc488992c9dcd7c36b36ba00"/172]) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, r5, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:37:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03f5ffffff0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x540d, &(0x7f0000000000)) 03:37:03 executing program 5: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="3825447e4740ef960243a0dfd93ab1bff21d71b3409318b70ff02d3e3ab9cf90622c2bcc0cdf2085337498b38bc89b99", @ANYRESHEX=r3, @ANYRES32=r5, @ANYRES16=r1]) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x6f23418173a5c3b, r6, 0x8000000) io_uring_enter(r0, 0x186e, 0x0, 0x0, 0x0, 0x0) [ 2444.085538] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2444.085538] program syz-executor.5 not setting count and/or reply_len properly [ 2444.105870] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2444.105870] program syz-executor.5 not setting count and/or reply_len properly 03:37:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r5}}, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x5, 0x9, {0x0, r2}, 0xfffffffd, 0x9, 0x1, {0x0, 0x0, r6}}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x7}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sendmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xbe, 0x80, 0x0, 0x1, 0x0, 0x8000, 0x200, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x200}, 0x800, 0x40, 0x4, 0x6, 0x101, 0x57, 0xc102, 0x0, 0x7, 0x0, 0x80000001}, r8, 0x10, r0, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:37:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x4b47, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:37:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000000000000b32428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x10) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x105142, 0xc7) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffe3) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x4000000) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x1000}, 0x4) accept$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futimesat(r5, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}, {r6, r7/1000+10000}}) sendfile(r0, r3, 0x0, 0x100000001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x0) openat(r2, 0x0, 0x8c3c0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80000000}, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r0, r8, 0x0, 0x80000001) [ 2444.234217] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2444.234217] program syz-executor.3 not setting count and/or reply_len properly 03:37:04 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20004, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3391}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001700)='net/arp\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/134, 0x86}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:37:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5413, &(0x7f0000000000)) 03:37:04 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:37:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000200000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x4b49, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:37:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000040)) 03:37:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5414, &(0x7f0000000000)) [ 2460.865974] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2460.865974] program syz-executor.3 not setting count and/or reply_len properly 03:37:20 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x4000) syz_io_uring_setup(0x7b1d, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) shmdt(r1) 03:37:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000340)={{r0}, "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"}) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000180)=0x5, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, 0x0, 0xfffffffb) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2004, @fd, 0x5000, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/61, 0x3d}], 0x1, 0x11}, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) dup2(r0, r1) 03:37:20 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2460.896543] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2460.896543] program syz-executor.3 not setting count and/or reply_len properly 03:37:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00i'], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'rose0\x00'}) 03:37:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5415, &(0x7f0000000000)) 03:37:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000300000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2460.984567] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2460.984567] program syz-executor.0 not setting count and/or reply_len properly 03:37:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5382, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2461.016352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2461.052062] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2461.052062] program syz-executor.3 not setting count and/or reply_len properly 03:37:20 executing program 6: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='uid_map\x00') writev(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000002c0)) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000b16d4914dc4b2a1be9cb20a76d9899227657c52bfa46f181ae442ca7adb6ffb5bb5f2cc3304014c8a7c85b1ea8c441568b8b965e1f767cb5240c14d4f248", @ANYRES16=r1, @ANYBLOB="010000000000000000007e0000000000000006c6c62559f95a2cbfc2ae9865a10092aab562f80afdde1f7f0622ff8b5320805198dff09559e03ad5c12cff166a640677872867b86530229e41872e050de48c9c17adf0628d07bdd7da648b1748b38af561358c72a070c6018f8d", @ANYRES32=0x0, @ANYBLOB="58e36dd72f723fd2b79f0181db334dffff7ca5cec7d22e91a89f394e775e0000c6fbfba66012af1d9fbf08f57aa35b6370b7a6a90a3c037a47869da6eb15ff72a744"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="00022cbd7000fedbdf256a0000000500d200050000000a00060008021100000000000a000600ffffffffffff00000500d200070000000500d200010000000a00060008021100000100"], 0x50}, 0x1, 0x0, 0x0, 0x10004}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x9, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x90, r1, 0x800, 0x70bd2d, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4cf6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x11d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc4}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x202}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfa49}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x861}, 0x4) syz_open_procfs(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x315380, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0xb00, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xffffffffffffffe5, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c040}, 0x800) fallocate(r4, 0x0, 0x0, 0x1000002) ppoll(&(0x7f0000000840)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x610}, {r0, 0x400}, {r5, 0x4}, {r0, 0x400}, {0xffffffffffffffff, 0x2009}, {0xffffffffffffffff, 0x80}, {r4, 0x281}], 0x9, &(0x7f00000006c0)={0x0, 0x989680}, &(0x7f00000008c0)={[0x40]}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x15, 0x0, &(0x7f0000000900)) 03:37:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5416, &(0x7f0000000000)) 03:37:20 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d7b, &(0x7f0000000480)={0x0, 0xc0c5, 0x20, 0x2, 0xb5, 0x0, r0}, &(0x7f0000046000/0x12000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)) r4 = syz_open_dev$loop(&(0x7f0000001000), 0x4, 0x80202) socketpair(0x5, 0x5, 0x4, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000001080)='./file0\x00', 0x800, 0x20) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000001100)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x9, &(0x7f00000010c0)=[r4, r5, r6, r7], 0x4, 0x0, 0x1, {0x0, r8}}, 0x5d3c) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) io_uring_enter(0xffffffffffffffff, 0x67f7, 0x9d13, 0x1, &(0x7f0000000380)={[0x7fff]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, &(0x7f0000000080)='*', 0x1}, 0x0) r10 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r10, 0x0) r11 = openat(r6, &(0x7f0000000240)='./file0\x00', 0x1, 0x0) getsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000280), &(0x7f0000000340)=0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2461.153789] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2461.153789] program syz-executor.0 not setting count and/or reply_len properly [ 2461.161026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:37:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000400000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2480.017595] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2480.017595] program syz-executor.5 not setting count and/or reply_len properly 03:37:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x81) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1400000080000000060000006a00000b1fe00dc1949aeb7013fa47fd6a640f000000000000004100000001000000004000000005000020000000655f0100ffff53ef010001e3005f49d4e1351800000000000000", 0x54, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000000040)="ed41000000080000d9f4655fd9f4655fd9f4655f00000000000004000493c294cc3c443d59c688f5fe0539e293798777dd5c1c66bf9c282f655b2da6e17b3ff1c0b9abfb29175b7679ffc6f3a005ad02", 0x50, 0x2100}, {&(0x7f00000038c0)="20000000439d0aa58bf76590a3", 0xd, 0x2180}], 0x0, &(0x7f0000003e00)=ANY=[]) 03:37:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) quotactl(0x5, &(0x7f0000000300)='./file0\x00', 0xee00, &(0x7f0000000340)="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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40005, 0x5}, 0xa30, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2800, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) write(r3, &(0x7f0000000240)="01", 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x23456}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0x0) syz_io_uring_complete(r4) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r5, &(0x7f00000000c0)=""/65) sendfile(r0, r2, 0x0, 0x20d315) 03:37:39 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:37:39 executing program 6: keyctl$assume_authority(0x10, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000020c0)={{r2, 0x3f, 0xfffffffffffffffb, 0x6, 0x9, 0x7fff, 0x2, 0x3ff, 0x100, 0x401, 0x1, 0xfffffffffffffffa, 0x5, 0x1, 0xff}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb4017a8758487d15, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @loopback, 0x9}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000f3ffffffffffffff00", @ANYRES32=r0, @ANYBLOB="c46373e9"]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffe}, 0xfffffffffffffffa) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, 0x0, 0x80464c453f) 03:37:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5418, &(0x7f0000000000)) 03:37:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x3, 0xb1, 0x3f, 0x20, 0x0, 0xffffffff, 0xc0100, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000180), 0x6}, 0x400, 0x91d, 0x0, 0x6, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x2, r4, 0x2) ioctl$FIOCLEX(r4, 0x5451) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) accept4(r4, &(0x7f0000001640)=@nfc_llcp, &(0x7f00000016c0)=0x80, 0x40c00) syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="8ee2309c47995455ec7dced68eb160c46014b839663252e10fdc61f5e2e2fd88054934d706470c49e1ecb5911b279caf9597c38f7138e265a9c0895eb5c08249a2c2fffbb7cf7c5a067a39e016d7a7be11e2a0359da88dd80144d1175f50989065d52c715c0fec711859e0ef0d7a51407b3c7d181c7a613c92ee0fb23ccfcc9ad88560cba56f1d1efc1e673619d9a31f9815bd4010524cce05589faff0ede4bcae4f0a79b2c7bf7721c3abcb4c37089fe8606a8293f7106711070be0505b1fa4c390dd60589e10d91df26fd0e49770", 0xcf, 0x2001}, 0x2) syz_io_uring_submit(r2, r7, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x6000, @fd, 0x6, &(0x7f0000000400)=[{&(0x7f0000000280)}, {&(0x7f0000000340)=""/153, 0x99}], 0x2, 0x4}, 0x9) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r8, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:37:39 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5385, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2480.061207] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2480.061207] program syz-executor.3 not setting count and/or reply_len properly 03:37:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x541b, &(0x7f0000000000)) 03:37:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB="ecc792fa7921b4d4bbd071616754ab37e2e7e4b1e667c64369c852daca81b0d018a62576879dde03e62a5b6025cf3f5a87b32cb8e9c758db06d02d95cffe9a7f6641f22d4591742585c581b1cd84a2bbac4d08d9a167ffe460c62b414de484d33dcdea075896fb9e9c1288613ed39f28a060d17192002b1346241631060a28bcd36f81f66aa626031573a28aa87fbe0b97c7a49c8791ca10a5e08aae1dd65b09ea57ec78cff45806cdaebf703c9ca01f2a49880c247801e25ca2770427ffa23614a1fb1e4af138c66a995586"], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001500)={0x0, 0xfdfdffff, 0x3, 0x0, '\x00', [{0x7, 0x4, 0xfffffffffffffffd, 0x0, 0x1f, 0x3f}, {0x29, 0x4, 0x100, 0x0, 0x0, 0x4}], ['\x00', '\x00', '\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) write(r2, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c24194552756d", 0x26) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000010c0)='-*{^]%:\x00', &(0x7f0000001100)='./file1\x00', r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000001180)=ANY=[@ANYBLOB="3c00000001000003000000032dd9a7067181d8a916d4cb233700"]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r3, &(0x7f0000001400)=""/53, 0x35) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000001140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB='\x00.@']) pread64(r4, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) fcntl$getown(r4, 0x9) r5 = dup2(0xffffffffffffffff, r3) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000002c0)={{0x1, 0x20}, 0x100, './file0\x00'}) dup(0xffffffffffffffff) unshare(0x48020200) 03:37:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000500000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5386, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:37:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2000, @fd, 0xfffffffffffffffd, 0x5, 0x1, 0x10, 0x0, {0x3, r2}}, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0x98a) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000100000003000000030000000220000001000100060000000700000001000080"]}) r4 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000480)={{0x3, 0xb5a}, 0x100, './file0\x00'}) r5 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xfffffff8, 0x10000, 0x0, 0x80000001, 0x6}, {0x7, 0x0, 0x20, 0x2, 0x9, 0x8}], ['\x00', '\x00', '\x00', '\x00']}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) dup(0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) tee(r1, r6, 0x1, 0x6) unshare(0x48020200) 03:37:40 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) mlock2(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x5000) shmctl$SHM_UNLOCK(r0, 0xc) mlock(&(0x7f0000ff7000/0x3000)=nil, 0x3000) [ 2480.261692] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2480.261692] program syz-executor.3 not setting count and/or reply_len properly 03:37:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x541d, &(0x7f0000000000)) 03:37:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000600000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 03:37:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x541e, &(0x7f0000000000)) [ 2480.408808] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2480.408808] program syz-executor.3 not setting count and/or reply_len properly 03:37:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000700000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x541b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2496.028392] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2496.028392] program syz-executor.3 not setting count and/or reply_len properly 03:37:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r6}}, 0x2) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x8, 0x2, {0x0, r7}, 0xb8, 0xf, 0x1}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:37:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x541e, &(0x7f0000000000)) 03:37:55 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:37:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x301002, 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x800, 0x4, 0x8, 0x0, 0x0, 0x400, 0x0, 0x1000}, 0xffffffffffffffff, 0x10, r1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001f40)=[{&(0x7f0000001e80)=""/181, 0x11}], 0x1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x6112102) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x1, 0x48800, 0x23456, {0x0, r4}}, 0x1) pipe2$9p(&(0x7f0000001480)={0xffffffffffffffff}, 0x800) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001500)={0x0, 0x1}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r5, r6, 0x2) 03:37:55 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, @perf_config_ext={0x0, 0x425988bf}, 0x0, 0x4d1, 0x0, 0x5, 0x200, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xcf, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffde0}, 0x1c) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) write(0xffffffffffffffff, &(0x7f0000000400)="071e9f7358ec922343d9806f7c2147c81e6890a8016fb53a5ffc493750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e70800"/97, 0x574f9a1587427bae) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r1, 0x2, 0xffffffffffffffff, 0x2, 0x80000}) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r5, @ANYRES32=r1]) unshare(0x48020200) socket$nl_xfrm(0x10, 0x3, 0x6) 03:37:55 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x105142, 0x0) fallocate(r1, 0x10, 0x2103, 0xfdef) fallocate(r0, 0xaca356e80a1e52bd, 0x9, 0x8000) sendfile(r0, r1, 0x0, 0x7ff) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x444, 0x3, &(0x7f0000000480)=[{&(0x7f00000001c0)="a4c783b06d3ece14e8460fe25e6701706f8e842d6c6974f8b1f2f6825454bb42d8281b7f48398a025d08d4e0be76c5e88f7c9ee914a14fa49b315847d366946ba38f784be486383bc42cd396c8b670ed78cf67109d16bc63072b4d4225e65964c143f8d40c0290ebe0532f4e0ae9638e837caa21d919b6ae7298a044ea16c9f024f3deff7382d1ec7b4792ab", 0x8c, 0x8d8c}, {&(0x7f0000000300)="dcce41b52058e4de9ef1ecf9cd0916b77b155b8df455d210d68e84515f22a840db21249abaaf2745820ec41e2fc7004d59e90226344b36d55996e2767182440199b412eb951a0ca0f19f2ad39c2061d4f89013c5b52d290d0944be17245d8f101410be1dc63487ee1ccd49f439fe992a99e7bfff15696202", 0x78, 0xdf2b}, {&(0x7f0000000380)="af9b860fb53c4c9ac838f90add64afd89e9b1e48eedbfeceed10bf973e604f05f31ad547f36a69ae07dc4fab639aae763746c2031cebffde24c8ba0f614142fa0935cdd19d0baeacb9c75da2125d2fa0efd8bfe78977b061590dd6fed32078a17fcc7e61bb3754d82c7c50db8cf73b168e56c69990eda6811e3489fbe87506bd7ac2eb095849de2a857b34be67c694694a64cd3c3b8856d91915e1ae7e28b73cbccc9d7735ac8fc1fa73bd964c373cb74e3d0c49f9e551ad1603bfe5bf4f0952e7f4df6afa14f2f60b90fff690dd59e886efd2913d23e3b195d3038e07d23bf6d2d74aa4de3a1a7e3071c912785d98b781e888a757d6", 0xf6, 0x4241a3a9}], 0x800040, &(0x7f0000000580)={[{@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}], [{@obj_type}, {@smackfshat={'smackfshat', 0x3d, '$/'}}, {@euid_lt={'euid<', r3}}, {@uid_eq={'uid', 0x3d, r4}}, {@appraise_type}]}) pread64(r2, &(0x7f0000000080)=""/198, 0xc6, 0xfffffffffffffbff) 03:37:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5421, &(0x7f0000000000)) 03:37:55 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x9a44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}) syncfs(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @private0, 0x8}}, 0x0, 0x0, 0x2f, 0x0, "aa3262f5718a75c5e4c107b36be5b731cc4ae77e17704e82b2f5a9337ad14b50884654f3309f0ef8bd0753b6aa533ec31376d261e48a66f039d98a9ac4d5d3ad5ba22181cac531a7c335b46ce3d875ce"}, 0xd8) r2 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)=ANY=[]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 03:37:56 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x20, 0x8, 0x8, 0x0, 0x1, 0x808, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x5, @perf_bp={&(0x7f00000000c0)}, 0x4, 0x1ff, 0x4, 0x6, 0x5, 0x7fff, 0xd51, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x300, 0x100) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:37:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000800000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:37:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) mount$cgroup2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x40400, &(0x7f00000001c0)={[{}], [{@obj_type={'obj_type', 0x3d, 'ip6gre0\x00'}}, {@measure}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfshat}, {@subj_role}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x7f, 0xfffffc01, 0x26, @mcast1, @loopback, 0xf828, 0x7800, 0x1, 0x9}}) 03:37:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5421, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2496.281035] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2496.281035] program syz-executor.3 not setting count and/or reply_len properly [ 2496.304803] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2496.304803] program syz-executor.6 not setting count and/or reply_len properly 03:38:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) 03:38:12 executing program 0: fsync(0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000000c0)={{r0}, 0x0, 0x6, @inherit={0x68, &(0x7f0000000040)={0x1, 0x4, 0x2, 0x0, {0x12, 0x3c, 0xffffffffffffffc0, 0x1, 0x8}, [0x7fffffff, 0x1, 0x7, 0x7]}}, @devid}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001340)={{r0}, r1, 0x0, @inherit={0x58, &(0x7f00000012c0)={0x1, 0x2, 0x1a5, 0x1, {0x22, 0x3f, 0x2, 0x8, 0x1}, [0x9, 0x0]}}, @devid}) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000002340), &(0x7f0000002380)=0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x50}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002540)={0x178, 0x16, 0x600, 0x70bd29, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x7, 0x0, 0x0, @fd}, @generic="e2ae887844c5da6782a5198a0f8ac97145c62d92d63ec6e94eb0c749b59c19e47592d7255627209132e3e809e017df1f116e77af8b3e4a8e1ca849f55d60dcf99dcd1a32f8ecf8197db0876e7f22c6594bd57bdf92a52b44e0ae7c8c6281aeaf195e434b0e97bf2b9009d4286b3c37", @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@broadcast}, @generic="834e93d02be961558be2d7c6ff258148e5f6ee346991de94ca1dffc196a0b304045c3ca223301dc1a5542871c32783708075c35aeebea2bb2be6ee743ae436342c57e567f5d8fb2c", @generic="1f814242908149e00eb18a85d17f589a28ce9b8b01bf8214944b78c629475af7342bb4bf0393e5c79447443f478fc6783d7d86d2516f300c75d15c89caba894c74ce11f5017be95f7c330ef958fdd1311e902c9bc392ea6b1bbd5e1b836e7a8d0108d0c15965006d76e5ac1ce4822e33a146ef0c95c16103f0876f406342373e7e108d0dcb72aa254cef8f6d3f84", @generic="df90a68bf015d96f314e983ba0"]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) fallocate(r0, 0x12, 0xfffffffffffffffc, 0x5) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000002800), 0x82081, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000039c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003980)={&(0x7f0000002880)={0x10d8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x68, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x54, 0x1, "51966600b859bd9407c8101e14b64f2e28f97ca354fd8486f73cae6f28ee62bc8c008aaba685ad77b23f9c07e99c117618a5b15567337ff25d70b9b8946388614737d756b40a591d245cfedc92c3f4b7"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1024, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffff81}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7, 0x1, "eaf0b4"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "3b028b6584c9cbe9a52588e73c7d8fd23eefaad4b7fefd214859a38e7fa11769a08bb83b62a558ee8f6ec5d584e0655ce219be906371df92e40860c8e523784104e9e20ef80e3ab1ba9be46a760461f787eccf801b726350061415d12dd68b685de5fef56e7e7608aede17cb9a76edb5f563ad665f1f1f7608e8edaf8e19a3fd6e133bba292a1ce418774985e16ea40ed0e3246391c93869bd2b6806558fe43bb7b9571339c507f0b943c0e6e7f84e9bfbea2509ef90011a7d5f303bcc28af0028707e324ee8360ddd27f0e4a3260b38f7196a34efbbd816ab89d9c685b51bc54ea49a8b088fa9ee5c82eba5b26722f820af0fe48a2dc77571146856239ea977509d0bc390ebf884f45c0a45c3ea37b9621f85b998260fbaf53be6e9eb2c05ff13a132e212360f8b2e13cc4db4cb90a7d7e010dff96f85e8941b5fdbaff411b4f51dbaf9a77d900f4462565bad0acd48e98063cac202944fcb2b28d7bafeb434f912ae711d60c21f277a62befd9f5e997011d9252b95b599f80883648ccb1426c5093bbdc443540e788d82039011f2fcd6a8e3deb9a3ab758bbecb53598facec08bda33ac80b6904fb40c56e65d48c75adcb4f0f8a1cf39d228eef026a0b0f1d7e444a8393c6e5e504d1b1a7bb997900978e71378b0c7d3dd6ed46049af354333174bcbf327342cf535af901b5e872a7c5d84f4010b6065c2df989d541c4dd3b9ed1057717092025e52accfcb9acfff0ae28f4c0cee9091ce1f3389d08b8a20894cf96031428ff47238bb4273354f1dede145d4cbdee9e90fbe967b73c9ef2e8b9eb391f164245d6be00d3e2c7c8292c513e21a4e95cb093b588b9c9adb94f094a74e6e7948deb39745312645549d1f223a4e666701b810a78ca09e25f1508ff25294d3bcb83844508bede0845f227f73f84999f2ea3d53816d95568260853f6e5b8b7dbedf455661070284158bb8633d9d83ebfad2b5b6f191012f345f13ce95babc0be8e0124a17b395a8a7857c005812baaaaa3b33dedcef28140c15e97e714d2499a61a8f095b5207228733f01251756d74e896adcfffabb604e9199232a611cec880617a6c0a0eddf71cd8f60d825c3dbf40719249d841665992569ad28602d5a42a805f7e644d1d7dcc314f19a21fe0385bfed3fabd0fc523add4e194082799f66dc67dcfb12e78f1a1e5f971297c9cfc44ddeb7b6ea2657f780713f7aca5d02b190e2e1a5f0c0cd7cb4e572b128cf2e7e0da347e1745b3cfe905a49e4945587f99c7fa6b01e4418bdaef0bce0e0360947aa506c196068998dfc57a61c15f97d401dbfb3199b6c340372f4503c77498379dd824320913947e2400cef804588495c206f4a83ea7ccf0f92a48aadfb34d0eb54439a1daaff9ee6558d7d860ebce96eeef7c1b57b51f51151b35b6e90f7b1033e0d1d7c538073ccb71f2c0ae3ba919f59f36ed740c02ac6221d0fd1f5b02c77a4f9b5c84e8ff0497cddadde1c70476ebbecfe286f35bd21329e6944b7d165e54e2543ced38bd672d01847220edebe35f801bc9205c9fe07234ff6de19d1b9b01de3c30af49cbdd1defc9a36e49c40e7cd6d039de0b72310a38061eea2be1dd19b99fec298295dd63557ee0781bfd242a70dea6b6d29826f52823927f8f2a244e83a10a29986fc545ca0d876cb19552089ef262b19334a60562683f85b369e669dcd5368a25436e2bcc2fd9ab15d311707c9bcb873a49d9d2c11ff13242ceeb977a17ac34df45e2e249ba3b0d648709b6fd889a3db8807e3d97c84bd0aa75c1812c430d88ed1b91b1aa4aa402648d29ff793732eec7cc1cc873e5205e3227a3ecbb56388e852b36fb75e076a7cb56fbb78c99a3102a81a69a13de22e0ac71aea21f8dacd1af0757f7fca867d17016cc68e3fbbf8ee46b34ab1d23e5f79e52d479fd501b74d66178fa1477957fb055ac0c8c3a364f8d40e8b613fd5c0f9bf914800f20b88b34650487950a8c21bfd01c6d6937f4394700620ea26f1100684449230e7b8bb68bf645fbe6cc2bba198597facc535238929a01bb4f4b370409bdea2fe41a61152702bcbd195a04e565ee82e487e73442970d1ebc82f74266adfdc3ebb4fab3113afa22ef775f59468ab258a391e51990865b20d1ee07b84e6df8f1aecdbf1e90b7416043a809999b788e879d7c5decc45c3d42c106ae1218aaac1b0223bb30468345f02d977be988d2c7f9aae16384d04b7614514420b029f4da1c3fe12e64430a08f6ff61fc3f0ebf33509e1e3ad551e0f02c732db381775c904aad3acbc0f7862126b69dddc22190b85863a0eac4278772d39adb0186f08287cfeb97d8cf1f4e81e8b690e1ef230412e4d34ff1a7abe716783e7e394609480e350eb196252ce6be3d6393249ffefc4b93d94ed7abe8466c787afb44bdb8d5b49766270cf2abf47fa7e174e2a970d8083ab1002df87c97581ce4b3383430d732f84c747400c6d86460742b636f5e53d22844ca6ba185a961ff5b0309dee870bf00ec549c0eb1f04ba0faef757479d3cff190a13070b1d56d56c2abe78f5cf55ee85462b2e80217ca691ee0d05927fbbc2c97adef327a805d18b13d98ae3c47be6f63b28d9854263e685e0b7f3e14a0fe9109b87b6c1cd388469ec7bddce97470c47cd12bc3c26d82b1c6cdc1c5e5f4868fb3e47daa88b3a2e9aa9bce3bf449449503c9d9695942be7e598b41b952577e3f4c754af8e9a0e51bfc84b3c28b94b2b50450fcc356b34f0e74d6e61ac6100477190a711509981b595a87791c3e51c0b591295a5c7259bf668ce280c46e1e71b113a06d4c7fecdd35bbdec0e24579fc9849e1b8a93cd1abdfb1ff4f69f410e390617468bd57d74a7312d34c73c792acf526b046122d8bef5dd6173ec3f86e08a9dd3fa6c4a14bf1f6e03616797e37bdffd5bb024597c4821a701cb0ccf53b8843703ba6f57f0f2686ec0623470715cfa7e18250f07d74b34c801086df38fea061f148dc2e1ebf47004665c3cdac1da2ad5ec8d71c236e43dbee98514945680c0e30dabde0200fb043b874dfea60921f88b37f14b43ddea3c0711685471ecc32ef86674eb9b4cf670fb27a4b7bbe2c63be207ae99e02f2a7d48df8c3c271cef540d34f365eb456dfb23c38585d77565ab1b1d4cb68ab3abec1e738599abce6ba24668bfd81d3f52d5a419e798146f5ee6d48fc7f7c8af1c593c69dbdf3f6586ecfe83b9954805359ea5dfb4558a1f245f252079995940604ae0647634b6013367633fe5c3e6899f46a492ac4e7a9acf57ed0da3242c910f3e36bd2df974186627efff3a37eecefe176dda850f1942833c4b7f44c6dddd37f9ab25f75719ad93e04625d33e6a9df640e4f99ff6f5fe80f9cb69d479e1e5a5031ffbbea4d916c0f334e8f3998e180b50687d627ae4ea4505070e3b2cff7fa68cf3498ddf7e61ccea73692a19f349ae764fe09b4c19ecd3ba6a2140fa2eff327c51b31a8602cacbd7d66abe706618b39369c3bc5ad46f2836221ff1308cc4718a6700dfe4e41fde61e962f8f541c5e24696da5645de3f18bcdfe4fe546c4827376d58347dbd8c5252ae283e5692d601dc2187a604988a91d6320d50ee007cf51deb134160b68b6796efcc32ca32dbf5f5f358f6391ad20d8c7af9e4ade9817f0715cd9ef33062b5e191f3e16a23fa646afc23cc515113e1ebc50a8acd05088cfa3662d02450287c8a54920a194351846927dfec34d1437de64c4b86f5162993d4a258e5de7dd6891dccc6d61f8ea10414078063558755f5be4ee50d4d16d739b252338a31ce9c6e7d09c17e921df1e7154c557dfd51da5b4a03987832f03e7d7778584e8fdb04f3f3cff8e321e6237037e2aeeff547dcf5a1c364db80a64a56727deed750b0542f0c43cdfdf33087c9ac11b4ff85ee06186998dbad3bd22c02ea57fe2fc732a26e102253d09aa163b9235f1110ef6084c7355a5cc11e85bd5349bbaec3ce2187df9f0b25723c346e7819e0719818d51b3782b33c83bc7edec8146978f2a207857553f439d101ed3b572321fd66b3638e48897059eba91a3f53a1d4d7020bb6d700df6e7ea0d2d23ba631daebb75b447588a2aace2c645aa49b65ce9e13a23505abe026320f6c7fb56f38664ea75f794c2d772a6feb03b09ddf3bd1347ad76eee7de5be891cfb1c15eea78dd743a47451d9bafc4e875b6f54eb923a44ad96abe4bba26fd6d6e3cfe77f6270184e438e5bfdbf5ca471c5078b278f33a052c90b08d02989b7fe6a98b29bbeefe069bc3bf659361b7ffafd72d613bcf69e947de6baf18bd2c3f4a18481a352cbf34a48b4055cd831634efe99d3df0bd77a9712ba2c5b9e9f18cd28373851bd0c7708983d4abe01befc55ff00a5f8df19bf567d38b37d20e5ac32c58260255feebfbed0e21f415438f38e3e4a1573c57c557a233fb5e1f7b2afaf7e801b1b74297bdc9b9648ae32edbf6da14fc85892451c4b6ee6ab0b786fdc985f404f9a8ebec4d72d74429225da0ae0f8eefebd85050442d7c22e2dbf6b0bda0efd1508db5f9d85cceb4fd943ef48572204a90f25095efc94ccf1db2d4d0767cbacf4be137227787fda28cb07edf6cced0c63bb21ba56f7cb191878c98533c300660ca02e0f96f6d91f01c61f0e97041441d265edf279113759aa7363f8991117ee59eb6011739ce5584204f4244bf5e5e002f91caa1982264ca8f82bd015853421090bc1b9c66fdfeeafcd1e037b9973728eabceace4c8b9ec6d5702cfbcef8586ca52099418454483501d15fc92e804f1844a7c5e1e87f073503064a8088e2fa10338d3d78c45daa707ea3c5473ce343bd465d623ed49fe2275e7b95760fca10fc7e13904dd34218a1d2ebfb4f299163e09630307b066dfb3ea96875fac0ccd344622de826bb8a5650ab79e1856b5f44d50b7dcb361a93ca3eb2f48c2901b295dabdaea10c1b94009559385fb7a6cc16f485a8cb186caad848509f13afd634ba37c9b217061b67018478fa3397036749e464871628a6d64c79ce685a82b9221293079f2c5351d868932656fb17ff4816cdaec26a4bf0a47ca13e474cafb2ec5cc60646a34f85d1181496755d041da8cc048983e620b907be7bfd956d601e631260e4c9aaf15a103af46a47281c9b9625c998648a828962bff74dbf0d8f1346d8695d61570a9663cf5cf2861c7f6062803800e0f4d6f9f000602a68a55219b066d8d91724e2c858748e176a6b6ad5ffd4708a7fbf85b5b6dd5073e136be6b71b77636952c3c68148fff43ece7beeea57e2a70b9f34fc8ff85b47026a4dc7d4361069c5e05890fd3f85521d1c0730316bf2b53e20065c2fa0ec14cd026293d9ad1109d7185189b33ff016abe3fb1af5524a6101a026b338789e4606faae137e3389a622a70fe85658b3a1e0d6ceff4d97ca39568351c2caea77655fb377194ba1752aee5e4e1c3ee56f951bd26a97e83b2888811ec02bc47729fa13ec88934241996077a8d458e4b07caedee8eedb1627048bfb3f14c04dfaae23a99c0b93e0a8bc48fa98bc440eee6e0469ff3bced6156f80b1802ff3cfb3e4edfbf8774c2b28310e42c7d6bd4e8db0d321a906ee950e94185c3e5616e571f5a0e34562a633e5c799123b143ea0dfbdf21d3ba654eba99fc1e0c7704ab6f4982f59e6d6091d8c5a1b7ae32c7ad637ff468356dd1cfc100a7540e8cda18e1fb46c0c747c04d14132d4ef42fd3b7db9be1bd481f5fbaa18b7740cdec9b7696729869d0b9008e729986d40830cde589e8356e41e516408cc844183d509b825fa44"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) acct(&(0x7f0000003a00)='./file0\x00') clone3(&(0x7f0000005140)={0x100, &(0x7f0000004fc0), &(0x7f0000005000), &(0x7f0000005040)=0x0, {0x10}, &(0x7f0000005080)=""/63, 0x3f, &(0x7f00000050c0)=""/22, &(0x7f0000005100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0xa, {r2}}, 0x58) sendmsg$AUDIT_SET(r0, &(0x7f0000005240)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x38, 0x3e9, 0x8, 0x70bd28, 0x25dfdbfe, {0x25, 0x1, 0x1, r4, 0x3f, 0x5, 0x7f, 0x9, 0x0, 0x9096}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x40001) creat(&(0x7f0000005280)='./file0\x00', 0x80) r5 = accept4$inet6(r3, &(0x7f00000052c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000005300)=0x1c, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000005340)) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000005380)=0x100000001) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f00000053c0)) 03:38:12 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000900)={'ip_vti0\x00'}) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001700)='net/arp\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/134, 0x86}], 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x1017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0xc91}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0xff, 0xbc}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x51, 0x9, 0x81, 0x1, 0x20, 0xb3}, 0x16, &(0x7f0000000100)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1f, 0xff, 0x8}]}, 0x8, [{0x31, &(0x7f0000000140)=@string={0x31, 0x3, "98b57b4a89272ae85002eb8057d4da8fc472f0da9fd8f06039003499a702815cd1a1c936df908b9959965a2dc53e1a"}}, {0x102, &(0x7f00000004c0)=@string={0x102, 0x3, "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"}}, {0xe5, &(0x7f0000000300)=@string={0xe5, 0x3, "0f1afa86dcddc51895d1cea5b4991eac21e076627e854ffb5275282c43feab4cbcab3bee264ba366b653618cd655f6cbc2d5e9cc164c3d8efd384dc5ce7015b4e8a7f415c1f74008658851a07bc86e72f8c90fa7c04b18df09207b061bf279affeb00bfb80564d0e71e70d1e1a9b756e733a95712741557b67c58921285015cb59d6697b5812bf520cd7d3cce94cb16b461973fc5813748148e61fe7b153c111dc75b11d836eaae78580797e22fee4ec309af8d348b3bef3f322f8d859632754a5b96b7ff27a4c4da20dc31e9533b29ff29fcea3e564fa03396c3587e72c1faf1b60d8"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3802}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x83e}}, {0xcd, &(0x7f0000000600)=@string={0xcd, 0x3, "5198f97cc38dc76a89cbde28fe37582b83d4d707e87f0ef8a0892038ce2cfd3e3a21fa947779002e6c1e04779cfe4f562b4fad383c020fc8b610165790f2397c378ff7005c7deb4d721dde573417de5068c9ab0e156c332fd3c84698a9a6f2f70c992fc867365e4b7607bc3cae7df45ac05f6d05b9b9e4ac9532c95cf6d729676ddc80f9ad506be8b394485b4d5682677346f4cbaa1a76d1a3b04ffdad536e1837130b5ebb73e52984a3daa23f124c922adbde3643797e6226ed1082322249ae5e86e6fad51071f775f3bd"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x807}}, {0x102, &(0x7f0000000740)=@string={0x102, 0x3, "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"}}]}) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:38:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5450, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:38:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000900000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:38:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100230018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000000000000002e2f66696c653000"]) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xff, 0x0, 0x47, 0x0, 0x3ff, 0x11a28, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x848, 0x1, 0x391, 0x0, 0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x400}, r1, 0xf, 0xffffffffffffffff, 0x9) 03:38:12 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) mount$cgroup2(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x40400, &(0x7f00000001c0)={[{}], [{@obj_type={'obj_type', 0x3d, 'ip6gre0\x00'}}, {@measure}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfshat}, {@subj_role}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x7f, 0xfffffc01, 0x26, @mcast1, @loopback, 0xf828, 0x7800, 0x1, 0x9}}) 03:38:12 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2512.236112] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted [ 2512.281273] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2512.281273] program syz-executor.3 not setting count and/or reply_len properly [ 2512.285348] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2512.285348] program syz-executor.6 not setting count and/or reply_len properly [ 2512.299443] Process accounting resumed [ 2512.311807] EXT4-fs warning (device sda): ext4_group_extend:1805: can't shrink FS - resize aborted 03:38:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5424, &(0x7f0000000000)) 03:38:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000a00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:38:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5451, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2512.497061] Process accounting resumed [ 2512.518584] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2512.518584] program syz-executor.3 not setting count and/or reply_len properly 03:38:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5425, &(0x7f0000000000)) 03:38:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c, 0x80000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000019c0)='/proc/timer_list\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x30, r6, 0x8000000) sendmsg(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)="6855c1c8b25b15e3263d386544dd38d5945456b6e35ce7371a5b409998b44e2b211807bae54c8739ef57d3d6fb69db9e4fe237a58d7632ee7df426ac1759d67cf5a4da88f04fc3c364402e6a0bbc8e0348991f4861d09fb2bf92ff80417623ec8b57eeb89a2d3c71b0fe57739108e405b169a777d2", 0x75}, {&(0x7f0000000380)="9ae885df5437cfa1ebb00b5a6c9d1647db86125cc926e6f4ee4f228a5a2e11ecd585591773f574f5b0ae6f5c80d6e87322ae1bc3e6e95d958b665c1a541ec2a764bb64641818b28599cf016ca2c5d995fa13771edc4cbc511e0c3c486e46173d658b4b9c2b1cf1938858a66605dcd67094499186b7dc8cf35a47f3762e7cf50468bed7a6b4db53fac3e6c8a49835052e36bf", 0x92}, {&(0x7f0000000500)="8a497f9171e440169416798e90dd8dfe27d364b155c6952cbbad580ea106055a2ad52b08533914231014d9046a340d7ccc425317714cd54275054740a7cb27d72a1cf858f7bd2462c038611c0c92ef673afcf7b05ebb9b6828a044fec0fa5be8968f1d67eb22bf5ca7a1bc0d87b23ef9523bca2c4c81ddc1f3e5e5999293d2405429a23a41cc6cdb32c7d9bc8776fb69d673d5fb7f3ce64b44363a842c40322ed078e4bad0db5c15e5a78e2c12e93f889a36be707ff8e3c4", 0xb8}, {&(0x7f00000005c0)="31ff2cb291531a39e6b1967a1ba4965dd417d1b3aba35631b9c097b3ba7503d2d31286baba51ffbd772e14d25df887e8ae9877dd96efa8eb70edba405fa29ef3bc7f73bbd126f326bbd70b10bcb8fdd1cf298849ddeda8426f5736bcbafb3316ec2868814b96459868a287b88523c2f298990da0c5143343330db7686455119a7a5d96e469", 0x85}, {&(0x7f0000000280)="609f28cfcf1cb4aa42", 0x9}, {&(0x7f0000000680)="0b479f844d1abf708077a35e9f5572d7cda010904b07159ff75060bb9f3e5a931036c1b1356ea5080be3e09114e15dada7d4f18aad63f20f54f4e262d9bf3eab2c16d01e4715c9bdbc9ff52b19ebf281b8f8dabc6f1bc89db6eaf7f6cc84ad81a951bc033ca98875895156578c84857b476da0e72718f7caed43719a6eb6de80ea61f406eaf20c031831eb71e3e7749ada91984581db4af1e2cc62d8582c29faaf2f46af6be68b95a8456ba996ca5c5ec7f4843452cd080f5e214902ae21e38cd484ab8df6bc44add5964ef8e4474865959a3fc74fab9fa402d23999a137c4939d3d2acef00e088c955b93563b2a1fc57d52088d8a2684e5e55959795852034bc0bdc566f02943c105d44bea6ad2807ecd55c731f6325bd60597f132ee7ce370fea104c1e6119c415aa4a86f5da644b5bde661c9046e82c91820bde5fc48efda79ea2808fcf9383484593b2309a5e615d5480f291605392c7df4001238abda59bbb4f08a1b2ab630c5572ff5b7c7e09618386f24ee5e69e41d2b0e64de3ec27ece8337cc34a8f6b9bed2280a2c01891fd413042f47b65fe736df0aa8f959e3de714e6793c4bdc195361907e605985f58ca2713017f4643a07a4fd497bb8009e5f9fdb2f5b34ab0cced5fa77a01dad474dfeebd913e8d375f516cf3220fb5faf309eccbf887e65f5a1a05a40cab28f17fe49cfaa1fc05e165851c4342efb208b6b5263e787b4466e387834c16f9cc0ed571b3e4813dfb39007903a51a13f21c5d6c769736882cee15d139addd5a56fe2e0743396d636dca21641c9640086b470ac9f12995d7bbd7e61e2aba3842922d59a61df388a824c9075038037d28d0e8f25d74cd5c43d676baa421529f68ab82a7f9cc453b9130c9ae802513ce34115af1cdd9e9a492946675c7fdbd22463cec6a53bf0de42f26b74aada03502c96badb536a5324b4411741b862c0b2493ebdb9bd74b0ad6af8d5a78802d0fd46bb31a08aa872b4faa08bccdf2d1a6601c41fb515299e5d90dab159d105ef91531e05bbfd6d4f4a7844a914f913dddd70a844fd584a1314cd3d2d842277cdefd39d522a1ae2b4c6588889a89abf0c6da0d4b11cfab395a90458354c505d085fb38dd58e2591d40db3e81a90f97c8fb89625c58b2f8ac3ee7e228d1f0e70bd24e151fe99b6b31122a7b6cfa5f7df872d26b2730c45cd27fb3bb5ba1bc4078a4138a46dded176c83e4b1ece5cedb9b236d50a84eb64824a5c38e9eac7b519553411c4c1b8049fe8d2c4d2e7124522994707578c618d72fa3ee13155d7f9585e3b96b351666547bc709de685a3ca3e8c33ea7b08182fe45cf48517e3df110873f44cf6d459750c7d5250065bd20d0af22c69b4b49324019ac1aae13ecd9f90136859fdec0c9d4896519820464d37039692617ba0030d2da033b5ee332c72f9ce5d631ed62c023ec34f60a95680e5b2e63e495982eedc9c22cccaccb2915d97f88825a16310acd5d2f0edbf6504224ac4b87d50d5237d017af7f6975e1fa7b8aeb0b3f5d4f619ec3a4c5cd4182ecf68c177e77069ece3866d20e305dd1807bc03b628573dee5ea9a4bfaf8223f293f8c8f9ddf981b4fa0fcedc1e0eaec5fd181b637606c06bb2de05b2ef07db47eb5fe73ad971a7a22c4836bf19a174fd640e9699cdcbc828f0900c47aa9eafc7ca950bd254c988fbd834804702ea76fab75a766eb0e8fa3def7cca1121ec738e1126327a7ef52153e6396036755ca133e46e37e57d7f63c160b2abe3eaf1588b4d7b6247cc18b481389e26e95403a4e1174a53b3392c47036d50526474cd3ffb9f33ac078c20c893a0b2dc2e383650de83b6a02cf97afa0d875f512d7d468991be680dfa4c3566883a4b3373db9f09361a01ec27c6731cc280cc5bf33cafac573385861f58f8f32d402cf107897a583aa69d589505399a84df985cc5b97cae67d70429b48ae9643891f452b907e4ce844f9c587c77a377b756ce1d72b4389fa8427cc0a1893b81ffe676bc73d56c16e9c89874d88cc81b6e653d6ade75e9577cdcfb3bbd5c40c81df6288b480d64ba63cf54d63476c2a85a629072db65c14764b479915b7945d46eb039c8f30b1cb43897665a443f40ad25f3df1c25095c7ee6667db54f4cf9e0f1446af18d1540c941e39ba708fb2d8f29d8f51eb4dfd9a77f2fa38e4e2e413476f7ba44e77c58ac40f41327e90e607a3da01e153c3494185dd985d319e1be1e1e1f2210fc0ebc042921d1c057e83831f3c0d09cdb9411dc4049a0a45d93767619f020f011e16fcc1f4101d2f93e3f25055c037c61b0d00b3dfd8cdb91fe98287710f26517827c0e0bffcf9c4f55fdfa111e74f530687cf8e0df0454c5dd5cc6f4c8c1b6040a12584750e12d74a75e219bdc20b30947fd9ae6529a006c48e6b50ef4d26e5dd442f15f38e0b154148a3f26b7aad83ada21574e6c884eb43e0887926a217c90da1497347ccfdd175249a1873cb5fcb7fae6649f887e9133c5e6f2d97e2a9e35c68e59e2f50d17730b0522e18150a29c2bb50893d6ef6e0bd28419576e593c119f56d46ec9a6124f37287f23e3b1db76d3efe6bd67268da6de2fc4606700448a98e5c80cbc017b4099458f8ed0bb160bed573751a484299c70acb97a91e7c9f0df38f2f38a9d63dd89ea89e37a429574ef116b6b52fd196f29f6c2c5c83831a49801ae9ee49db9c50ce8a5bfd6622fd26e1c0dbc63fdc9e884bc76345c41e8c0df71b302f2cb3c1b48ea1f57c114c4f2b3b6799bcce700867d9a7b71c8dd284c8390383173ab2f15a5e37b9497419817ca82bad86352954c4d78c2d12b1a53e02fa8b5a6eab504c657b5bfde6087a420d969bcd9b14d716642e43997fde939c21411c02d27fd572e0bd1555806e8f9141f2dfb26de20ba63c3d323290a1c98a000d628c7e8ad23e4ce7aee8bf7d124a1d2e6bb88d86af18b850b873f6dbcb4e69388187e23c17abce78b55b84f83255de707cc3e7a6150b84a7a36c3e9c2383b5cb6992aed4b9d14ba0fd6926fa0ac99da86a8229718db821ebe51819dcf3a01dd8b525f7e7ad617df943462d3dd746648b05f8824c7b79b731b06b4d1f76e2e8e62352f9e3455a210b6b04714f91d7cd2bbb1fcb3a718cf91cef40f88b126a6627fc5ca9dafe03eb5929fd775354ee91c8ede25ce4f3d1dbdce5a8c970c691a83c88eba97ff91eb3a3799d146105acc5d289984bb3f7ad2132eba78a0269bae4321a10dcaeec218c4748015b8b0f271cfaf0812b738699014c0e04a3a7536dd67107d24078f84defe0309eac3d25762d158248540376161fd561d58bd64720eb66a1b3858b57253c53692c3f55a64bfccf817a0fcc50530a3da54c3d2edb8fbdc30eab13b91e45bcd7d5bc8148c6e63f0555a701a5b576fa8d35734ebabb24be0aee571c8b95802ba9de2354379360df1b438c985fc21b43793f4ab7328680d4c10bd1b89901840e10299d77ff8034b85c5c3e9b3b7c0c65eda31423edee9fcb5d5bf4c8a177492ba2ba26e521e3605b7cdeb28b7a71f0a358858581fa6e9d6eacb2db2c388144a06537e20feb6eec7269184f2b851e826a7b07be6132ed13a3e003b8c4fe75ab3cc32867b9d65194f54bcbd7de4db753fb34fe648f2e0fd761207e07bbde65e0f738055778bc29d016011e8d0769cdbc257b0d424f527b2871b870f0f3a550db917bd348dd051954b686343dc85da1bb547fece90ad2f2c78d19d254fae43e31111f9326bacdbf1c829c767c8e1f605b83ee0a655e4bd3c6f3a191d432d3e4025da876f5f16104d8522ac37cddcca34dd1e31cd4fe1f85fd9861a326c9af0b9093f9d4c342ea8765f05184f278cea4862bb27c68399b82350022ee0a13540dc8ac6256c90e2db78b4736df8565565a993510bad402d8c2003811a1d59a39dbeee9e69fb3c35841d22874a43427a7b2387550d0850185ce56d396bb113270e03f8ed580780df30abb3e5fffcef3368a6ec72c0320f2cb41b8bcf2a774b1dc51a3ad243176b7e31ca1a04e02daecafb040bcdde0cec83f4ed20c9eedc70d018880609e1922a454fe40fafa51bba3eb53710e7c225d4a47c0fd86d19710ecb47e2d039c80487519fa0fc17d9afdc8807e3f7e1f2436cd0e3a968e896eb6f5866c4f3bb38cb6a284c200dc76eae6d7a8e903d7bf7e01cb3881ef3ff4dd480734f2dfa13a0f5b2aa46a81cd1adbb2f21a0316ce384612f21d7a4428fffc98ac9613605d006ffeb0ff81c13a55c9efb0c8ca0756e2d6a583c9517696358efc10fad6854214340e0b9638a11c7c9e3a355c541f67293057e549d8169333455dcd292bc0489fee478481ba86b32fd4564daf7d462d31eaa366fc92d6189a54c8706b80b5118253e942d62c9d349aa532ef22ccf4fc32a9b37126808b4d52292f126df350a5f4bfefba362bc03b25ee184d2b83f2fc685c7b559267a221fdb315b918978f3437e3dc349cdcb54852a8755da3087a6102000f7684f15b2f3f8456db2d60767783779df2f6de5098ac167620c24391cb49f6db081eac33b94c66dd8b27847b7eaa075c06e48c38757431a5a6a9f0465f8e241a2e1c6cf79a9f6ed597314b1535615e01dfb13afce19f7b8bb70cf2974e6766ce4983c67562cc2afbc394cb28b0ccd8c70687a2a4a059b16bc9b348a7695fe8322e9094d102bfa367e940ede7193ced73416daec9671826bd2b72af5773c50727e207b6baa8a239e8ab5a782aa984faf9d11e88da0cf71fb91eca04b6c6cc5656c104d665aed6703f6cca11b6db9be66d0bb3f8a9fff28651d6c4a669a1767ac175888dfe57f63721892d6b11c87ce16a6e5f4da60121cca64c44875ebc3857d6a7765498a8f0c65a52ae47b59e9379b8f3932691aa321a71058b6d1d53585240dc40c8ebef85742377a943a42fe46b9a30065ea62d0a0709c9de9993f7a10852a3c7e213090c841e5a24d7f4e2e0d69933282b2d75359d36561570c9355a982c0f1948c88550567012245c2e4adb1e09520b84a2eb4cb201a4ad98a2e82fcea3008877e2987ea2b9a0bb93eae279ba12d7991261ebde729581ed56bb205f4fdf91bbb2d7c864b0d3543fd20c58e3c3b82764c8f1107291e9b07662ce0d7f297ec222941e0f9bf42fb4f55047cafadb61edfaa6f2e24c10a59bc0ea78df0cf3cbb6e3c98cdd4450547a0285ee098fbefe432f0e402d2c4d84d006749842b22047660136654055e93c11ccf999e10f219aacd41388334d23b67d1fa343e84846eade741e74e4d3612cdef8dc131213480c7607010410dd9ec14ffb9b3f0c8c60c02d97a880a4e020c022606ececadb7e3dee7f7d2a65b282e2c2629f39f6e3f04d1e24835a6dfa8b7864b68ce84dadf78b22ee6ae0749cc6763355b5277741b62627ff3e3def512a3e292828174def8bd5888dc0ed56ca2348629101f2780693e82f4390ad015ab409c7cd038c1d7f602e91cbb8937644ef68df47d62174beb10c3ceed92bbd3a6d557e7b9e139be546300665c63578c106bde3fd9db9a6b22c09f281cba8b285b4fae689a803b5cd7f343965ac31a504027bc62959f8b411b7a006faeab7e26714f9df48311d1d3dabf166eedb425d5f0f08071582c0653765e29e8339c25ea38d8f808ed67fdfceb5529ed71d1d666b2537f184627d898cd4bd94030659fb47fe27efba0c64bcedf6ce207a3eaaa170866c04aabf2a0722b125b34318251a2c0cd59109183dcd709ce3e144b62d8c886b9104d2d4df41a0edd3ccebd95965e9c03e2076fae50ce3dce62d", 0x1000}, {&(0x7f0000001680)="48f65bf41dc3bb20b956422e9c6aa0c9fadbe87d6d3985e4d24ea0c7115a7105e39e910a1f379738e6b5ab7047d9933de4cdb5018c3b7521fc93c80318c090c4786f3c1203171e8642698947b87d485fb31b7aa77976e77f3361c504a205e2b787241b36e73d44c96204ac10", 0x6c}, {&(0x7f0000001700)="759656d756bb9936b1db77c9df04cfebfb297451c56f42173e9c47bb6e14fa0debdd518fc4fd575d4cba409952dc44761b0e6f49294f6b06b68bd29a6c", 0x3d}], 0x8, &(0x7f00000017c0)=[{0xa0, 0x109, 0x3ff, "18eda344338648cccf2e63534f16dc355dd056df7f008aac9739fe43a03928bc5ef9c6cc4b733de289f4354d0086135b7b57ffb89a01eeb5498ae1e5e6f289ac64dbcef0ea3603ab0f39bbb606726ca3097ed6064a4c68b77d548b9286fb379330ae1995067c7cbeabe00c737cc8c29cbeec94b5df006e16f5c1ab20e5e5de41ce5eb2b908d9ab43e85742"}, {0xb8, 0x6, 0x7fff, "ae663a2c2e6b76cd3e11d4796a9f29d764dd387b685f86c74af44733b2e3113b2ee203eaca6248c3333edca87fb4b985beb69e91baab708d8405cddefaa93696cacf410e56b223e377c2d4db3086ace40f72c29a1104ffe74a8bd3a8ed28a0c26930b2f86fbc830b06d3d2e39909ff643286ca936f277cc4e89112d75a269a9b42ab185f80708dc2ce9b4bac993cde1093b3adbbbea8d79f0b5be133882bef00cd6317"}, {0x38, 0x84, 0x87f0, "a6cdec5e6f73c7474167e127eb31352b9ac9461f73f4693bc383bc81a7bad2d5bc2813b699a8"}], 0x190}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2512.746599] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2512.746599] program syz-executor.3 not setting count and/or reply_len properly 03:38:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000d00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:38:12 executing program 5: r0 = syz_io_uring_setup(0x1071, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x2000008, &(0x7f00000003c0)=ANY=[]) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000280)={0x7}, 0x7) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, 0x0, 0xfffffffb) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r6}}, 0x2) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4004, @fd=r2, 0x2, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0xfffffff7) 03:38:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5427, &(0x7f0000000000)) 03:38:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5452, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:38:12 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:38:12 executing program 1: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) io_submit(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x9b, 0x0, 0x0, "4ac3b7430868008b2f3726000700e0fe320bcd95f94100000200"}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, "09183a"}) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0x3}, 0x6) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x6}, 0x4, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f00000001c0)="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", 0x110, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC], 0x1af}) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0]\xe6\x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r3) 03:38:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000e00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:38:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5428, &(0x7f0000000000)) [ 2512.937858] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2512.937858] program syz-executor.3 not setting count and/or reply_len properly 03:38:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x5460, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:38:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:38:12 executing program 6: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x2}], 0x1}}], 0x7ffff000, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 2513.077938] ieee802154 phy0 wpan0: encryption failed: -22 [ 2513.138653] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2513.138653] program syz-executor.3 not setting count and/or reply_len properly [ 2513.156836] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! sendmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="5aa328126e8a6f40859daad5de625b9bf81606263b3743e8cbd53e5b379b1ee83728826485c87e6a4b3251fc622354b598a43561958db3708789900a6f6f8f9c017aa42c4c8d40eff53f1906ad63113fd77bf865fed95c2cd08efe43623b5a93214db165628f9ee770c741c2c96d57b005a2d0203b936cab64140a8cbc", 0x7d}], 0x1, &(0x7f0000000100)=[{0xe0, 0x113, 0x20, "2ac8218f4945d1b1ff0b54075cc66bcea3697937c8bcfff7b1e9eaca33877abfd22a7e26132e65ef4440e4df2ec1c051f94f59d49a84131655ec8d3793bdaf5e954f79c3da5fddf4ee2fb760f23938b082faeac6227e86ee833e4c9de4dde43662bb47b6b01caa4b3c9500c24eff2a88d5cfb3d4c0a018c677c16923e5150c626be9882a6b63e8bc2a4e4ebe1d209733be9ac4a1a07aacf3a1f7b841f9a40c15cf46e88ea9f5e7ee8af2395b00bc99cded06b06de8eb10bb3d9ddca90e339bc8941bd8cb786538fedca151312b"}, {0x38, 0x10e, 0x1000, "749284a32fa238c2c109b2a5f63ba3a28f9ca1f38c3b48b5bc58c3ae0a84354759c9"}], 0x118}}, {{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="38a82fdf5e267c7d900f4ce1f94a326f70daef9b11cc1fcbed4951513184915fc7ae70dac3781393b7e989235f25ca00eb3b8fb5ce6afa7ec0", 0x39}, {&(0x7f0000000300)="db6bc275d04f23810c2ebf09d56522135b1856a857c660d32c81626df157f0b7293afafb03e9eef6a8af76184014f1c126a87222b00d685cddd23c94651ca84fdc3425022381d0a2b1cfa402e5501b36a6905093d768994ffa4df2c82cb7a2905513f49a404fe2a0365c9748d8eb0f4a016b1d42e3a5bcc50cba897566d7904f6ad902af5f48c997c4edb9b598336ea177a7884be2d6cfd5a9331c3ee120b894ce47bb665c5e5ae28bdad4e1a940db275ac06b20f9e7d444899e6c0a72f067e36b19c3fac9514999535fbcdc7333130b870138de282de849e50c", 0xda}], 0x2, &(0x7f0000000500)=[{0x78, 0x29, 0x9, "eede7307795f0e9602b794142f463876b19d8de66b44bc8c59449ab936ac4f4f99428a0c8e95b52d8df1fffcca995e67824f37f7e1981faaf4c45b23aab0b48ccba1d0eadca5ba13efaeda24e4c5367069b67bdaf53e534257b16be85601dfcf29aed721956800a0"}, {0x18, 0x107, 0x9, 'G'}, {0xb8, 0x102, 0xfffffbff, "d1ff7d48dc8f4e36297ed9524137242cc6d79918dffe8808ba963e001e0531a5e74ee18a3c4a2777a816e29b6bd2445ed5fa30d742e00497565da2f5d60900f7660968cee1df819b6487703e74a8560266f75a20bc6f5335c216e5b3a57bfaa46e1176a41c785adc789fa9b79fa3d884e461e87a94a7eb984c0a64a2890f54013d03c852b2304a1096c96a6cb6133f700a27a135102c0505d1a65923b0d13ac5b2"}, {0xa0, 0x103, 0x8, "f383f6b5983ee68f613d27fc0fe2388f383473c93dc5a9cbb487f0e401a43ef6ca93849f4f9e98c19cd725f70b45733f3aeb93361034e2ca0f91dec777a27d7b6cd49290949e93a955e2fe16da7c2728a7f2025d384bafc050f483e9d20b12803d17ce539cce5262ea39337f055f6378d4552a261bd5764db158f3f04a2f620860b02c6e8e83ba8b76f058"}, {0xb8, 0x117, 0xbb, "9f33bc92fc3a3ee7ad35cc3fa34ff1b4fb31fa988212f1787c0b7ec38af638c38ea2f8a87f9d372d3428964b38c0b1289bec0bf408aa4751a15817e86c6f49d21b9e13c8168c10f392b08560df2aab71200633d2e8dedfdd85d0c9146d21fbe4fb82df51072d5f9211791d97a67e4e50665dbc2e96d6332a5385bdd5404eec9da26bd5713b0897e3706d61615c1223d2325971f07a29489c618466d5ed8e2e129f3bfbe6bc"}], 0x2a0}}, {{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0xe5, 0x4, 0x2, 0x3, {0xa, 0x4e24, 0x7ff, @remote, 0x80}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000007c0)="476fb439875d9a8b9b8fd2515042efac3647fc9b4b5f6190fc973d5adc21dff0f9aedb86feee1f752c23e857c4bef97c42f665d2a7b52996e1744f6ffcd7c048cfac91cacabe43a3f051cdd1db6ea181b13933762d522dc8f1200f93b3d736326bb0c02aec0d2a5c47426a79a95d7e17606deab2e969b985574533143f01e6b56e4d664f1cf9781f17d4195605b8f23287c9434546b7f5173c1490c5f483d6170b0e75dde2f329955925b0d4183713c0098712fb86fa7db5639a15eb24e489bb0011f3b2091898a545f7b5cf47b06700eb8ea01cfd3841bbe8bbe3010b066446167cb14730baa8cebc2010678add5fe7a60edc5c", 0xf4}, {&(0x7f00000008c0)="0a8d2f8953382d92cd15d21b8e31c9b08d1bf9b7ff3b156487008ce3f47473f1d09ccf719c60e221b724d8c477071ff1f2259a2ae6b0be1ff5ca75d6032df0f17cae77d2a9a8b842e24f4d08e510bf837c32b0c7b15a360b404e2e0f0a9e20e969bfc6c81b83", 0x66}, {&(0x7f0000000940)="cbe09c3cd6de7e9b5674da9a09a33029a8c08efc0fabfacd4357e709ad66f07b519e5497e8b5a95cd549f92f45399a69c75fc5e25a9bbd03165098a8f9fd6072d0bef6776ddc022ed7ed3c2bb10077dec152601735f9dc9605a3f7cb722cff2a4d197ba5ab0b5b5ce00f0b35f258b7729adfef7882d32c06c741dcb05226026e2d4b21b1961ad0e739370c495fc735fb1c", 0x91}, {&(0x7f0000000a00)="cdee8fe8", 0x4}, {&(0x7f0000000a40)="b2d25f4e9aef3df14dc916bac31cb102bbadaa1e0df75d6f7c12979e9d1b490c573a37fb2081c3666b63f597fbb94a903ad2b3318dd9e015fb292043d21dfcc3c91e9b554c9997f2faf66e415b5c35fb784b91cc70c0e6b43d11fd8bde9b714f04f0ea2a52b00268976838ac84f99117195e73e198d9c87be89b386e7b3393cfb7bbe89329d883468ceb2e2026f12caeacc8a7e23271b771fc4c114b8ad124b8f50706826915582990a19d3eae54e32274169a7f11ab033424c99aa4f44e", 0xbe}, {&(0x7f0000000b00)="03e832e38f827c4c24605523d86f1da029f1435f9737cc640f6590b3a214234a37d90d25c0002f0b72fbf244dae098e16845588937719167698b310cfbcafd01cc35de400a922789f8f683e90dcc7dd6eae62058220239774847cc1d5d329c26a036651f1eea107994ab3ce495d1195307a237e7ae21df63a3a4b080b79c4b9b4137fa47098b2746b5d1eefff22d644da77e82fc5a76f3a7525d78ce8be58933a6de5ee243db74e507c18ba6d853718b1954712adf93f6dc0a590948536b2d78fb802a06719d3f83078c2b94155d7a7f76dbde5d9fae86737dddaace9ec3d657650a8a317f799c81bbcf8e7e3a98d6", 0xef}, {&(0x7f0000000c00)="46d1972563c8b18a07fe751dffa5a8782c4a", 0x12}, {&(0x7f0000000c40)="0b034836fb6829818a923411daa31d7f8bf81e2e997ac079ca06196d95feeccfb51ab8c265fc9b436884d142d58586e389a730ff0894728891dfc9b728472e", 0x3f}, {&(0x7f0000000c80)="6cb909fa38f6ae014413a0936aa95c83d48c898c0498f002ea106e719ea8e482a3a4ac2d68688f7e57a900fe0e63934cc1b1042671816b7a09106533d0d3757d738cea", 0x43}, {&(0x7f0000000d00)="aa6276331692b08ff43444ba0ba8b1e036adf619723a4cc3bdbd0c20957f8da036ddc4eb563fb358877ca65ea6efe4aaacc21575f3ed46fe5ad2a254c292e3a6002b2d0d04e6869868a44b5f4890d827981acb2877f491a87de2be380604993c21e9317a4a1834b7ae7f46ae2af0899cc6fd5665f7d400bccb015d0e018f8d365d188a1005136e30db4472c3698f38e03d73265de95ee9aa6bba18451fc6296d4172e94cde4c6fe81bc66542938ab5914b6f063a582eae168427e6df53ecb6e69f2c5eda622c7c52b199e86007f07b28f9973327a3230fb7cebdd9f865f9a9a5c2e1464aa7a6", 0xe6}], 0xa, &(0x7f0000000ec0)=[{0x90, 0x10e, 0xfffffffa, "69002e19d68e3f058be4be53eab0d39347d6c4373d01af7f88b5b4c4b3df41b73da9b93a88eab82ec7d72587cb1ccd4e3b7573c30b048a2a7dc71cb3406d43e40a404f2ded32b98af4780838b14efafd2415cda9a1ff83220b5fde7fe7372575178f0dcd4e3a934b5276f526ce169dc883ede838fbda5b8dc3eb8ecde3"}, {0x90, 0x113, 0x4, "6115b61b6e81458acbddc7240aa5616cbd0532de439082a352f238686f06d9c709b756195184fd98e55d274864e7e3e39c81d24bfc1bcc58e9f0a3eb55e47d2c60c8be5eb5d8d27d9177c80e2fe45471eb5b8f1759a9cdab6c8856fad0e3c9317205bb2ea80ecac1a39bafedeb7272267274acdb4edb489475f31c700c"}, {0x18, 0x10a, 0x3, "efe4"}, {0x48, 0x109, 0x4, "b367fcda75bfc37aa9bab979c1ab63c5f7f3e24aa85316bd5c7741bacc70158ab52d3bc0d91d5846afa93757e630ab32981644"}, {0x1010, 0x109, 0x7f, "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"}], 0x1190}}, {{&(0x7f0000002080)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="f13ac2397f901592719314fe96cdf0b4ad9762a3f6abdf8dacb0ad1da69184664afef4dafc8bd989f8060a0dc7abbebfd50dbebb7790cc58862ed99e240528232e0aae72630afffce3ce0eaabb5f9b652d3a911f502ac121845a07f222952454e3ef8b2f4cf4b6a00e210dabc245a00bd7ede4364648189117d3e00ac806f7157b5f7d6318651858d68534c9ac441894e58c86732f8e4a28e5646b58760a5af4682ea1ee0cbdc4e913d1baae877e4b29b152816513af5973f183cd80", 0xbc}, {&(0x7f00000031c0)="bcd0d15331de857af2ac85268da238202fd83c0504664b338b2b77f9e37b36def3d74e1fc342517fc0ca62413e34b80c17d6378f493248c7e54dd6c64e566aa4aac59f683d679691a6922e03087c1d8473cb1371285f0f05a5eede879baf34d8457c05b85f2a6cb08a61e9f62727f9fe98653e15d7f8f3f40f5bd7b811d4f7b6fcc39edc7352aed501b9111ff164827cc69d335644e294ab7f384cdb", 0x9c}, {&(0x7f0000003280)="92522595a51cf4ee5b9b57fe0353f4abe1947411550f885c0e48a51d56227de6e6", 0x21}, {&(0x7f00000032c0)="8dfe10a1da117586aa8bd2439404e7ef7f5035916d68029344a755349aba281e98c4eff8db781473fa5f2764f3392e54d0a2990d30b0f13f38d06dabb69191", 0x3f}, {&(0x7f0000003300)="dac8460c68526ac50e70ff221433602e03c6b0c11118419c81676394cb90ee445696940d27a705abb58956c26796ed5da30973ec729a28dc0634c6fea2fbc5bb71d923356371ac4c87e22a030f4c7b6b01f8f544e9dd989781b2a5328722835d3367c29486adf936169cb49574980dddb09c6bc13a85c9db5b4bffbcf6f572f76e0fb18c3857c2fa5d2724ac3c9d82b8b663de6c3bf8571c0c9c3e6e00606cd6d4f8261c134c4b71f218d540e987389cc7d37c084c041baae579112c9368ec519b61e6064fb02b1dcd3ba6bb594dfa058fdcf9603f4f25ce90fb66c20e9662e35b348d50", 0xe4}], 0x6, &(0x7f0000004d40)=[{0x30, 0x101, 0x1b, "5fd31b651df44cb9d728b9841d964fae3fd2feeafa160db68e7f"}, {0xe0, 0x111, 0xffff, "06857a82919778941c1e874645e2ede09afb492051041dd2a0be797293007cb6107ebef00984f91a68f387be2c49af5b525d77512461d96bca4c15b931f2991d249efad5637e59f07ceba1ca0f6a3acfa2e17e6f8d26eaa866f2ee0b8091746df4908ce4935c502f2f5c35247bc4fe946863d6f3863ea43f36f5fe63ffa5196501d2ea4ba5dbea4f4809719a3f00d439911009817289cbe5d99d15fb9be8faa6ca5e5246a2e76308775eddf2432b43a4e311776aa940e5448f7041de07c1ff158437695935c14db364deb3"}, {0x58, 0x115, 0x800, "7706b4c59d133565219943c05c9ad632d74b4c715dd76f5ac8d6e02ee97dc90c79a598545d282167e1fc5945cd0c7570220704cfe38ad42f76600a6c6a02e2cc0a0284211a"}, {0x1010, 0x115, 0x7d, "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"}, {0xc8, 0x10c, 0x4, "756e1d490f6715f64e9ab84d95db5206312fc1973f7d67adda52282f67a49170fb086818ebac2dec631a429ef4f9cf8f9a4ffa6f531650c31c234465742822d76f31d52fe593075ece320bc8152d521d206a06dc94bf873358cb83f0c3102d41323401d72668e3865debbac64feea9821c5a6b48f3969c5744ec6bdaf02a264154e12ad0247545edfc9a29cb49eff98c6c1cc30f1ce90a292e9900cb0790686336c92c37ee891cd82b3f74dc24cd5378dd"}, {0x10, 0x10c, 0x6}, {0x70, 0x137, 0xfffffffe, "0968cfbba333d928ae5b2fe8967084618689a8656a6abad22a1661751228b0e839b2b6df7d92e583f1c670caacc6d7822a3fcbc39e774ce5d8c8d50145bdcd6b60827db6d0a1e2265ae0282c9bd3f729e5b0e6313e36595fec4bbe41305a669c"}, {0x1010, 0x3a, 0x3f, "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"}, {0xc8, 0x6, 0x3f, "8b57f145c4ce41423fb07ac9e12d8d5ca8fafe2755496fa45f7e3dcb46564f9ddccab07ad22e4af6d88ff8b0ddf63915436fafbfa13c1b9a9e8cc0f0025d3b69cf8a4a75da49607fa3e2d2472d6e4d72dc68bd398427fb9d9827c017abcf2be875ac3bb42d844540f15cb9f0600fee9155d1361b60e7cab1d5a8c14beb5682f2285f3ea12f082132bb7743a2bc77c9266b4048030fab058b3fbe0a0fe52d005cb2731faa2cc0516c250d2f01ad04882310b5dde1842afc90"}], 0x2398}}, {{&(0x7f0000003480)=@xdp={0x2c, 0x5, 0x0, 0x24}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003500)="92e76ab1683aaa184f24dc8b985f27737d84a7985412bca05b45f4fefa06bc91c4ab9d7c0cb6d021f64dcb6541be3cc88478c720c82e8a379e43f6ab14541560b9740306e5c70a0484921609c0c2220184f7c673a26a71c7d7c1931a10748119aed2ef86", 0x64}, {&(0x7f0000003580)="51a221f4be62206b839cb550772c97db6afe4d66004f1dcbcad210afc9f1d8b3585c366123b9e98a4ae7e4628dc265d3311b5732f86324e42a1dfa46a2dd523c5b5796214c1c8b781d8a71ee6d3c1fb45b50ab3b10786b2f163cfe29a448d2ae7b5ad1a190abfcfb60bb1feb9a73724818d75a0231b0f2aa33b5513324c38eab6f6c129facdd579a8a8b941c143e0f5f34b46f432a56d61eaab7621c227e83619ee66fe2a2806813f758956b2941b00ca85c7be2a8", 0xb5}], 0x2, &(0x7f0000003680)=[{0x1010, 0x101, 0x1000, "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"}], 0x1010}}, {{&(0x7f00000046c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004740)="c571be1e62c17dc00b025d", 0xb}, {&(0x7f0000004780)="ef1eb91f8cbcb14fe0974f9ce04df0a8ef59256e2e1d4e2ff2f219b6fe667502a5f7edd4fc5c369069e3be20556d247fc3f8f7759b0ac4d785d804093294fd44d1ba942e153b68c7610134e8fee6961476e2fda2e69e3ecc3dfe207e6577c5fe6d0b57", 0x63}, {&(0x7f0000004800)="576c29d10f94218011dc8b72cf058c0c8c9160ec2fa78b2c4dc53dec31d7b061508237300ecd0cf008cfeef6618ff21ca923a93442d0f31783b423da47bb5c38", 0x40}, {&(0x7f0000004840)="9c165cd95b044b235921b4aad0c8c98d4e682cb0ae019f009789e8a6a9bdea139ad84defa1f75f4005748ab83343cd0da05fd979a10c7ce8e11f9df2293e6ad38d812c712158bd045e5125ec0ba2e28a4776b53049ea1f360df87338ff4720701ce640fbd43498f283353affa3cfc81d7d96b3c80b765f7966ac142bace3fab0e7a9f3877d5805b91e383106bd7a11041eb2102c7975afcaf46e48f3b711dd964807318b43f518a94b7da8dd5c387e40b4240966208498aa20b7", 0xba}, {&(0x7f0000004900)="a1b961870c0b6c738814b3b613cdec71a2e6be8dc4b9ff2cd6d07fb916b9921e5d166b0fbc3388fa00918a123dc86d00949f98a4fc569f30d83d8ca8eeadaa4d2899e1e3c911f3e500742d1bad5abe16e6d0750ca07295a8d95069", 0x5b}, {&(0x7f0000004980)="b175ff3ea55ce1995142e84b24d76cd33a38f2b2c5ec1335590c6c74f0757f1d2bfc4b64cb30f9ef84aba87dbe1ed3624fadcff64006016b38c91879d08cae681e3f15cc5191fd02414a337bcf66013044e3b9cb7b229a1d34608f87f533f8a9496765d44848055bd5b53e7dba4fc87503354884e699130e7aff6e5c6c7c3d5b5158676453ded823f6b922d8ba8f652d66", 0x91}, {&(0x7f0000004a40)="9ea14b64faaaa6e536636b0a658eab18158f51055757c973f2d08ee5dea78b94ac7a3d0a72e2762d0ca18a102923020bca7dad192624ab99c9762eb1c356f6e3ef7019efc7863ed24c1e405303d5c7f5a1cd8cfa3d35454e208a4bd54ce81a659702622f88b9e46d808402fd9b158210a284a0c2f3a78464c2386ede9d3d06602bd5036cc69e08253755ae1d348abb", 0x8f}, {&(0x7f0000004b00)="b91f2661dc5a6b52057239d520f4990e01ed060860cb5805da2f9b01ff8a935663dac63c143bd3f1405939e708a21bbabdadb142e93313594ea8da02cdcd6653708abe2cbfcf8d6abdb1dc8c347374a8227ffce131275ed9edba9f41a01c1267c5852fd3bd73babea22a67f33af2acc994086de0d958e6b3029d2cae77eaac84e146392f4398686b9d6aae3456c995ab421910ceb743da9ee4b992c1a13b7b556ec588cae8304c44d291cda434062a7c8eda929cd3758e37be2268d5348c2bf6a1a432bd9fe81ecac61daf3b5308a9c5d7f31bc2", 0xd4}], 0x8, &(0x7f0000007100)=[{0xb8, 0x107, 0x8000, "11cd97239452ee6f3dfc419d663ea0eec978031dd8f101fcfb537170e7098c66c7309238751e1b1ec82a54cedf2b5850fe9f69035a00afc0616e01d8631ff4d2067c8de70560984582d2749633c9f8839f8d7da42482f2ce3925aefffc540ef09a8d0e0a7f2c89e0ccb493b97989c9972aa0af450c87e9ae28f000a36e97a62ba55ff046313c3c676f38e02213d2fd4e474c8dff6926c1697cc08c83a9ccd552a15ca9"}, {0xb8, 0x102, 0xf8f, "c8b739cb6114e6d213099f129b0718cf4f4c7192a214e8efdb4688d48e64e8c5f72654ac8aa023e9350988e502a08494b5748e04f3652579e265d22d765a9c4fd8a3d54b89d52bac5b546997faca2f4ae436bfc1fcbd294cbc824ff62aaf80b0193fda38aea47c117149c6bf4b7f65c49963417a4c8ab558f2df42e189d6d013a5997db078c822f1e6becb225bd9688e964dbff34f2f4c98dac705043a92a8adb673fd11e903"}, {0xb0, 0x116, 0x6, "07034fb51302202fd599508402681aadf8bfc564b99d61149cf697687398b02b74850c024b7ec1bece1c8a0ea45b9dae8b70b8f52061d73e67facb3685ee993a6283207e40c260a8721fdb4641577d183cd46f020d90be494fb3df477dd16042659844a38912f17307867e47341b03f90177ab4b7f5db42990f758f09a1494bc826be1124fb408162427b5517a0b0e646d0d5a41079091d3f1cc11570fbc93cc"}, {0x28, 0x10d, 0x19, "da14dbfe0127105ea5b64febeef7fda464ef374a"}, {0x58, 0x102, 0x80, "4d261201970ff179396ff38a8c7f0a38832d098eb28db7477796775e44ee6890f94ef52a5c86bc973ef4603a3a56b4a9120935ba7b4d979164d77238aa0a30da37d7e4"}, {0x1010, 0x107, 0x3, "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"}, {0xe8, 0x1, 0xffffffff, "8b1f9f1ea4abe59b661b902076dbd3dd486e213fd3a72a5b725b84615b798148106e16ec14f48ef961dd49c00fcd9d06d52248057b24cffa7d43abac54f71d0919ac2f2c7a0ca658ac156167a42065f859b49b5b85fbdfe0d2e5269662f0ba7edbd05db18ca016047fcf3da2538d12e1ad4031ee8b9732dd2351d395d0cf5545b9e8b1b4543c4d48f1c110f8a2a84a2090f443541e479b7239f9a91f7070f4db1ff4332012b556130da646f7cbd26c964d0c0e7850f37246a06b1a3e9b86da9672b0b848b20c719fa62074927bd5da82c9b07a94"}, {0xc8, 0x111, 0x5, "f453cbad2a904ca37a2f9726eab0b4f9e3a703cdef09dac791d4172f15bd003fd26925d3326e36c97346e137397e068432132d8e2062eeb58e459d2cbd925a8f56a4438239fa6d27b9ecfeb83548a80ed09b07e4ae757b12ead142347c36ce5900ddf10ff9b0fe3a28132ca460550628a6a7183788283f7c386b3b2af828c1592f4fe579d4f70290b8df9db4b3d9ff8ec7e4a73080cbd90c9ee6dceb5e810fa70bc478a29aae92f834fa26d9998c579779c78fbf8bc7"}], 0x1460}}, {{&(0x7f0000004c80)=@ax25={{0x3, @bcast, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000009880)=[{&(0x7f0000008580)="2827176181d0d28cc1e8cc3dc341391f1b388bebaaf3865f1cc444997de21ee5280e0d48791cbf2d0236ead2af1560b95961287e31632abbc846be0c8785dc9948f02cb2c14880922072340ebf4747de827cec0a5e1f8038866f2f10101be3aa3e9f68f5b3653ecfbdb805c43cc37ff9da3af79cc12d67f899a46b486871006705c4c449df1634385f666cc079fb2181a8d0161cba", 0x95}, {&(0x7f0000008640)="444f9e2a9255f13291d4d1554018ffe5cb96ee0884fd31c7b7562dd324179e87cc4b6e03953777bd06b9a79f2deb2a3a22150e5281d6d853be1d95c0680500c426ac6e4eacade0e6c0a816d262f2b23dd286ed8375a09274beec05d4a179df318207c320cd22eee9470836374d2b3a307b542101bbc373d3f3dab3b778864fa1ca643c5950a4ef7a510ac3231d8716d733b19513eec39b0797dd634a96c20d813efbd9931dcfa655fcae80701aa49c2465e7b62e0162a4d1cd6802e209d45526d8183e077a569453edfbccdf7da5bfeb53c50ab6eba68e9462865174", 0xdc}, {&(0x7f0000008740)="5e434f34db9fbf8c30736fbb", 0xc}, {&(0x7f0000008780)="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", 0xfc}, {&(0x7f0000008880)="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", 0x1000}], 0x5}}, {{&(0x7f0000009900)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x1, 0x2, 0x1, 0x3}}, 0x80, &(0x7f0000009980)}}], 0x8, 0x8000) 03:38:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03003e00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:38:12 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x16, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0) syz_io_uring_setup(0x457f, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r2, 0x0, 0x1ee, 0x5, 0x4}, 0x7) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x3a1) openat(r4, &(0x7f0000000080)='./file0\x00', 0x1c001, 0x101) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80, 0x700, 0xffff7fff, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r6, 0x4, 0x32, 0x20, 0x6, 0x29, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x8017, 0x8, 0xd3d, 0x100}}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x8, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x80) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) 03:38:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5437, &(0x7f0000000000)) 03:38:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5441, &(0x7f0000000000)) 03:38:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x40049409, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:38:28 executing program 5: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="38c948d3be753ce0e3c9c4864327d9330e1fc436f4fcdac133d6958e7537"], 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000440)=@hopopts={0x6, 0xa, '\x00', [@enc_lim, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x782}, @enc_lim={0x4, 0x1, 0xfb}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x20, 0x0, [0xd69, 0x9, 0x8000, 0xa1, 0x1]}}]}, 0x60) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000002f6669fa301b400070386c653000"]) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e22, @multicast2}, 0x10) r5 = clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000002c0)=""/208, &(0x7f00000001c0)=0xd0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kcmp(r5, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) move_pages(0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f00000000c0)={0x200, @tick=0x2, 0x1f, {0x1f, 0x9d}, 0x4, 0x0, 0x6d}) kcmp(0x0, r5, 0x4, 0xffffffffffffffff, r6) fallocate(r8, 0x1, 0x3, 0x293) 03:38:28 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000000c0)={0x87dc, 0x1000, 0x8}) flock(r1, 0x2) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/60, 0x3c}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000480)=""/141, 0x8d}], 0x7, 0x8, 0xffff) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x6, 0x4, 0x2, 0x0, 0x2, 0xad}, {0x80000001, 0x7, 0x0, 0x8, 0x480e, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xcdb6, 0x20, 0x4000002, 0x3c5}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(r2, &(0x7f0000000580)={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="9ba495311632"}, 0x14) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r1, 0x3f, {}, 0x0, 0x8}, 0x9) r4 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r0, 0x0) [ 2528.476946] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2528.476946] program syz-executor.3 not setting count and/or reply_len properly 03:38:28 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03004800000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:38:28 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x18400, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8880, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x40, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x101) 03:38:28 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:38:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000100), 0x6d7cf708bc06516e}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) getsockname(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0xfffffff9, 0xfffffffffffffdab) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, 0x8) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) 03:38:45 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:38:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5450, &(0x7f0000000000)) 03:38:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x40086602, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:38:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c0000000000e700000400020008000d0002000000"], 0x1c}}, 0x0) 03:38:45 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x18400, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8880, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000000c0)='mqueue\x00', 0x40, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x9, 0x101) 03:38:45 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x400, 0xd23}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001202010100082700005e0000000000000400368089165c37d3e8423d4e4955b6ff77ca7e5dad19784061a5c55d1e8422f4f69ce6198e1b1fa5bccd3910425cc4576e685cff305a88e10c2da4f6804bc70daeeebfdc5278e67330f289e1f7fa97a750a946e367207a1d6605ab8f9305e5aa1e381aeb2332557de5388b1bb62c965b81f228e4937207f82c80f51967d7c8a4a2288a4509c4a898ab0f6c800b09a8bb6e5d578915cdcc1e47609e65d3d511dc05dfc8ac516f3617060043aac6c85cf69de63062662a91bf0801dcd4ca7ffc2c1cfb"], 0x18}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x10000000000, 0x0, 0x0, 0x10e0042, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='memory.min\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x800}}, './file0/../file0/file0\x00'}) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/149, 0x95) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000ffff, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) r4 = open(&(0x7f0000000080)='./file0/file0\x00', 0x50403, 0x0) getdents64(r4, &(0x7f0000000640)=""/194, 0xc2) read(0xffffffffffffffff, &(0x7f0000000540)=""/250, 0xfa) unshare(0x48020200) 03:38:45 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) getsockopt$inet_pktinfo(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x5) shutdown(0xffffffffffffffff, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r4}, 0x18, 0x0) kcmp(0x0, 0x0, 0x1, r0, r0) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4000, @fd, 0x8, 0xffffffffffffff40, 0x4, 0x0, 0x1, {0x3}}, 0x40001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, r5}}, 0x401) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:38:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03004c00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2545.276580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=530 sclass=netlink_route_socket pid=13762 comm=syz-executor.5 [ 2545.283652] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2545.283652] program syz-executor.3 not setting count and/or reply_len properly 03:38:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03006800000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:38:45 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x44c00) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB='Lufdno=', @ANYRESHEX, @ANYRESHEX=r0]) syz_io_uring_setup(0x440b, &(0x7f0000000340)={0x0, 0xc17c, 0x10, 0x2, 0x16b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) pidfd_getfd(0xffffffffffffffff, r1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000e, 0x1010, 0xffffffffffffffff, 0x0) 03:38:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) write$P9_RLOPEN(r0, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x8, 0x4, 0x8}, 0x1f}}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0x9}, 0x282, 0x7, 0x2, 0x0, 0x374ec00000000, 0x8001, 0x101, 0x0, 0x3f, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) stat(0x0, &(0x7f00000001c0)) ioctl$sock_bt_hci(r2, 0x400448e0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0xc9d0, 0x4, 0xc000000000000, 0x8}) r3 = syz_io_uring_setup(0x1976, &(0x7f0000000380)={0x0, 0x27f5, 0xf, 0x1, 0x3cc, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) fsetxattr$security_selinux(r3, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x2) r4 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x4) mknodat$loop(r4, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r4, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0) write(r4, &(0x7f0000000240)="9175624689a566f2f93e24c93e932d14d45a6bc23612cfecbb681c352deb2330b5b09e20315b24e04075690294ad697b197182bd96de37996915efa65ddc2e28e19203696a2a83696e1bc79595e2094fa131844627e2a35910b25b85bf365271166f2a3b0618e2b91f6266186e71d72aedb4115ed147e3e6c395f3ebfe1672f92da181c8380b53b0823bd488c479a0ec1d8aaf283fbe5b57c044ccb9", 0x9c) 03:38:45 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40001, 0x90) r2 = dup2(r1, 0xffffffffffffffff) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCCBRK(r3, 0x5428) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000001740)={0x2, 0x4e21, @loopback}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d2e2c4f4b4861777938e37cc6aa5e6317b632ef4fac2ae3a0bfa05063787f5f99462ff96073b36d0dfeec64c8612182a77458d9f01962ccf1fee60a7f2ca8ce21c049939c62508d63a620f81489d3173a184846ac17b880161bbed8d48d64550cd6802e3ba67c054c9fe640e32a3dbec96f8e7a2ed03feaaabb19f38ae4793f9886a30398e821982c8bb6e37ea10c78eb52c2a5ec2880fe0ebf0945ade0ab3646c04d11e50b13cd13972df1ac7cbe8a99950971"], 0xfdef) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r5 = getegid() keyctl$chown(0x4, 0x0, 0xee01, r5) unshare(0x48020200) [ 2545.380786] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2545.380786] program syz-executor.3 not setting count and/or reply_len properly [ 2545.406215] 9pnet: Could not find request transport: f_wØ-î7Â< 03:38:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5451, &(0x7f0000000000)) 03:38:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20000010) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) [ 2545.488673] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2545.529642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=530 sclass=netlink_route_socket pid=13762 comm=syz-executor.5 [ 2561.083234] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2561.083234] program syz-executor.3 not setting count and/or reply_len properly 03:39:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5452, &(0x7f0000000000)) 03:39:00 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03006c00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:39:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x40087602, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:39:00 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:39:00 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000200)='./file1\x00', 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)={0x204002, 0x1, 0x10}, 0x18) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000280)='./file1/file0\x00', 0x4) r4 = dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) flock(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(r4, &(0x7f0000000300)='./file0\x00', 0x101000, 0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) timerfd_create(0x8, 0x0) unshare(0x48020200) 03:39:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c008) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x6, 'wg0\x00', {0x1}, 0x2}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000640)={0x1, 0x1, 0x1000, 0xbe, &(0x7f0000000900)="9a7bfdf31143898b9fbfc3715f9052a218b05e32b71755ebc812b5423138d1e7fa8310c5eddb4e4662d35cbacb7d892e84df0a9590e9291cf29d39f2a04c8158ae5fd13a178a468cb3f9306bdcb150e092d816270c2f22905ef66aee2cdc9f7e1b17860aa4e3a9ba783af6fe55e09d38c53c62ebb8abcf799eb559ca55e8fcfe85ce4f65ceb07eb04a2171cb6e6798714a6d665a3bbbc06262bbf7acdf44158b2588bb9063578e8116dda96400c931ab77f60149cbb3803f3f90efa97b20", 0xf5, 0x0, &(0x7f0000001e00)="0d025ea1cfab9b4deeed2a092f746056f9bfa177f7880a9c95dab381dd2f6bb59ec0cc0548b587f37f90582eb16bf2dd7199c674c740e90538331a648f6a434b6c7016da704a8f30d69ed29cabb2435aa6ec7156b929187af2b5f5854660c22256ec57709bd875ea0e6f2a731fcbce7d8892c873f8f0b0bed19c3ae1a39a336a17a15fb7369ba2e1634b9005fe484febfc3232aec6a728140b18590e919196a461216d3aba1fe5fd4e27e2dcf3ffe77a9a2dddf9e4640e71ddb7ebb10425ed4107e8df24ace9a931f6a39c7dcf68dd09977f76e4c787c0aefcfb477856a641440116577a67d6aa030d410fd524f2d0f3d5d1aef428"}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x100800, &(0x7f0000001f00)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="1bfdfbc8a3d0e6aed8cfb9f3a19ad296c8f30ad61980e2de2cff10fc43f264fe5fe7fb541dfa4268cb97b5d9e4e4429744fbeb0b027c64a46becddb40b3370deb34c1db41a9536f9bf5e32d73177283c0f790b7f0c8e9c53b45ac0e3eea1d84e1b5ab073a76905d7d7fd3f9c2f2172538c2d952cc633a7ffbef6af4920d8d2d919210c65ad95077ac8f67ad74503efcd1d93a8970a6d1122a772a817a317f7fc4e47dc9c98f9e138c242ff071f0907f6d2b2b8490af14a53eada7e40b3fb51becc78f2c6f58899b8b62ec6447dd2d05c00"/230, @ANYRES16]) 03:39:00 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x24c000, 0x0) sendfile(r1, r2, &(0x7f0000000140)=0x2, 0x81) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 03:39:00 executing program 0: sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x2a, 0x3, 0x3f, &(0x7f0000000d40)) [ 2561.151084] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2561.151084] program syz-executor.3 not setting count and/or reply_len properly 03:39:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x545d, &(0x7f0000000000)) 03:39:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x4020940d, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:39:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03007400000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:39:01 executing program 5: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x9, 0x204, 0x402}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r2, 0x5405, 0x0) getdents64(r1, &(0x7f0000000180), 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000580)={0x0, "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"}) r3 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {r3}}, './file0/file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 03:39:01 executing program 0: statx(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x100, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x7, 0x4e22, 0x0, 0xa, 0xa0, 0x0, 0x2c, 0x0, r0}, {0x1, 0xff, 0x1ff, 0x2, 0x6c8, 0x5, 0xffffffff, 0x97}, {0x200, 0x1000, 0x2, 0x8}, 0x3, 0x6e6bc0, 0x1}, {{@in6=@private2, 0x4d6, 0x32}, 0x2, @in6=@loopback, 0x3503, 0x2, 0x0, 0x4, 0xffffff87, 0x400, 0x1ff}}, 0xe8) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) fallocate(0xffffffffffffffff, 0x28, 0x2000000000000040, 0x8800000) openat(0xffffffffffffffff, 0x0, 0x0, 0x120) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x124) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) renameat2(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xf8bc73ad3447956b) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000480)=""/133) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) faccessat2(0xffffffffffffffff, 0x0, 0x100, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r4 = openat(r3, &(0x7f0000000000)='/proc/self/exe\x00', 0x4840, 0x2d) sendfile(r1, r4, 0x0, 0x100000001) [ 2561.269157] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2561.269157] program syz-executor.3 not setting count and/or reply_len properly 03:39:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc0000001300210e0000000000000000ac1414bb000000000000000000000000ac14140000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/180], 0xfc}}, 0x0) 03:39:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5460, &(0x7f0000000000)) 03:39:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x80086601, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2584.186667] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.6'. 03:39:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000f3f54d0320b10d58fb3da4b53f81df993b5dec843a494f383b7ddca451d6c540a950414d72da49ea201c2360bd59e958cdb57f95a5e13dd539f53a0b1e5de36858042236fa1599277409bc470c90ee62be52007ee1096e505c099b8a04e2f4b583ff5895f03f3dcbae0337e456c0b5f56231b62d1a397208b85d9797db1e11b2616016b3834f0d78ab82c7a03abd68bbd7c0dde97721d43fc4c7e245f7a8ef", @ANYRES16=r0, @ANYBLOB="210000000000e33a4d610edbc8a208000300", @ANYRES32=r3, @ANYBLOB="04005b000600650017000000"], 0x28}}, 0x4) 03:39:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03007a00000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:39:24 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x2, 0x8, &(0x7f0000000000)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef7a97c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024db4d3ec4b7b6dc1", 0x3b, 0xc, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) r5 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d524879f846dca8739131e4a9c45c6509af44529537eae3b528f62ca4793a9a0aacfd7a75f2b566b874939829018000000000000089286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d300eed4e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179d1de2ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfa", 0xd0, r4) add_key(0x0, 0x0, 0x0, 0x0, r5) dup2(r1, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r3) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20000010) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) 03:39:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0x80087601, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:39:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x40049409, &(0x7f0000000000)) 03:39:24 executing program 5: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5", 0x23) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = syz_open_dev$vcsu(0x0, 0x0, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x101000, 0x80) unshare(0x48020200) 03:39:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000000000000000000000000000000000000000000000000000000000000000000000000001c202b1db006e1b34dcc28b6df828dedbe116b34545bdda12829eb40d37904559c196d1c206a1c00d22fdd287765fc738b4aa7a0a5a6e9db6b8d3012cbf0cfc3981f231d3ec06ffa71ea6f5e708111daca95b347dc8db4f72f042797661e6e30d488b730284953f05c4aba80381117f37a42e660dff8f151d3405a769a06f4a77091ca05bacf2aba67a39cc75e81201cb8e58f60533ab8750876b9cc693de2dddabfe20f74964cdc4ae2d863b1904cd80e32601d562823b63bd2d76d1f931123a76dadd8a59c44"]}) 03:39:24 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2584.229683] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2584.229683] program syz-executor.3 not setting count and/or reply_len properly 03:39:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400c0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4f4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000200)={0x0, 0x0, {0x3}}) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3d3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, 0x0, 0xfffffffb) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x810, r3, 0x10000000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = fork() r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r9 = clone3(&(0x7f0000000380)={0x1000, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), {0x14}, &(0x7f0000000840)=""/22, 0x16, &(0x7f0000000900)=""/102400, &(0x7f00000008c0)=[0x0, r6, r6, r6, r6, r6, r6], 0x7, {r3}}, 0x58) getpgrp(r9) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r7, 0xf64, 0x0, 0x7, 0x0, 0x0, {0x0, r8}}, 0x401) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) 03:39:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0045878, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:39:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x60, 0x5, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x2, 0x8, &(0x7f0000000000)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef7a97c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024db4d3ec4b7b6dc1", 0x3b, 0xc, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r4) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20000010) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) 03:39:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x40086602, &(0x7f0000000000)) 03:39:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000003000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2584.339945] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2584.422872] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2584.422872] program syz-executor.3 not setting count and/or reply_len properly 03:39:24 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="d2670ae7c2d1c180c15b2662a4c70c59e75d04db6d70780a56953b0ef206d7e16658c746c61fb291436e0fbab8e0e49a3711c5bfb3a77b1c7cb070950d96c51476711042f186f9ae6341986fc305d2", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00~\x00\x00.ofile ']) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) getsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)=""/227, &(0x7f0000000040)=0xe3) r4 = fcntl$dupfd(r0, 0x0, r0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x100) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f00000002c0)=0x5, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) [ 2584.510017] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2584.510017] program syz-executor.6 not setting count and/or reply_len properly 03:39:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0045878, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:39:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x40087602, &(0x7f0000000000)) 03:39:24 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:39:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000005000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:39:24 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) r1 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000380), 0x10000, &(0x7f00000008c0)=ANY=[@ANYBLOB="6e6f7072656669782c78617474722c72656c656173655f6167656e746c65322c72656c656173655f6167656e743d2e2f66696c65302c6e6f7072656669782c636c6f6e655f6368696c6472656e2c667265657a65722c01000100656669782c7569643cd4f37221c787ca35d74a1fa1bf5545eb7120335d70a997d46194d30382d7643278a87b4b0b912623fbd44e0e1d419c", @ANYRESDEC=0x0, @ANYBLOB="2c636f6e746578743d73746166665fff0300000000000073726f6f74037bb442fbc3627b576005333793cadb3d002c686173682c6673636f6e746578008336aafb4f8e0d743d73797361646d5f752c646f6e745f686173682c657569643e1eb270bb9b96d75eb592afed309f43e120c04662f5bbe8eee81a340c3b4fcdfbe92d6de0d739529fac26e3cf27f4fe363d9abbc9cfddf7b62e8ba895dd8e8854f72da4d08e1ad533cf6bb2ca99b8bb0feecb9f8e5b92db63f7220196267338ddff4c20e513e8bf96daaf0ddc7282df26f4600955eac587b2af3d6c99ce96c8de9927fd5197c2c6b3e58bc20c2c36f4c2", @ANYRESDEC=0xee01, @ANYBLOB=',audit,fsmagic=0x0000000000000001,\x00']) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @private0, 0x82}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) unlinkat(r0, &(0x7f0000000500)='./mnt\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/ptype\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x4010, r6, 0xd77a9000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x6, {{0xa, 0x4e24, 0x7, @empty, 0x1}}, {{0xa, 0x4e21, 0x0, @local, 0x8}}}, 0x108) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000000)={@local, r5}, 0x14) chroot(&(0x7f0000000140)='./file2\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) setresuid(0xffffffffffffffff, 0x0, 0x0) 03:39:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0189436, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2584.656222] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2584.656222] program syz-executor.3 not setting count and/or reply_len properly 03:39:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000006000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:39:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb4ea}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0xffffffffffffffff, 0x1}}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x484000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000380)) sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='environ\x00') ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = epoll_create(0x8000) epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd=r4, 0x9, &(0x7f0000000140)=""/26, 0x1a, 0x4, 0x1}, 0x1) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'rose0\x00'}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) linkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1400) 03:39:39 executing program 5: r0 = syz_io_uring_setup(0x119d, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x24080, 0x103) 03:39:39 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:39:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {}, {0x7, 0x7}, {0x0, 0x6}, {0x400, 0x959}]}) writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000380)="49881a6d0637b3ee3eba425b4699d97bc75821c9562ef31c3bd454beeb4e1bfe8db63566fe1701b24ee555ec304d46beb975e77a12a800263d41", 0x3a}, {&(0x7f00000003c0)="d4ed5594e39d239d879327e6a4e941e91ea864cbc9f24ffe995d6acbab992ec29bf2a886c84c7f7e824d3e03fcabfe5abbcedf38c471617e55c2100c23bc69c6a8b42615009a14258b940decb9b1910b37cc56f61de3e32e7d81bcdcb945fb92613e4c7cbc869989708bc4e6f120e73249f04211500e68065726e4ee9d17f2e823c0967b88e7770264a02de0952e31a52b7825838996106e9fece2427475b94f787040cce193e3a51a330cac3e12b00ba7416d0224b8f1afd213", 0xba}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="83350d3a05efec4237a7876a45dc9fd9cabb052728d1c584282e789b1022cbea55ce36ef79a85709d9ceee652b6b7dd2ed57a3928130ffafd748d624d7a42fcc17480b2466dd067f432cec1a1445100173f62a416785b6e2a84f27d62cb1b51df0b63da90e4b613d7245e63886d8c0772b046ca141914afcffd61f58281b248a7c309588d6cccc5bcab71569f1b9361f6630e720ea20278a19e2a4f0cf2e6a72ad2c75ee32169dec901a2f0a930c57db28485c942203467af45cd852a9e22027ab37f7562c42ccca91dfc783bd14df2b5de57e6cf21aadc231ce12af4d73eea22de808735cf48bd4d771507f961cac0fa7", 0xf1}, {&(0x7f0000001580)="853cd51848fdba442bec04997a7a031e1062fc06e26011908b91d0370c3dc30e39141e9858bdeb5c077bfe953c029c4e83e3a507b4fb7fc8dcb872787f8a831f01f3375498c928fd4750576c8aeb0a0248d8142c6cdfadd839966613e4868d75796ec263dd58631a22b94820c4dbd722d6c10cce102525c8154d61083737b21d67c6ebf77e0920656624b584bf103fbe9809d93ab2c50f6d88e89ed0c3637e5252fef2f685bd3210d3769a364920e401ce24813e21414ecd29462fad0ebe19d062", 0xc1}, {&(0x7f0000001680)="3fdf", 0x2}], 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001ac0)=ANY=[@ANYBLOB="01007fff4500b063ed2c4a23585b80b90c0ab90cd02ec1dba48f575a51444503b2879f90123d6d466b6bc73feee56a18bfb6b5684650dcc64815aa624abec37813f42d9bf609bd5119546b40f2eaf0632c2c70feb0f57366024af8eb44b866debc", @ANYRES32=r0, @ANYBLOB="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"]) syz_io_uring_submit(r3, r2, &(0x7f0000001740)=@IORING_OP_WRITE={0x17, 0x3, 0x2004, @fd_index=0xa, 0x4, &(0x7f0000001e00)="8b8e5b6d5cec44cf7216e35118f325693fc70ca097601fe8f719b4cbbcb0c32ae3327ff840fa446f2f1dbe31fe9892de567b19960cb9bd39e7a3c38fa23b240f6844a80847664f76e22f5cb9e2e14d86ac366d11d4d102397d5bc3528a170c6d841471dfbac7be92442518b8f42b21aefbd2e480d33a64bcc6b665710a8667bc4965a3dd4368c9596d12ea4fed69682387286e5e7d0bccfa4cd916fe8e0f67a8d655596b5c569565b073b656af2d435fe9457636aecf7349524184e5521ccc131b69e0828651619d5fb6581c451727321b93499f99ce99ac3a2b0529ddecf37974da471e9b098f532418a169fc46ff5b9f9fb9a49e9be533848ef187d3c1eb9e6485528a8aa5106dc8fb289c716aabcd394c4b006ef805ce0a51d5b7b599f1df171b9d3a186f3dabfdd08a657ea44e64c366454ea922c5058db5f7c147deed67f2e1d8231d799198a097baeeb78baf5bfceb956ae29f206e96ea0b04e6fb103c7d7b7ebd2f1c5cd7b08e4ac050774db76ecb5a22e39aae63bb9f664e590bae1a4e60519b2bbec1983b982cdd455d609efb46373f263e3789a4afc91285ce931d862ce9a6933b00b96916a8b823c1b61b45758dcf99bb322eda45936a794a999dbb71e910ac0896a268b97b8d37d1aa99051baba66fb57834f01c396fa54431dd41eda26f1b33cd5ed22dfec417c68fdec3f100a76fcb293729ee9e6c984c26bc8711c3f88d87ef8155ad4b19de884a4d179c56342bfc9982e4abb49cdeaa909f760ca9a1364b201e3c5c85126fee2e6071d38f98f53c12c17d829a50d4e9aab6beecfc6ec3f59fe5bf67ce9e7b93481124e133a1d94fbb0ab65eef55494e523ae95859f257276e9385793b23f80c6450038a1b151d4f0553f16559067014a131eaedc39a1c2709dd817ad065e7ecea059668f65d54e8f8a83bff27ce19696cc8e3a44e7ea576b519b90168acf3d2553f53f33ebd7896747e152c6932d0302f3b2fb6544897584e7654f2fd88959af99570a0f1bc4a10c55c58cd2a86139f8df4ffa8f8ee0f390fe547da6c27d80e67b906b04c1f7be72d1937e82c8dd47f6f65331c5d5cfd0431daaae0454d9adcab0f02fd4771c801d141c2da929e36aa9c65b7f81fdc858d99f9393dc7f9b306ddab33c0ac436fd0f85a4a418563fe6267a23bb8f12aa1849037da1fec9696d444495678909b0aa8282473b1efa1606631ad96766bbe46eabc8305defb60bff41c8b873458c8ea5df579e55a30f1bde9ec7c6ba1c434855bfa02247bcbd7aabf786598303b6dbce12d9793783b1743d453dce66e8c14d7e6819940f6eedf5ac9c469b4790f311dc6e44b03c4064fa7040fd3bad2b16ddad46d250c5fedb9a91de89d068ad837e245bc0916ba40579444b547f5c13c1c7b0ba901f584ab6fe3743e893a36e71f2d47c3b49410edf1f66b2beee5f056df5b7ca19630e0a1504f8a9ab4dbc1ebf7182f330b1f3e4abe98337a6781eb0ef47a5ea339fa3e68ca6fe143a180629f8e91fec18a1573ac6d3ee5e31e99d530c8763c2eca8848059d298e402a933b6060f6cbbbba25788b84e2bd91cc5a19711e22f92a7ed1bfcbcd2aaab44949ecaa97bae06da12fb97ad90b5093939830d58f130a7c32d56a6c9fdfeb4a5e4ffa3ab971981c7885becba0c154763751949fff625cc7edfe6117b6ab8ce577be1a0f666393f037f82f4b372eac03aec10e6b67588c5a6ac53fe8fe5b0b54125dd6e7cfbce0285e8b66665dcd4b4fd38bc924f55fec233d83e61f27437e494bafeb1f910574b4e4001d53c4d8503c212d89b48d95e2607cb6fdbce1c44bab7fe223aecf76d0fab6c39a1271807ec6ca6a2f09824f67a687fd1dc6e05891c8ea0873a8580540bbfc0625c47c69fdd642497950afc7a1e30965819a857ca59eeacee5f5abafa35666b2b5d5d91c99f47447f0985d6527a5659a6ac525618ecc93caa28b391ff43bec59635d0278c6106b4268c8302454d9a6def7b32edfe8fbc653457345600b65c6735acd6b01478d85174025db3e01cff79772556174069ecdb0e22fa9a88b803b9eed03781cdd397bee2ad856502016f515f3900b2b4a388ae21ad656c44e053fc4f630a5e84888bfb4220a6d2ab7e34cd9563e101d46b1e703c636e1d78c83b6b6befe63fc975b30ba3c00f777870df5daeefdae8d9db9f19a3dbad2547a2e6340bd4c63e5d31e6551939188a3e3f50616b053bc8f691ccc544366ebc80c70bc423e745b240dd9beac44902464ae41b081b194a8f0a887107931987df68a557819527391f1a89484da25c55027513a874653052564b74dcf3533e8b08d9832c5a3e5295e59dbf54e7fd8960698c32d352bc12ecde4bc6791cde2f75a2ee6deef1a8b64f113c306959c840de9828fd6ee0e79f8f7fa427221c177a11ba7f9bcf56f22f6371e06d2f9e7210151a2d20a51fa6abb2d23d027836799c19237bec146af90cc9b5bbfddd0bbb8aaea614080daaa3095109133a6d7baeedc7b05462f680aa5f6ff65947d037ba2c6993d9e7a8118cd75aaefe10e1a4acaa2648a68be052526252b5a914b7bff06a4125eafe4f4a228bca86f3ae67c3b39624d69cc41806d7c0e2108de3ca7967939c5d8ec49f4a26266b8da6d5989aaccd69698189242cdd5766df92cc9b59a2ebe2e6057060b75d53337dc9c2876a889f53b202107fe2159c585a32a82b8ff3fb63718332030e36ac582ef22c5fdc228309b4653bf335aef3d98cbbaffb10a1e92befb12ef4471b410e197b2aed57b922fbd8dd8f588a3e4531590eeb6b91259d506434c5f5660354858c5eb9a9d9c735b2045debf63b5586c33f4333c69ec30c9e5e61165a03d62beac83578631152efe0af6c607f435789c97571eb9be18dfc91a7dd53dc6da5f076b0504612de6aa4b6e24bdd9186f1c469187295dfd442320f384a15ed4f9b5315176931c2e95d65c686064efa8ead3cea4f0f7f99a9f46a78c044c181bd7ab8d2b67b9c53f6ecc5b10525ba3ffb3a1c5624f369e13c5aac34e1da60e6d30ca83030ab21e64f2540013a88fba47c8c238190bfb0279093912991f16281eae741654eebff7d6fc652b7f4388f0626e57c5e990c8e07242524c944a870341e5ef982d4052ca78e2a39b8849518a0896e54502892b3788fb41e3570ec8603cdca809b7ccddbeecedfa0a639e7612023b8993a133bb3a19763279f4e47313ea25e32550f05cc4094ce38af7cbc5007f2ba254d2708aec22b522188099ccb5166d2d6f96d9c9407a35b9fb711439caade9d1972671d8fd494fe7fcee402e0fd4832b4a6962aeadc59605b558b145e70d64c5508d105463d7e740c0bea9e13e99d97fe35fd797ceb3887bc2add334b523c0cdaaf3c0e4bc40e2346698afccddbccd284bb5445e50e9dd670e4db6dbac339356f6de94562e1d6b96675fc28d835d6f856aa853f1773eb36c867b656097959bbd961e322b668d50352b036b8d7d93c4d4109f57e9518a3e18e8e4addcc9d1165b5d915a0a0764a6a1d1fce0505d00ddca1c229eb1a2df12f07c047916c68195a12eade24f96bd2ba3322297bea6f56d010b82c4f9b8fc41a7cec047a4a76eda627bf00aef0dcf28dea28609ba0972333c83ec851e5f67b5e5e0a6598f5558fac143ff85908352d30bc03ebe73902ae2312a5d110b7699bcaa0742ccff92c52cef5f3e9c9e1899f55feb9c6916e524702372d4e496857906e54ab685b0d5741175173b7e9055e79352963f8211fb8f83c838aff72212a2ea2da28b5689e54dd813bad2dfa15b950cfe5a92ee15afa5e8c5a86c71b084c4f3c8ffc8c3b1356d313e295b9f4d8b17845af88bc77d7c6e4128e9fdd8f76ad55aab467e5e0f8d30348a365fd6f6fc16340167068bbc4afa9c9a5f6744786ffab9a7b47a8b9a9726c216e4281ea12bab1824899b1aa13475f6acf51d6dd9269223562275ab8721154d33ea9b4aa46bfa4e8d3c18484be58c5e7290bb43d568ef73c467ebd794c3a057793e0d18bca75ba9983cee6ebacc310004780fdd447d714cdd6e5fb4d076ccb475d35d184c25eccc369eecb5e0e9b7a852404f9a61a8657d8057b661699511c6c5f5e25ed0b93b9c1e66e4833ac643a2800bf105be0b8ba08ec3aa794dbfe4611aeeaa88f56b618ae61ce3b9665d6978227d1d818c67f19ac1560bd8d522146b3952b9c0d5886b04b486a9a9024b0fed159d01f26e0013924708ccc07ca13d3beb1ca9e295374c09c044f54b3ccb5a597f407abd26dfda7d434e1ee237efde519278f3bd7296da91200777070ff807ab2dbe371996dfdf179f9feefcb137d0328ccb2848d46676c84f598e03291ae6e95dd342849c2faa133772eaf5121cfce8bb04eac54b3a0f9145c0473b3494a06a749cddbfba9cb94b259cb505353b61d32fb25a5f7402a8147e00051e5ac6e3cdbff89757d04867949bf7e6905c4fc31a24434b3fa831d043200660716adbc94d49b17b01be386e207cc4c074d893c104e58091818911de9661cd811e0977a1168c78ffb6fe8f280b9229e9e34c2b8a58d76119bc9a265c51865ebf22bef99337dd0d3750464e8e514e6b0c5a7f775c8504501c924855946629868adebb0c2405749b14cbf438227aac4b9a7e3089a36e1452201c19bbebd8d8d63d3392ddd8a3faffeaa4423789a291e8cb283d7d2a45d5885d84a4ad6439102b666c792078f81c8aa31fb2a9c0210ecdb89d90594f7120bda93881b264ab7b3efea6400db897472249633446f3b646bf4ce2d35b57b74e9cba7eea65b5ddd5c1b65739ab310ec94c1f34850625ff37f4ac8c3f701316b85b433cc2cb97f5d0b43f3176e9ad36aadf8720a798a494ab0bddf5340a33438b57c938a819e1065d6b337a400a94c67df55ed5fffa5dbc05c0815294d52c17e9e9904bdbea5c5faa7edec9cd04d3dc9927fb7b65ffa4dca83cbf29b7cfbf582dc06b080981ebacb833ee4621c319dd91f656da9dd4f62329d300d79d9f6e3ff31f230a3756c209978f0500dc9901c6eb31d4ac830a56ad2fe4ae1256a64811f6b3c0bf2cad3b3e293b92cd744c6a3fe3d67acb85b83fab42ddebe20eb65c6315c56d3957ffb281650419f568ebb3cfb19b7bcf175b30a7fa992035951e5e4b0f3be0bcf90fd714bebdc75cdbda06847586b5505dc97d547cc4be688e09debed9f194f49afbcf7559c6f8d5a7255971e9fae0df6b6ddfcf67baaa514d72d2683b95a5d25bb729e955f247128ad575a7df681683d4616507a3127068b6a2dec379d854d2d7a80edcbd0adedc1878a3eb1081406094437ef856900e3a18901ef820e466a3ad3643c4e309ae2a05811c0909a9c1294078a2677178a7c7d9e3c7ff5e2278dfeb7c6b57f0abf10a4f3fb6fab7f3d5219a606254328072522c66f2d92705ee6fd3e05bdc0bee066c0ce9de261f2d03060ebafe89a935951145d0d26f90ff69c3211a1f6832ccbba6ef32bcd0ff2991627179795fcc00834a7e0c5ac722d1b8948b0334097d37cdb2136ec2594afadf22f383b269fd89e604d90520db0cd30b5afdc2038e80e33137880602fa497c11469d5b1dde431263882ef7967a2e93336292d0185a0d6660ea5e0609198b84f9da184e6d6fa9a2d41b6de18cc4439ae601e9893f3ac95969aa14e7b0a70f990cd9d9fda746d169971d4c2b8f5b4753be032c2b384fac96c28424c6c7c9d7a7050e3c51cbeed0c1fee33538c5a860d2e16943227fffd3a4f3e8d16daa45f5bcf777d94939701772fd86e07b57a0e3473fb10cf6c0", 0x1000, 0x8, 0x1}, 0x4) readlinkat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/131, 0x83) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x1002a7d, &(0x7f0000001880)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r7, 0x0, 0x0, 0xfffffffb) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r8, 0x0, &(0x7f0000000180)="058993bf89c62b80c996416380293184eab2775539efdecd4210f05cf2da7e05ed172fb319c6", 0x26, 0xc804}, 0xffff) syz_open_dev$sg(&(0x7f0000000080), 0xfffffffffffffffd, 0x82801) io_uring_enter(0xffffffffffffffff, 0x58af, 0x1, 0x2, 0x0, 0x0) 03:39:39 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x115143, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000004c0)={0x1, 0x3, 0x1000, 0xe4, &(0x7f00000002c0)="30289d8a8a4c51f1c591144d1ae2877b974f09f3975503a30b96c159c92daec9db757a9b5e71c63753679a5fd2468f137ef7cb360b3401d04726e470441339d31b30f9d5ff83db6fcea319c8e8cc0225094ac36252e4b6808b55e5ed7a7f3dfb39a572c1854834419980787acb6b08e43839bedf008e3a364bd5353679f44c983a28d503faed66f437032e5c6a317218ad71d09ee3f02e2a1c0cab607e4d2d7e920e237a37591ad9debdc0c37f8d46ccd5aa3eaf590ae2d7e70ee2fa5cba119b30f3ceb6b4f4839e0428488c6f03c37993847cb2b293cceadfeae94dea9c64c35269e09f", 0xf4, 0x0, &(0x7f00000003c0)="328df9b31a1893a441b3aa9754dec3b8171bf6971f259e5a79643212e9fae0cf38a7529329d6b931b27cd4e55db332b0c01e548fc20ac670f8102967b9dbf9d706c8af2d321b643ad880e41b32ff424b1cfde51568207ff90678b7b92b9660f4a372cde496f769054a1023e54a29d20183c772efe3102ee6a60c44d6c7cfa62a7162ca21540ca3e5f5e79d6b6489ceb4c7451f1db416cac40ea596b607efcbf5bf08bb7ffeb0674150fce1b22ca5ddfd655ab390410a629e76d42fee5528a7807b9b73917deededa767fded71c804f1e8f79a23cc7c12399cdacb3f1542ec462ed1fb6a2194db7d013b14d603ec8f0bd87686aa5"}) r5 = dup(r4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180), 0x4) bind$802154_dgram(r5, &(0x7f00000000c0)={0x24, @none={0x0, 0x1}}, 0x14) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffd}, 0x2188932d843071f3, 0x31d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/1491], 0x744) sendfile(r1, r3, 0x0, 0x20d315) 03:39:39 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc020660b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:39:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x4020940d, &(0x7f0000000000)) [ 2599.284967] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; 03:39:39 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x2400, 0x140) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x440800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r2, 0x8000000) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x80}}, 0x80) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x222001, 0x0) sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x0) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x2000, 0x8) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xa2, 0x1, 0x20, 0xff, 0x0, 0xfffffffffffffff7, 0x20001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000280)}, 0x4200, 0x4, 0x80000000, 0x8, 0x1, 0x5, 0xe000, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x3) sendfile(r2, r7, 0x0, 0x10000000c) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r8, 0x0, 0x0, 0xfffffffb) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x100010, r6, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 2599.284967] program syz-executor.3 not setting count and/or reply_len properly [ 2599.322954] EXT4-fs (sda): re-mounted. Opts: (null) [ 2599.340284] EXT4-fs (sda): re-mounted. Opts: (null) 03:39:39 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000007000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2599.456583] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2599.456583] program syz-executor.3 not setting count and/or reply_len properly 03:39:53 executing program 1: mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080)="83e3af7830398ba6f6d39b6a8b14e96a5f38ce261bf3187a69cb54f51c9c38f1398cbe7f9e41eab3f40036de277b343cfe16038ea58d5a97b773e445aa39019aca90d0c2ca29f478cf893e6df34ffc6f62eabe8a308703f876a8db853c7c39768dc0397cc3b19f8b4e07fee9b108d16bb2e73792b8d0f9964ee40378ea67614a05b2f4cb7d138a0ffe26dbce4d155d09bee94bfdfa8dd26ef4f2a6de910a43a8d2593172beafc86a56f00e790d467106ba0b9b2068dbda30f7ae61f552c055707b6a40b5df2a6408200c07461902b5bb079f38e80912ca27a282f15ccd2f2a85dcc72d75567e181eab4c78c2c29d38dc0907", 0xf2, 0x1) mount$cgroup(0x0, &(0x7f0000000d00)='./file1\x00', &(0x7f0000000d40), 0x8, &(0x7f0000000180)={[{@noprefix}, {@clone_children}, {@noprefix}, {@cpuset_v2_mode}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) 03:39:53 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:39:53 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000009000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:39:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x10000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r2, 0x8, 0x0, 0x6471, 0x1, 0x1}, 0x1ff) mmap$IORING_OFF_SQES(&(0x7f0000b5e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, 0x0, 0x1}, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r3, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file1\x00', 0x1000) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) openat(r5, &(0x7f0000000240)='./file1\x00', 0x400000, 0x40) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000140)=""/213, 0xd5}], 0x1, 0x0, 0x0) 03:39:53 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000019}) r2 = epoll_create(0x401) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x7, 0x6, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x890e, 0xfff, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf250c000000340001802200020076657468315f766cbc915c36000000001400020077673000000000000000000000000000080003000200000044000180080003000200000014000200626174616476300000000002007665746830000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x20040881}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x591, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c) r3 = getpgrp(0x0) r4 = pidfd_open(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="1332", @ANYRES32=r4, @ANYBLOB="2400000000800000000000696c693000"]) epoll_wait(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xeff) dup(r2) syz_open_procfs(r3, &(0x7f0000000040)='net/xfrm_stat\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x5, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x20000001}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1080}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x401]}, 0x8) epoll_create(0x1) 03:39:53 executing program 6: flock(0xffffffffffffffff, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0xf10f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x3fffffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 03:39:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x80045432, &(0x7f0000000000)) 03:39:53 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481223, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2614.072576] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2614.072576] program syz-executor.3 not setting count and/or reply_len properly 03:39:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x80045440, &(0x7f0000000000)) 03:39:54 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3}}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x18901) openat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x20) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 2614.158146] kauditd_printk_skb: 9 callbacks suppressed [ 2614.158160] audit: type=1326 audit(1713929994.010:208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bdab1b19 code=0x7ffc0000 [ 2614.158364] audit: type=1326 audit(1713929994.010:209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0bdab1b19 code=0x7ffc0000 [ 2614.164734] audit: type=1326 audit(1713929994.017:210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0bdab1b19 code=0x7ffc0000 03:39:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000a000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2614.165062] audit: type=1326 audit(1713929994.017:211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fe0bdab1ad7 code=0x7ffc0000 03:39:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x2, 0x8, &(0x7f0000000000)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef7a97c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024db4d3ec4b7b6dc1", 0x3b, 0xc, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r3) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) [ 2614.165269] audit: type=1326 audit(1713929994.017:212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe0bda64ab7 code=0x7ffc0000 [ 2614.165620] audit: type=1326 audit(1713929994.018:213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe0bda64ab7 code=0x7ffc0000 [ 2614.165839] audit: type=1326 audit(1713929994.018:214): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe0bda64ab7 code=0x7ffc0000 [ 2614.166037] audit: type=1326 audit(1713929994.018:215): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe0bda64ab7 code=0x7ffc0000 [ 2614.166943] audit: type=1326 audit(1713929994.019:216): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe0bda64ab7 code=0x7ffc0000 [ 2614.167203] audit: type=1326 audit(1713929994.019:217): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13988 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0bda64a04 code=0x7ffc0000 [ 2614.241154] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2614.241205] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2614.241261] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2614.241306] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2614.241332] print_req_error: 375 callbacks suppressed [ 2614.241358] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 2614.241885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.241916] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.241926] buffer_io_error: 6 callbacks suppressed [ 2614.241934] Buffer I/O error on dev sr0, logical block 0, async page read [ 2614.242102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.242151] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.242160] Buffer I/O error on dev sr0, logical block 1, async page read [ 2614.242344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.242464] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.242473] Buffer I/O error on dev sr0, logical block 2, async page read [ 2614.242630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.242654] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.242670] Buffer I/O error on dev sr0, logical block 3, async page read [ 2614.242817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.242839] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.242848] Buffer I/O error on dev sr0, logical block 4, async page read [ 2614.242994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.243016] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.243025] Buffer I/O error on dev sr0, logical block 5, async page read [ 2614.243169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.243191] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.243199] Buffer I/O error on dev sr0, logical block 6, async page read [ 2614.243403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.243426] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.243434] Buffer I/O error on dev sr0, logical block 7, async page read [ 2614.243680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.243702] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2614.243711] Buffer I/O error on dev sr0, logical block 0, async page read [ 2614.243859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.243879] Buffer I/O error on dev sr0, logical block 1, async page read [ 2614.244023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.244179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.244334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.244552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.244750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.244912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.245124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.245283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.245868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.246026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.246181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.246336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.246660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.246981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.247608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.247774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.249163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.249327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.249600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.249768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.249926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.250110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.251765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.252807] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2614.253145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.253306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.253632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.255820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.255981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.256141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.256908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.257121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.258904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.271399] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2614.271399] program syz-executor.3 not setting count and/or reply_len properly [ 2614.271811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.313832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.315259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.315587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.317738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.318690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.319641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.320613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.321546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.322528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.323577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.324585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.324724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.324855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.324985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.325115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.325255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.325633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.325928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.326182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.326314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.326483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.326620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.326748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.326930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.327064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.327300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.327497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:39:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x80086601, &(0x7f0000000000)) [ 2614.342555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.343862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.344882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.346627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.347823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.348801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.349868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.350864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.351844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.352792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.353769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.354767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.355711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.356751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.357766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.358696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.359688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.360675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.361655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.362664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.363652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.364664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.365839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.369554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.370476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.371440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.372317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.373320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.374300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.375260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.376887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.377859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.378809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.379717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.380715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.381633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.382574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.383484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.384621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.385569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.387524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.388654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.389728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.390631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.391564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.392552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.405948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.406646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.407262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.408185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.409222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.409888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.410536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.411166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.411968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.412985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.413898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.414886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.415887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.416886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.417842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.418726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.420307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.420994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.421669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.422297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.423075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.423723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.424434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.425027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.425774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.426309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.426934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.427518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.428094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.428705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.429276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.429847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.430525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.431052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.431648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.432178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.432815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.433391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.433966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.434575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.435209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.435791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.436435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.436975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.437567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.438115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.441782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.442328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.442979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.443561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.444130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.444717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.445929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.446529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.447135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.447214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.447611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.457462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.458030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.458638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.459170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.462903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.463495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.464082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.464699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.465280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.466206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.466807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.467358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.468183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.468761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.469331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.470021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.470624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.471153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.471774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.472299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.472910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.473503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.474077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.474680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.475252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.475840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.476447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.476982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.477587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.478095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.478677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.479255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.479862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.483464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.483971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.484553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.485061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.488697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.490521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.491075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.491621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.492128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.492693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.493195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.493729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.494249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.494324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:39:54 executing program 6: r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = open(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_submit(0x0, r2, 0x0, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000001780)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd=r4, 0xffffffff, &(0x7f00000016c0)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="afd20d3d840e7de6ed88580d9233dee4b5cb79c51ae2c367216b15f8051ad97b55835391b670145a8dbb751cd230cccd3e906011209344e34d6bbe720e8e2abfe3e434e39c6a03da1f58a1010267b04dae8c82a70bba72d41926af217a3f11f02e5ba5897017717bff31b3c21cb840420f801a161e4c39f5f0fecd0511907c00cad917ab2026288a34a1bc3d1eac28a7c5540323a83f329a29f17de058512694f096ac4c120506efb06a0e2f908af4bdb36ad860b09a40df4dcfffbe1e5e33c94677a31ad6f529855dc15df76ff737c5c8e63915389569e6e6300496e01aa61ed0b2f99b1fdc37c61dccffc033e819157871d026383ec0", 0xf7}, {&(0x7f0000000200)="3c12611c822f099cf3cbeac2c61d5bf7a0589e2fea7f4df70bcf7a5780dd8e795512bba3f60b694cd4c499553608f423334414261670ab12c274863430944689edf568b76636623936952a456327e7ad5e525dd9028d81be3a464a6667c6163bf4ddc7f1e07c3c4e", 0x68}, {&(0x7f0000000280)="a59efde34887d0019f035ca1b6f902fe1de396aab643e00d594de69ed66282825b839d33ef6d", 0x26}, {&(0x7f0000001440)="5436b8ad4b86d4b3a38bb4d6848808ca4a638ab208bc79c2a631c2638317ba2f12cc8e4d835dd6f2ad01275a0e8be66d7356f37fd89bbea940c55abaa93f897503bd22a1403d3a3b11af5c098e68f22ce74b2744ea34d038ec184a96a1513a949224432bfd9a49d75f1f793e2da6000669a996d7374849b7a915240023953683b1a77a1db8cf8a453a910968f92fb51ffe2bc5a7ab81be50f0fc6565b13f0547a6199a59ed31f6aa4266d0c0688226f14134d063b90a13", 0xb7}, {&(0x7f0000001500)="33ed4e66e46964dad0115bda904bb35dfdb4d95e9eaad1b2608efbbf54c74c544f6f498710a5d69547b614ac55e90cc068f9408deada1a59dff548b0731378705220d21511da268c77ffe88215c63ed009f1617b2ead77371bec90e7f0d88dc2e356d887efb917f9ef0d5a1377eb97c0577284fd57cc", 0x76}, {&(0x7f0000001580)="33d7f375486dad32da1d2b4326af82d60e96f7e8f89e31c428bfbbcf0576ce97394d606462c54651", 0x28}, {&(0x7f00000015c0)="151bd4ac9f2a67927403d2160ac876faa2602882baf0770fa04fc60f8a886ebe30f4c41d146f37e8e38a96f7e423be41f3694cf71f1e378fc4b3cb975267606826ede4c611febde4162737d72d6afc9159ab6677cb93f40d0e2e716033cf809b6a3f06b9a6a08af248d44a74df6fffb08266986e76c4dd469d57680e549e0d788d89291eaa6c5e7516d4a5dbcea481042b07b13fe21c7aad028bf200e39c3e55b3014bc56ba26acfe4a3a7be", 0xac}, {&(0x7f0000001680)="3acd771088c6ad9513c778ee267d6843bf54313bf8", 0x15}], 0x9, 0x1, 0x0, {0x1, r5}}, 0xba) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = epoll_create1(0x0) flock(r7, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r3, 0x0, &(0x7f0000000180)='./file0\x00', 0x1, 0x75a7308e7adcce53, 0x12345, {0x0, r6}}, 0x90000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) dup2(r3, r0) io_uring_enter(r3, 0x7616, 0x331d, 0x0, &(0x7f0000000100)={[0x7]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2614.494491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.494566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.494638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:39:54 executing program 6: syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r1, 0x197d, 0x7fffffff, 0x5}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x224}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, "4cfa52a749d2e5c4"}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010000000000000096000000000005000000ff7f000000000000040014"], 0x24}}, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000ace670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000ace670325132510000e670325107", 0x9b, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004815}, 0x4000004) openat(r5, &(0x7f00000000c0)='./file2\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4150, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 03:39:54 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481225, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:39:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000d000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2614.494708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.494781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.494853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.494930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.495938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.496979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.497051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2614.608164] device wlan1 entered promiscuous mode [ 2614.652953] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2614.652953] program syz-executor.3 not setting count and/or reply_len properly 03:40:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x440880, 0x100, 0x2}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mount$9p_unix(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x4, &(0x7f0000000280)={'trans=unix,', {[{@version_L}, {@mmap}], [{@uid_lt={'uid<', 0xee01}}]}}) umount2(&(0x7f0000000340)='./file0\x00', 0xf) r2 = syz_open_procfs(0x0, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000080)={0x40440, 0x0, 0x8}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x84000, 0x0) lseek(r4, 0x400000000000, 0x2) umount2(&(0x7f0000000000)='./file0\x00', 0xc) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) chown(&(0x7f00000003c0)='./file0\x00', r5, r6) setsockopt$inet6_int(r3, 0x29, 0xc6, &(0x7f0000000380)=0x800, 0x4) ioctl$FIBMAP(r2, 0x1, &(0x7f00000002c0)=0x1ff) 03:40:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x80087601, &(0x7f0000000000)) 03:40:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x10800, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x3b) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@remote, r5}, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="6f79dca5e061de298a762d0600", 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @remote, 0x8101}, 0xfffffffffffffe53) 03:40:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc048122a, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:40:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000e000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:40:09 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:40:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000088fd74d74dc967625c2428fa2c34cc1659c4e51a9371afeb713111ef777190d710d5eaa4568100"/53, @ANYRES16=r1, @ANYBLOB="010300000000000000002000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x801, 0x1c5) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') accept4$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14, 0x800) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="50010000b33dd5ab35a6e39bb009b2481d0a67b564f11cc488c77639d7b281aa0588719747cc4e261774dff25be0", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25090000005000018014000200766c616e310000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e65766531000000000000000000140002006772657461703000000000000000000058000180140002006e7230000000000000000000000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3100000000000000000800030001000000080001006cc2b87df5a5721e640a2f17a4ce666bdaf7d2912e08129c0b2aa11f85a47ced9c2a5b8a1de713a253a1f8da097d28567d3bd90f04d88c13f631a0e091a8e2c14007252f2b943212bda32e6b086c94b0d52fa1741f7444d3170d10e920690800402397e41a2267dc2ffb8dfb9aa2c9c9d65fadae37e0f561378091063c1d0dd8de6be7838faf3f4ead2d66857927f7bc54ff9ae5b4d56b8016c39264533961", @ANYRES32=0x0, @ANYBLOB="18000180140002006970365f7674693000000000000000007c000180140002006261746164765f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f300000140002007369743000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x24008040}, 0xc0) getdents64(r6, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(0x0, r6) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=r8, @ANYBLOB="6131e6afecb32e24820bfaf1375895611c549cb1ff0f005031e8f2fab76be54f0f33304588b78c933acaf2ee0cc846861ad47052fccf176e13339f2885eb6cce5e85fc75c2261ca3afe40686eef795b58cc67031a4fb70e5"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x134, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf7e}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x53}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x235}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x134}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) 03:40:09 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000b40)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0xe257, @loopback}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000440)="71a8896c57604ef0bdd031d95626ea4a8b4afa4cbfc5b09750b39afc70eae8d5fa31951a33258ab1815817117b138218c97515c41c765fd76003a1fdf617ff292b6088811d819bb9bacb0e9654a897767d", 0x51}, {&(0x7f00000004c0)="3b44057eb5a1fbf919c40130b8ca99f8ac6f0b092a3fb1fb40bfef33cd2b9f853900d918b3ab67b1ee379dc14895085aeae477d4215d03c2d4cbcd4539f4dfecf19beb2baa25d180544db603cd5d5303ec28d60784f8b8b61bb5054ded8afd51e611175b62dc5f577db3998b9a3ecb987e9c157b8d5542424d18e4065d045ba09af1049a6c42475e1c4a884c4d1c22cc38962ccae2daa969b2d5142ddbb20f9e4c6ce8b88af407e96200015184859090d253962b73bcade939a207b8a951122fee0948389191f1b92861", 0xca}, {&(0x7f00000005c0)="ea94d41361f93ec88b8039ab54432e749cba56750391f0939da4c29b57f7309160ec549cec9dd97435c701c431e039de4a96838cc0c9df96b397e4afa0711ff411847510b7b95b", 0x47}, {&(0x7f0000000640)="837d78417598723cdb4334d3fb4e8c4765cf29a52b3a73c8bc223356c4828d5c91da7def62030b3d0d736d6a7e19c79131a3e31dd078ae522e9f8f53c68d8dae4c0939047f629a07f4b2aa94fa6005611881a5fc25e6a0a94efe70a68dd41a3c22a46f14b9b6b999b3d979a6ef6af51d2f89c4a81b8ab2887fe6eb8abb3a49cacc87c4f7a9c1edc75db7470e3aa87663b3a24476dc7ffaba2e0d40699feeaadde3d043e8cddb813f67313e7872a472e503a0a1db17d6f344d782a3248a3da49f224ab827b194d3887e989f7d18e47c73df6aa08511a9df87235a372cbb415988406b664677776a4eca8ec101d3a29ced4aec1c", 0xf3}], 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x3e0}, 0x0, 0x4000000}, 0x9) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000002c0)={0x2, 0x0, 0x61, &(0x7f0000000240)=""/97}) close(0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007"], 0x410) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 2629.497535] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2629.497535] program syz-executor.3 not setting count and/or reply_len properly 03:40:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0xc0045878, &(0x7f0000000000)) 03:40:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300003e000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:40:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc048122b, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:40:09 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x5603, 0x34f7db97093497f1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x7f, 0x8001}) fallocate(r1, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x41, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2f54649a8ef87c57", @ANYRES32=r4, @ANYBLOB="0c009900728c0000210000002c002c8008000000b55100000800000003000000080000008000000008000000b08e00000800000002000000"], 0x54}, 0x1, 0x0, 0x0, 0x35b4322dde4d806b}, 0x44800) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) open_tree(r0, &(0x7f0000000200)='./file1\x00', 0x88001) timerfd_create(0x0, 0x0) unshare(0x48020200) [ 2629.671699] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2629.671699] program syz-executor.3 not setting count and/or reply_len properly 03:40:09 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3ac, 0x10, 0x1, 0x0, 0x0, {}, [@nested={0x389, 0x11, 0x0, 0x1, [@generic="7fe10d4a66e1aad19130282024931bc16578e560b01c372450175516bd7b84d1d656c264d8cd2197501d1dc96f8a131ddd80c24a4d47fab1fa28e669d8f248a362c8dda04b6f40ac09ad7ef532b7f7ee9edb062990b3089f678401720966179fd09b471dd9ac8adf7e8acbca51a024afebb2dee7dab56beea7b489660bd765e4c3b8f237ae612806495539e2de203ee44e", @generic="9543ac34b7b719e1331bc3aa13a447877ab782c1874029ea5e2fe06b502c0be79ae23e25c8fc6c606f1e378a20", @typed={0x6, 0x61, 0x0, 0x0, @str='i\x00'}, @generic="6afa3a56f2da0946e947d2db6acb", @generic="c85c9324a6030ae409e55cfb844ca77812a2c7f7e09bb50bc8f06773ab35dfafc7d87e3b3f90cb9d69dbd71a455cc7d2cf9a25c4ba4409e2aa97e086fbcc2102926c8d39ea2f1b90207b00e6bacdbde11d21ac5b2994be71ef2c7d1c2ae4c3d1e2f266eb9ee6ce98bbc2c7d20db8ef3ea717e4a5518760c00a8aa905a8481557858c04", @generic="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", @generic="e4a3212682700ab5c57f3aa89ce11b6cd980f724810488150d197a7acf52c5352fec745532852d31c7c21c5876965038a1dedbcf60d421a690e363d76b3515b7924feb325ebf8f8e041f541438366ae317ddec0ec6ce5f7a800df3d8d75528f177bd44fb88ab70875159c5a6ff870d732b49e3912fcb0586e5fe8fb5f5fa3d85659ac58df7590e16db7d1cff84e1d42d57757b866bc4e02a7243d0aafea584c8ffbc153eadc5d6a926e07cd72be3f453dba1ee4cefbcf4f86259c256edba1af7cbf29d764eca28b6ed", @generic="0ac4ff46105e24e26135b8f646502b6244ead3ffd8da4931e1c6b501a73fe3372e826fd03990e11cc633897018d1f5419142dfb669fa913befb7156d00c1315cf49cfa48d3c74eb906096bd6d7c712a635d5cb4b8769a0722467bf55d3ef369b262b7c59f4a0dca0d3"]}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x3ac}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000000c0), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/164, 0xa4}, {&(0x7f0000000780)=""/225, 0xe1}, {&(0x7f0000000880)=""/147, 0x93}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x10000) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 03:40:09 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0xff, 0x1, 0x3, 0x0, 0x8, 0x1489, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x100, 0x200}, 0x8, 0xa7a0, 0x4, 0xa, 0x101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xe, r1, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/133, 0x85}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/116, 0x74}, {&(0x7f0000000680)=""/51, 0x33}, {&(0x7f00000006c0)=""/198, 0xc6}], 0x6, &(0x7f0000000b40)=""/242, 0xf2}, 0x0, 0x40010000, 0x0, {0x1, r4}}, 0x4) read(r2, &(0x7f00000002c0)=""/225, 0xe1) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x1274, 0x0) r7 = dup2(r1, r1) r8 = io_uring_setup(0x1b33, &(0x7f00000003c0)={0x0, 0xc7e7, 0x20, 0x3, 0x175, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="0184c55636c8d3000000b3c374ff9de4a7", @ANYRES32=r8, @ANYBLOB="01000000000000002e2f66696c653000"]) write$binfmt_elf64(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/711], 0x2c7) syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') clone3(&(0x7f0000000200)={0x451a6100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), {0x16}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 03:40:09 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x448902, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getgid() sendfile(r2, r2, &(0x7f0000000040)=0x4, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) [ 2629.738726] netlink: 908 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0xc0045878, &(0x7f0000000000)) 03:40:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000040000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2629.861899] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2629.861899] program syz-executor.3 not setting count and/or reply_len properly 03:40:09 executing program 6: syz_emit_ethernet(0x7f, &(0x7f0000001880)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x13, 0x4, 0x2, 0xe, 0x71, 0x65, 0x0, 0x63, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback, {[@noop, @rr={0x7, 0x1f, 0x82, [@local, @multicast1, @empty, @private=0xa010100, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x39, [@broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @local, @rand_addr=0x64010102, @remote]}]}}, @payload_direct={{{{0x25, 0x0, 0x1, 0x1, 0x1, 0x8, 0x0, 0x2, 0x3, 0x0, 0x2, 0x6, 0x0, 0x3, 0xffff, 0x1, 0x2, 0x4e23, 0x4e23}, 0x2, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x11d5) syz_emit_ethernet(0x579, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0x0, 0x2, [0xe73, 0xb6a, 0x49f, 0x1d]}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000001900)={0x6, {{0xa, 0x4e23, 0xffffffff, @empty, 0xffff}}, {{0xa, 0x4e24, 0x3, @private2, 0x8000}}}, 0x108) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001840)=@IORING_OP_FILES_UPDATE={0x14, 0xb, 0x0, 0x0, 0x7, &(0x7f0000001800)=[r0, r0, 0xffffffffffffffff, r3, r4, r5, r6], 0x7, 0x0, 0x1}, 0x3f) 03:40:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc048122d, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2630.003409] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2630.003409] program syz-executor.6 not setting count and/or reply_len properly [ 2630.022568] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2630.022568] program syz-executor.6 not setting count and/or reply_len properly 03:40:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0xc0189436, &(0x7f0000000000)) 03:40:09 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:40:09 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) syncfs(r0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 03:40:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000048000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2630.194498] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2630.194498] program syz-executor.3 not setting count and/or reply_len properly 03:40:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0xc020660b, &(0x7f0000000000)) 03:40:10 executing program 6: socket$nl_xfrm(0x10, 0x3, 0x6) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r2}}, 0x2) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002000)={{{@in=@dev, @in6=@dev}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000002100)=0xe8) sendfile(r4, r5, 0x0, 0x100000001) 03:40:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300004c000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:40:25 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x6351, 0xfffffff9, 0x39, 0x9}) r1 = getpgrp(0x0) clone3(&(0x7f0000001180)={0x141004000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/4096, 0x1000, &(0x7f0000001100)=""/51, &(0x7f0000001140)=[0x0, 0x0, r1], 0x3, {r0}}, 0x58) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x40010, r2, 0x75ca2000) fcntl$getown(r2, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000001200)={0x0, 0x0}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10001) kcmp(r3, r1, 0x4, r4, r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$bt_l2cap(r5, &(0x7f0000001280)={0x1f, 0x0, @none, 0xfffd, 0x3}, 0xe) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000012c0)={0x1, 'ip_vti0\x00', {}, 0x7}) timer_create(0x6, &(0x7f0000001300)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000001340)=0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x101080, 0x0) perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x0, 0xff, 0x7, 0xba, 0x0, 0xffffffff, 0x18424, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1e0, 0x0, @perf_config_ext={0x1, 0x100}, 0x4020, 0x7, 0x10001, 0xf, 0x5, 0xffff407f, 0x7, 0x0, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0x9) timer_gettime(r7, &(0x7f0000001440)) timer_create(0x6, &(0x7f0000001480)={0x0, 0x16, 0x4, @tid=r3}, &(0x7f00000014c0)=0x0) timer_settime(r9, 0x0, &(0x7f0000001500)={{}, {0x77359400}}, 0x0) 03:40:25 executing program 6: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x5204, &(0x7f0000000100)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x5, 0x0, r8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = dup(0xffffffffffffffff) ftruncate(r9, 0x0) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64, 0x1, {0x0, r6}}, 0x6) 03:40:25 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:40:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="b890a0b8274d07367392887ebcb0", 0xe, 0xfffffffffffffff8}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0xffffffffffffffff, &(0x7f0000000540)="a78ff18c217bb33ffc324e21d5d4911d3522441389ee66dcefba893eb8de2a561875771350f23c19a26d6489ae85bc886047f6098079f331f662d38e904289df8b2b9fb777213785ff84cc28f25e3ebb7e24490014f5", 0x56, 0x1}]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="07000000000000002e2f66696c65302f66696c653000d8a1a5586dc9dea46ba88f5e2983efb52bfa70b79babab6ae0667767d3b061f6c2c47a555be59ba9d5d5f21f141df43ca30f1b4054498ca12475a2eda9ffc9d534b3abdb6fb9f0ad1377614a823307b0bb3bc7e16761eff5b0f909052c438e58271d6d70f842aaea9cdb2ed84efa9267740687ca786a88d0c3305708d83fddeff026e31a7776f77f5a1e3f10f08ea8b594f12a36edadb7aa6a6a26fb937f4c1a49597bb356bd0cc61826fa6e8bc65cfcdcd0936fbcab190bf3f8101a564f65f65d63dfbeb671e7bce579dd72ed5e19be2c469d14ce2585f7510413bb"]) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000002030103000000000000000003000001080000026342b0089f53dc03639cf3a541dee89c4e7fe5f4373f7b873c1e245b32c9c9d49dc890125057a200000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0xd8499488957a772f, 0x3}, 0x14}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000300)={{}, {0x77359400}}, &(0x7f0000000380)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:40:25 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r6}}, 0x2) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x9, 0x3, 0x0, {0x0, r8}}, 0x6) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="a5e8015711199f83823381c94cc31dde2e9101791d35ed2f7aee648e3a6b5aaf52d93d699290fd78659ee7cf6f23d72b54546d029b7f90d04926031a917c0b006569c7f1a134d4d1325641c35832e2a64a", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r10, 0x2283, &(0x7f0000000000)=0x1) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100001c, 0x10010, r10, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) 03:40:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:40:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc048122e, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2645.755325] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2645.755325] program syz-executor.3 not setting count and/or reply_len properly 03:40:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc048122f, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:40:25 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) 03:40:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x18) 03:40:42 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:40:42 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000001f210c000000000000000002000000"], 0x14}}, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) openat(r0, &(0x7f0000000200)='./file1\x00', 0x200, 0x140) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2203, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) fstat(r4, &(0x7f0000000100)) eventfd(0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x2) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0xff7f, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, @out_args}, './file1\x00'}) fcntl$setstatus(r1, 0x4, 0x6400) write(r1, &(0x7f0000001200), 0xffffff45) 03:40:42 executing program 6: ftruncate(0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001f80)=ANY=[@ANYBLOB="3075bb4214000000030101020000000000800000"], 0x14}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0xee00) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r3) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) request_key(&(0x7f00000008c0)='logon\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)='$*$\\^+\x00', 0x0) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='HL\x00', r2) add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x151180) preadv(r5, &(0x7f0000001c40)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/20, 0x14}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/219, 0xdb}], 0x6, 0x10000005, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:40:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481230, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:40:42 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000068000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2662.722990] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2662.722990] program syz-executor.3 not setting count and/or reply_len properly 03:40:42 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x11}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0xb, 0x0, 0x0, @rand_addr, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @loopback, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 03:40:42 executing program 1: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x322f80, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,', @ANYBLOB]) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'macvlan0\x00', {0x2, 0x0, @multicast2}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x495c}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 03:40:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 03:40:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x1000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) openat(r3, &(0x7f0000000000)='./file0\x00', 0x7e1a4eb812d79e93, 0x84) getdents(r0, &(0x7f0000000640)=""/98, 0x62) getdents(r0, &(0x7f0000000380)=""/151, 0x72) 03:40:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/69}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x422201, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) sendfile(r3, r4, &(0x7f0000000240)=0x6, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:40:58 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:40:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000300)=0x1e) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x6) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x2013c1a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000240)={@remote, @remote}, 0xc) 03:40:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481258, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:40:58 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, 0x0) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000500)) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000200)=0x4) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba}) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) io_setup(0x2d47, &(0x7f0000000000)) 03:40:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000440)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8001}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) pidfd_send_signal(r0, 0x30, &(0x7f00000005c0)={0x2f, 0x3ff, 0x70}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) r4 = syz_open_dev$mouse(&(0x7f0000000140), 0x100, 0x400004) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@loopback, 0xe, r3}) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 03:40:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300006c000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2678.789959] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2678.789959] program syz-executor.0 not setting count and/or reply_len properly [ 2678.791719] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2678.791719] program syz-executor.3 not setting count and/or reply_len properly 03:40:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481263, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:40:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000074000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:40:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x0, 0x3ffffffffffa}) 03:40:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="14000400677265746170300000000000000000000800050004000000050053000100"], 0x40}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)=ANY=[@ANYBLOB="891fcc8e13f8c81e77877a4f1b9a5df599e35fb9c6ef30ffa2ef7b5ef4a96b4e9d89bcbc95104ddc2d684d08faca45b9ad6b32bbbf0b129b2f41164913089bc576068244e020c8255cddcce5518c3fab83d61323f7e22c5c7ccb2bb4c1e9076e47f360d5528f0fa36e8c5116c459a0f07f8e915aa0eb4edc7477c16bd166096bc2501658bd850b02a21e65525ff4e9403163c88f12185f85b5e448504b1aec238a76c68c93f01198082c275680ba545e39162d79e5fa492ef6ea9e4c4394d235ea684788a824a3a4148e56668ce7ec6f6d", @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:40:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000140)={{}, 0x0, 0x0, @inherit={0x58, &(0x7f0000001140)=ANY=[@ANYBLOB="010000000000eeef49000002000000000000000200f2ffffffffff0300000000000000200000000000000000000000000000ff0008000000000000ff07000000000000000000000000006b008f000000000000000500000000000000"]}, @subvolid=0xdfef}) [ 2679.027962] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2679.027962] program syz-executor.3 not setting count and/or reply_len properly 03:40:58 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000340)=0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0x3f, 0x80, 0x7, 0x0, 0x5, 0xa003, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x5, @perf_config_ext={0xd9, 0x9}, 0x108, 0xffffffffffffff85, 0x6, 0x0, 0x80, 0x4, 0x7ff, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xa, r2, 0x9) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x4400, 0x20) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r5, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c06, 0x0) 03:40:58 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81009dac}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x5, 0x40, 0x80, 0x0, 0x5, 0x1002, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7427493c, 0x0, @perf_config_ext={0x7b, 0x4}, 0xb428, 0x9, 0x7ff, 0x6, 0x3f, 0x899a, 0x4, 0x0, 0x0, 0x0, 0x1}, r1, 0x4, r0, 0x3) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$getown(r2, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x8, 0x60, 0x2, 0x0, 0x1, 0x20200, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x679d, 0x0, @perf_config_ext={0x18, 0x8}, 0x10, 0x8001, 0xffffffff, 0x5, 0x6, 0x7fffffff, 0x4, 0x0, 0x5, 0x0, 0x401}, r5, 0xb, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r7 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000100)=0x7f) 03:40:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1, &(0x7f0000000200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/153, 0x99}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000400)=""/145, 0x91}], 0x3}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/34, 0x22}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/226, 0xe2}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/72, 0x48}], 0x5, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x3, 0x1, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x7ff) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200100, 0x10) 03:40:59 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) unshare(0x48020200) unshare(0x44020080) r2 = open(0x0, 0x301002, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x44250, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext={0x200007f, 0xffffffffffffffff}, 0x480c0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat2(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x20000, 0x98, 0x8}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000001c0)={0x0, r4, 0x4, 0x100000000, 0x100000000, 0x200}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 2679.181662] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2679.181662] program syz-executor.5 not setting count and/or reply_len properly 03:40:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300007a000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2679.272957] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2679.272957] program syz-executor.3 not setting count and/or reply_len properly 03:41:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup(r0) pidfd_send_signal(r1, 0x3d, &(0x7f0000000040)={0x3a, 0x2, 0x5}, 0x0) r2 = syz_io_uring_setup(0x15c, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000440)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) syz_io_uring_setup(0x7f86, &(0x7f0000000300)={0x0, 0x52a7, 0x0, 0x3, 0x1c, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_setup(0x4bde, &(0x7f0000000580)={0x0, 0x60a2, 0x8, 0x0, 0x5e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000680), &(0x7f0000000640)) syz_io_uring_setup(0x1b6e, &(0x7f00000000c0)={0x0, 0x17f4, 0x1, 0x0, 0xf6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x2, @remote}}}, 0xffffffff) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000700), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 03:41:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481264, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:41:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = syz_io_uring_setup(0x43b9, &(0x7f0000000140)={0x0, 0xbb58, 0x9, 0x2, 0x3a8}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000015, 0x4010, r1, 0x10000000) syz_io_uring_submit(r2, r5, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r3, 0xfb, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f00000003c0)=""/16, 0x10}], 0x2, 0x5}, 0xf75) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYBLOB="37c80781ef05f79d3d837c481756757317bcde27d657b22a6f3e03c649d6ea71a2f98f5064681d3bb8a752dee7527ce6fd48bca71939fd57e4beef9f660a4b2a51bad3"], 0xfdef) fallocate(r4, 0x3, 0x0, 0x8000008000) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) 03:41:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x100000000, 0x0, 0x0, 0x200400, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/137, 0x89) r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0) readlinkat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/72, 0x48) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000180), 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) stat(&(0x7f0000000440)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) execveat(r5, &(0x7f0000000240)='./file1\x00', &(0x7f00000006c0)=[&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='msdos\x00', &(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='msdos\x00', &(0x7f0000000600)='msdos\x00', &(0x7f0000000640)='msdos\x00', &(0x7f0000000680)='msdos\x00'], &(0x7f0000000800)=[&(0x7f0000000700)='^(.#@$+)*\x8d/\x00', 0xfffffffffffffffe, &(0x7f0000000740)='msdos\x00', &(0x7f0000000780)='}[\'$\x00', &(0x7f00000007c0)='\'$^\x00'], 0x100) setresuid(0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x5, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="24ad981cb16a78964c1ebf8b927aff64a2fdfb3c4533d42a93354666050f6820ae3bb4827f147b7df5e744f3df6347d97ef38a520a6ade37cf994b76feaa66a4fd1a4eb12e3a5279ebd4a6", 0x4b}], 0x2000030, &(0x7f0000000840)=ANY=[@ANYBLOB="6e65723e000000f4ffffff020100000009fec9c0a3398e8fa53e493fc68ca159d4ade7dca6a5090552e2f0e81f0b4b8ac8b8aa9f66b2bbc356a3949a97e8be5678695a2e6551898c7abcf50fb82d35f630236bdb921655dfbb496306463adebbce7d16fd860fe98fc1d905c6d33bb3908607071ce7a8d1c5a704b75a1d623bf3d9f68c651bcaff0787a5a03c5c3e0ddd72e7bb7080ff457d256b771e4ce57667f46d5642ed57963dbcf103bd930cd73db6834ac7bb5fa2064107fe36dbcb13ee4ad6a07b1961b1e2d36578499fb5d32348885150aafdac2e58d8f2d51880e350a23d0ea713ee69", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000000,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',obj_type=&,fowner=', @ANYRESDEC=r2, @ANYBLOB=',mask=MAY_EXEC,dont_appraise,fowner>', @ANYRESDEC, @ANYBLOB="f80d6d69c4eda6862803c92b778cf13e00"]) 03:41:17 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:41:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000100008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:41:17 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000003c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r5}}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000180)='./file0\x00', 0x96, 0x26840, 0x12345}, 0x2) r6 = dup3(r1, r0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0xd8b803) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="000000000000000000010000"]) r9 = fcntl$dupfd(r7, 0x0, r8) ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000240)=0x4f) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000379d9d78ad66d279ee05a388126099611efcb73adb785097a18d68c75f33a467c1e798b98d537a47a57a59", @ANYRES32=r6, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$unix(r6, &(0x7f0000000500)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="61a4c147", 0x4}], 0x1}, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) io_submit(r10, 0x1, &(0x7f0000000b00)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000100)='}', 0x1}]) [ 2697.751215] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2697.751215] program syz-executor.0 not setting count and/or reply_len properly [ 2697.752441] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2697.752441] program syz-executor.3 not setting count and/or reply_len properly 03:41:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x7, 0x9, &(0x7f0000001640)=[{&(0x7f0000000140)="01b319078290ad163d06ae959940fe1b60518592acfed3d965adf2fd6910d3c52023124a3a8c55a439f5346c9edba8ed5227d32182c4538acf1aeae6aacf58cb33d63ef9f4aa58b498c9aaf83dc1dbe08f4ff284371d4d33831701d9cf7d05164040274f6d85f9fbc4a6092e3eeae2f7527e9b354f60872cfae6482e3b1f34483f2fea09b913c1ff84fab49cc07feea92b52fef6e75128f7ae01a973817bdc7b0c137713912e", 0xa6, 0x9}, {&(0x7f0000000200)="81f44c59fef8573d31945faf1cd0c1cb34f9ac3f0e7bdbc6bc9ec580b8157497ac230252ca4216a6356a582764b79e2bf59433df56bf26592c09cc9f8b02dc279fadce074e0a70dd426bd4a3f6e5cb30002799297075b3dcee500c687d2614d2c70461644e6ecd1118f4f90c3f97a81d2a4320bc55f675", 0x77, 0x800}, {&(0x7f0000000280)="8365ba186891cdedceb7b8c324cb10a6f54dcf9efa451b397ad0050a4a71063651923dbc0fbcfd844cc7e5205a84915f7232d48eb21e09b25608000000978c4aac90df9b57b61e673de5a185354cfc10292381b5096d0bb1d69e0769c5dd92b5443c6b1a53a4458b484cf285296c2a097c9af212d3b442c5deee8a4f00384f0bca2344fa16de895cfe220a3f5385bf6226ec1b9ae270bf452c7b01453618f35382bcd331d90a1968b9a9fee7122187fd1a2059d46b43675aa64220a34e7511027870b7e7a0325a2123c3a31ec6d0b65f492b3a221dfca0ca4d8a6f6d4534fe003f96", 0xe2, 0x10001}, {&(0x7f0000001740)="cf5d1e34e3e8e826aec99c7f57f35311e56665df418a88a62553f6d9a57ee9e05a68cd1a76ce4cfc093e4a948d58adcbd4d78a89f6226fcee31c30d222e33365a2bbf8ee31ebf893f1d5163f8e326204eccef01dd15d8e93261345ca", 0x5c, 0x5}, {&(0x7f0000000400)="019c1d72b102ada2f0aabde11e96baa1ead8b91776a9882af0cf04606e2153ac87620d107041594c98efe4fce5bb2f21aaece55c29410457eb5f121171a251da07cc11e0648422664b0e56fae6b04981c3a9451e3f993518c020cc5975e88d64541287cafb021be2c32d2ab82ef99caee206ebc44bacd3612ab8829df0224cc1f68ddff37dca5eb4c489a30e2c107e974738539584381b7439d15fac3a8c3e070032f9ecd6fbae29eb3f4b9b0115e5d1b6e007eb3af1f0df42b5c14c7a769c0491d5d5be68fde57a4f05ae4b886c5d44f4b9239d544b13ae27d6f82c51c2b9a2bb891dbb993f58d00cc173f09ce3c9d0cbb5364d5c", 0xf5, 0x800001000}, {&(0x7f0000001a80)="83760d47157e4a021c89f4df0b3c54691398d88502d80cc9937a8fbe6176a54361cb47e02588b670efa4646ba00a6bb9935ae2d9f44bcd7ffe56d1e4b7c91d403fc1801c6e548f0d4b6cd9c6dc19d48ef532dbcddb35e509aa540b7cf679c79637eb4561536cbcb2f64ff6551fa73491ed185e7ddfedd71027ae70c25f4fc6d31e4b9fc601c6f3e79e5c848e291a64802a18246532714205a4a0812bc07743638c792dc9720b80aa91812a524bf65d93dc68938ced7b24200b4ecb058e4e590608d595be5bb68524eaddc7865c6242cf5d0cbdb0ca62f7f0dd50356cda7d4dc23e6028754e0d790448648b802c", 0xed, 0x6}, {&(0x7f0000000580)="421db39e693add24b45cf07bbb3a40ce88f3f77f1cfc4692edcdc6d3480741ca96bed3c33bc5201a984ff3e54ea7606e0c791c3e5766c7b75ea0ddd61f60162709a60dedf15a9bcdc0b123ee93a8e710c3abae4e80953dfa6d256f2f67a9dbba664c60f170a5315b82efcc1daf05c791a4e84a8313376dcfd00161c0a634573ae8f8e2efc9ebae0709458da508303f9b73c952694e3c14a43de55dbf7247b3797461689997f7b8a3fa200aeee764db7de342cfc0f901fdb3b49e5cfb267edffa1baa9411d5aa63b897d0bca49edff62f73d1ec97bd362d0fa7d2ffe1c8642808e76c2d4b7cceebc1694ff46cd2a1c1c7489f06ac26b1828bcdd1873ca3953de40347bbb5eb305c92deabb1dfff212a16907141031d5e3b7a42260df3285d2bea8c6a128d3abde71e4c0543705c73f811cff72cf517e74d8228a9bf343e9b3f5052095fd76e7910b39cbbca1fda764c76391b17b03fcc6267dea015a811faf4f667bd925e970159e63f8b6409657f69fb87c0c2497fd5f943e34debcf3892c8f5bb5d17431fc11973ba944d0d93085e10bc86e9043c8ae13ce7fdc25804bdf4c83f81f562e7e6844cf7d36996dae68185d8219bf4d89ff7eb9de6f6059c104f1ac87e43e5a6cbb7ddbb9fd84dec06c195bc67250baeda3c388e5638ba89182ffcddbe5958f4022be73244264bf5778bfe0113beef051f8974df25e833c5a3ae833a383be975f67d38c21a2e6a9c46bd95672fb60039623da4a85df59afc88161222ccc6aa16b636c17d1bb02786a3ecea4c030f56ef0505c844d5bbb45f00d863b1d962e58971ca267673763e33956c24071c269f162ffa2dd255a7a67fe8808e93edb981ea1cf116c4cf1cd0e251c97cea5e3dae5bde9446b4055ead10a64affba5b83fd0f9fef9293d6333a769901d56fd79b6fa9e7797813986a6c6ea92f68b6ca74da5ed757a2ed0bec5600ebcdb773edcf75f724e0f1726702d03fb5a1e7d239120b9a09fa7ada6903a60a64a1f3031201561c139a88df1c5f7f824440aa8d9f57eff65de1467e1bfb41eac8b4a2c52f27a89409a669cc90039893a9f0ff6069ad55e6bdc38395e913cf97a12091c60af935eb73aa31d61e1654e97c41d940fc418cab9c1ad57564019479f2b789e30e6483e143c5dd937dfd798bafabd3567a4e8c24dac66e1738418e5621c82002b88589970bfd98f8feb019d4707a6f6cc3d211cf73c2d8d88435a6c7aaff1000d5f1d6df2697333dd1c2452e0d3c55e6fcec776b43fce04bf776ba2109b719f6e7509ae55c22173c530b72d5b6e953deceaf0ae8b99a1534ddb845e2bb1f6983ce7ab3a7c03f364302b3fd51f5e23575064c6777500b1f7dd7706850a8b128a8948292e0934dddc7c5393b38d3595d501b5521183686551d2c2af288e154fd3076a39379d799c8434173fffedf90f423bb910e8e18569e3c3526de7f142ec820fb5e85f4dea860698beeb0e0e7bbe81009f09f00a35165d0af6c025aaa11fe416607ef66e7d5a82bad1e8aaca8ee95473d6658860c2bf721b9c8f2f016aeace7146953acad4fa694006c063105a502593ea2fb7f1443bfb326684c609206e29f23c40b740d176a36ce1e322fddbd21ddc680078d15e7144feef849e81af88958f652db7c700b41b506acd5bbfa6d69f259cdda0baf83988bb2923e0741dbf170046dc539e3e66d6bdb83382e6349b3573c4f64cf98d703055fd3954f1a71cc93b2b4a7450c97bf25db84810f9aa86c832b929231d026e0b3fbffb0d439a8c935ec8aff0891ae9aee8798999cb7490bc7a451016bd17986d4309774ebcc9704e1f33089336f0ac8053f06659420fc01013306f88eee5983ca6d32f81581dabffb12600cb39b2b3082302eef469a549f9d9955fe4d482d53c426ee0853614ab4c46ee5fb622c75f78825525c9ce1160e15956a50106f30e490a8d004a751966b0d53738d6f2a4619dec97a51c8a26c46dfe0af6fa88ee28cce37629824e766a02f4149614b52f37a914c6784f893ee4e03a68377b643df237af79503f7831a702178e265e509477c963bcc66af82b147b542163d39fcbbbff1a1824be32d74498948132f8b67cc14d4c7a401a38b6f58c9802a20eb42ece2b79b96a68ac6b39f53d4c577ef53e86233bf6dd566be8d8697e4f673b8a3a7e378a7cd7b54bb21ccda4257f9c2aa07bd89872ee969cd010c0a2e5aa8da3e8e879f76a7560e4549a49684c6e78cdccc204903a86acb6fdf2ada5033794339f1485dad23b6d09a978516402cced6e61171943726ede8e4556e6f567d7414b8cbb22dae04d271cba93709741a5e2fb9cf9a707e58b1eb6339a775fdf27430c09016c84bcbd4fbdaa1aeace7d016567d370e3aecc20e40137caede969ad06e764a15345a3f589ba640d5636cfa2f2406ea7424e7fdc6089c8674aec473627a29c8fba2ff882df9b564516a794e8a4a5066f28d0fd3b129a04e5210094fa044727b1b02cd108d1b9b14c84e1c5ba691f683a2e9647152a0f830a6f821aed12672ec7315c6fd751742b0fd8b05aa2f569f1112befce0fbdf9e6f780829a727919aae0d1c5c1c7d03da9a95bfbfd5a0b471feb46324f7b6f1b6b2ccd02817f7b7b2bc801c48b37da474381417654f3c0af1d4e0d0f546bf6e19a65f2a674298a0506ce5a12cab11b97fe83761a0e0b0e31f80d1f1331498f26dccab6b106ca94d883c9907a2776d32c62335b9d50aa6105cf01346f73a126f50793e4701e51d5e84d1fc3429f515708bc8411dc391fdfce46dd23a87b6db39b2b4566bcdbd0b9f55eb7a1cf5eba5179f0794c72251e28dc043a6c41d5051cf66fc43311ae9f7192ddd3529efa7f79990417d94596b9bf238ec0d676a5109210aea186fd19312ea711afe997f6768d6bb68521edb8694da6eee83afe12cadf7c9896540a242e32c125e02b34047c32853e8f8c11c59328f5dae83d4c15dc00973326415e9e0c1e2a154b650faca827da55605a1969f064b9f14f03f891e1a3c32fad0f80dd908e0b1d44c889d719b7b90e580a182610543a70df66ccf1515dfba8cf365bc48baef72a62048988a22de3c12623031f7f98519a9869db00d43dd12f1fe85ec4e4de002a44dc069ae0aad06d68f7f74d0bb036ff565335b16ddf9c6fa38989a37a6b5c8969a803f5927a6e3e9beca852cecc46fef5bf975a6d70851467c92ba9681a31dd60bf190f14c2b7114a82a01304075513b1821ecfee80b153e1f132e2ada113d4d2168a6c3ecaf61e04e846901b818d4e53ee597456f045c301616923e00bda3699182370f26625c1af4de8f2c8d349204eb1187f2706476a5f80111bc9da40a78b151e54f795c1d3b8180718f71b766433e1ac14c6b7aae4b4f265067c679371229b73cfe355cec3086d5a23d30a8f1c4934868985039ea09eeaa49aaf29ff1b52952894c18ef7a504bb33b5cfd2bed270a443f4f7cd99008e28b4729afab429ac5ce512eb2b715260863d529593fb4e2754307291d24536501f7c20c700c70559692df6dd05de2fd5cd8784b1bc5369a87ce94d74b95728f55ce372f7a740108f7fe71e2d99d2c86ff529c60a6de94301d032ca2619da5af5baa101e8fc4464d704217016e74d4575ce3a52c27be7f0f88a81f81fd9e64b74b1b4274a00d034e0133d13c5d0e0bf1f7386775cbc101492eaed388df8c5fa04b0ec88646ba11c82edbb97f8b00a6f439526dacafd69118e01ba2ee70834635ab5314837ae2d264ddbd82292326e300692aade4423468bbc20be4eaf6fee65170281886694207f378d4902cc1a421e2ca0b037b394f4e7589ebb04a568c22de653593fc3f9e80a477040fc2cd212f96aa782a4d754ec033d94eed6b6ae5b2e51f153dde090b14016a12b5a3a4ad0ad3078358c74f181966c166a7f44c8be9d6631821323a8e6c56e22059b7b588a8d5c087c630b5931d87a6a80cb4c0eb8e2a0ceba1ea41a982e2f186b1364f6774352fcf7acc22feb9ac81cb58f4fb346f0cf0f61b4ce1ef541a90c7014727e0882381d1482e390ffc5f4876daa845af548883b2cfe918e8970c3bbfa01fb450a007ca4d3f08fb98f52ae91ad9a28aa13fc608687c47beec23b28186df8f9ed26395ba1454cc9c4ec7104a7403f12e7f57f917fb68aea2e59ef93df91a0a4c5218da30ff55a5bafc47f305ffc60191374a1ae4dcc7a12044c8ffc66e3a2aa674c8a45fd6c504b4a6e2bfbe38517a3d7b6d7fbdfae0f1c6ad61eaea164d22c8571539bac2536d87fbd0a849d3ab05dc8eb7f87d502d4b6641cd43b84ab3c0e4c7db358a9e751f5e28b5769a2270d59046908a6007b075dbf82de356f7d6bf6cd512978ee215fa2af58bf725f9b0cf5ba3cd752cf1dcebd89253503e60382952de32cbe468423611178adce8249e4ddc9a70def2b900c2a33a18f45eb959b346713553da201376c7ac19b510686201bd5a00fcb2db6ccecc41e5656c011c48175ef99ba9ae94a3053dfcab5aa008dc2e0289afb0fd89f5d9a09dc9441bb060003a714e327f71346fa32fcda81082f997abf264e9f8859c5fccc475cebf7e5202372c836c51887777b15da81b695daaadeda973f7745a3fe7860bbf7c406274a1207bd6a96ade23252e6823f6ce004321aea88662d348bcb08eee497cdaff6caafe71810480cc679bb4b6572e6995094c07a5406a1d9bb5bedfcc2c7ba9e43df7c0dc3b038b5525c49c2c0732436241a41fba31accbc11e063ff6f60ada9c547c6576d5f885b92b04f1f815b6e65585b43bb595e4069b7dc47e6d6cfd42dc54d584703065b8e9b656c1c2bf9c6b6e199ed49b423f7b0b541f4a8e0b3cc29fb169318f2fcb2da78ecd86ee6630c5f6177c866be992c4fa76925a578c725be730bdb7250b80f92bc205d600e5401ec3f50f55c2f4010168891d07b06b8c4830374a37b3bdb12801813454f6ae90a76209f341fd34ece89847649a63de2ffaf8fb7c118264884c41f68daf975534803291f4f81993d212188109c428a51d10d94d963989d985b77802b8f781f44843db90a4f419555ecc21ecab63b47cc669933b7d14ac05172f224f5ba09e8b65cc2421b9643f9935e37c1cd22686161d7f662b98ba5875f400384819d6e740c9b6e079e2335ef42626d0206dd234b16069a6394c8f713f335925f9a579f4088e6d176d9a660fd138162ec5ae84a418b6732bdaefb06c29255476354aab42b404ec91fa5537a6bc21a8187f2121d72dc769ee48f6af514f51d4fb0c8d1d3640b111a9c4ca2d9517c480bbcffd1dcb5f9e99d20a6645a99d151478303637bcc1d3ee4aee914a3465981df7cec31aba62afacf07968ecdda7e3808b9d846046be7f37d627fe06c0336111421b972a79dc70e4e033cb65474c12444688253892d0b6a00a70f9889d72d20b53d8ce7d6d4fb3c795ddc8d17885a6e743999e090ccfe5231441282787a379716f0ad666601accc741c641353be9031406a24b3a4a7ce51dc387d94140bb493cbce8d6081f641bc8238b7854b56275f28e6cd52429631bf573f341f1d0dc5dce0ee3d872a66fb273ab0e2d76a1125c8e3cf361da8bd65c19b4d0faaae219f4e6737d7540a14c8fa1400e5fcb0d9f41dad31d7019378d131ceea284ab443556ec51bf8afb8933828d657e493b5efbd0ae361190bfdc67ca0cb370de0288e9192069977bc542f88372a0b41f2079ff923fabc554b181ea27a5c46cffd3d56f6bddf71ef8dbecb81a666794df2412402c8dd447f19710b9fb34daf0898e5a494e", 0x1000, 0x6}, {&(0x7f0000001580)="19e6d755a8ac454f9bd48d882cc52bfdf716d1891fc505646e3e2ea83302", 0x1e, 0x8}, {&(0x7f00000015c0)="ab8c10f0ba67fcb96ebb949bff5835be5bc80efc1c950f6773e0688dbf6a59c1621bc672c13f75e058fd68a7f659c77f91a9132e97df39cf89a0efccae31f008edf7e70b7f1e6a8476fd0b3cd79564736d10", 0x2e, 0x6}], 0x4001, &(0x7f0000001940)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="2c69e75800", @ANYRESDEC=r0, @ANYBLOB=',permit_directIo,obj_type=+Y\',fowner<', @ANYRESDEC=0xee01, @ANYRES16]) r2 = signalfd(r0, &(0x7f0000001840)={[0x1]}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$rtc(&(0x7f00000018c0), 0xfffffffffffffff9, 0x1) sendfile(r3, 0xffffffffffffffff, &(0x7f0000001900)=0x2000000000000083, 0x0) dup2(r1, r2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001b80)=ANY=[@ANYBLOB="271a77c18decc08bc5bae120d01eb6a89d783cf199075a65113b943c9825c32071a0d9a9ba8d250231310c9e8db702774d233068c3707f375e2f7b9777fe50491fbd206501dcd1ecb9d0ce424b5601c61018dbc43b26e95cd051f1c56d9f7b17baa59cd0e4127d16f230f08616a72bcf9e0b7f0f56373bcef72cf2d4c89396fce42d0fcecdfb5995d6215ab68f14d3e97b542b935ef9d53502e1ecf9c91aa7ce6f78b3d8d82aa41a0c85de3a51abe7c81c26cb6ee13691b6d0f64328e190e9", @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000380)) ioctl$RTC_UIE_ON(r7, 0x7003) write(r1, &(0x7f0000001880)="de485415edba1b5123274467e9843c2e1b9ec9c32b32c2743bd7c1e85dd265bdf6ae52cd3e4036322b6f5dc6", 0x2c) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)) 03:41:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000200008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2697.850991] FAT-fs (loop2): Unrecognized mount option "0x000000000000000318446744073709551615" or missing value 03:41:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481269, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2697.868835] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2697.868835] program syz-executor.2 not setting count and/or reply_len properly [ 2697.900763] FAT-fs (loop2): Unrecognized mount option "0x000000000000000318446744073709551615" or missing value [ 2697.922049] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2697.922049] program syz-executor.3 not setting count and/or reply_len properly [ 2697.926090] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2697.926090] program syz-executor.2 not setting count and/or reply_len properly 03:41:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/255) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file1\x00'}) sendto$unix(r3, &(0x7f0000000340)="ae6047712bb36505c6f3f84639d57ce32b1a8423bb0d4083f1d25f781544bce7b552fdfca8b2a9593d012a1badacc91a213caf67f0b6b9f9e5540293cf724691ea8ef95359bc9d2cf5d4166e8348fef81e51af29767d5781dfa69259e7a6", 0x5e, 0x40000, &(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) fcntl$dupfd(r2, 0x0, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(r2, &(0x7f0000002d00)=ANY=[@ANYRES64], 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40086607, &(0x7f0000000040)={0x80000}) 03:41:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x7e, 0x6a, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x700, 0x1, 0x84}}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x20, 0x200, 0x70bd28, 0x25dfdbfe, {0x11}, [@generic="d69556bb7c9d87b82a4fddb608755c155aead37295adbdf335b6ff4528756bf82e1d24998fcac84fba818d50a84dfdd82fcb0f157b9d2e31b2fdf7a691af5cb92b0a14dc01c4567c09c25a80a1a8080ad263a1789f08b22a3c2031193fb12b230855b8843feec5af45e6f9040b51fe6ea165b1c1977180ea922493f4c7caab4698ededfbc6a00129927a7bf2dc5d2ddc184d61f77e624c6be042b0bbe06e94902db8df2dbf7f3677c6bde8b85302eeb33695e0656e8813dc74f7f65348a6524a0c150e5a99357443cfffb0186b2e638b6c22ebfb831c1cae364af00d1c06ae572b16047d8a323eea79c33cf7d155f2792eff"]}, 0x108}, 0x1, 0x0, 0x0, 0x8010}, 0x841) 03:41:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, @perf_config_ext={0x0, 0x425988bf}, 0x0, 0x4d1, 0x0, 0x5, 0x200, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r3, &(0x7f0000000400)="071e9f7358ec922343d9786f7c2147c81e6890a8016f8a9b07006f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708000000000000000000000000863060675ba05e112fec269f9e221ef2df55182da98efbde8f0630f4a4c28cd1537af3d7bd71df56051c83325a1dd3db5333ac45814da10848829565d6dd0942fa101342b14ed67a482bd86b6dfefc1fb258c24b3703a05f07f5e286fb97531bfb306567427a8f5b6c7738", 0xcc) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r5, &(0x7f0000001600), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r1, 0x2, 0xffffffffffffffff, 0x2, 0x80000}) syz_open_procfs(r2, &(0x7f0000001540)='totmaps\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200), 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 03:41:17 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000300008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:41:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x40}, {0x400}]}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x2, 0xfad, 0x800, 0x6, 0x200, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x20, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r2 = accept(0xffffffffffffffff, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000200)={0x0, 0x6cec, 0xfffffffffffffff8}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000600)={{r1}, 0x0, 0x2, @unused=[0xfffffffffffffff8, 0x4, 0x5], @devid=r3}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d26642c6a9e0c8fd582a5cdce0c177266646e6f3d647d7fff86a517ace6304c8402c6fbf178c8183c22bd92d4e8c440c3fec809edd37d0cc2df4e1ddc3ff7b6784b80fa9b3954254708d4539e3d87e2f31bb1809e028a91fb7a59d0d0ee51a12af38b282a0320f2139f3381bc04c064dcf74e8514a9200af9176ffbd2f1b82902c5793ae2360e795730139fde0d6eac764bf5bdac0875d074e60b1707e1c46fc323a7777f4244d67df82dbbe5dab157ea4cf85c700c17bbb31df3438b000000000000", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6c6f6f73652c66736e616d653d63616368653d6d6d61702c6673636f6e746578743d73797361646d5f752c6f626a5f726f6c653dee3b6f626a5f747970653d63616368653d6c6f6f73652c00"]) syz_io_uring_setup(0x440b, &(0x7f0000000340)={0x0, 0xc17c, 0x10, 0x2, 0x16b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000003c0)) pidfd_getfd(0xffffffffffffffff, r5, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)) [ 2698.074647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.075685] print_req_error: 243 callbacks suppressed [ 2698.075705] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.078778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.079802] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.089647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.090607] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 03:41:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc048126c, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2698.094198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.095163] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.100700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.101952] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.104289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.105576] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.107610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.108779] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.141501] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2698.141501] program syz-executor.3 not setting count and/or reply_len properly [ 2698.161996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.162065] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 2698.162238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.162297] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.168972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.169038] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 2698.169192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.173734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.173931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.179082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.179260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.179663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.179916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.184780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.184978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.185161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.185448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.188158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.188969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.213873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.215214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.216973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.218176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.219502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.222703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.225150] 9pnet: Could not find request transport: &d [ 2698.227639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.228767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.234753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.236111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.243619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.244966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.253609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.254943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.266866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.267905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.274386] 9pnet: Could not find request transport: &d [ 2698.276668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.278453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.289736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.301715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.307679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.308844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.310036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.311184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.315278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.316673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.319867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.335029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.343071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.348806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.355531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.356684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.361587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.364061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.367666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.370153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.371497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.372808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.374095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.375260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.376677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.377983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.379280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.380678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.381971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.383308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.384664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.385800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.387224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.388567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.389863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.391196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.392530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.393774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.395051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.396252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.397705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.398993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.400329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.401798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.403054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.404476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.405775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.406931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.408457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.409773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.411059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.412471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.413780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.415066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.416320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.417539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.418877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.420145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.421467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.422714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.423958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.425203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.426526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.427629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.428974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.430241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.431507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.432762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.434015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.435261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.436596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.437745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.439153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.440965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.442235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.443587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.444861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.446208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.447570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.448697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.450127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.451509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.452767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.454040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.455461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.458538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.459794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.460942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.462678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.463957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.465230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.466626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.467887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.469194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.470554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.471664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.473036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.474481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.475733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.477011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.478469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.479837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.481106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.482309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.483741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.485025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.486488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.487864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.489135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.490564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.491853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.493002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.494517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.495835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.497115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.498519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.499820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.501113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.502519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.503678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.505040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.506494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.507776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.509054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.510475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.511822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.513099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.514306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.515765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.517056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.518444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.519821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.521093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.522514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.523807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.524954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.526476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.527786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.529069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.530497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.531799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.533081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.534495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.535654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.537019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.538463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.539731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.541014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.542444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.543794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.545049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.546256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.547699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.548995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.550310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.551742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.553009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.554442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.555746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.556885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.558426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.561479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.562818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.564105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.565610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.566882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.568218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.569480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.571725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.573650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.575073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.576513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.577901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.579209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.581487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.582626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.584020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.585306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.586693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.587944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.589670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.591027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.592288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.593573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.594952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.596304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.597712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.598954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.600238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.601646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.602895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.604089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.605543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.606804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.608087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.609524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.610817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.612067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.613479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.614630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.615989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.617277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.618661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.619905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.621201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.622591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.623815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.624960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.626449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.627808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.628952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.630152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.632491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.633749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.634905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.636108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.637428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.638568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.639815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.640963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.642688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.643820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.644950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.646108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.647543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.648848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.650000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.651133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.652257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.653600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.655667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.656798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.658169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.659881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.661096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.665744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.668145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.670593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.680859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.681923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.683801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.685186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.686462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.691633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.692810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.693995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.695172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.696237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.701672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.702862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.704039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.705208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.706467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.707621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.708773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.709830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.715658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.716844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.718041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.719217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.720483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.724620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.725805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.726851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.730221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.731462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.732638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.733845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.739669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.740885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.742509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.743560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.746708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.748047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.749239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.754580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.755776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.756961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.758173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.759328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.760708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.762281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.765825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.767141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.768439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.769761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.771052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.772154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.777651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.778936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.780181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.781970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.783201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.784563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.785840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.786941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.793639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.794910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.797311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.798587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.799882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.801128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.807868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.809000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.811043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.812299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.813693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.814922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.816293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.822587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.823834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.825053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.827113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.828430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.829821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.831214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.832555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.833795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.835040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.836134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.837549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.838859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.840097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.841500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.842771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.844023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.845311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.846524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.847831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.849082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.850443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.851739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.852951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.854236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.855546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.856629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.857932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.859192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.860512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.861831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.863070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.864429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.865693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.867752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2698.869517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:41:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x0, 0x0, 0xb75426a62b8a5acf, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(0x0, 0x4) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 03:41:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000400008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:41:33 executing program 6: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r0 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000480)={0x3, 0x0, @auto=[0x2e, 0x3c, 0x3e, 0x3b, 0x37, 0x31, 0x38, 0x40, 0x1b]}, 0x11, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) request_key(&(0x7f00000004c0)='ceph\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000680)='wchan\x00', r1) keyctl$get_security(0x11, 0x0, &(0x7f00000007c0)=""/226, 0xe2) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/242, 0xf2}], 0x1, 0x0, 0x0) request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='keyring\x00', 0x0) keyctl$describe(0x6, r0, &(0x7f0000000580)=""/199, 0xc7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0xfffffdc6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x41, 0x0, 0x3, 0x20, 0x0, 0x3, 0x19004, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10000, 0xb30, 0x0, 0x1, 0x2, 0xffff0001, 0x6, 0x0, 0x8, 0x0, 0x101}, r0, 0x5, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 03:41:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2200, 0x145) openat(r3, &(0x7f0000000140)='./file0\x00', 0x101002, 0x62) getdents(r3, &(0x7f0000000380)=""/78, 0x4e) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x140) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) 03:41:33 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:41:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc048126f, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:41:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) [ 2713.320119] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2713.320119] program syz-executor.3 not setting count and/or reply_len properly [ 2713.331065] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2713.331065] program syz-executor.0 not setting count and/or reply_len properly [ 2713.368486] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2713.368486] program syz-executor.0 not setting count and/or reply_len properly 03:41:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000500008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:41:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x8000fff, 0x0, 0x0, 0x0, 0x80, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x80000001, 0xff, 0x9, 0x40, 0x6b, "e19e07e734015bad3673aaaa6f0b481bd1097b", 0x5b, 0x67f3a274}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000100)={0x1, 0x7ff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x40000000000003a0, &(0x7f0000000080)=[{0x2, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000180)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000200)="cf5f652bde8fc4dc332c10fa13") 03:41:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6c112473696cf1a7, 0x0) ftruncate(r0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x5) sendfile(r1, r0, 0x0, 0xfffb) r2 = syz_io_uring_setup(0x7b0f, &(0x7f0000000040)={0x0, 0xdcb2, 0x10, 0x2, 0x22b}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, @out_args}, './file1\x00'}) 03:41:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481270, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2713.527529] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2713.527529] program syz-executor.3 not setting count and/or reply_len properly 03:41:33 executing program 5: r0 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x10, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0xfffffffb) add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:41:33 executing program 6: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1080, 0x4) ftruncate(0xffffffffffffffff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c4eaf207e5520200accbfcb32753a63036062d6f91adcd05e83b0f89b6f20c6cf3c0a214285d5b2e517b0ac843fcee03514efcd3b6f67a7ffb1ed35e40e8575e55c5d40c757dad93ce6aa2de1d3bff1fc0283cd032ca7eb90d75690983451bef9fc4c3562b3a78d92391e3141"], 0x10) fallocate(r1, 0x3, 0x0, 0x18000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80) r5 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) keyctl$revoke(0x3, r5) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x100000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000003c0)="468a6a37d6369f9b447053d32cce858cbd40a68a32f2a2e84c963e18b15b6caf11a6cfefcb96f275d3017f9dce05ce9ac7acfaa42807140c58c2b7cf8bb9dcb52668bb2e6df58f1d", 0x48, 0x746}], 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5, @ANYRES16=r0]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r6, r4, 0x0, 0x7ffffff9) 03:41:33 executing program 2: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x29, 0x0, "ddc12fbfd643f211459b00", 0x0, 0xffffffff}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000100)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) 03:41:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000600008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:41:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481275, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:41:33 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ff4000/0xc000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) [ 2713.830012] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2713.830012] program syz-executor.3 not setting count and/or reply_len properly 03:41:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd9}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) write(r2, &(0x7f0000000180)="394d655f3befd53b47c64e0dd0e15fce2e70912cf2b6978e71cdb71b59beb345936308d33cbc6ce38b7aa443cd7472bd0df39abc6a6d803ac73f978b1d271d0949252d53819450a11a68c8da85d1e04fbc3c787804e7b40fafd4433d212cbf47f38a3789f1b2fb84b17076d691337d38d39fc4d2e08c3b08594ac68dd2064ce53fe5", 0x82) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x4, 0x3ff, 0x8, 0x7, 0x5, "3e72a08cf238c1c05ddf0ee2919edc499f13b5", 0x3f, 0x4}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x23) 03:41:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x8, 0xfd, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) perf_event_open(&(0x7f0000001480)={0x3, 0x80, 0x80, 0x24, 0x40, 0x3, 0x0, 0x0, 0x0, 0x3cdb6dff6442512e, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4288, 0x2, @perf_bp={&(0x7f0000001440)}, 0x9024, 0x400, 0x2, 0x1, 0xca, 0x5, 0xe50, 0x0, 0x9, 0x0, 0x66}, 0x0, 0xc, 0xffffffffffffffff, 0x5) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001400)={r5, 0x1, 0x6, @local}, 0x10) sendmmsg$inet6(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="bd24b1861ded690daf001bb9a243d6887013221640ce48110c5f4b22cc71779ed331f414453112afd6c11310f99427c886beae448cc3b34d7f986e1fd7e26780430af3bc863ac4d1f90bfe244c59678eac81d3a7dbfa20b101602743afd666b2052c4ca32eda5b6895a3782c1daed467b8da64b92bef7ad28d9cf97a4f1f21ab7d31c578191404c3b6732afc50c242ac26672540cb6b1796ce6ef516c3ceb68e060cd97adf9b9a983b92e5445c73339889d2ed900d5d097c8a5e6639c451d025179b84b0c0c90be12633eb00ce4a0c96b3b875d759792a94b542a473cdefe96cad0ad26fce77e17f72981dcf30a0", 0xee}, {&(0x7f00000002c0)="a8197090171ca7efe84264", 0xb}], 0x2}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @local}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="ca65f530e11914ddb392850b39d820f89520913f6ec2e727ba5a3e3684c803ca29605663d40435ed64fa0c5996f3907f27f51c019874404a192914ceb906a8ac863b629747da27bfd740ad0c05c9071cbadf36926e91d889425c4530f4c54a5235ae327ad54f459d3903387866b1ab6dba0e44c79ecd1d1d9de01a570bc4bb05778a826eba708d61fb0c8bb0ae5d9ed39f0a5d04a607481b6a97ad4af1c0d2f299b5b6bfd9cffd4d64e04f82bf461e173feac5e7a303512839f84403233ae088ad6f8cdb1c590db008bbadd8a92cfab7093c39830744453ea97f17f4b8683eacc1ccc00e4075cf4871ec018e157f45d8", 0xf0}, {&(0x7f0000000580)="6109380829d7e684f06f680de47a7827fcbfb42c0bd804d5706867bb0b6674f41de7eea9b8ebf8c5224c23ecc0160638eb6d8a181b5f15699731216878c36c837bce0c31788c79f1b31353a4695786aa53e83163fe6ecab031bb221357ada1f404da1e6297d3f957eeda4edb137b05020303e630abbb36718a620674201348be2b0efc17cc5be847c53b1aff2a06292e1ba9054e6128919da192d096b41176aecfc821ff3ae3ceb467aace0fa033c64d0cdb0cba4e48b73bdc254d29689511e1d46dad37b627c9997a723a18acb339641407c5aecf5aff715e1827fe96fbd76bdd9d5e0633182efb7944c1c2c825fe53fd51bed34b", 0xf5}, {&(0x7f0000000680)="f69052017a3fa6111d82740e591a5e7d0fec1efcd03737b0b9b3d95e1fc55b9645ba7a4933176678f647cc4ae0c44ddc2fe993fc714d0ae8c20dd15a56c3bd67939a2ea25f5934d5688bf5a823c47885f9af4dc8586106d1e157e54a1caa15c15ff4fe5f3710f4aa80dc189184e5bafc5e43a612debda2d2d61eeefb1529590591c7fa4770340d4571c6eb0eea05f96cf65265d19d816aac933044ea7cc66841deb8cb9a2620222bc790ea50688b3c5f56a73a7d1cf0730df6aaefe1d67b90daba30b1ebca806a59bc9eb395fcab8de72fa16f9f5e16c78cb624b34a70ba6041002c1ea7d3bbf70003e225e24cb074567c23d32c75207e4625", 0xf9}, {&(0x7f0000000780)="0140a4deaad7e39462d28203f9059ad93ee3f8ceebb762449a2ff566eaed80c173396ae13c560b363bbafc1f54bd050297180a5fba809a02f6a3a4419450557d539c7226865be44a05ae878def07520f03d5dab11ffbd8db642b194215dd5a3e1910c6079b79f42599cf5668da195f0f21032f0630c701e2daaf37f1693409246989bb2a64c6ffb17852b2c0b9c4c8a7e70dee7c51b5b3bb5d776cf8b2fbdf076dff6f919e17bbde940904e57aa061bc76f5b71b55325d35f1acca7613f8f3", 0xbf}], 0x4, &(0x7f0000000840)=[@dstopts={{0x50, 0x29, 0x37, {0xf, 0x6, '\x00', [@ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x28, {0x2, 0x8, 0x8, 0x5, [0x100000000, 0x81, 0x2, 0x2]}}, @jumbo, @pad1]}}}], 0x50}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0xae, @mcast1, 0x6}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000008c0)="df05bfe822f51fd4f338e0cbdaac11cad3982436e93cd3e453766eb7e9751f1127196cd55d96896977e17e31fece0f81dff25689958197ec6a471eac6f040184dfaedb9e5a86cfd14272fd521a0b3c36c589ecb459788dd6f4ba75c45dd180101bb4787fd47d9975c0aa1135f940272e39367feae8b766ea13f7c270ff833a75ce8b1e1e6aa47582167f581214924c", 0x8f}, {&(0x7f0000000980)="a402cce6856940ebe014409bdbe53d60ea7e678bb6170f53919445e6574b532c8a78ce792f9ab1c18b9850cd90bb96d61022b00fd66446af507cf97414f43448b0b9654aa0136aaf07b4111d536824df9db8460e9ae0de48b45269d027b1a4955a9911473ea3bc22c9d677b1f9c6f8fe2923e133abaf3c3b64b1033382dd2d939bbc93afdd4e7662d73fe1a238c8ee87e295f0497dd311711e4173e17523f44cfcb985d1ed058c4b", 0xa8}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x158}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c00)="9cbd1603ce09859b13adfe2aef123b7da6ff33473baa977e19cc4db5591c77b5f4945c29e1da0585def3b4b360b74700cb8187a1df80fcf3ebefb0c727858df38be6b796d37b2a0689eef26efaee3dbbcc3e5df51f2d25d20797d3e7d55246d34ce021cb237c1b715528be45eabcaad1a4a9a081e7014962aa0fa12748f26a70914493da45bf487c349bc1a8ad41", 0x8e}, {&(0x7f0000000cc0)="269f6b17ee3af614a620485435738cabd6e71f62aed51749551e46473564a4b2cc200bf0d858c0f4a9c41698067b4175c87a639aec9e924036a169e2db57f96e4b64a71e69771b44891b0b5391f0452fac6bab10f7ff4738aa6973b78c2320728726785cd59f7de89da521a1a7720c7e403f3af06f94161c053e3e1c290b3ace3799fb402ef404029f64153a43a4d0c28c577e9a6734104c92fbe7661aa81005c12418bfb7eb2735eeca19f91008c3fa40967bd52831b658358fc332d68d4104a83920bab219e24d9889d24d42a390249d660f99b488bfe44f", 0xd9}, {&(0x7f0000000dc0)="f81b1c4afddae7c422a63e5389d36d8125215cd5d72b7eaf7a9c06f65aecf09eabcaa952337c5bc9cca2dd6c7e1995b91e60dd2abb9cc35f63ebf37be69326d5a04467df27eb1cee6d612de183b5610a9511e524a4d41c956a60724247fe7ea03dbd12c38539a187df37fd8003906b95e1cb0879c83b3875402187b224666f01ae3ef81ecd2f272a9faad2cd938856b9aeceeb3ff89851f57d6fc1722ef33a9f90022e4a", 0xa4}, {&(0x7f0000000e80)="eccf565229aef35f20513a851e653a4efbdd9e008599314bf54b7810143f6418fef7b72812d6368f48168dacfc074f6e981e35e357d479f233f37ab6b760ac5d6be978506f2e11cdee596529ff1aac0729404e2c904bc278e589c0499058e4a1ba3032a18c31042e931cae10b0a726bbc2c9a78432073c3325c926eddd5c790bffac6d88f6a72113752b9e559009c950d7f3d32bcc5fec1383f7d92c1b87b0bcf1", 0xa1}, {&(0x7f0000000f40)="8a4fcd69781b73904800f30f990adfb7559fc8a01db567b68fc525bc1ddfcd0b81e46f46710aae4e5657607f60d05c6c9941ac3dad3098a52f19335327af36352ed36cbba5753be9ce05ed91d5ffb6f327ecdacf8b1e5380b8600489294d3e646a36458c401ad178f7c510af8d8b629689ca18d53a774ba8d0820d59b873f9e38aa1a584dde591a7bd80eb750ffe3ef0d37b4aed1b6c37ff34227fab43379c1e80fdf51b9aa500f9f6f69b9dcd00ff9455ae6c2df7f99434619816ed361d4451ccf561fcbb8a5982d6e7d67f08ef417f3487196b483c2cb3d1d4c0e673aef0dc72fd2036442d8d212d73d84e333062c6be866b", 0xf3}], 0x5, &(0x7f00000010c0)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x19, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x1000, [0x5, 0x7f]}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x58, {0x0, 0x14, 0xae, 0xc29, [0xffffffffffffe737, 0x1, 0xd23e, 0x1, 0x91, 0x6, 0x0, 0x1, 0x1, 0x6]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x32, 0x6, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x20}, @generic={0x0, 0x29, "b3f90e4c743795ab9dd44ba60b98886c23532943480d8c7e317fb3999be612cad41ecaeafd40564734"}]}}}, @hopopts_2292={{0xb0, 0x29, 0x36, {0x2e, 0x12, '\x00', [@generic={0x7, 0x62, "81d6e829bb20435905a99148b1ecef5429bfe34482dad04437ab81d2f4cf5459ad502c6cbdaad252c3521d666b86ce18c316701756af23517aa41ad14d468e5a8e10a4e866b4ddaa80d8c37c3a7d5d3213ec2cee9907c64381a442dc6b878149398f"}, @generic={0x1f, 0x2e, "7a28d7c65a5d353a294a1187cd18ee062e01e92c725dcf7a251b04c8bbe6deee82373f7d6b9acd53933d4a499a79"}]}}}], 0x218}}], 0x4, 0x20000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='\x00') openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x10) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 03:41:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80800) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2713.963872] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2713.974949] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:41:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000700008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:41:33 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:41:33 executing program 0: creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="04", 0x1, 0x3ff03) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x100) 03:41:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481278, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2714.076216] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2714.076216] program syz-executor.3 not setting count and/or reply_len properly 03:41:48 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) close(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x90) r3 = openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x230001, 0x50, 0xe}, 0x18) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000200)="04f2624876f197ab8a4eebe4f0765eca6da26ee9fe5a2659b3186b69e580eb7852eeab4cf271fc2dc5bdc67d902aa48ba2288bc56034ec040691536c925b8bec553a00a686f1dfa711001f5ccc820cfa2744c82843e30f717f26ad3db5ec0add6167240bc60fe928b95d6963ef3d2ad0d596d30f0aa58519d001c8aac0c06731937bc2c96379874e1fbdb5402e9492ea5031601a55b11c4a510da911f1f433970d8d4edfecc24b83201c6f76619c") copy_file_range(r0, 0x0, r2, 0x0, 0xa1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$VT_DISALLOCATE(r4, 0x5608) 03:41:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB="1c2c604993dff83a5df6969d4c513cc51e3b61aca6f4ce9cd2eba16b", @ANYRES32, @ANYRES32, @ANYBLOB="000000ca23789476b0ac36716d03"]) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x800, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4001c0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, r4, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002480), 0x800, 0x0) ioctl$CDROMREADAUDIO(r6, 0x530e, &(0x7f0000000ac0)={@msf, 0x1, 0x1, &(0x7f0000000a80)=""/1}) dup3(0xffffffffffffffff, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 03:41:48 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:41:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32, @ANYBLOB="14000400677265746170300000000000000000000800050004000000050053000100acd7b8c250c05c85e25a41ec3766dca94d78b532f251c44e2ff2de855a582a2be5bc54da0239f661e4d260a8599726f1b58601058e89aea4ede2e4cce2ae991f3d1836520ea7209f48930bc863188a34ad98bed9"], 0x40}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:41:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x40}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:41:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000800008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:41:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="900325c1d47e05ad4c0c5868f3ea24", @ANYRES16=r2, @ANYBLOB="0906000000000000000030000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r4, 0x609, 0x0, 0x0, {0x27}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r2, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x17}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x20000010) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7b}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48041}, 0x4040000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffd}, 0x1618, 0xa5ea, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x300, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) shmget(0x1, 0x3000, 0x4c731db58d4a8a10, &(0x7f0000ffd000/0x3000)=nil) 03:41:48 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2728.474013] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2728.474013] program syz-executor.3 not setting count and/or reply_len properly 03:41:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000900008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2728.574056] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2728.574056] program syz-executor.3 not setting count and/or reply_len properly 03:42:05 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:42:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x10000, 0x2, 0x1, 0x80, 0x10001}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4ef2ba8de14d140ecfdb6e743ff132c62777bdaf2e337093e39a2991558cdc6a0b6e74fec57d7af2ab053ec4ee11ea16743dfd6fb1e9fe789efd37e2aef6b2a217d5cc8a335f6e293a79cd26da0988af2df29d8f3b587a01a8e564e269830aef2ba80", @ANYRES16=0x0, @ANYBLOB], 0x44}}, 0x20000801) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00i'], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x8b}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xcb6fc2793fef02ab, &(0x7f0000000240)=0x8, 0x4) 03:42:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000001c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x100000a, 0x30, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r4}}, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x1, 0x0, 0x7, 0x3, 0x1}, 0x7ff800) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)) 03:42:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:42:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000a00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000040)=""/229, 0xe5}], 0x2, 0x1, 0xffff) fork() 03:42:05 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffc01}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c07, 0xffffffffffffffff) 03:42:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r0, 0x18, &(0x7f0000000080)) r1 = gettid() r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xf8, 0x0, 0xca, 0x3, 0x0, 0xbae1, 0x40, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x6059, 0x7ff, 0x7, 0x2, 0x6c, 0x80000001, 0xe1ba, 0x0, 0x3f, 0x0, 0x101}, r1, 0x3, 0xffffffffffffffff, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0xe0]}, 0x8) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1, 0xff, 0xd, 0x9, 0x0, 0x0, 0x4000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x40000000000000}, 0xa004, 0x0, 0x2, 0x4, 0x8, 0xd7, 0xd1, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r3, 0x0) [ 2745.396851] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2745.396851] program syz-executor.3 not setting count and/or reply_len properly [ 2745.415434] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2745.415434] program syz-executor.6 not setting count and/or reply_len properly [ 2745.434575] sg_write: data in/out 524252/19 bytes for SCSI command 0x0-- guessing data in; [ 2745.434575] program syz-executor.6 not setting count and/or reply_len properly 03:42:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000d00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x40}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 2745.517862] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2745.517862] program syz-executor.3 not setting count and/or reply_len properly 03:42:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @empty}, 0x2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='macvtap0\x00', 0x1c678625, 0x7f, 0x100}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="050000000600cb002e2f66696c653000"]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0x1762d3b993c9d670, 0x4) 03:42:05 executing program 5: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000300)=0x7c44, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x48, 0x0, "c20793fff7f8f285e8ce109b5e0dabea27dac3d183d1fd9385f838252312793347a6a84bae37690e6519756ed12c1cc7f03750bb0ba16ca2a5967e80f8933d305ecb7a7962b382834c737bccb910125e"}, 0xd8) unshare(0x48020200) 03:42:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x40}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:42:05 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000e00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:05 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2745.664109] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2745.664109] program syz-executor.3 not setting count and/or reply_len properly 03:42:05 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r3, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0), 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r6, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r7, r4, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x7) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000240)="66d26d62981b8a0b9ee6544772be3a451db79b55dfc3abd3b81abe7554ca366c5624bc8eb5ebfe2b811ef987e2f465521bb74922792924dce8d00689f078b9376c16c110c1873e13bb61b3913671a719519a30c543f1c6b955f535356f6c40ca3c12575d", 0x64}, {&(0x7f0000000480)="b9a991f89e4411729f6a436b1895a010a23bd2af663ab92ea21882e5c2fbc6f52d962a3cc03267dbe6c9bee195471442186fca44c39feedbf2d1b0f83568c10012c8", 0x42}, {&(0x7f0000000500)="b1927eecb45d9cab3da026b7f3d5acac09f3a7588a94dac41915970f390805b753275e3f1a878a55b87ab8ebc68175b6f155c7c4e240f0b3d30b9ebee919c4b5be247d6a384f870ef1fb02914d214eb7b75bd1d68ca271a5c395b27d058f0dc46cb8c8230afb065db67260f8c6", 0x6d}, {&(0x7f0000000580)="33dc3ab67b5ca73fe53799901426834f6bf71645e370487a130cc4c210744b0fb248039e43cb79b3aaa5a95c5ad7a466dde865a2b625c9519192627e8812327f9a524594bc0e9f902dc5f4ded17ff039639f6b437e1dc949554b3d3df2f614d966107e4cf8ca64f0e6eabd00eda04889542336f5ce02a578eb184f230238b10e11a35f4268c52224e5e420841716b83951aace7fad6475407c673488fad3a54b8d4c5f8ebbec3a3527fad260fd78c1bb15287c75477c20bca515c3a84b7f8846b6357a8853655df95a02921571c306", 0xcf}, {&(0x7f0000000680)="27569bb90efeaf3fde35b2f50d655f7d2d66ed75e53aea1f90e6045eb74a07f0a116d7425f0c211abe6580e6bb9c1ddfaab3a558cba717eeb310c049d6c3ebc0492df4592c18e0679b43da1b05fec1b678a0746e6330e9b64cc9d3ed852ca4478d4a2c97415c204717f3027346901a224ccc742488626c1c9d0064dc59a43dd597634b58647f54d999acf990f544039a0bc2", 0x92}], 0x5, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r9, r10, 0xffffffffffffffff, r5, r8]}}], 0x28, 0x20004004}, 0x40010) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2745.942376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.942887] print_req_error: 374 callbacks suppressed [ 2745.942898] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.944346] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.945259] buffer_io_error: 246 callbacks suppressed [ 2745.945265] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2745.946546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.947028] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.948055] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.948994] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2745.949760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.950250] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.951821] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.952752] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2745.953533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.954020] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.955106] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.956051] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2745.956823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.957309] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.958269] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2745.959197] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2745.959957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.960569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.961127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.964132] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2745.964837] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2745.965527] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2745.987230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.987784] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2745.990465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.990985] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2745.992630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.993484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.994284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.994990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.995950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2745.996799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:42:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfff, 0x0, 0x100, 0x9, 0x0, "ddc19a9981b39ca4e5a700000000760b000500", 0x4, 0x40000000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x6c6ad88e, 0x6, 0x80, 0x5, 0x0, "bbc319034c813c7558259c5340d8816a5a85db", 0x100, 0xf0}) 03:42:20 executing program 5: r0 = syz_io_uring_setup(0x25, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x140c, &(0x7f0000000140)={0x0, 0x4ec5, 0x20, 0x2, 0x269, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 03:42:20 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, "d0fb52141b8fa8ec6fb9dc425fe4b66f729bf8"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 03:42:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000040)=""/229, 0xe5}], 0x2, 0x1, 0xffff) fork() 03:42:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000003e00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:42:20 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:42:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6, 0x4, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x40}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 2760.686754] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2760.686754] program syz-executor.3 not setting count and/or reply_len properly 03:42:20 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x19, 0x2}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xc2}, 0x4f) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x9, 0x7, 0x9}) setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:apt_var_lib_t:s0\x00', 0x23, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x21, 0xc21, 0x0, 0x0, {0x2, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) fallocate(r4, 0x18, 0x7, 0xffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x21, 0xc21, 0x0, 0x0, {0x2, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x40010, r3, 0x10000000) close(r4) 03:42:20 executing program 1: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) pkey_mprotect(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000009, 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'virt_wifi0\x00', 0x1ff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) openat(r1, &(0x7f0000000240)='./file0\x00', 0x20000, 0x86) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 03:42:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:42:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000004000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000ff020000000000000000000000000001fc00000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/308], 0x17c}}, 0x0) [ 2760.789295] Module has invalid ELF structures 03:42:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) 03:42:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x101000, 0x28, 0x18}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, &(0x7f0000000240), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10041, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) lseek(r1, 0x0, 0x2) timerfd_create(0x0, 0x80800) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 2760.844712] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2760.844712] program syz-executor.3 not setting count and/or reply_len properly 03:42:20 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x210200, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401}], 0x2000602, &(0x7f0000000740)=ANY=[]) 03:42:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xa, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2761.333547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.334102] print_req_error: 22 callbacks suppressed [ 2761.334112] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.335465] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.336306] buffer_io_error: 6 callbacks suppressed [ 2761.336729] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2761.339436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.339880] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.340905] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.341774] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2761.342728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.343165] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.344103] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.344970] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2761.346004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.346534] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.347428] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.348350] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2761.349029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.349491] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.350388] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2761.350395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.350466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.352057] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2761.352520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2761.353317] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2761.355735] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2761.356876] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:42:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x100000, &(0x7f0000000080)=ANY=[@ANYRES64]) creat(&(0x7f0000000100)='./file0/file0\x00', 0x40) 03:42:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x30, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:42:37 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:42:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000040)=""/229, 0xe5}], 0x2, 0x1, 0xffff) fork() 03:42:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x2, 0x8001, 0x1, 0xffff, 0xb, "c5eb5401ee0055b498a2ed3a8d941a1578fb84"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12ddfd643f211450200", 0xffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:42:37 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) 03:42:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001540)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100041, &(0x7f0000001c40)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="9b89c89b9ef8a7a444ca97215b11d90817c9a2aa97effed26ed95452301228caaad9f20847e00c23686a2a31f1e79ef40cb7da4ac3f9fd4079e3481c1592e7f4d5c3db52f7c999a51982ed8631bdebe0832952f4a0fba15cfa80973152158aa27cad05a8ed7e2309f00d44fc28869268955458b3ef9c"]) readv(r0, &(0x7f0000001800)=[{&(0x7f0000001640)=""/88, 0x58}, {&(0x7f00000015c0)=""/23, 0x17}, {&(0x7f00000016c0)=""/93, 0x5d}, {&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f00000017c0)=""/19, 0x13}], 0x5) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0x3b9e, 0x7fff, {0x22, 0x3c72, 0x2, 0x10000}, [0x10001, 0x20, 0x6, 0x7fff]}}, @subvolid=0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000580)={{}, 0x0, 0x8, @inherit={0x68, &(0x7f0000001880)={0x0, 0x4, 0x282, 0x1000, {0x0, 0x9, 0x81, 0x2, 0x4}, [0x7b, 0x9, 0x7, 0x4]}}, @subvolid=0x7ff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001b00)={0x0, 0xfffffffffffffffc, 0xbd, 0x1, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, &(0x7f0000001940)="f6758681200bbd67df388cc81eb02a230ead38f365f0beaff22171790c4b02bff6613adc5812e2375149b62f2b27d2ebc4493403740b1477b9c281941eeaa334e0df645b38473638961eaefa297e2b7f3d077679a56ea216c33307cf554eb0b3234910ddec54b7c0be02eaebdce042da9d63729cd62299f869291a27c815883cf1a9dc83426f9c30c3034b7b5e0f0c936b4e187b1518e56cd2d1c8ce317ca97432289094e9a2318c21c561142462b16e743f27c664bf3843fdf325d7f8", &(0x7f0000001a00)=""/175, 0x4, 0x4, 0x0, &(0x7f0000001ac0)}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000001500)) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) 03:42:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000004800008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2777.419047] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2777.419047] program syz-executor.3 not setting count and/or reply_len properly 03:42:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3, 0x207e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xf7, 0xf7, 0x3, 0x1, 0x0, 0x0, 0x42000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x400}, 0x40, 0xff, 0x4, 0x2, 0x8, 0xffff, 0x5, 0x0, 0x1, 0x0, 0x3ff}, r1, 0x3, r0, 0x9) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 03:42:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000500)={0x1, 0x1, 0x7, 0x1f, 0xe1, &(0x7f0000000100)}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) dup(r4) 03:42:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x48, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:42:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000004c00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:37 executing program 5: flock(0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7ffc0000}]}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f00000000c0)={'erspan0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x2200, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xe4, 0x7, @buffer={0x0, 0xec, &(0x7f00000004c0)=""/236}, &(0x7f00000005c0)="36e055e8175944af4131bc3cb3f3a7c64fe2688296e300000219fbbf41c39dbfa871a87063351e0dede1779d8d0a94d76f62a67a321f2dcb87621467496397aa4f4e014b3696f43d1fe6c8e173cc778da905f19ad4f179eee6b907808288d02ee90a282cc588c21e17cfa6b9217dbc5edf27381436e89331871e4f67fd8131bf7c24c24b755dadaea787f58a1c9a382c8aebef55f0c7691240c954d41b18a2970e8010982e50568316a5c14a1fe47d4ce4c1ee08e5f13621b0d3ca850bc5054af4fc5bca915a2fb1b01a5eb70fbfe626368b5d3cb63284dd724444c27ed4ddf1d7ddc739", &(0x7f00000006c0)=""/56, 0x3ff, 0x10000, 0x2, &(0x7f0000000700)}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40405}, 0x43) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x70bd29, 0x0, {{}, {}, {0x14, 0x18, {0x90b, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040804}, 0x80) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) bind$802154_raw(r4, &(0x7f00000007c0)={0x24, @none={0x0, 0x1}}, 0x14) eventfd(0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x12484a2, &(0x7f0000000140)={[{@noacl}]}) 03:42:37 executing program 6: ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x7fff) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000080)={0x0, 0x3}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f00000000c0), 0x6e, &(0x7f0000002540)=[{&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/97, 0x61}, {&(0x7f0000001300)=""/163, 0xa3}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/89, 0x59}, {&(0x7f0000002440)=""/198, 0xc6}], 0xa, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xf8}, 0x10080) r8 = dup2(r0, r6) r9 = syz_open_dev$hidraw(&(0x7f0000002740), 0x3, 0x0) dup2(r9, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002780)={0x0, 0x20, 0x40, 0x1}) copy_file_range(r8, &(0x7f0000002b80)=0x9, r5, &(0x7f0000002bc0)=0xff8, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000002c00)={r10, 0x4, 0xffffffff, 0x1}) r11 = openat$random(0xffffffffffffff9c, &(0x7f0000003000), 0x200000, 0x0) preadv(r11, &(0x7f0000004200)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/39, 0x27}, {&(0x7f0000004080)=""/197, 0xc5}, {&(0x7f0000004180)=""/73, 0x49}], 0x4, 0x3f, 0x7) r12 = open$dir(&(0x7f0000004240)='./file0\x00', 0x0, 0xc0) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f0000004280)) sendmsg$nl_generic(r1, &(0x7f0000004780)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004740)={&(0x7f0000004300)={0x424, 0x13, 0x10, 0x70bd28, 0x25dfdbfc, {0x11}, [@nested={0x112, 0x61, 0x0, 0x1, [@typed={0x4, 0x7c}, @generic="1f49c69f3158a98da724f40373af1e4631a9d1d12966f79d456f635ae9e54b3eb544f994246d74b728a27e09f0957b71bc762c10aaa165ced80018b76d97e015051155b0978d31518f49aab98b07824ad113c97211bed89e4c48ce4377a3121d4ab81eeb0be95341f3ed03753721f836cdc5bdc54ff76940cd680e336ff99767201de02320f918a33931c2b34bdb93b616d93a7f80d92af020c2822099179aedcfa37c61bf5a65cad544ff5a16b3041ecd2d14b7002dd1a781e18eae985cb6dac3c3d82c48e1e60bed3bddeef830e4a9099eaafa70531b8e5bcf43d59f829c658e0dae1d61568b777be48b6d0e5da761cf", @generic="9f5a7aa5646ac2855c5b835e66bb49d56e92bf94a8fe4c3d27"]}, @nested={0x162, 0x84, 0x0, 0x1, [@generic="397f6c0e6b9085bff91aa69be4a13b9a8b196767ed0e87a7666d1ccdca2e500631613dc753eeaebcbbedfd5e1b4fb2bfead83746a77751ea9f2b099baea3003d4a084eb91d370283dff448f6356be2b008990e0ca1514e057e96079ede65f8a350594e4230b97bc14a9ee498728e6292af29817685f18f5267acc7a9ea93b0f66d86e8e0b9c25c3ff17e0e13262a2f137eeff1cdd3d05dff4c1d79a7dd287f5cd404cd7363b0f844c5f7cc56efaeb4168527cdacd5d8ffaeefa62587374d9a78eb17eacfd125e6824ed88aafb910", @generic="82f61ab671a8916ff3d8f0199a96fdedf22d52fb29996588e25727cf4acc44aac1ee0bb25fed795e3edca79208dc2b9a3b61c8373180707c1690f577120b3506fa5ad827b1d9e7b531af6f70d823c42ef535397b6d903eef910495797980d6fed8934b9b2a0a5d6233fc02930936cecfdbf7800d47a9aa942dd32e90b216af5c9139f78aee61687b7d39b85a8f55c7fb", @generic]}, @nested={0xfc, 0x3, 0x0, 0x1, [@generic="c46e40641c271877e4b129fbf973c52f92cc36891d84", @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@loopback}, @generic="178fcb56e269a1d3259c3aaaecbfdc47528d1166ab535fa1550ad2", @generic="ffefae06c53465221eadaeed48ea8cf8f8f9c692e0574aeb99750ba22dc30a51a5c0ac3ff94c32da", @generic="7d529997173003f739c91def74b04a010cc05b67b329c637306339b57ee328fb8484b1e3dea7ce606a2b188580010c104444ff7331a2d48b0b7260394cb18ed16b886787441330732dac94fbdde7806b90c46523950cebb995f56f57ffd5dc5a5d3f4e9470999c1df7dbfa4ed130f6a19cde782c188af9bc5816f0ac2a804f2fc9a0a48810ae5a8321181e"]}, @generic="ae3c618ddddc2a960489d86ded88f05c896ab31cfd200a2477923463e9e5d1aa0cd70a1e2029488e55ebb454e169bfc7717533acb0b40f608600c2c41aa96d34a9dcfb3bc45bdd5a2befcca4f6affba34c024cace9498e929e37c2c7b5ced72f63cddc", @typed={0x8, 0x82, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x3c, 0x0, 0x0, @fd=r4}]}, 0x424}, 0x1, 0x0, 0x0, 0x10}, 0x4000816) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000047c0)={0x0, 0x4, 0x3, 0x2634, r7}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000004800)) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000004840)) 03:42:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000040)=""/229, 0xe5}], 0x2, 0x1, 0xffff) fork() 03:42:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000006800008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000140)="0200000003000000041d", 0xa, 0x800}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) openat(r2, &(0x7f00000001c0)='./file0/file0\x00', 0x400000, 0x100) chdir(&(0x7f0000000100)='./file0\x00') [ 2777.613889] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2777.613889] program syz-executor.3 not setting count and/or reply_len properly [ 2777.717558] kauditd_printk_skb: 13 callbacks suppressed [ 2777.717577] audit: type=1326 audit(1713930157.569:231): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983eba7b19 code=0x7ffc0000 [ 2777.731427] audit: type=1326 audit(1713930157.583:232): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f983eba7b19 code=0x7ffc0000 [ 2777.733700] audit: type=1326 audit(1713930157.584:233): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f983eba7ad7 code=0x7ffc0000 [ 2777.734125] audit: type=1326 audit(1713930157.586:234): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f983eb5aab7 code=0x7ffc0000 [ 2777.734856] audit: type=1326 audit(1713930157.586:235): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f983eb5aab7 code=0x7ffc0000 03:42:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000006c00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2777.742455] audit: type=1326 audit(1713930157.594:236): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f983eb5aab7 code=0x7ffc0000 [ 2777.742854] audit: type=1326 audit(1713930157.595:237): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f983eb5aab7 code=0x7ffc0000 [ 2777.743245] audit: type=1326 audit(1713930157.595:238): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f983eb5aab7 code=0x7ffc0000 [ 2777.744780] audit: type=1326 audit(1713930157.597:239): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983eb5aa04 code=0x7ffc0000 [ 2777.746898] audit: type=1326 audit(1713930157.599:240): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14633 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f983eba78d7 code=0x7ffc0000 [ 2777.783205] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2777.783205] program syz-executor.3 not setting count and/or reply_len properly [ 2777.921505] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2777.921505] program syz-executor.3 not setting count and/or reply_len properly 03:42:37 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:42:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2001) r0 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414bb, {0x2, 0x0, @broadcast}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) 03:42:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f0070687931000000000500000000"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYBLOB="250300000000000000000100000008000100000000000c0099000000000000000000"], 0x28}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 2778.461501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.462380] print_req_error: 6 callbacks suppressed [ 2778.462400] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.464715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.465532] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.467144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.467957] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.469564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.470379] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.471967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.472780] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.474378] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.475919] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2778.477035] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.478553] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2778.479668] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.481172] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2778.482299] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.483826] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2778.484945] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2778.486452] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2778.487674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.488589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.489490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.496377] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2778.497521] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2778.498647] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2778.538180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.539084] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2778.540459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.541305] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2778.542593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.543590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.544587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.545572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.546570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2778.547566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2792.612641] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2792.612641] program syz-executor.3 not setting count and/or reply_len properly 03:42:52 executing program 6: r0 = dup(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x10800}, 0x11) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="051b8109"]) recvmsg$unix(r0, &(0x7f0000001980)={&(0x7f0000001580), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001600)=""/40, 0x28}, {&(0x7f0000001640)=""/229, 0xe5}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/144, 0x90}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9d4263bb6d66be9aaf795c00000000140000000000000001", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32], 0xa0}, 0x10082) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r4, @in_args={0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001ec0)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001d80)={{{@in=@empty, @in=@empty, 0x4e22, 0x800, 0x4e22, 0x5, 0xa, 0x80, 0x0, 0x3b, 0x0, r6}, {0x9, 0x101, 0x7, 0x10000, 0x20, 0x2, 0x1, 0x6}, {0x9, 0x0, 0x2, 0x2}, 0x8, 0x6e6bc0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x0, 0x3, 0x7f, 0x2, 0x83, 0x4}}, 0xe8) statx(r0, &(0x7f00000019c0)='./file0\x00', 0x0, 0x4, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', &(0x7f0000002180), 0x400) stat(&(0x7f0000001940)='./file0\x00', &(0x7f0000002200)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b00)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001c00)=0xe8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x2, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000340)="73429e4c3f0421fa4ccf55504961061324ee05370d0f7603d8484b81131282ae87dab34631f2d2f1290b69936b9038c78c66defec6ea9a7cc0c0b6dd8663629e827cd8359e499fd23d94", 0x4a, 0xffffffff}, {&(0x7f0000000480)="61d454a0405731a9ac850d6c0b69101e1a33069b9e470d12ef994d49677376bbf76d799ff8e93def4e22d49626dcb6c4aa2372fb7c1ad740d1d435da98abb44ba491d3a0ddcc4e248e825e6fce52e54e7372212fc822dac30f9208ad0bd3f9a3c2a2466fc62372a9a219c43521a331f1540ccadd23ae5d3555dd3994bbfbb42ad4ef72bb6590da9ee383e1661fc8372f0590f812384586f862591a82c6d84ef34451460a87cd116d86533d9d94ae7c0c652bab625700ab6da841364d8332ddd7089c07347b842f5cedc5cf53", 0xcc, 0x100000000}, {&(0x7f0000000580)="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", 0x1000}], 0x1000, &(0x7f0000001c40)={[{@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_win95}], [{@appraise_type}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r7}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ip_vti0\x00'}}, {@obj_role={'obj_role', 0x3d, 'netdevsim0\x00'}}, {@euid_gt={'euid>', r9}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 03:42:52 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4a, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:42:52 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:42:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x0, 0x10001, 0x9, 0x2, 0x5, "dd8642e06730a3d6bb2127db6a4802841a77a8", 0x9e, 0x3f}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:42:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000040)=""/229, 0xe5}], 0x2, 0x1, 0xffff) 03:42:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext, 0x408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[], 0x10) fallocate(r0, 0x3, 0x0, 0x30000000000) pipe2(&(0x7f0000000000), 0x0) 03:42:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) capset(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001f40)={0x400, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) r1 = fork() capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x6, 0x2, 0x472, 0x8, 0x3, 0x5}) 03:42:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000007400008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:52 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000007a00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000007400008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:42:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x5, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0xa, 0xd9) read(r2, &(0x7f00000000c0)=""/212, 0xd4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 2792.795283] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2792.795283] program syz-executor.3 not setting count and/or reply_len properly [ 2792.839223] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2792.839223] program syz-executor.6 not setting count and/or reply_len properly [ 2793.109552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.110471] print_req_error: 22 callbacks suppressed [ 2793.110492] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.113575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.114416] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.116028] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.116072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.117808] buffer_io_error: 6 callbacks suppressed [ 2793.117821] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2793.118605] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.122029] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.122046] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2793.124686] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2793.125947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.126796] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.128380] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.128435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.130098] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2793.132010] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.133597] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.133649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.135298] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2793.136090] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2793.138810] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2793.138883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.140914] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2793.140975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2793.143035] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:43:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x8, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:43:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@local, 0x78, r3}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf25090000000a000900bbbbbbbbbbbb0000080031380955f8a7b6024d49ef000100000008003c00010183a3cf5ee914", @ANYRES32=r3, @ANYBLOB="08003c00000000000500350000000000050033000200000005003500000000000800320000500000"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x90) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pidfd_open(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x9bbb) [ 2809.282077] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2809.282077] program syz-executor.3 not setting count and/or reply_len properly [ 2809.299287] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:43:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) 03:43:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300fffffff500008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4c, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:43:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) lseek(r0, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) close(r3) unshare(0x48020200) 03:43:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x30, 0x10, 0x10, 0x70bd2c, 0x0, {0xb}, [@typed={0x14, 0x62, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @typed={0x6, 0x56, 0x0, 0x0, @str='}\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)=ANY=[@ANYBLOB="11e054d407e20a5e0235d3554c4ce4d986e7f637a0893b827da16fb8c880f65a9bf9cd9bbde97ca1c7d5fba5c1c96a8f6aa5c425d914766333a6d5e69d6ffb50c17a5de096da302238528180a6", @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 03:43:09 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:43:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:43:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300ffffefff00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x68, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2809.423957] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2809.423957] program syz-executor.3 not setting count and/or reply_len properly [ 2809.444044] cgroup: fork rejected by pids controller in /syz1 [ 2809.453407] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:43:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300ffefffff00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4588, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="3081", 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="3ee04ad10b49d43760b1632bc15b19b1dfc25eb8ebb7b1ec6961e0eaf8f8d16e5606ce6528827c086b28845e2afcfc45996270b19e04f50dca7b3476c708e836b5ac998f961a840ee96523dc341330e8423d9389dd346ae17b59e85c1cbd55adcaa500a5d0af3820e32f849be67c637bc5b89c6247524261c2a5cb8c052ad17d0cf6e595665c1f031afed8d9c03638efb53d66d0e64f0fbeabbe07ec", 0x9c}, {&(0x7f0000000240)="923e3f51ff2795a698ca9d83010691aa7698722122f076b19c84db90cce7b852faea35cd2983751e355ae5052c28755b2f36e0927ba5054ea3bac6bf5cbe2aa1ed1d4ff1f3412e8484adc266f2e19fd7296d15ddfedb48e77472e2e2c69b0fb39c36f3f0e339d40a251fd9ce4e30c634be0c16c25f2fc123251f0694766d8a80b24b5f0fcffe12f3776346b66a3ec9e25317e0234370f21cdd8994336e730de6ab40c8169c6a5c930b1e6b56e42b3ce0cf28f92c78066b303eadd59cd9ba625525809b5c4cce5fa915c1186d460b8f91b333bd9d0179f87b1fd6ccf17df4bf060392486a355211ca3f8784f7f334aff9e69a1e697b43", 0xf6}], 0x3, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xb8}}, {{&(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000480)="e863b213d464d4f848169a3cc5b7603bffa8e20ed96768fabec6b399cd70a67d406e843ed289255546fc27d8de1ee79ee43eae91bf5c424afe56aed1cc3c5aacf5917c1157dec3f72a3995050806cc359fa79bd1dbe872d48c7f0c03a8505cd8385beb6e7d43f5cbf6dbe0e343f3358c77e7bcc09774bf8f284f1e84f238e7f4aad4d88c6265f1c4b966f1c7d50381cc5c557b7e50133afb7e67b507ea177431f9b2bb2e692d17e54941554754df7ddf62ed8d499b72683b6c3e9a85b75c428b8589980a94b3f473", 0xc8}, {&(0x7f0000000580)="341c84d58412a2c4b37093766dda88f60c600147fc67ea2082f6139a1a6b648169e278e3e55ab3b3accc7fd333884f669e7acdc579adcafb152ed31b963b060e9edfde83ad6ab895a8511247afa81d19d23436df717e667dc7f8fc43b4f78c809b298f23e8ea39d05c7ea63151429b43ea99f2f66dd7", 0x76}, {&(0x7f0000000600)}, {&(0x7f0000000640)="74f243ef95c772ccb5e0b51fcaba2cb44a25eccb164af38e8d5c5cac51514c274f6253c983fad511a99e56e66450dfdd3591814da57b2a8b7c6780809201a059abe451e74e5007058a15a3ae35ae7b112d3c891cd4c04fdfca3aba17", 0x5c}, {&(0x7f00000006c0)="730f4d2db6925b56557b5c8e43c885d836c5511993cd6b025392a64442f080e6999395b5346c1fc3ce355e7d8b3d21f90b681c507bbe890ab89971a7da0ac832e072c44fc89e1440cc21d5cf659d14dd1afa97119a389dd5643e3aaa068ed64344259a7e79669497133cc4f6676a4477c09f5c018dad6f25437bb1a743536818b17b787ab7e320b8a0c0ba15ec434b08309b258d4839d32ce236a7755f28241f6fa3f9aeebff77af", 0xa8}, {&(0x7f0000000780)="0afbedb3cf7db482b1e35ed9a23bb41893c9f42f8e25fd60bf2991ceaa2e8d353e6b85b8ba46e51515ed96f4a05351182395b9ee76352332b9592bc362c86fbb151240ee44eb58029322b38baab3fa1b91b4051371723b67d18e25db8c847f71d68cf30d2b7cff8f59315fe3b72e8ed647fdc10c7aa32da032fdd6c0a18fca796305d9653f75c1e2b33927a507b7790a3709eea213bec5ce0e1851c20ad714efec252a1d022d5fd97a57b2b58872c5d491fecfca2cc2633bed58ef181ab5c62cc8f3a1003e7eb163340431c3d62399c65d01fb1e39ea1f1bd336aa3245a9551d755ab4e7de858b036e8717e468b508aada98e256e5229cff", 0xf8}], 0x6, &(0x7f0000001000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xd8, 0x3, 0x6, [{@empty, 0x81}, {@local}, {@multicast1, 0x12000}, {@local, 0x40b6}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0xff}, {@local, 0x80000000}, {@multicast1, 0xbe}]}, @end]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x7, "6783a2cee7"}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x9, [{@loopback, 0x7fffffff}, {@multicast1, 0x1}, {@loopback, 0x200}]}, @end, @noop]}}}], 0xc8}}, {{&(0x7f00000009c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000a00)="b6b5cec4c048f9b4fdffb7489061e92c89de7e3fc926fd49505d59cc1c7072f653ebd52d65180f18add8d201adb79b7389aea39b72060d2166379eb0b018be922e3db9a8921300e3ce2815f887f3c386593ff7d90b5eb30712f0214f963bea9cf6affaa05f3a7671323acee0ea62738f51634f9d2b1960df2177e4eca05bf0580fcf63c708b97d29cc1f1269c175e10a04a034b28286c201199da35b5f5ffe3c0208a29c2bf241ed620c35c3ee5380f5bcc7d491baab4d8eba47e9ba2b83e535312d20ba10d991a8cde063d78748ad1920f6b54f55747e6206d793835d5fc289b570372bdec702f7e04ba53bb15bc34a575b", 0xf2}, {&(0x7f0000000b00)="4a48864422b058ce63dce33d98c6323d89a02faf8297ca03caec36e4e1dc4b40b16a059f241329e3515376b80665a897458be3de3b56565747071d4cb1a049f5ae489fc5a3ae4f05b5515e94fd4f0c6cf7ca8c51e5f50da77dcc8619fb2d665857ead92e0a8942cfdc9a17450640159cf3612586c078879d56e251984f92414f48f2e79d610dbb10ec7ff5a5", 0x8c}, {&(0x7f0000001200)="a4ba2bb035d1b10e57020fa51970ecaf4bbe8e8eb270682bf0bd2c42d5caab35e11f0437844e271c391b4330fc2fe5e94f56657ea444051eca066da9f4cf00420ee3d84e9cb4fde5670867e66918dc9167b75bed9a87a2286ab8bef160418258ada8442d1866a3df1ceef6e7ce6a69ece01d686ef5a37af5a09688108a061e1572ce99afae7722f4783e7c505b48e229dbd3ed97ed318f57a779f7187d31f382c3e6c97db77519c7a551ef588f181aac1190de05ec9cf307b22c4a41073463cd0db6106bb2593523446f52d19a6631489b596bc9f80c5aad95a570823be8c0edae520ce7d9e55219a4b90823f6c4450a3c9a3db183df8c94f80f4c363c6e7df8595f619fbf7063bb72ac6009a4483eb8c5b2db91e8d382622716953de3d3197ec34ba25db6c869f01eb4438681cda4b69394261727a59dbd5823b739e0f7cf4424c5c898b87324ef813e96bf0d446d2b5b6fc2fac580a19d41576077b6ccdfe54ae5e1280dacf1649d4bc2c29195f404de70aa5dcbbbc1023f1a2af9ef700694df220bca7b2a666948218c45d85e97d9c1bf5d53f798324e785e74ad7e7c03f3036c7bbb775108179f5493170f338148f74249cf554bf9772668dba4c8c743f8731388be5192d7a4637676a19d5abcef18553d548d63b1048620528f6960986fd23b881a4c8fd65e7882dc55641834009e1958ac0ced0f366bf730c02a5b6cdc50c87d1bedd935e3db002d99e8ddb772a6a2ff26426dbf6870c40af406f455aab08f3e2d77dde029dff39caf39103971d6ad25d067400a39ccb9cc898cc2e240aaf5b9acd7a02d3b133a74508972391f8d16ad66fac62e35dc01333b62530312e6861ff7cb768ff8a050fc7ae7a27c2ba3d973939976d7e122ca8d988d3dcbd523e3a82eacf2d7fa1e824b2728d55a55eb44a0b00e8049316fb6ca8114d8a1a5bc9a0ef908f47d9957df45ddc55a0d6baa5f5a15421a7973cf5e45f459918b2ff13b706135f82a15651d4faa0e31b42416db827d62cc87783bec8601a8bb702ebeb105ebccb0572a430271aed84c8a7343bfd3764bdbe77ed76f9b5a87579af8e767960f2125b4b4885a4fc0d945077d6d2ece6ab7e0e0e810254235cd4babc529b60db180789103d8c295a45b383cf0041b593739d18b76cf4f76d797f9fde7c4e294ffb6ba59aff3d5dcc24dd2cd1fdbe7a63c8c6334254a6071b1be076a937feeb66cd65d81a1e13c0ad784a00bc8c4c11808cb4ed8b70e358edf4d00213f7746362a5b0366f69665500f6531f45f6a4afad0d34ab02f1ed6bc2b1ff8197f1bb3dc58233370ca6f0576d8c58104fd147f94d37aa992bef0b757fbaaa53f57508b8767c2337e17be9221d78a4d96699f9b993b1df7fb6a308f163f1a15c5934621a6fea7c935d099c7315e603f9532ee1b04fc83fefecf88b7b0ef2adc3f8de0be7a4bc753f387d36b87aa8e08a0913b3037eb5a1a9cdb1d63fe18871d3e7b91f5ed1ffc8f85445f86c7df90893ac31a660b9a14317d17242b52ff05f4a80e2c8d35a5c6103003f9aca5dbf0ccfa9b011d8ea1ecc5f0c5a72395071dbaae1de759039416c147102578f9598f767a11357e15f9d996c6f165eb3111cbd94bbb5802ee90e5ab77b8abaae4c7ef8772f7ec9d169e6b663c33af62efddd248729e5423f6d1700085c46a9226469d5817a796c819d71e52684ccba241d82bc893ea843476604a09a1320fed323e9e26d1e331c41f21dd9915a1e24c2aae155523ba4c48c9452ef5f219ec7bb73e14756bb0d8e6d2b57ef0faa5866448453701e552cdfc150df1019856afcd95764a3848e9ed3bd4bd6541c6c2e5195fe03c193791ccab926ce4853002f86d0d0d493b41545714734fec8407c030e587709b01b8f9742052d74a6c5bc01a95d92b4b8f68ebceff038081ae8e077394072c338ac4e103972cb0c6a17a781ff7e46f4c25381b4cb6c3bb74f7aa573668aec7a53a3ba3c8422f95726a9a9eb4fb908c4a08c950d7b13928627122470821827cc1ed6f37da819ccd58c41630088c243dafa0674d86fa608335a526cf25db43e44d08eb97954c35f0349ff34989d67ac579379157ac9d3c41ae23c1b0679dcd7f3fbf65482967ef7b244490ab07335c8fdf09b48d0447199d8fdf2510efa9a7d6372ef58764b53ff5e8eebb69abfd3c0dc73cfffad161d08fb683bf880d06c93f1b8990987575a396f1e458855407f1e92ed283d72d65e7af64dfef61920fac28230ecf8876fe121a192254a0886144e7af3033a714791cd5d6493be478cb8504088a1d48aa484acad474356172fa3e9534d31bff123a8287cb637d98dc1e0f6b8c8aa1c91139d6c04afa3b09defe473e50e0fd560ad3dd44c7ef82bec907fa9580f217f6dd0c57003892751bf4adfd7248bb897054692289934989bd539e9342f75ebd4fa68a8f76447cb64c481f35d35bc7192015aa460f86fb915934bae7469fc5f3e95a9b2d22ed26db6c5b4b65bd07b2b652e540055ae261773f0ef6102ed751a808b1fb198a9e14a38fa316ef442f4fd68c507d8c5d47503b860cecd567d65a26832e48c21a9958b5ce763f446766ed6dc15d9596812f06853bd27eb5063e518cd01ff6ab15a456f9dcdd494ec19e8fbfa76f48b3910b13c7db04d1a77be9958300a42a860dd76e9feab20e41cf3c50740b847e05af0b9b361a7bd2db7aaf6b65e8aba4a7670cfc667605ea2c58a7cedff9de8589c24451bb6bef656ee24008d972765dab28b022b09d53a3334525e8dee5f5e18dd8aec69ae8affbd930fd0d9d8c078019e92b0dc1a9b5370de0682f7a0a056a45036eefd4ecb4f7e6da0d966be1634540b87a219a4554c547314f6916ca9b94c38f94106ee48edec726aa76e991d3820e5e1ff89180cc3233c0ce3f9f2e03117e4e2fc4e4c96be7fb3d4c1be66bd9856ec1fd3b9ac55d86b24f9e67b2d3206b89713d5a081d6c43bf8426cb3596294c10bbc5bfb28c6e2e0e950ff3df911739943af4ca67e985842085f09416235daf3e9b80c67d72d840df6eb7e88f546274b93d9196f7adf07c4e5d59cce9e9802814f69464218b226cbb094d3242924e92530b46fc5df885b2125067765756f7f19fa2e498f243cd334d1d1373b0eeeb93338171eb072968d8a73bcf4231882d3fab624de4280de3ee910e04190cafc78a08e54da8a69ec8c4a3996b09f98b43db2a8ffea9f8b2eafb3537ba0bec76b4418907a7fddf644d4e5ac724665ff3d7f295fc22092b62918b5110e233e73dfaf50ba1a7a9b6e51e60742b1e8c8e45b99288c3cbe5112de8a0ba5605663cfb161f94f5bc8e94cf8045cd511591510d6e4e8e779819c66368d100c636dd1d1ad72ea7f21c3dffc0837f5de5e7b7fb908d30c3324f98590aff74c850d4c62066a1e90d85ecbb4d895faea8b5c9de6bbe9d258f539546656ded35e3b44ac68e467f17a944fd199ff30ad872fa5bd9036289f9a8f8623fd83a41d373b1df271ec69fab82abb6ab74f71574af36b39674541872a10aef11d6ba37a9a8e48b434db60633efb7fd84ffa3dfbf6840796901b8546ef115e1b31eab88f41d4a684b03d810cd9d6fe1b914e71858de7540937d63d36069392a589a330780937fb0024c54d464cb44c3bcf2db5e6bbb4e1d80c0eebe14df37af69526b1c2b41dc5b989693b0fe96f6b2a0d2c524cf7bc7ec71479f4056d70f1657d4e894c7771cbb2b5ceda132dd228706fd544230f8aa3d1f6ef19ce58dc6ebaebdccf2b73f2c2487e6ffa20b7ff3f63361c5f1fab2156bbb32f9eb10aa0ac08680ab1011fd461d7cb28c292797cdad9d63d2b0acb90a807f5db7928fd26f04afa60e21186d82ed3b6b1b9b1d349cc3c9285ebe62596445f54a7b75dd470272331e4c37f4e3671f42ebd7c8d2af32a0e6bfc736850701b1742dcede1b29841c1e0f21109bc8b573bcfb504aa87a38113eaba45d9a4484c0bfa1fbc9b0708208d4fde11b6676f1e9f08169f606e1db253181030cafbb63c2e18b7a9480c71828ebc9d6c9ef7ac0672a2f8779c6f92cdf55071b2fc0c5ace65524da6fda8e94a0ab52bdc15a0635d2d9e7fce0ca5d7f0cf6bb2236ef8f9b831a1e33e0362eff2bb3698fe09341dbde245d68e7a887346fa193db2c67e25db8b3cd9f922acf4bd907614965ab51b77ba7b6481880056799555600f0de6312d86f8920dab79e2fe67401cca3b073f0e79e9a34e63982efac0470298d7efe553ae9cbf84b5f4f84341cd328d387b22e2b655bec64836333bebfbd7dfadfaaac468b0088fc572545790654acfc1a3951c73fbbace5875f279ebc111af98295248f761e844af2a0dc77ea79ec77d14c23abdf8641a64c5c272d7ccb1256cb9c29885e449adc9711d1edfcecb8adb49447a7109891ad8438c49d278fa895312ff32969e283f66adcdadffe008f0f4c0a2df7ea2d35a80d4a6f4eb5936b159fcf46c9503cbb5c4a0387d7a729c2a2ca6f3f9ecf6ff398ac7bf1bc1e8ec7fb9ce25e5b9e131b7dc6df369ec20db0076d443df64f477d9e282182ebaccd8519e0733d28c347f79ff08f1cbe6d3deac867fa1e3d345d2a53b8da2636e4c943fd9c5bb110568f371a73006e9e6ad063e0ccaa23dc20e96d04cb5246b796e2c523859d1de95d5f47fc0f8d24ba3f6bce8ef826c829f8172ab09325d3e2dcd80458b624bad124f74d3cb7f763d644ca33326704835ffa91baa17f8f63a6a048374fd1369119f65afc1fed4fce5a4cc803063933bc6c73350d6c8cc9b2b8acc3233eb4b545bcd4de76add70955e3ac489f435ee7a3b025ba2d2c70a3ed198aa25e2a54d1cbec99e5f7e5188f52444b97afd18c91b9364bb933c23d2529b958aa36725e2d3121294a04745fc4a3dd85f457b7755c4a898a268ce276f2bf8ca5dd3d70cc1a2b921a2ab6582cbdc22e3d698edf1f16461710bf27c1fd6f9c127a8f74d957037e385c673d6182b805d99f73aad73e773ad56dbf76dfa1a7700f3145fccac32a63d6a9c07b98d3162c4e18df4871743c19c59fa678c802772679103f5bacf20aff37b219f1e24fc30b48e4a97cb5cca70c586b59dd87bea7a367476e57b231bd3e6d2bf3dd19f103c48079c91bbf01ff61f775e2be7f83210d8e18c9c2e3b1e679476cfc316591d142b80c58c03d78057c857781c3fe0cfea711f5c64122d9827619cfaa0420cc4d1ad892771a3076787caa72db8c43423fbdce0f5ded7a6eb619177be595cad30f1226a61157ea06a6d442b9bbf789ad2461ca6d2d8989e66985b46b0e1cf7be51d2bd8d35ed897bf91215c04fd2c3a29c0c77c1a87e2eaf66df9654cc1c72c58447433c3d323e4897a14ea85000e9dc74742468676e46b99dd2d8e9893c3dbfd845331de24c6a0f0120b31e275fa3ba5601d81b9ef928e4b265dc0c974568571e3694b7fb08c3a710483394dd6caabc75f9ef1128a719117db762e7a27350882d450e38aa4f245c54995f5698f7a96c37bb5a633eeca05c1fe8bf56bcdece0ca7db4cf9e657ba09790f715e97acc58a65b41f9111b1776232d6a17cc5be7bf570d5ecdc28f9a9265ce271ab894b84af30f3bb21cac6eb66089173046efa7992109a0997126427ad2a228c4d8851219486c7bee9c94f0ba04c63a9203068cf9202070e130d71e7708919ab6e993a8d9aac6a5c5fec60415b47e6abfab735eb53f4e0570e717a0bbf689c2b50878e5a97ef3e9fed72af916b7ab9cb98acc55fae8051f918bf1ee4a203265dfe756bb22f7f65eb115a5319843a943addd47f", 0x1000}, {&(0x7f0000000bc0)="843f41aa7d183f2bc9759c345842d8f430b0242bd45fc62549a59bd23fef62c24f9963bbffe6914b5325215e8215f8f83c77533575124ec02b4320d131cbbf9985d33aabaf60dd76e48865ce84e0453321ec8c55924ac509b1c28b5079fb8895ad98c90ec67d1e6e8a42fa5a4d7d2399d81c5a33da2a6665ca0e6488", 0x7c}, {&(0x7f0000000c40)="73b16d843c8ac8eac7ff0655c3ed7d9ba09fb2d259f5160e27718f897fede3f3d73ed417aa07c8111dd2da2be42e75cd3913fdd5552f4a6ae7a3e85573b907dab584fdd4791cd7bad8f1588786fb772b10c3f0b5fbece8c2d8801811e6526269aa15e4b1455db53740bc73868f357283104bbf27a249054d28b7926c1b6d2903013cf220fee4ce", 0x87}, {&(0x7f0000000d00)="548aaf9821276df346e8c0d82c7e1fc11e41b8a61ec71f376ced57691df76773f1f69cbb1b63d6e6b701d102b88363233cae5d9c42ee3e2b5a59a09f84146f73496a7f75ec22c171a17233d3941242", 0x4f}, {&(0x7f0000000d80)="ab37dcff7cc7d9e79418395a0e3c469ff8fa36718285bfc07027d7fbd5d072", 0x1f}, {&(0x7f0000000dc0)="d6aa69a710c7aa58377f00c420a65c32107442cd14ac71dde7e8d28656c33492fa2576ec98992a14ff8f1d99d02736447748a7f7d0e5c8216afae8be4fa0e96024e5a325ef26cffe56a74d594e72a1f76838ce71a6c89b6582df4b4bf6c782008e88c5195a021a239912e565cda06208e7e83168feae0151fd029ae9dda3ee5ec7758b1f5ecc9889b98f67d3252ba7a808d66e5e9cdf81403f16f9424a0cbf9beb1508c502b862cb9895", 0xaa}], 0x8}}], 0x4, 0x40001) recvfrom(r0, 0x0, 0x486090b86b437e7c, 0x12000, 0x0, 0x0) [ 2809.535974] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2809.535974] program syz-executor.3 not setting count and/or reply_len properly [ 2809.871269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.871818] print_req_error: 5 callbacks suppressed [ 2809.871830] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.873115] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.873998] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2809.874901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.875361] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.876207] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.877066] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2809.877755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.878205] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.879100] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.879945] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2809.880639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.881072] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.881933] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.882790] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2809.883484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.883932] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.884797] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2809.885646] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2809.886345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.886875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.887407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2809.887864] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2809.888517] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2809.889125] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:43:26 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:43:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:43:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6a, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:43:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfe) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x1, 0x7, 0xfffffffc, 0x0, "ddc1080096f13dc45000", 0x1, 0x20}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x3c180, 0x0) close(r2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) 03:43:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300f5ffffff00008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:26 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) fallocate(r0, 0x24, 0x1, 0x10001) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0xdca, 0x7, 0x16, 0x400}, {0x200, 0x55, 0x81}]}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x1f, 0x1, 0x7fff, 0x7, 0x8}) mq_unlink(0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x4, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x800, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 03:43:26 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) creat(0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000e62d2f66696c1000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {0x1, 0xaf5}}, @ver_80211n={0x0, 0xcc6, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x37, @void}, 0x1e) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3d}) 03:43:26 executing program 5: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) r0 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/53) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f0000000140)) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @local}, 0x1, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000280)={@private2, 0x52, r5}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="fe000000300d0000877e00017e0000007fb5430000b26bffff020030093e000000e90000ed2b74da0841e02421a032cd0df53fc0deab463fd8852bb8a9ee6684bdbebf7f2301fa64bb715bbdd716de7edcea3bf6e253644f49df52a0bab5009b2e2778ecb4f83031c18474ef4c8e46fbbe27057fa9b6c9621ad47514c1d2632c018988f4b3fbe3f4a1334f2899e4ae83be5a6c3316fb58fb170752cad10737c6fcd8f87afea44a8e7016335bf8f8337ce722ea70693c521f155423b99bd32e7e7ae774f7a0c02503cc733c2d3e204414cdfe464a3b987ccd"]}) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x6) fcntl$setstatus(r1, 0x4, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x5, &(0x7f0000000040), 0x4) [ 2826.383175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2826.394568] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2826.394568] program syz-executor.3 not setting count and/or reply_len properly 03:43:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000002000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)={0x7fff}) [ 2826.538895] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2826.538895] program syz-executor.3 not setting count and/or reply_len properly 03:43:26 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=ANY=[]) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) mknodat$loop(r3, &(0x7f0000000140)='./file0\x00', 0x800, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)) readv(r4, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/215, 0xd7}], 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @aes256, 0x3, @desc2}) 03:43:26 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:43:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000003000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2826.657501] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2826.657501] program syz-executor.3 not setting count and/or reply_len properly 03:43:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x1002, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x1}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) 03:43:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 03:43:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000004000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2826.803751] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2826.803751] program syz-executor.3 not setting count and/or reply_len properly [ 2827.263649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.264748] print_req_error: 6 callbacks suppressed [ 2827.264768] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.267758] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.269729] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2827.276853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.277885] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.279881] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.281801] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2827.283995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.285027] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.286989] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.288910] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2827.291028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.292064] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.294023] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.295966] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2827.298163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.299231] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.301495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.302529] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2827.305093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.306825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2827.307921] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2827.309356] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2827.310781] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2827.312196] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2844.015699] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2844.015699] program syz-executor.3 not setting count and/or reply_len properly 03:43:43 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:43:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x81) 03:43:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x74, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:43:43 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}}, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000040), 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$FIOCLEX(r4, 0x5451) 03:43:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000005000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x34, 0x20, 0xc21, 0x0, 0x25dfdbff, {0x2, 0x0, 0x2}, [@nested={0x20, 0x60, 0x0, 0x1, [@generic="21b0c16ed1f61f4353d7789acc81daa6f76f328c7df649cf5835ba13"]}]}, 0x34}}, 0x0) 03:43:43 executing program 5: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x800) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffb92f, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0xcb7f8278ce886d75, &(0x7f0000012900)=ANY=[]) 03:43:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:43:43 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:43:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000006000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:44 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) r2 = fcntl$dupfd(r1, 0x0, r0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) 03:43:44 executing program 2: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xffb, 0xa5b, 0x0, 0x0, 0x0, "30c100401a001b00000056bf406b8ce81d1e00"}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x30000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x1007, 0x6, 0xfef, 0x6, 0x2, "990466923c99088f255079c9b9f60deff558ea", 0x2, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0x0, 0xffffffff, 0x1, 0x800, 0x0, "7e56dc7272693583a4906de687c91a3f85068a", 0x10000, 0x3}) 03:43:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7a, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2844.202141] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2844.202141] program syz-executor.3 not setting count and/or reply_len properly 03:43:44 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x408040) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffff7ffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="010080000100010018000000", @ANYRES32=r1, @ANYBLOB="78041714434b4ac0928099eb51800ae50b5e29bcb95c604e06dc4151723d49f474dc6ac981b045112c7858c5c837135bfa0f3023d619943f1cfbb921e4e25d50733189c2858117afb62723c6b0604409fe5715b8ae46179b8eb0ea4b394493d47e19542729c1da72dea16290a70cff95b6e035ad157b1f55705c27aacd69e8a417a680882e07efcb15c6ce637abba8f22f52c20db41233933ffe07f67a451c0f03e1f6a52c44033ac8c79229d645514b90a02ecf873c0d7800995a78aa47f527"]) ftruncate(r2, 0x80000001) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) fcntl$setstatus(r4, 0x4, 0xc00) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '-(//&'}, {0x20, '()\'/\''}, {0x20, '/dev/vcsu#\x00'}], 0xa, "2f3e939b62b5dd5430400414068af46840c8800e88348c58015457334cda22cadba8616744d573d33d4e040dc351e019f89b88f35afd18c143a67a5ec5fc097e100dd5a0e553dddfefb8f4c889f06f2680503e97fa15860816085c2b44021f2f3f0da808675b720207cdfd1aa8fc6ddee45ec900ea1106bcff67a4f60d820157a3d5eb6a377fca62db164508af4f39d9f88d80719cbde88d4e44849070056a2db82e60613b73a7c089acabfa457da4"}, 0xd2) 03:43:44 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x808, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000c00)={0xc16b, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "1b4f9a981983b1"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001e00)={r3, 0x0, "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", "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"}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) getxattr(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000180)=@known='user.incfs.metadata\x00', &(0x7f0000000200)=""/96, 0x60) 03:43:44 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2844.715453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.716341] print_req_error: 6 callbacks suppressed [ 2844.716361] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.718769] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.720381] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2844.729470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.730281] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.731925] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.733476] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2844.735527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.736370] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.737973] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.739546] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2844.741501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.742345] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.743946] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.745511] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2844.747544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.748402] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.749981] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2844.751543] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2844.753492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.754955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.756951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2844.757841] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2844.758997] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2844.760151] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:43:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000007000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:43:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) read(0xffffffffffffffff, &(0x7f00000002c0)=""/225, 0xe1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x3c7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) readahead(r2, 0x3, 0x244) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/libahci', 0x208281, 0x17c) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xff, 0x1, 0x40, 0x40, 0x0, 0xfd382d7, 0x8080, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x7fffffff, 0x9, 0x0, 0x1, 0x0, 0x7fff, 0x0, 0x6, 0x0, 0x7ae}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x0) 03:43:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) 03:43:58 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:43:58 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:43:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) r2 = dup3(r0, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FICLONE(r3, 0x40049409, r1) accept4$inet(r2, 0x0, &(0x7f0000000040), 0x800) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(r2, 0x0, 0x5, 0x3) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000280)={0x87, 0x29, 0x1, {0x6, [{{0x8, 0x4, 0x7}, 0x1f, 0xf9, 0x7, './file1'}, {{0x20, 0x2, 0xff}, 0x81, 0x87, 0x7, './file1'}, {{0x1, 0x2, 0x6}, 0x8, 0x1, 0x7, './file1'}, {{0x10, 0x1, 0x2}, 0x8223, 0x81, 0x7, './file0'}]}}, 0x87) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) unshare(0x48020200) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 03:43:59 executing program 1: syz_open_dev$vcsu(&(0x7f0000000680), 0x2, 0x2040) 03:43:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x225, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2859.183630] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2859.183630] program syz-executor.3 not setting count and/or reply_len properly 03:43:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:43:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x327, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:43:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x141100, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000540)={0x1, 0x7ff, 0x5, 0x211, 0x0, "638f8b5c26a11aef0c6657e272a0a702921554", 0x5, 0x2}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f00000002c0)="2000e4bb7a99eafceecad82c819622ce122ac3671c879bdd0ff0edef113ecbb9a033a8e551e262fe6c4d0301702bd2886cd84237d89fb412ba80e74b0f5e5d297fdbbcfb57af7e681e600acf618590c2bac7e130a74deec6032e9bee481e2d1f80d418a6491296454ca3ed28b03f66a297be1a873d", 0x75, 0x2, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f00000003c0)="77d89d96f22fba65d370d9de2cb5aea68831d707bdb846845cd409ad796e8f3b1636cb24f4a97bbbfec7700710945d507a210fb51e8b310326a3111d19adfee9ac426da660d82747cf1979d23adffae6f15d81be6e736ce600bb2ef77d7785105d059f9e8ab3230eb9336dd145562365d003f423749001db33613bfbd5bfdec3f7829287afca69e6773d", 0x8a, 0x81, 0x0, 0x2}]) ioctl$int_out(r0, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000580)) write(r0, &(0x7f00000001c0)="a4ac3a3ca113133191b4565a1c903e4044fe9678706a6705a82d14b2348b9b5b3b3440d3e1737a5eedb7f477d763d5ec82e6650d484c64f7c678b36ab138640f6fa6be941122e44184931f36c8bf87ad44324a794f4f31fb47800cb6eb7e229cfe382f72803c7c8f0dda692bc2bad843fc837f3bfacdf7ecd05505bd0ebfa3db5b214433f91c8c3f0db679f482cdb76cdf98b01ac22150387367005c20af5046ebe51e0a4b645fa39171dc2e5a27ff8f829093ce26f5370ef4ff93e2a38873d5055b77e36f66cdc1903f36e4c499045563de3fb480c06fff1e1d7355e6c250f6a4cc2a5de8ba3c7074852f0a672fe4", 0xef) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000100)="98f9ae4fc887e5ec328ff2878ed32c9995938163f2dc86fb143c1250e49d890f45a06d44b1dc17e2766ac0df59f48bba8092b3af4a33e3fd6113042c2f35e5faae0f8c2bbce38a9a3541537797e624b26a2d8fe014c241f6e7799c0de335546c3dbe83bd02d4a341cc29748749d42d07296cec23d9ef9ca331d60eb4d2c4eaf8c46c484d927f9d494037bcfff6c500b5ea93d8e6e3b513cf22cde6cdeae8fb31351157fe94") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) 03:43:59 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000008000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2859.329754] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2859.329754] program syz-executor.3 not setting count and/or reply_len properly 03:43:59 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x8) lseek(r1, 0xfa2b, 0x3) umount2(&(0x7f0000000300)='./file1\x00', 0x4) syz_io_uring_setup(0xc28, &(0x7f0000000400)={0x0, 0x52a8, 0x4c, 0x3, 0x261, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000540)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r1], 0x1}, 0xe1af) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES64=r4]) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) creat(&(0x7f00000003c0)='./file0\x00', 0x7f0b893b7b19eb96) 03:43:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:43:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4, 0x300, 0x7}, 0xc) syz_io_uring_setup(0xee4, &(0x7f0000000180)={0x0, 0x2dce, 0x20, 0x3, 0x17b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r1, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000280)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x9) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000571eb55e5dbb840b44bc8cff80d0d7238499d8e6f9d29db8e2dbe87b07900c2858c14d7d6c09c671718adbb3224b974bacd2dcfb2401f19487af4640cba4", @ANYRES32=r0, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x80, 0x4, 0x24, @local, @private2, 0x10, 0x7800, 0x6, 0x9}}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000140)={@remote, 0x25, r8}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c0204010000000000000000000001000000000000000000"], 0x18) [ 2859.381992] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 2859.404782] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 2859.747261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.747844] print_req_error: 6 callbacks suppressed [ 2859.747856] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.749336] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.750301] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2859.756210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.756766] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.757809] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.758766] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2859.763103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.763653] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.764666] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.765626] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2859.766769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.767300] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.768988] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.769964] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2859.771584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.772099] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.773159] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2859.774125] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2859.775257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.776003] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2859.777105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.777665] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2859.778774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2859.779381] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:44:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x390, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:44:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000009000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:44:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:44:15 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x11, 0xffffffffffffffff, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x1, 0x7f, 0x8, 0xb4, 0x0, 0xed50, 0xc0200, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x10f40, 0x3, 0x80, 0x2, 0x1, 0x3c5, 0x200, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x8, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, {0x0, r3}}, 0x9) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2007, @fd=r1, 0x8, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x0, {0x0, r3}}, 0x3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x103) 03:44:15 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:44:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x141100, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000540)={0x1, 0x7ff, 0x5, 0x211, 0x0, "638f8b5c26a11aef0c6657e272a0a702921554", 0x5, 0x2}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f00000002c0)="2000e4bb7a99eafceecad82c819622ce122ac3671c879bdd0ff0edef113ecbb9a033a8e551e262fe6c4d0301702bd2886cd84237d89fb412ba80e74b0f5e5d297fdbbcfb57af7e681e600acf618590c2bac7e130a74deec6032e9bee481e2d1f80d418a6491296454ca3ed28b03f66a297be1a873d", 0x75, 0x2, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f00000003c0)="77d89d96f22fba65d370d9de2cb5aea68831d707bdb846845cd409ad796e8f3b1636cb24f4a97bbbfec7700710945d507a210fb51e8b310326a3111d19adfee9ac426da660d82747cf1979d23adffae6f15d81be6e736ce600bb2ef77d7785105d059f9e8ab3230eb9336dd145562365d003f423749001db33613bfbd5bfdec3f7829287afca69e6773d", 0x8a, 0x81, 0x0, 0x2}]) ioctl$int_out(r0, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000580)) write(r0, &(0x7f00000001c0)="a4ac3a3ca113133191b4565a1c903e4044fe9678706a6705a82d14b2348b9b5b3b3440d3e1737a5eedb7f477d763d5ec82e6650d484c64f7c678b36ab138640f6fa6be941122e44184931f36c8bf87ad44324a794f4f31fb47800cb6eb7e229cfe382f72803c7c8f0dda692bc2bad843fc837f3bfacdf7ecd05505bd0ebfa3db5b214433f91c8c3f0db679f482cdb76cdf98b01ac22150387367005c20af5046ebe51e0a4b645fa39171dc2e5a27ff8f829093ce26f5370ef4ff93e2a38873d5055b77e36f66cdc1903f36e4c499045563de3fb480c06fff1e1d7355e6c250f6a4cc2a5de8ba3c7074852f0a672fe4", 0xef) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000100)="98f9ae4fc887e5ec328ff2878ed32c9995938163f2dc86fb143c1250e49d890f45a06d44b1dc17e2766ac0df59f48bba8092b3af4a33e3fd6113042c2f35e5faae0f8c2bbce38a9a3541537797e624b26a2d8fe014c241f6e7799c0de335546c3dbe83bd02d4a341cc29748749d42d07296cec23d9ef9ca331d60eb4d2c4eaf8c46c484d927f9d494037bcfff6c500b5ea93d8e6e3b513cf22cde6cdeae8fb31351157fe94") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) 03:44:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x403}, 0x0, 0x8, r0, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) [ 2875.859467] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2875.859467] program syz-executor.3 not setting count and/or reply_len properly sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000003600)={0x235c, 0x0, 0x700, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x103, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x69, 0xc5, "fc02b0708c4f2524940c54070d9bc862d184e9680f807f26d4d96dfbd3c4222f85552224efd3f3b5f582aba26a0dd14dd1795c84219ceed3fc2d2464f05b295245387dc85bd3323272cb95d16c3e862f02ecb53b90dedff9c9446263bf6a88241b777153cc"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x60, 0xc5, "ba564d2addd1a7027e7cec8362919591c336360b5169295870625e1de4d5bb60f040a866509b8a816a07cb0075a169a9c3cf0f5845e082410401700474fe96bf621a2a139d6cb2260be95eaf3d44095644cd3d64e0bc4620422a5d1a"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xad, 0xc5, "46fd7684ec87314de7d161db4c4396973d07413d8070470d5aa845ffedd3d17a664bc7a7b320dbd5eaa45bf5d539ed8c6098affb5694879cc8e7aba05bc689cd94fcd4148b1590ad476a10300c74a61bb6e969be28386ff5e86b4e69830ede26622672d4cf1325b0a6d36422e98dd6ec4a3701e5ec40f9a33b5bdab832bb79fd695ff4f68b78ad40d6747b7ee0caccc01610837b718b1104a5a4deff9ae6ad425650675b13d7ab829d"}, @NL80211_ATTR_VENDOR_DATA={0xa6, 0xc5, "5d31f367682117cfdbd9f930dd8380a9ea1915b9b175fa93ae056afd7f9fc0e845bda5d9ec20379cbd9f86811154aef9971a5604a35e6ac346db352120731191f2ef271c392e93f0698eb9474ddd149871d377bc712b8a982f1e1204abadd12adf4f99f26b17abc8569383220ac46a06aeb2d991bf24c413004d8fd2cacf8f7ae3df82562d2ae5f67eeebda958c749f09dca4c25c0f6a0f680928dafe10b92ce4de2"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x935a}]}, 0x235c}, 0x1, 0x0, 0x0, 0x40d1}, 0x8000) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$revoke(0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) unshare(0x48020200) 03:44:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7e, 0x6, 0x2, 0x2, 0x8, 0x3, 0x3, 0x4ad, 0x25d, 0x40, 0x218, 0x10000, 0x40, 0x38, 0x2, 0x1, 0x7f, 0x1}, [{0x10000000, 0x5, 0xfffffffffffffff9, 0x8000000, 0x20, 0x5, 0x3, 0x80000001}, {0x4, 0x7f, 0x2, 0x0, 0x1, 0x4d69ade4, 0x100, 0x5}], "fe66b824c430cf5f113ee6db", ['\x00', '\x00', '\x00']}, 0x3bc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:44:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x141100, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000540)={0x1, 0x7ff, 0x5, 0x211, 0x0, "638f8b5c26a11aef0c6657e272a0a702921554", 0x5, 0x2}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f00000002c0)="2000e4bb7a99eafceecad82c819622ce122ac3671c879bdd0ff0edef113ecbb9a033a8e551e262fe6c4d0301702bd2886cd84237d89fb412ba80e74b0f5e5d297fdbbcfb57af7e681e600acf618590c2bac7e130a74deec6032e9bee481e2d1f80d418a6491296454ca3ed28b03f66a297be1a873d", 0x75, 0x2, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f00000003c0)="77d89d96f22fba65d370d9de2cb5aea68831d707bdb846845cd409ad796e8f3b1636cb24f4a97bbbfec7700710945d507a210fb51e8b310326a3111d19adfee9ac426da660d82747cf1979d23adffae6f15d81be6e736ce600bb2ef77d7785105d059f9e8ab3230eb9336dd145562365d003f423749001db33613bfbd5bfdec3f7829287afca69e6773d", 0x8a, 0x81, 0x0, 0x2}]) ioctl$int_out(r0, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000580)) write(r0, &(0x7f00000001c0)="a4ac3a3ca113133191b4565a1c903e4044fe9678706a6705a82d14b2348b9b5b3b3440d3e1737a5eedb7f477d763d5ec82e6650d484c64f7c678b36ab138640f6fa6be941122e44184931f36c8bf87ad44324a794f4f31fb47800cb6eb7e229cfe382f72803c7c8f0dda692bc2bad843fc837f3bfacdf7ecd05505bd0ebfa3db5b214433f91c8c3f0db679f482cdb76cdf98b01ac22150387367005c20af5046ebe51e0a4b645fa39171dc2e5a27ff8f829093ce26f5370ef4ff93e2a38873d5055b77e36f66cdc1903f36e4c499045563de3fb480c06fff1e1d7355e6c250f6a4cc2a5de8ba3c7074852f0a672fe4", 0xef) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000100)="98f9ae4fc887e5ec328ff2878ed32c9995938163f2dc86fb143c1250e49d890f45a06d44b1dc17e2766ac0df59f48bba8092b3af4a33e3fd6113042c2f35e5faae0f8c2bbce38a9a3541537797e624b26a2d8fe014c241f6e7799c0de335546c3dbe83bd02d4a341cc29748749d42d07296cec23d9ef9ca331d60eb4d2c4eaf8c46c484d927f9d494037bcfff6c500b5ea93d8e6e3b513cf22cde6cdeae8fb31351157fe94") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) 03:44:15 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_setup(0x2ecc, &(0x7f0000000180)={0x0, 0xa7a9, 0x8, 0x0, 0x3a8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) io_uring_enter(r6, 0x1eab, 0x8de3, 0x1, &(0x7f00000002c0)={[0x200]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) 03:44:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x396, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:44:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x141100, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000540)={0x1, 0x7ff, 0x5, 0x211, 0x0, "638f8b5c26a11aef0c6657e272a0a702921554", 0x5, 0x2}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f00000002c0)="2000e4bb7a99eafceecad82c819622ce122ac3671c879bdd0ff0edef113ecbb9a033a8e551e262fe6c4d0301702bd2886cd84237d89fb412ba80e74b0f5e5d297fdbbcfb57af7e681e600acf618590c2bac7e130a74deec6032e9bee481e2d1f80d418a6491296454ca3ed28b03f66a297be1a873d", 0x75, 0x2, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f00000003c0)="77d89d96f22fba65d370d9de2cb5aea68831d707bdb846845cd409ad796e8f3b1636cb24f4a97bbbfec7700710945d507a210fb51e8b310326a3111d19adfee9ac426da660d82747cf1979d23adffae6f15d81be6e736ce600bb2ef77d7785105d059f9e8ab3230eb9336dd145562365d003f423749001db33613bfbd5bfdec3f7829287afca69e6773d", 0x8a, 0x81, 0x0, 0x2}]) ioctl$int_out(r0, 0x0, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000580)) write(r0, &(0x7f00000001c0)="a4ac3a3ca113133191b4565a1c903e4044fe9678706a6705a82d14b2348b9b5b3b3440d3e1737a5eedb7f477d763d5ec82e6650d484c64f7c678b36ab138640f6fa6be941122e44184931f36c8bf87ad44324a794f4f31fb47800cb6eb7e229cfe382f72803c7c8f0dda692bc2bad843fc837f3bfacdf7ecd05505bd0ebfa3db5b214433f91c8c3f0db679f482cdb76cdf98b01ac22150387367005c20af5046ebe51e0a4b645fa39171dc2e5a27ff8f829093ce26f5370ef4ff93e2a38873d5055b77e36f66cdc1903f36e4c499045563de3fb480c06fff1e1d7355e6c250f6a4cc2a5de8ba3c7074852f0a672fe4", 0xef) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000100)="98f9ae4fc887e5ec328ff2878ed32c9995938163f2dc86fb143c1250e49d890f45a06d44b1dc17e2766ac0df59f48bba8092b3af4a33e3fd6113042c2f35e5faae0f8c2bbce38a9a3541537797e624b26a2d8fe014c241f6e7799c0de335546c3dbe83bd02d4a341cc29748749d42d07296cec23d9ef9ca331d60eb4d2c4eaf8c46c484d927f9d494037bcfff6c500b5ea93d8e6e3b513cf22cde6cdeae8fb31351157fe94") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) [ 2876.092774] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2876.092774] program syz-executor.5 not setting count and/or reply_len properly 03:44:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000a000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:44:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) 03:44:16 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2876.172944] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2876.172944] program syz-executor.5 not setting count and/or reply_len properly [ 2876.176103] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2876.176103] program syz-executor.3 not setting count and/or reply_len properly 03:44:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000d000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:44:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x628e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) dup(r2) getdents64(r3, &(0x7f00000000c0)=""/149, 0x95) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r5 = epoll_create(0x3) dup2(r5, 0xffffffffffffffff) dup(r0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000200)=0xffffff29) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000300)={{r6}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000240)={0x1, 0x8, 0x3, 0x24, {0x15, 0x5, 0x1ff, 0x6, 0x966}, [0x7ff, 0x87, 0xff800, 0x20, 0x5, 0xc08, 0xfffffffffffffffd, 0x101]}}, @name="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"}) unshare(0x48020200) 03:44:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3d8, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2876.295384] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2876.295384] program syz-executor.3 not setting count and/or reply_len properly [ 2876.635416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.635957] print_req_error: 6 callbacks suppressed [ 2876.635967] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.637423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.637901] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.638881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.639388] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.640362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.640841] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.641816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.642312] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.643293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.643779] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.644745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.645222] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.646196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.646697] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.647670] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.648613] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2876.649300] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2876.650207] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2876.650895] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2876.651591] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2876.652261] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2876.652940] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2876.653623] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2876.654301] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2876.690966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.691528] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2876.696371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.696873] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2876.697634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.698202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.698793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.699380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.699957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2876.700552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:44:31 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:44:31 executing program 1: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f0000000400)=ANY=[@ANYBLOB="00fb2a0305e90a778c76633ed20000003d0402a20e174c9be604aec55cff9112ef2d822a"], 0x2a, 0x2) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0xfffff4b7, 0xb6, 0x401]}, &(0x7f00000001c0)=0x44) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r4 = timerfd_create(0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) signalfd4(r4, &(0x7f0000000340)={[0x6]}, 0x8, 0x80000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000ecbd2b900da00", @ANYRES16=r5, @ANYBLOB="000229bd7000ffdbdf25370000000c009900010400006a00000008009f000700000005001801110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) unshare(0x48020200) 03:44:31 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0xce5}) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000380)="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", 0x1000, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x42) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010402d6afd3a8b200e5a0458ef703697354573a0200000000000800000cb01f3100000608e904010008100340000000000a0002000000000100cdade9000000"], 0x30}}, 0x4044880) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sky2', 0x40000, 0x40) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000001c0)) fallocate(r2, 0x78, 0xd, 0x1000000000009) unshare(0x48020200) 03:44:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x3f) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000100)=[{r1}, {r0, 0x2008}, {r2, 0x100}], 0x3, 0x8) 03:44:32 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x1f}) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x400000000043}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x2}, @enter_looper], 0xef, 0x0, &(0x7f0000000080)="d899b505ec28dc5027e6e6bd3093d7cc4a01a4395d3a647124d97165c2a35a55612245bf63ba9152bb1a27f1866b8b2170b866bb610cb9c1d8efd5d1e744f7cc289571b1b3b253aff556bb8d332b7007bfd5ad543bfbf0ec66ffc42857c00b69eed870707662d110db7a35f777156a0c17bd1a94badea138553023cddc9f3e6364c5d734079e7857ab615cf30bed22bf3dd19b3c154a5945e4c93759937aa4e91563023f9d11f72e119729ceebf715a29e27ed8f36ad4b07e57e2ad19ffc7c0d5bfb13df22d3ef0d285dbb4860b45fba95f1f2577a72090c9bba14cb7870edf5af082525dd0601e599511a93e66165"}) 03:44:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000e000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:44:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3f8, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:44:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2892.214206] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2892.214206] program syz-executor.3 not setting count and/or reply_len properly 03:44:32 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="d35bf79825825b5e4126a994b51caf62ff004209eea9377408348bb71778da779e57717d2fa1e1513c5fa4864964b4b28ebb1b26307f45b895de9d14a9e11cf542b846e94a1c49d59057444708240860e66b7210a7d8f4739dd09eef74b275aab78651e7a35465a07143413d2e934c92715027516037cde8c75af2d1806c0d372292a07e51a016da147a99434e469e316fd01160ab63abf7e3efb62845c03173323b5f0fa74b43a8052c8b536a2feb3cec9082eab7a1494171a12963c9107384a6c4542464d3143e", @ANYRESDEC=r0], 0x1a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)={0x6, 'gre0\x00'}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa01d, 0x20, 0x1, 0x3df}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[@ANYBLOB="e6023600410008004b33fec0cefcedcc644565c3026fc7270300a28ce2d10d69c19cc92a89e0e8006ce92d1ea02d49bcf41c21e99e30bd00ab"], 0x54, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) move_pages(0xffffffffffffffff, 0x1ffffffffffffcd8, &(0x7f00000001c0)=[&(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000000)=[0xd55], &(0x7f0000000300), 0x4) syz_io_uring_setup(0x7454, &(0x7f0000000200)={0x0, 0x7cf9, 0x1, 0x0, 0x4f, 0x0, r1}, &(0x7f00005db000/0x3000)=nil, &(0x7f0000b7c000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000300)) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 03:44:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x8, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x40) 03:44:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300003e000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2892.388338] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2892.388338] program syz-executor.3 not setting count and/or reply_len properly [ 2892.723595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.724567] print_req_error: 22 callbacks suppressed [ 2892.724586] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.727163] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.728875] buffer_io_error: 6 callbacks suppressed [ 2892.728888] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2892.736446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.737354] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.739097] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.740780] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2892.742757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.743676] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.745373] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.747053] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2892.748981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.749896] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.751633] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.753316] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2892.755410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.756324] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.758668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.759561] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2892.761915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.762874] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2892.764253] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2892.765483] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2892.767383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2892.772338] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:44:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14, 0x80000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = dup2(r0, r1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @empty, 0x99d9}, 0x1c) accept4$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x0, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="00000001000000000000006908003000"]) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) 03:44:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48235, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x98, 0x100, 0x0, 0x40000, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xc, 0x9, 0x0, 0x1, [@generic="cb63bd9b41bb9fdf"]}]}, 0x28}}, 0x4000000) 03:44:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x4}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:44:48 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3fa, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:44:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1108, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_MESH_SETUP={0x10cc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x17}, @NL80211_MESH_SETUP_IE={0x8f, 0x3, "111ef2cd6c0ffc7b8baf3cc55c8f918eec179daeae7f6ab0f176a2b653d6ab291b7ac9e0722da2d06eb8047931ca74a9c05da6d5d4a4ecb1a96ff9af04c9533cdbed6440c528c0403a3b6a4b12a766bd0d86390e6157682edbce9727c75ae268638a13b909e657ef268b957e90767874e70b8e4ad5010e17553afdacedb269c32de867beb8ac7988e7675c"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0x1004, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x1108}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 03:44:48 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:44:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000048000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2908.935524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=152 sclass=netlink_route_socket pid=15452 comm=syz-executor.5 [ 2908.937546] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 2908.944852] netlink: 'syz-executor.6': attribute type 9 has an invalid length. [ 2908.953469] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:44:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) [ 2908.981407] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2908.981407] program syz-executor.3 not setting count and/or reply_len properly 03:44:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:44:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x414400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x100010, r1, 0x0) syz_io_uring_setup(0x1015, &(0x7f00000003c0)={0x0, 0xc20e, 0x2, 0x2, 0x29a, 0x0, r0}, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) syz_io_uring_setup(0x4a2c, &(0x7f0000000500)={0x0, 0xe832, 0x10, 0x1, 0x180}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000300)='./file1\x00', 0x40, 0x5200}, 0x40) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000600)={0x3b, {{0xa, 0x4e22, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffbff}}, 0x1}, 0x90) r6 = accept4$inet6(r1, 0x0, &(0x7f0000000140), 0x80800) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000001c0)={'veth1_macvtap\x00'}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = dup(r1) io_uring_enter(r7, 0x6b1b, 0x48a, 0x0, &(0x7f0000000380)={[0x2]}, 0x8) sendfile(r2, r0, 0x0, 0x9bbb) 03:44:48 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300004c000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:44:48 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r0, &(0x7f0000000240)=""/95, 0x5f) 03:44:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) [ 2909.184431] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2909.184431] program syz-executor.3 not setting count and/or reply_len properly 03:44:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x700, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:44:49 executing program 6: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000580)) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbfe, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x40804}, 0x24000810) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x50b00, 0x0) ioctl$TIOCSETD(r1, 0x541d, &(0x7f0000000000)=0x2) 03:44:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2909.487411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.487966] print_req_error: 6 callbacks suppressed [ 2909.487977] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.489464] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.490416] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2909.495098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.495599] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.496553] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.497481] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2909.501371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.501851] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.503757] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.504716] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2909.505927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.506429] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.507374] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.508382] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2909.509544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.510021] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.510958] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2909.511900] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2909.512950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.513489] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2909.514515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.515010] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2909.516034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2909.516555] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:45:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000068000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:45:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000380)={[0xfffffffffffffffd]}, 0x6a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x9000000a}) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7fffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, {0x0, r4}}, 0x9) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x112}, 0x1, {0x0, r4}}, 0xfffff801) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10, 0x0, 0x2000000, 0xebe, 0xffffffff, 0x1}) [ 2924.531768] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2924.531768] program syz-executor.3 not setting count and/or reply_len properly [ 2924.544972] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 4294967295 03:45:04 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:45:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xa00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:45:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000040000000000000000000"], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d2e2c4f4b4861777938e37cc6aa5e6317b632ef4fac2ae3a0bfa05063787f5f99462ff96073b36d0dfeec64c8612182a77458d9f01962ccf1fee60a7f2ca8ce21c049939c62508d63a620f81489d3173a184846ac17b880161bbed8d48d64550cd6802e3ba67c054c9fe640e32a3dbec96f8e7a2ed03feaaabb19f38ae4793f9886a30398e821982c8bb6e37ea10c78eb52c2a5ec2880fe0ebf0945ade0ab3646c04d11e50b13cd13972df1ac7cbe8a99950971"], 0xfdef) clone3(&(0x7f0000000700)={0x5032000, &(0x7f0000000280), &(0x7f0000000480), &(0x7f0000000580)=0x0, {0x23}, &(0x7f00000005c0)=""/55, 0x37, &(0x7f0000000600)=""/156, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff], 0x2, {r2}}, 0x58) fcntl$lock(r2, 0x25, &(0x7f0000000780)={0x0, 0x3, 0x401, 0x1ff, r4}) r5 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r6 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r5}) keyctl$chown(0x4, r5, 0xee01, r6) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01102063d743afbaf9a515"], 0xb) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x6}, [{}, {0x8, 0x0, r6}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x7}}, 0x4c, 0x2) unshare(0x48020200) 03:45:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:45:04 executing program 5: syz_usb_connect(0x2, 0x31c, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xc, 0xfd, 0x2a, 0x8, 0x12d1, 0xaa71, 0xed85, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30a, 0x1, 0x0, 0x9, 0x30, 0x6, [{{0x9, 0x4, 0x89, 0xc5, 0x6, 0xff, 0x6, 0x72, 0x8, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "606efdf078"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x38e, 0x3f}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xf7c, 0x0, 0x1, 0x81, 0x8, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x64e4, 0x8, 0xf0, 0x1f, 0x6, 0xf7}]}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0xcf, 0x1f, 0x1, [@generic={0x88, 0x31, "0b616ff1e26519805243f92d5f9670290c5d6b52af88a13874baff2f73ba038ac93d8bf5a4a71326f1d7866ddfd60aa446102b3b4a7bd46bc247d158a3b6f84939ca4eb777c23e6da14f3d2fa16c3e7e535d74edc2501b0e9ec7a238f38a48c381b563b6ffe4a64b27f61a286afa74785e3608ef0909805d660c9a5e8f0e0faed4f772b4a071"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf8, 0x70d}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x4}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0xfd, 0xa6, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6000}, @generic={0x7f, 0xa, "a2a6440a85972f0af197c7ed9b722aaafa26c40b5a63a771a33f1a0f215cdc43f20a8a2dbcafe24bc1f073aaea480e16acd60ff11cf68abd92cabc5e2367e579aa8e71cad4d4866f64a1ba2c0315dc54c384bdda519ca9cab5d8c42aa164398ad09ac76c1ca016f962dc07081f92e03b6c95e4c842e3c73366e91d6768"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x5, 0xc1, 0x7}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x9, 0x5, 0x7f, [@generic={0xb4, 0x4, "4e94493e9472ccd11fed9b23f8ffc92b3fc84b4e1aff410c4a7e54612b720b23a9abea27c0ff3e8e47f37d9474d47ebb371ac7bc188625a125bb1912e14ab77a751ce2cdc683924a167a66a873d5cadd67b9b062a2fd4fbb2e7c9815857f7d0d55268079b82e658ed93972f0be7e4a1c8e2fab77ac23e9a137cec8d213e723d614e5737dab50c915db3061347d2e2cc21d2fc8556b8cf38a4b27177f9dc4382b550f7248a6730d5e13c556a9f92893c8b46b"}, @generic={0x67, 0xd, "789d6642b212ad66a20b77b610b834042a988b0aa015b0a14444eefcb8bb4ee832395929c14e254effadffc93eea804a5c6201964b7a3dc68941b9f6d01eb5c8489eed81571be0c0ba1381758bd5e6a03be2cdb62f1ebe238bbbf334e3fa2c2ba4c8a8a3ba"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0x1, 0x3f, [@generic={0x51, 0x7, "9dd6182cb85b9d34743c3177d3b132abaa310986115dbdfed22c2bd17541330e3b665df41993fd5ba522f1b9aaa01e98728b0672c98861887eeb7cd3ca06af61b2bad0a2bf9c6a9391e74ded69b779"}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x5, 0xca, 0xe0, 0x10, 0x20}, 0x100, &(0x7f0000000400)={0x5, 0xf, 0x100, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x51, 0x6, 0x53, 0x80}, @generic={0xd9, 0x10, 0x0, "d25fc68c90d45797da1456c56402a3c231bca390862a14113bc6c1eddf775159dc8163ecbfccc2ab7bf58a77adc0fb26a9663eceb8add3a1ccea1e9798b45a10b270152add27552d1db94bb6a1882753ba9b532385ea3380637054e202ae1c0088503b5370d14052b029c90e6e6e3e0a586db5f389e6a39b5d418722457cea3ea3d657314a5922cb2bf5fcb40a7e5d56669f01631252bcd094fddc534b08c0338a4500107bde1cf3bffb8f0120771dca41f644e55784a672320468dfd35c57378f8f749f003427d01c2c9b4c08a7a0f6684b6ac5f5ba"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fa729bd4fa57a134abf6783330c7e4d0"}, @ptm_cap={0x3}]}, 0x6, [{0xc5, &(0x7f0000000500)=@string={0xc5, 0x3, "52476d21b1b10183cd39279fab9c825e10f33feb8f0a85f345eb877bc6ea11b4a854f45b1240acd5d64a49353e1bb755ddd40e3ace8f7658823cd1ce1e5cf6fa376929ed2e0738dd50cc73dcba1f72d3e2465fab6cffcf39ddf8490d6b2b63121060af57df087004a035261df885d46de14c3516aeeb92a98bf0d6f6586ef11cb8702ed30845a9ce2882bf80e4429b93c5c870528c5f4546d138dd7387d0835def22cb6ee6f54cca564b2a37dd902bceeff4fbaa312bac6d55a697043c644d8bb6329f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0a}}, {0x56, &(0x7f00000006c0)=@string={0x56, 0x3, "60bda1ec319ed26052a2926ece5b440dfeea81de68209adc816f3235909f6da900e4645c5be0201f28c94339df28968bd8fd7756166d5e3a945b8b682b8bf4da375128316a01bb5854fccfdf01c347b0e736133f"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3009}}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4500, 0x0) r1 = socket(0x1a, 0x4, 0x100) sendfile(r0, r1, &(0x7f0000000040)=0xfd5, 0x91a) 03:45:04 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto(r0, &(0x7f0000000100)="8208ef9cc813111b140079bac15dd1d121b1602c3310ab16b32bfed4d7e267d696b4d859d14b43138b207f439b5a27688c7163941883593aa005684ddc5c965ca7f21b9e8a9869de5b7d5d515da70d67dcf4b322c8199247299261ef47c54ff6f5155af69b941d95cdae78366d23397671976fe2ec7a1305e62a92b4c2f07d1aa1cae054b2eccecebf85ec317eb6ce522727cbe4cd73aa33120464549bc0a5865ca44de8b6a74441e61ba3ed9571faf7e23101006671b084dfa749a1", 0xbc, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/61, 0x3d}], 0x1, &(0x7f0000000300)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001380)}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f0000001440)=""/69, 0x45}], 0x3, &(0x7f0000001500)=""/179, 0xb3}, 0x3f}], 0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0), 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0xfffffffd, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x4}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f00000000c0)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) [ 2924.595439] udc-core: couldn't find an available UDC or it's busy [ 2924.596550] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 03:45:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:45:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000004c0)={{r2}, 0x0, 0x10, @unused=[0xfffffffffffffffd, 0x52eb, 0x7, 0x3], @devid}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000", 0x40, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="21f70094ac35cdd1cb68a0d98b5211f767b752e355df"]) 03:45:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:45:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:45:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300006c000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2924.772546] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2924.772546] program syz-executor.3 not setting count and/or reply_len properly [ 2924.985648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.986198] print_req_error: 6 callbacks suppressed [ 2924.986210] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.987718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.988221] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.989226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.989739] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.990739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.991230] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.992239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.992751] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.993751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.994245] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.995250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.995758] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.996762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2924.997270] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.998296] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2924.999234] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2924.999940] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2925.000896] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2925.001595] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2925.002289] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2925.002957] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2925.003652] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2925.004355] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2925.005029] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2925.171703] udc-core: couldn't find an available UDC or it's busy [ 2925.172464] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 03:45:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:45:19 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:45:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000074000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:45:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xd0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x29, 0x0, &(0x7f0000000140)=0x55) tee(r2, r3, 0x40, 0xf) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x80000, 0x1}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, @perf_config_ext={0x3, 0x69ac}, 0x0, 0x0, 0x8080, 0x6, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x806, 0x3}, {0x495, 0x6}, {0xffff, 0xb6}, {0x5, 0xd6}, {0x100, 0x8001}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) dup(r4) lseek(r2, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r1, 0x0, r2, 0x0, 0x200f5f3, 0x0) 03:45:19 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="090007003214eeab6b0000000400280009000700a4408bfe17000000090007009a0accd05e0000000800090001ac0f00"], 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, 0x0, 0xfffffffb) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000240)="7561196524882a4199a47dec6d27c547907eff76d04c", 0x16, 0x800}, 0x81) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) 03:45:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2000, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:45:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) 03:45:19 executing program 6: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) fallocate(r1, 0x3, 0x0, 0x18000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000080)={0xfffffffffffff801, {0x10, 0x5, 0x3, 0x40, 0x40}}) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) [ 2939.864064] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2939.893817] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2939.893817] program syz-executor.3 not setting count and/or reply_len properly [ 2939.911447] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2939.911447] program syz-executor.3 not setting count and/or reply_len properly 03:45:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2502, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:45:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) write$sndseq(r2, &(0x7f0000000040)=[{0x81, 0x9, 0x3, 0x81, @time={0x9956, 0x6}, {0x1f, 0x4}, {0x7, 0xa3}, @quote={{0x0, 0x2}, 0x26, &(0x7f0000000000)={0x4, 0x5, 0x57, 0x0, @tick=0x7fffffff, {0x7, 0x8}, {0x0, 0x6a}, @result={0x1, 0x3ff}}}}, {0x4, 0x80, 0x40, 0xff, @tick=0x6, {0x22, 0x7}, {0x1, 0x80}, @time=@tick=0x5}, {0x0, 0x9, 0x4, 0x7f, @time={0x10001}, {0x6, 0x1}, {0x2b, 0x2}, @queue={0x2a, {0x3, 0xff}}}], 0x54) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) setreuid(0x0, 0xee01) socket$packet(0x11, 0x0, 0x300) 03:45:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x5, 0x6a, 0x7, 0x300, 0x20, "4348aca306c4ddac6841820c7ec62f56799f21", 0x400, 0x1000}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000180)={0x8, 0x54cd, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:45:19 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300007a000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2940.050989] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2940.050989] program syz-executor.5 not setting count and/or reply_len properly [ 2940.085862] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2940.085862] program syz-executor.3 not setting count and/or reply_len properly 03:45:19 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x2, &(0x7f00000015c0)=[{&(0x7f0000000080)="be", 0x1}, {&(0x7f00000010c0)="b7", 0x1, 0x2}], 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x141501) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="c8a3b9e80dbbf3e3e98ac8e9a9e824ad46c1c4317f23214ce7dd0a0328f566f2e20ff0c990162c5a01b7f06c6daa68f7abe8b9701c64516ca96a968da989b9a100", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000002e64c7002865413000"]) creat(&(0x7f0000000180)='./file0\x00', 0xa) r3 = fcntl$dupfd(r1, 0x0, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x120) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x541b, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x7f) 03:45:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 03:45:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f00000003c0)=""/222, 0xde) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1080, 0x4) ftruncate(0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c4eaf207e5520200accbfcb32753a63036062d6f91adcd05e83b0f89b6f20c6cf3c0a214285d5b2e517b0ac843fcee03514efcd3b6f67a7ffb1ed35e40e8575e55c5d40c757dad93ce6aa2de1d3bff1fc0283cd032ca7eb90d75690983451bef9fc4c3562b3a78d92391e3141"], 0x10) fallocate(r0, 0x3, 0x0, 0x18000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYBLOB="6a75a83ec0bb0850db0b56149a2b95cb4ff840981e", @ANYRES16]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) 03:45:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x2703, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2940.157696] FAULT_INJECTION: forcing a failure. [ 2940.157696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2940.158797] CPU: 1 PID: 15892 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2940.159420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.160181] Call Trace: [ 2940.160433] dump_stack+0x107/0x167 [ 2940.160775] should_fail.cold+0x5/0xa [ 2940.161134] _copy_from_user+0x2e/0x1b0 [ 2940.161504] perf_copy_attr+0x11a/0x8a0 [ 2940.161869] __do_sys_perf_event_open+0xb9/0x2e60 [ 2940.162314] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2940.162746] ? perf_event_set_output+0x5b0/0x5b0 [ 2940.163171] ? wait_for_completion_io+0x270/0x270 [ 2940.163630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2940.164098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.164577] do_syscall_64+0x33/0x40 [ 2940.164916] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2940.165379] RIP: 0033:0x7f081562fb19 [ 2940.165716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.167360] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2940.168042] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2940.168697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2940.169339] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.169980] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2940.170625] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 03:45:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x7, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000005c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4) r3 = signalfd4(r0, &(0x7f0000000140)={[0x2]}, 0x8, 0x1000) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000580)={0x1, 0x0, 0x8, 0x7, 0x52, &(0x7f0000000180)}) 03:45:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000030000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2940.292173] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2940.292173] program syz-executor.3 not setting count and/or reply_len properly [ 2940.404504] FAULT_INJECTION: forcing a failure. [ 2940.404504] name failslab, interval 1, probability 0, space 0, times 0 [ 2940.405661] CPU: 1 PID: 16010 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2940.406228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.406890] Call Trace: [ 2940.407115] dump_stack+0x107/0x167 [ 2940.407489] should_fail.cold+0x5/0xa [ 2940.407865] ? perf_event_alloc.part.0+0x5b/0x2b70 [ 2940.408303] should_failslab+0x5/0x20 [ 2940.408760] kmem_cache_alloc_trace+0x55/0x320 [ 2940.409232] perf_event_alloc.part.0+0x5b/0x2b70 [ 2940.409622] ? __alloc_fd+0x2b8/0x630 [ 2940.409939] __do_sys_perf_event_open+0x579/0x2e60 [ 2940.410408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2940.410836] ? perf_event_set_output+0x5b0/0x5b0 [ 2940.411227] ? wait_for_completion_io+0x270/0x270 [ 2940.411633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2940.412210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.412706] do_syscall_64+0x33/0x40 [ 2940.413121] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2940.413641] RIP: 0033:0x7f081562fb19 [ 2940.413948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.415516] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2940.416267] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2940.417030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2940.417713] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.418290] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2940.418992] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 03:45:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) [ 2940.426920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 03:45:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x24, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)="25f524ca363cff71cd22bdc87bf7b7757032a6240e79395ea1564c0817be680ec2339ff569b1fb0d7f65e6d393941354161aaa690d17828d329c29f3f7b55813ff1e3074d75aacc20aa71ef9b13d007e25f50fdfef6aabf839a41777ef26ef606dbbc41d7a4a9c7ddde3312f96609d2c9c4a06709b7bb1556ccd7a8a7a976035ab7e0753a4d56d60046e3a801801ff0ee36cd7e0e8baff1112837fd35860b24159f638f212565db1d6399f9be2b9c8face5c41a95e06e0efce3461c233df80a1720878bf350219908f927ed023f8a81791cb7d2c809f91d16dda2d29eaf7c861c846") 03:45:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000050000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:45:20 executing program 1: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001e000100c605c70d60d5da6c15e2a29c3d7dc74ae80000000000000000fe8800000000000000000000000000010000000000000000ac1414bb00000000000000000aad60c85ba9e204c877609c285156ce57e949ad3607ee977fbb6890a528a3ee2431c181ca58ac4b1b3162131c66aaaeb1297887b85aa1ce12c51b663f49f43df03c892241714aa374b3e96eced6569c18fc713c5401e207b6866578536bb9321f8eff07b783db3545cd53b97aef43f255c55003"], 0x40}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000700)=""/255, 0xff}], 0x1}, 0x0, 0x100}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r6, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) mount$9p_unix(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x20860, &(0x7f0000000440)={'trans=unix,', {[{@cachetag={'cachetag', 0x3d, '(#]$\\]%}-@'}}, {@posixacl}, {@version_u}, {@cache_none}, {@cache_mmap}, {@aname={'aname', 0x3d, '[$*\xbb!'}}, {@posixacl}, {@msize={'msize', 0x3d, 0x3f}}, {@afid={'afid', 0x3d, 0x4}}], [{@euid_lt={'euid<', 0xee01}}]}}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r8, 0xffff) sendfile(r7, r8, &(0x7f0000000140)=0x240000000, 0x3) sendfile(r4, r5, 0x0, 0x20d315) 03:45:20 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3000, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:45:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00", 0x8000}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x600042, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x2}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140)) 03:45:20 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2940.482261] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2940.482261] program syz-executor.3 not setting count and/or reply_len properly 03:45:20 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000060000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2940.558946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 03:45:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 2940.632363] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2940.632363] program syz-executor.3 not setting count and/or reply_len properly 03:45:20 executing program 6: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @dev, @initdev}, &(0x7f0000000080)=0xc) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000500)={{}, 0x0, 0x10, @inherit={0x0, 0x0}, @subvolid}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1f0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x20800, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) io_uring_enter(r6, 0x6a23, 0xcafc, 0x2, &(0x7f00000000c0)={[0xffffffffffff7437]}, 0x8) poll(0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) io_uring_enter(r0, 0x2b62, 0x0, 0x2, 0x0, 0x0) 03:45:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 3) [ 2940.703697] FAULT_INJECTION: forcing a failure. [ 2940.703697] name failslab, interval 1, probability 0, space 0, times 0 [ 2940.705671] CPU: 0 PID: 16143 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2940.706768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.708069] Call Trace: [ 2940.708507] dump_stack+0x107/0x167 [ 2940.709094] should_fail.cold+0x5/0xa [ 2940.709703] ? create_object.isra.0+0x3a/0xa20 [ 2940.710426] should_failslab+0x5/0x20 [ 2940.711030] kmem_cache_alloc+0x5b/0x310 [ 2940.711681] ? __lockdep_reset_lock+0x180/0x180 [ 2940.712436] create_object.isra.0+0x3a/0xa20 [ 2940.713119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2940.713929] kmem_cache_alloc_trace+0x151/0x320 [ 2940.714655] perf_event_alloc.part.0+0x5b/0x2b70 [ 2940.715408] ? __alloc_fd+0x2b8/0x630 [ 2940.716017] __do_sys_perf_event_open+0x579/0x2e60 [ 2940.716812] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2940.717554] ? perf_event_set_output+0x5b0/0x5b0 [ 2940.718302] ? wait_for_completion_io+0x270/0x270 [ 2940.719095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2940.719925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.720759] do_syscall_64+0x33/0x40 [ 2940.721353] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2940.722157] RIP: 0033:0x7f081562fb19 [ 2940.722751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.725625] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2940.726823] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2940.727947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2940.729070] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.730189] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2940.731309] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 2940.744439] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2940.744439] program syz-executor.6 not setting count and/or reply_len properly [ 2941.079587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.080081] print_req_error: 6 callbacks suppressed [ 2941.080092] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.081452] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.082313] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2941.087412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.087854] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.088764] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.089627] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2941.090627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.091072] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.092627] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.092635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.092659] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.094287] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2941.094730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.096328] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.096833] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.097590] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2941.098479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.099968] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2941.100618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.101340] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2941.102217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.106318] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2941.107471] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2941.108634] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2941.170299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.170795] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2941.170815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.172460] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2941.172482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.174036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.174557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.175052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.175579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2941.176083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2954.966410] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2954.966410] program syz-executor.6 not setting count and/or reply_len properly [ 2954.968948] FAULT_INJECTION: forcing a failure. [ 2954.968948] name failslab, interval 1, probability 0, space 0, times 0 [ 2954.969986] CPU: 1 PID: 16164 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2954.970606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2954.971352] Call Trace: [ 2954.971600] dump_stack+0x107/0x167 [ 2954.971930] should_fail.cold+0x5/0xa [ 2954.972285] ? selinux_perf_event_alloc+0x43/0x190 [ 2954.972741] should_failslab+0x5/0x20 [ 2954.973087] kmem_cache_alloc_trace+0x55/0x320 [ 2954.973508] selinux_perf_event_alloc+0x43/0x190 [ 2954.973884] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2954.973884] program syz-executor.3 not setting count and/or reply_len properly [ 2954.973944] security_perf_event_alloc+0x46/0xa0 [ 2954.977050] perf_event_alloc.part.0+0x18b3/0x2b70 03:45:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 4) 03:45:34 executing program 6: syz_emit_ethernet(0xd0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000c20000000000029078ac1e0001ac14140011009078000000006065f33da9c601c43f545fc9ce556b84eeccc923f3190fcdbe8f30384970776db4ffffff7f00000000fab041d2cfe6966eeacccc07054cb03734a671408452f286c64fdc5abada298a5111b6a4f74a0bffb9de8bb787caad1bdb6d94bcf6bccea2cfc53064828e906b0e32a3a6c2093ec06d12281cd40000022d35450f51c826ec9d1ab4d1d51616d2d01b28af849d5f97f5e519eb2a7fecdf65d75fa37dd965e06f41e2dd6d"], 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000ff072ece46f1d59d9db30c6fb6abd679b1f15115bc14a1ca4d04dfc60408002bca99da31012f23689ae9949d55850635098ea4c96b7a8b14cd2273568b3c128f66c85706ad1474c8e4a1cc240e509d3a3d1e4ea9fa3b5b5f9d589500195a01fd2f033f0615cca7336d007378c2d9ff007fcac466eb8a88660bed854e606ab21eeb766eb731cc32b7f7b2d2344505db793c4f4951285405c84eb8068470063343d304a39a701316e23862de0bf9bd95414aaa4202c4f2572d23437e6dd8d71de8408657151176243642bb192a"]) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000500)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt6_stats\x00') write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x8100}, @void, @llc={@llc={0xfe, 0xfe, "10", "96bcaf8e0b77cf264983355e7e0986a9aac9c8f044d103a8b1d40b1ffffde048eb69e848a2b4c88ceb46e5dd4ec88a7ad3149ba2b0e80ba9afac70c012b656cd1fa7b816722dc5df78dbb420ea3ccb73e16f0815d69e3c18b88b4a3795a03e37b4ec0bd6e9897d1b33dc960e8af436303e2eaf712377c11e0635618cf532c9c07ef208dd14d2b67a48a5e585927ddf6b95b0a1d418970fb0ab1afb33c7cb2084e03e7f5e9584bff4f85c"}}}, 0xb1) syz_emit_ethernet(0x123, &(0x7f00000001c0)={@remote, @random="d49c6b73b77a", @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x3, 0x36, 0x111, 0x64, 0x0, 0x2, 0x21, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x7, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x4e20, 0x2, 0x4, 0x1, 0x9, 0x0, 0x0, 0x5, 0x2, "fe9ab6", 0x8, "2b9a3a"}, "3cca88bc58b00c605ba2c595b9cd71fb6f49bf0771c4537c5d2cf721ac9b2dc6ed1c175e34baf872faa719c3827f7cb28ac598aa74cf4481f942b5eaf432f88caa7ed940246997d43d793c2e1d1634918cfb76ea0f08ec097f8b178918391c379dbfa789a72efc6adf1bc4c7c37238c018698f9db33348cf376e2ec47e197b5133a5ca43556c2d6e9a3203a312803631bbae4d9500a77a158aedfd658f4f55958fae73a72c0df91dc965b6ca0126effb500502fde32a5490b70081d2cb4b63c0a1fe532e7fb149ea2e48445a7c9f9205852ce87ab42fddee570f27b7e53131d1e6175fe043"}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x904, 0x6e0, 0xd36, 0x819]}) 03:45:34 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000233}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) lseek(r0, 0x1, 0x3) 03:45:34 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r4}}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x1, 0x0, 0x8, 0x6d66276e195f145a, 0x0, {0x0, r4}}, 0x20) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r6 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(r2, r5, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r7, 0xed0, 0x0, 0x1, 0x1, 0x0, {0x0, r8}}, 0x5) clock_gettime(0x6, &(0x7f00000000c0)={0x0, 0x0}) syz_io_uring_submit(0x0, r0, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000100)={r9, r10+10000000}, 0x1, 0x1}, 0x7) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)) 03:45:34 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4000, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:45:34 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x523000) fspick(r0, 0x0, 0x2f6da24dafc73475) 03:45:34 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000070000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:45:34 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2954.977535] __do_sys_perf_event_open+0x579/0x2e60 [ 2954.978102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2954.978545] ? perf_event_set_output+0x5b0/0x5b0 [ 2954.978972] ? wait_for_completion_io+0x270/0x270 [ 2954.979420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2954.979892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2954.980368] do_syscall_64+0x33/0x40 [ 2954.980701] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2954.981155] RIP: 0033:0x7f081562fb19 [ 2954.981493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2954.983095] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2954.983779] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2954.984421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2954.985050] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2954.985678] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2954.986308] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 2954.995058] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2954.995058] program syz-executor.6 not setting count and/or reply_len properly [ 2955.368463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.369401] print_req_error: 22 callbacks suppressed [ 2955.369420] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.371946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.372844] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.374562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.375438] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.377168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.378043] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.379774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.380661] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.383564] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.385268] buffer_io_error: 6 callbacks suppressed [ 2955.385281] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2955.387275] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.388916] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2955.390126] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.391772] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2955.392984] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.394615] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2955.395820] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2955.397466] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2955.399417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.400540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.401509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2955.405621] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2955.406853] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2955.408064] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:45:49 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:45:49 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc69de45660031e8d}, {@in=@empty, 0x0, 0x32}, @in=@multicast1, {}, {}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x80, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r4 = epoll_create(0x7ffd) readv(r4, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000001c0)=r5) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000100)={"14b5b3d77afe2e4a0ec09cef8f86786b", r3, r5, {0x4, 0xffff}, {0x101}, 0x2, [0x7ff, 0x7, 0xffff, 0x2864, 0x3, 0x6a, 0x7fff, 0x5, 0xfd, 0x7fff, 0x1f, 0x100000000, 0x5, 0x0, 0xfff, 0x1000]}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) write$binfmt_aout(r6, &(0x7f0000000b00)=ANY=[], 0x742) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) r7 = msgget(0x3, 0x202) msgsnd(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xeb, 0x800) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:45:49 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f00000001c0)={'gre0\x00', @ifru_flags}}) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) 03:45:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xffe, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) ioctl$KDDELIO(r0, 0x4b35, 0x7) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000012e2f46696c653000"]) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x7fffffff) 03:45:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = epoll_create(0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$sndseq(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) write$binfmt_elf64(r0, &(0x7f0000002040)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e00000000000000000000000000080000000000000000000000000000000000000000003800020000000000000003"], 0xaf2) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 03:45:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000090000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:45:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 5) 03:45:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4800, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:45:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) [ 2969.604629] FAULT_INJECTION: forcing a failure. [ 2969.604629] name failslab, interval 1, probability 0, space 0, times 0 [ 2969.604645] CPU: 1 PID: 16192 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2969.604651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2969.604655] Call Trace: [ 2969.604675] dump_stack+0x107/0x167 [ 2969.604687] should_fail.cold+0x5/0xa [ 2969.604701] ? create_object.isra.0+0x3a/0xa20 [ 2969.604714] should_failslab+0x5/0x20 03:45:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 7) [ 2969.604725] kmem_cache_alloc+0x5b/0x310 [ 2969.604740] create_object.isra.0+0x3a/0xa20 [ 2969.604750] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:45:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000000a0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2969.604764] kmem_cache_alloc_trace+0x151/0x320 [ 2969.604782] selinux_perf_event_alloc+0x43/0x190 [ 2969.604794] security_perf_event_alloc+0x46/0xa0 [ 2969.604807] perf_event_alloc.part.0+0x18b3/0x2b70 [ 2969.604825] __do_sys_perf_event_open+0x579/0x2e60 03:45:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="48ef6d51c08a7c5d219d9e00554b9ed38db1755423b4139ed9fd5fc41a82e9210e5e8b01fc5761b1b30ed26a2e62f98c94074cdc997c8356c18f6891b767603d7a3a7596eebde76fa751f78fad6c58116763bc43e67f5e9545caf5e531b8b5e8b865f413605f152cb66e", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) futimesat(r2, &(0x7f0000000140)='mnt/encrypted_dir\x00', &(0x7f0000000180)={{}, {0x77359400}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)=ANY=[@ANYBLOB="f2dea667c1435e0abc77c10daf94db663993c6a0a7318a9666e10de5a085a240057bebea8e5aab7609114395730d8496377e6351ae851df14561a932aa97", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="010100f1000000006c653000"]) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) unlinkat(r4, &(0x7f0000000000)='./file0/file0\x00', 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x4) rename(&(0x7f00000000c0)='./mnt\x00', &(0x7f0000000300)='./file0/file0\x00') readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000200)=""/128, 0xdc}], 0x2) [ 2969.604843] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2969.604855] ? perf_event_set_output+0x5b0/0x5b0 [ 2969.604864] ? wait_for_completion_io+0x270/0x270 [ 2969.604891] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2969.604902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2969.604914] do_syscall_64+0x33/0x40 [ 2969.604924] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2969.604932] RIP: 0033:0x7f081562fb19 [ 2969.604943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2969.604949] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2969.604961] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2969.604968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2969.604974] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2969.604981] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2969.604987] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 2969.653672] FAULT_INJECTION: forcing a failure. [ 2969.653672] name failslab, interval 1, probability 0, space 0, times 0 [ 2969.653695] CPU: 0 PID: 16198 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2969.653707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2969.653714] Call Trace: [ 2969.653738] dump_stack+0x107/0x167 [ 2969.653760] should_fail.cold+0x5/0xa [ 2969.653781] ? find_get_context+0x18d/0x9a0 [ 2969.653804] should_failslab+0x5/0x20 [ 2969.653824] kmem_cache_alloc_trace+0x55/0x320 [ 2969.653859] find_get_context+0x18d/0x9a0 [ 2969.653881] ? security_perf_event_alloc+0x79/0xa0 [ 2969.653901] ? ctx_sched_out+0xa00/0xa00 [ 2969.653937] __do_sys_perf_event_open+0xed1/0x2e60 [ 2969.653968] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2969.653992] ? perf_event_set_output+0x5b0/0x5b0 [ 2969.654012] ? wait_for_completion_io+0x270/0x270 [ 2969.654061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2969.654082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2969.654107] do_syscall_64+0x33/0x40 [ 2969.654125] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2969.654139] RIP: 0033:0x7f081562fb19 [ 2969.654158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2969.654169] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2969.654192] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2969.654210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2969.654221] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2969.654241] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2969.654254] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 2969.671585] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2969.671585] program syz-executor.3 not setting count and/or reply_len properly [ 2969.766834] FAULT_INJECTION: forcing a failure. [ 2969.766834] name failslab, interval 1, probability 0, space 0, times 0 [ 2969.766857] CPU: 0 PID: 16301 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2969.766868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2969.766876] Call Trace: [ 2969.766899] dump_stack+0x107/0x167 [ 2969.766921] should_fail.cold+0x5/0xa [ 2969.766943] ? create_object.isra.0+0x3a/0xa20 [ 2969.766965] should_failslab+0x5/0x20 [ 2969.766984] kmem_cache_alloc+0x5b/0x310 [ 2969.767010] create_object.isra.0+0x3a/0xa20 [ 2969.767030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2969.767056] kmem_cache_alloc_trace+0x151/0x320 [ 2969.767082] find_get_context+0x18d/0x9a0 [ 2969.767101] ? security_perf_event_alloc+0x79/0xa0 [ 2969.767122] ? ctx_sched_out+0xa00/0xa00 [ 2969.767156] __do_sys_perf_event_open+0xed1/0x2e60 [ 2969.767185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2969.767207] ? perf_event_set_output+0x5b0/0x5b0 [ 2969.767225] ? wait_for_completion_io+0x270/0x270 [ 2969.767283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2969.767302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2969.767323] do_syscall_64+0x33/0x40 [ 2969.767342] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2969.767355] RIP: 0033:0x7f081562fb19 [ 2969.767374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2969.767384] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2969.767406] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2969.767417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2969.767428] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2969.767439] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2969.767451] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 2969.790135] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2969.790135] program syz-executor.3 not setting count and/or reply_len properly [ 2969.802938] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2969.802938] program syz-executor.5 not setting count and/or reply_len properly [ 2969.819489] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2969.819489] program syz-executor.5 not setting count and/or reply_len properly [ 2970.077518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.078499] print_req_error: 6 callbacks suppressed [ 2970.078518] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.081138] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.082859] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2970.088462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.089398] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.091137] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.092850] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2970.094442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.095355] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.097107] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.098797] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2970.100424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.101347] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.103075] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.104780] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2970.106376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.107294] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.109286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.110172] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2970.112121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.113368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2970.116310] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2970.117608] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2970.118879] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2970.120147] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:46:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x4fff, 0x4, 0x0, 0x0, 0x0, "ddc12ff24158c394525593060b71dfbc00", 0x1, 0x4}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:46:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 8) 03:46:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4a00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:46:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000000d0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:03 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0x818d6000) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0xff, 0x40, 0x0, 0x9, 0x4000, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x429bb1a9, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x1280, 0xb0, 0x3, 0xb, 0x9, 0x8, 0x6, 0x0, 0x7, 0x0, 0x8}, r1, 0x10, r2, 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x61d, 0x2) 03:46:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x1010, r0, 0x8000000) r6 = syz_io_uring_setup(0x5433, &(0x7f0000000140)={0x0, 0x6ec5, 0x25, 0x3, 0x6e, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x90002000}, r8, 0x3, 0x0, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r10, 0x0, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r11, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r12}}, 0xfe000) 03:46:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28010000170001000000000000000000fc0200000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2001000000000000000000fd000000027f0000010f8a00000000000000000000000000000000000000000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00'/128], 0x128}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x80, 0x3, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=@getae={0x358, 0x1f, 0x800, 0x70bd29, 0x25dfdbfe, {{@in=@empty, 0x4d5, 0x2, 0x6c}, @in6=@remote, 0x8, 0x34ff}, [@lifetime_val={0x24, 0x9, {0x200, 0xffffffffffffffff, 0x289, 0x1}}, @mark={0xc, 0x15, {0x35075b, 0x140000}}, @policy={0xac, 0x7, {{@in=@broadcast, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0x0, 0x80, 0x98}, {0x4, 0x7fffffff, 0xfe5, 0x3000000000000, 0x800, 0x10001, 0x0, 0x7fff}, {0x3ff, 0xfffffffffffffffb, 0x8, 0x1}, 0x3, 0x6e6bb8, 0x1, 0x0, 0x2, 0x1}}, @mark={0xc, 0x15, {0x35075b, 0x81}}, @algo_comp={0x12a, 0x3, {{'lzjh\x00'}, 0x710, "c1a036fec8e1da8103967086ac073b3ce15497a47810db57370a4608b2d7556d7a7a2af7637a819d6e781773140187d11ef8bc7a26a17167e94eabf7be68c0796cf9b40ab80efbc629ac70b99e53f9dc6449cdea96d91b3b81f066e1d0be0575212a70b559b027e7e3a5763480a69ef9ebbe566b7fa58e2ec8ffe62994a975213713e8c45e52a49806ea55550e292e0844f06bdd29e4ef73b60003de4e36cffab9302e18f47d5ad1f7fdba2d98bbb5f3ae47effc2e0490f8d2a87d697928e14d05d26936687dcdbab596ccf1cc8fc61652bf9349bbda40f6146cdbfdc32d00735e1d"}}, @coaddr={0x14, 0xe, @in=@remote}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x41}}, @lifetime_val={0x24, 0x9, {0xffffffff7fffffff, 0x0, 0x6, 0x7fff}}, @sec_ctx={0xab, 0x8, {0xa7, 0x8, 0x1, 0xfc, 0x9f, "3045bfbb13c24761d7cac058a06a8ace3c1320c234d221c42efe321e3a8ee9a302290b64ccef0833c4bd6e829cbb9ef67b7032f11f9fd066610f292a29f18a276bce513d1f01562faa430681d364b62dea33e04e05a77da371f8ee1cd84ea6981686c168e9ba905c68396a8a60f46384f5a8451e789d8c9370517f7a82a40a7520fd46bfde407eb8545ce1749f9e0dd9b3000c87d5688acfe60a822f6761bf"}}]}, 0x358}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000800)={0x0, @l2={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x1}, @ax25={0x3, @default, 0x6}, @l2={0x1f, 0x3, @none, 0xdb, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x101, &(0x7f00000007c0)='wg1\x00', 0x4, 0x200, 0x6}) r2 = syz_open_procfs(0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x12}, 0x18) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x10201, 0xb1) sync_file_range(r3, 0x1, 0x85, 0x3) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) 03:46:03 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2983.569231] FAULT_INJECTION: forcing a failure. [ 2983.569231] name failslab, interval 1, probability 0, space 0, times 0 [ 2983.570910] CPU: 1 PID: 16337 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2983.571870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2983.573030] Call Trace: [ 2983.573406] dump_stack+0x107/0x167 [ 2983.573924] should_fail.cold+0x5/0xa [ 2983.574463] ? __d_alloc+0x2a/0x990 [ 2983.574977] should_failslab+0x5/0x20 [ 2983.575516] kmem_cache_alloc+0x5b/0x310 [ 2983.576096] __d_alloc+0x2a/0x990 [ 2983.576599] d_alloc_pseudo+0x19/0x70 [ 2983.577127] alloc_file_pseudo+0xce/0x250 [ 2983.577710] ? alloc_file+0x5a0/0x5a0 [ 2983.578248] ? ctx_sched_out+0xa00/0xa00 [ 2983.578835] anon_inode_getfile+0xc8/0x1f0 [ 2983.579442] __do_sys_perf_event_open+0xf59/0x2e60 [ 2983.580152] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2983.580838] ? perf_event_set_output+0x5b0/0x5b0 [ 2983.581503] ? wait_for_completion_io+0x270/0x270 [ 2983.582213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2983.582955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2983.583645] do_syscall_64+0x33/0x40 [ 2983.584173] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2983.584900] RIP: 0033:0x7f081562fb19 [ 2983.585425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2983.587036] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2983.587036] program syz-executor.3 not setting count and/or reply_len properly [ 2983.588027] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2983.588049] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2983.588060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2983.588071] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2983.588089] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2983.594794] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 03:46:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sync_file_range(r1, 0x8, 0x5, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x170, 0x2b, 0x400, 0x70bd25, 0x25dfdbfb, {0xe}, [@generic="b6781f64d6e0c2f4382217307a8e7561e5dde1afe1cdfd117ea3c556e742f77b90532d3cf7c4fb9c2163f35dfaf8827e20db3218973b710cf865f50f5ab91bb1a754e33cb265456be3bb1d711e104a0e7128cb3bbf1e1747c5325aa75f500f007e8e5fef1eff4d8bb12e79d0e3b8d6ff86b2bcd1274a8efa322cebdb16a2a95be43df2d50e790123a696a52e16d0185d4600d299683b22a99a7db8458ec2cb3a518b833c04d6d7fd0fa250a9b3f094e91e5443f250ca05de1f663374371b80351bb12efbb5b315256d1cdbfd9b4d3cca2ca866c9c2c87360be8adeb213b78e9981ea7e58633bc006e60eb47c96e2ed477541e3b6e4", @nested={0x61, 0x83, 0x0, 0x1, [@generic="f776e8b9334c96c82ce3894f536c5f5e3639b64fe136b40049c4256a1ae801cca9eef0db7f99bd938737e322540e9fae8a08e180666347c3ace3830894a9cf0e41dab773c4f9280aceacd90f0e9289b6cc3f01ddfbcc2bf69a5ec0dc6d"]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) fallocate(r0, 0x30, 0x81, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x200}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r5, 0x6, &(0x7f0000000600), 0x0, 0x0, 0x1}, 0x5) 03:46:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 03:46:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000000e0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 9) 03:46:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4c00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 2983.738752] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2983.738752] program syz-executor.3 not setting count and/or reply_len properly [ 2983.756744] FAULT_INJECTION: forcing a failure. [ 2983.756744] name failslab, interval 1, probability 0, space 0, times 0 [ 2983.758494] CPU: 1 PID: 16417 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2983.758507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2983.758514] Call Trace: [ 2983.758538] dump_stack+0x107/0x167 [ 2983.758559] should_fail.cold+0x5/0xa [ 2983.758581] ? create_object.isra.0+0x3a/0xa20 [ 2983.758603] should_failslab+0x5/0x20 [ 2983.758621] kmem_cache_alloc+0x5b/0x310 [ 2983.758647] create_object.isra.0+0x3a/0xa20 [ 2983.758667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2983.758693] kmem_cache_alloc+0x159/0x310 [ 2983.758720] __d_alloc+0x2a/0x990 [ 2983.758748] d_alloc_pseudo+0x19/0x70 [ 2983.758766] alloc_file_pseudo+0xce/0x250 [ 2983.758783] ? alloc_file+0x5a0/0x5a0 [ 2983.758810] ? ctx_sched_out+0xa00/0xa00 [ 2983.758835] anon_inode_getfile+0xc8/0x1f0 [ 2983.758863] __do_sys_perf_event_open+0xf59/0x2e60 [ 2983.769718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2983.769741] ? perf_event_set_output+0x5b0/0x5b0 [ 2983.769759] ? wait_for_completion_io+0x270/0x270 [ 2983.769807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2983.769825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2983.769847] do_syscall_64+0x33/0x40 [ 2983.769866] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2983.769879] RIP: 0033:0x7f081562fb19 [ 2983.769898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)=' ', 0x1}], 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f0000000480)=""/213, 0xd5}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 2983.769909] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2983.769931] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2983.769942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2983.769954] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2983.769965] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 03:46:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000003e0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 2983.769977] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 2983.883007] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2983.883007] program syz-executor.3 not setting count and/or reply_len properly 03:46:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6800, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:46:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 10) 03:46:03 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:46:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000400000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x40, 0x8, 0x7fffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000140)={0x494, 0x1, 0xfffffffd, 0x1, 0x7f, "975bc28f216e5f8c9498c81c6b4f32d941c35f", 0x11, 0x6cd1}) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:46:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x1100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000200)={0x8, 0x709, 0x2, 0xfff, 0x6, 0x8}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xffffffff}}, './file0\x00'}) fsmount(r0, 0x1, 0x71) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {}, 0x28, {0x2, 0x4e24, @remote}, 'ip6gre0\x00'}) [ 2983.977021] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2983.977021] program syz-executor.3 not setting count and/or reply_len properly [ 2983.985151] FAULT_INJECTION: forcing a failure. [ 2983.985151] name failslab, interval 1, probability 0, space 0, times 0 [ 2983.986875] CPU: 1 PID: 16483 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2983.987873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2983.989061] Call Trace: [ 2983.989460] dump_stack+0x107/0x167 [ 2983.989988] should_fail.cold+0x5/0xa [ 2983.990549] ? __alloc_file+0x21/0x320 [ 2983.991114] should_failslab+0x5/0x20 [ 2983.991668] kmem_cache_alloc+0x5b/0x310 [ 2983.992265] __alloc_file+0x21/0x320 [ 2983.992815] alloc_empty_file+0x6d/0x170 [ 2983.993416] alloc_file+0x5e/0x5a0 [ 2983.993937] alloc_file_pseudo+0x16a/0x250 [ 2983.994544] ? alloc_file+0x5a0/0x5a0 [ 2983.995106] ? ctx_sched_out+0xa00/0xa00 [ 2983.995701] anon_inode_getfile+0xc8/0x1f0 [ 2983.996333] __do_sys_perf_event_open+0xf59/0x2e60 [ 2983.997056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2983.997764] ? perf_event_set_output+0x5b0/0x5b0 [ 2983.998444] ? wait_for_completion_io+0x270/0x270 [ 2983.999165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2983.999910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2984.000660] do_syscall_64+0x33/0x40 [ 2984.001203] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2984.001934] RIP: 0033:0x7f081562fb19 [ 2984.002474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2984.005055] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2984.006137] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2984.007141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2984.008147] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2984.009160] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2984.010167] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 03:46:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x1, &(0x7f0000000100)={0x0, 0x32, 0x0, @thr={&(0x7f0000000240)="a46b646d2e7353efe2c9121f76abe431e05a64c332d0d5ac28926ed2724f1c459f2115447e784632eac5af971af93054498b5ea90319743080b2b46da3e2908eac903ab7d6f128931a629f1b22239ddecd81123e158ac2658247ea528361a1a58282a10af6c2ad02b6d1e66f00f2ea108fb77e6bc9fd25bae91b8771a3df7fe7177166a675a18196cbe35c33858e671aad7857fcaa06bbab835872908adae214b95566658030e84a61a275d65fbf11a1428b12bce9b4041aaad48f8a3728b9420e19333cb1f0358d2e4e9731059f150cff665344e99502b3c421", &(0x7f0000000080)="6a1c66b94f06bc2c4bc820dab73fe415ed5e9cf526a948819ba1ee2d4b711eaebaacf7a2bb23162f81f0d2aab165f8904c1468095ea7"}}, &(0x7f0000000140)=0x0) timer_gettime(r1, &(0x7f00000000c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:46:03 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000480000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0x7ce, 0x81, 0xfffffffc, 0x0, 0x20, "22b175030eacf91ce16ddc3f255664e4dee054", 0x0, 0x4a}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 2984.088721] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2984.088721] program syz-executor.3 not setting count and/or reply_len properly [ 2984.502146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.502696] print_req_error: 6 callbacks suppressed [ 2984.502707] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.504098] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.504974] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2984.509272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.509714] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.510588] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.511482] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2984.512943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.513415] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.514395] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.515258] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2984.516176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.516766] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.517649] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.518503] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2984.519538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.519974] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.520849] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2984.521720] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2984.522664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.523122] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2984.523834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.524372] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2984.525325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.525801] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 2984.544319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.544812] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2984.547547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.548009] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2984.548735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.549654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.550189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.550778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.551923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2984.552505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:46:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 11) 03:46:18 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r1 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x7ffff000, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)=0x8, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffff0dff) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000a80)={0x1f, {0x20, 0x20, 0x8, 0x800, 0x2cd9}}) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x4000010, 0xffffffffffffffff, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000014c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a40)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000000c0), &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) [ 2998.373576] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2998.373576] program syz-executor.2 not setting count and/or reply_len properly [ 2998.407803] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2998.407803] program syz-executor.2 not setting count and/or reply_len properly [ 2998.415222] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2998.415222] program syz-executor.3 not setting count and/or reply_len properly [ 2998.417752] FAULT_INJECTION: forcing a failure. [ 2998.417752] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.419665] CPU: 1 PID: 16625 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 2998.420732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2998.422027] Call Trace: [ 2998.422450] dump_stack+0x107/0x167 [ 2998.423027] should_fail.cold+0x5/0xa [ 2998.423639] ? create_object.isra.0+0x3a/0xa20 [ 2998.423664] should_failslab+0x5/0x20 [ 2998.423685] kmem_cache_alloc+0x5b/0x310 [ 2998.423714] create_object.isra.0+0x3a/0xa20 [ 2998.426061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 03:46:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0xa0040, 0x23456}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0xcae574025826629f, 0x0, 0x0) 03:46:18 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:46:18 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000004c0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:18 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1880, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1c, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'team_slave_0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="11000000060000046400000009000000090000003d000000090000000600000004000000"]}) 03:46:18 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6a00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:46:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x0, &(0x7f00000001c0)}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x13) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000140)) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0xffd, 0x0, 0x0, 0x0, 0xfd, "ddc12fbfd643f211459b00"}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/120}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)) [ 2998.426089] kmem_cache_alloc+0x159/0x310 [ 2998.426120] __alloc_file+0x21/0x320 [ 2998.426141] alloc_empty_file+0x6d/0x170 [ 2998.426162] alloc_file+0x5e/0x5a0 [ 2998.426186] alloc_file_pseudo+0x16a/0x250 [ 2998.426205] ? alloc_file+0x5a0/0x5a0 [ 2998.426234] ? ctx_sched_out+0xa00/0xa00 [ 2998.426261] anon_inode_getfile+0xc8/0x1f0 [ 2998.426287] __do_sys_perf_event_open+0xf59/0x2e60 [ 2998.426318] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2998.426342] ? perf_event_set_output+0x5b0/0x5b0 [ 2998.426362] ? wait_for_completion_io+0x270/0x270 [ 2998.426412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2998.426432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2998.426456] do_syscall_64+0x33/0x40 [ 2998.426475] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2998.426490] RIP: 0033:0x7f081562fb19 [ 2998.426510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2998.426522] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2998.426545] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 2998.426557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 2998.426568] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.426580] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2998.426592] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 2998.434562] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 2998.434562] program syz-executor.3 not setting count and/or reply_len properly [ 2998.697276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.697843] print_req_error: 22 callbacks suppressed [ 2998.697854] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.699336] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.700303] buffer_io_error: 6 callbacks suppressed [ 2998.700311] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 2998.705357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.705851] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.706818] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.707765] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 2998.708542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.709044] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.710022] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.710971] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 2998.711745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.712256] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.713206] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.714152] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 2998.714942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.715453] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.716417] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2998.717373] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 2998.718129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.718739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.719331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2998.722257] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 2998.722949] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 2998.723644] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:46:32 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:46:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmsg$unix(r2, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) fallocate(r2, 0x0, 0xffff, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x40, 0x7f}, {0x8, 0x8}, 0x7, 0x6, 0xa9}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r6 = dup2(r5, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000240)=""/61, 0x3d}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x3294}}, 0x100) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x8001, 0x0, [0x4, 0x8, 0x400000000], &(0x7f0000000040)}) syz_open_dev$ttys(0xc, 0x2, 0x1) 03:46:32 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x83) perf_event_open(&(0x7f0000001700)={0x5, 0x80, 0x1, 0x7, 0x80, 0x3, 0x0, 0x0, 0x4000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0xffff, 0x6}, 0x400, 0x0, 0x9, 0x3, 0x401, 0x3ff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffffff7}, 0x0, 0x8, r0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002000)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd_index=0x7, 0x8, &(0x7f0000001f40)=[{&(0x7f0000002140)="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", 0x18e}, {&(0x7f0000001980)="b6ff435fab73c7d1aa0dc845400355b483fc7edb2bf32f7a54e64bf29589844390d25e77ae8b1114714cfee0375ede61b5c62420484978c1b574f84a8beccddfdcf7872baec06902d90f53763f7e45a290a0ea1814a485558d023d8198342f3cd0684229d08de7b8d3e5ccb32806d151f32f12b0734c80a3b9c1e33595d5a9c7d49b0f74a5f7dcad7e50baa2db50c54f79860b55f59b9a6556af962e7690c59af763a8a3a7", 0xa5}, {&(0x7f0000001880)="eca999b5a61198cd0f812db32e1826e61854a70c14f807900f01bc6af1cb3d365b17d8", 0x23}, {&(0x7f0000001a40)="e07f7fb406a5460e356779a9a5a2dbfb4f7a4c0bb79fb98106d3bd9aad8390cf6840f73993a4e553d5b8a673a30bf9cad19f221d62f8272e4bba9b8187ab7207f81ea33569363847a3670c46fe2c2490f1b8dd6b2a21e772f8aabb3ef2e654d1f0b9ce75e0d780dd6194fc7daa789cbf66301561c007450d1c9ecd9e7fa822ea328f43aeb9068e17282f98c7b5798ab7cc59f6495aa19e1a5ae50eb301e2736b7cf115ce09e3c672c39f", 0xaa}, {&(0x7f0000001b00)="1c1f80f447254b11ea0c8c22d4a141027faf38a849fb161ac05ca1242d11e2681309fd1a6d725db7de3caf92ec67d880980319ae0372e5f8152f959170461223b528ba79b46d4d295715e0fba0bb8d43a92fbed6755fddbb28f947e2bd914d1ccdd2946807f17055838826deaedbdc5677b4d0e4831550c4c2277c127c1751ce0cb42adf53726f48c1a2da8ce06f06", 0x8f}, {&(0x7f0000001bc0)="e64b091a5c1baaf6", 0x8}, {&(0x7f0000001c00)="53564740cd1616db974e6d2be6515d7f5f9dcff6471c4c4274525f45b43c8d2d5ae0a299c59a7e155c6a139d1e336bede415c20f8b1b89c8a7945c3ddd2b6d708c0f574d9f4b90e88e860d657a56e9d23d600cf67ddf6b4f5675248595ce95aecb5aa5976cf7ae0cc37346b86ed88734ec0aa4c77afde2a90d496b5934844dd8489a8c8e6b7d1885418242c880c6a4fd3d6459a8924fa0aa0e5c76cb83c20420efa45a19cc33567e6bb40fc9a3164e645613c54bbcfa0b6de37ffd9da49584", 0xbf}, {&(0x7f0000001cc0)="c3d97ed986aa106f526120d5f4610e4cf0f71e97e3e28dfdc54a1e228c345d710bcd077a6bdbe6bef46c47b1a0ff25b106751d4df8efd59f2277dac9c0a435171254210f765b0bd7c60d75349976d62b73c2ebae96968f9ef3b4391cb9d6280440aaf19796994d2cf218c7bb0f4ac8076433682ddb764fef0ef8f0f3eb11618820bcd95dbbabe6098c836c28e509f114bbc954976a331ef8bd45ad1ebdf5", 0x9e}, {&(0x7f0000001d80)="31876f9849bb80960bf88d7850edbe40fa685cb17d82a44bc695d06c83b296834086e12ef70ace51b06750231b77c742ae799e0c5b34fa89d1dfa9f53cc5f2dee45f5fa896f468fe15e6dda812d3f187cd8448256b4d7597d63b66b65928e52fe4ccb04131b9f46a0929c66926f6651e7312272381c12b2faf03440306447760faf53805563f44dc02f9b10f", 0x8c}, {&(0x7f0000001e40)="090fe6b67dddc1ded42301d922e61149662f2f9701653cfef73757d56a7b3179c04213f785d638c700c05458f22ac4f3f9455753b58806e4217bda17ca94b37f7bf47bd51aace912ee1995d937269c9613195d48814de598b1b1d27dd45b18a1b128a22566d60701b483e687e8395f395489e06b7301818c23a4970a9d1d93e831d44dd3b10c9b1bc64a4886bbd2318f570594e7720ee795416afa01bd519974a60e5c0faad68c670c2edbd4c0b02ace15e2f90a869be2415f0327c87c339dd1e95cc3cbaefe0b18ee93e37b8b746c7888f4c53355e8df932d06aec29ba2", 0xde}], 0xa, 0x4}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) utimensat(r0, 0x0, &(0x7f0000000200), 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x9, 0x6, &(0x7f0000000580)=[{&(0x7f0000000240)="ba7bcb27fdc3024e8c454728a40b78de024cd6eaef018d605fdd2714b77bfe36e23a2c9e7afeaeee3f2bea55b175848cc4b778172987077f33df7cbacc6b2ec958cce59ffff525287b594dd9cec7cb82c11b5eb4cd3037069ac3415924cb4fb1dd79810c57b372acbb6dd6908de526fb0b1d21a24bccc78e014d88c36302901acb098f3e69166b768c2f9ecb9c391b80d9bdedbfa563d282751becd690", 0x9d, 0x7f}, {&(0x7f0000000340)="0e1ec03f71e0a696a58113a48029715a4e04bcf01d257ed79f4a3501129ab46fbf12159966cb98224064b19cd54dc948ff4a819b582ff9819108471a5b9c8da4bb266fa1602ad01425803b258fe0b4882cceb01d96fa4c53248222283c9493fa4bd34c3e6381410c4cebd8c11a5f960d6caa72a86b22c0780b812494da46163e566c90c2e6d10663b2b7afb82da1dbf88cfa63a96b558012f05ac43b44e0375f32fd", 0xa2, 0x1d}, {&(0x7f0000000400)="73558d78fed6d7e5dd07dd403194a3fbc53d145ebb42fa76b3a9fd470f9d659ea8b70aaeaf67d7", 0x27, 0x8}, {&(0x7f0000000440)="56109f8776bd390569b61a822541ae8e28dd9004844179d7e2e7d7fa6ec673e4783b77d40cbc6b2181f5ed0359cf71f56afbb550dbd6675439886ede537ef418ed0f8aaa8b19e9a0464ab89a0ef818b1622aa4e5fb6ba70b35c297117044cc131d76aa0e59c6e592aa775e38b334fb8943befaa8ff32e93e02fb9c6d6f2f1c35a66247347ed6bd7e3b301d934aedc9980b05158c100f88ef356a29fc757cdb1fa85bed93c730fccff3092055b9bb7b148e2c6ff963587d03b68162449ce2", 0xbe, 0x80000000}, {&(0x7f0000000700)="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", 0x1000, 0x5}, {&(0x7f0000000500)="2e2793f852e395a51277626c622b3ff02a", 0x11, 0x6f3}], 0x8000, &(0x7f0000001780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB="2caf324107000000d3a573697a653d744e7469632c666f776e79d5ef65bf31b6441f1765723c00"/67, @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f757365726a4335e7e53d292a232c6f626a5f757365723d237065726d69745f646972656374696f2c7065726d69745f64697265637469072c00"]) r2 = openat(r1, &(0x7f0000000640)='./file1\x00', 0x2400, 0x34) syz_open_dev$vcsn(0x0, 0xef03, 0x240000) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x83, 0x6, @remote}, 0x14) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x100c4011) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000680)=0x5) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 03:46:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x2, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:46:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) r0 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @private0, 0x82}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x6, {{0xa, 0x4e24, 0x7, @empty, 0x1}}, {{0xa, 0x4e21, 0x0, @local, 0x8}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='autogroup\x00') syncfs(r4) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@local, r3}, 0x14) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, './mnt\x00'}, 0x6e) chroot(&(0x7f0000000140)='./file2\x00') ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000400)={'bond_slave_0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="04000000000000000a004e200000000520010000000000000000000000000000ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000040000000a004e2400010001ff02000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200004991fc0200000000000000000000000000009d090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000001ff02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e20000200000000000000000000000000000000000100000080000000000000000000000000000000000000e0ff000000000000000000000000000000000000000000000000000000002f0e26c2000000000000000000000000000000000000000000000000000500"/656], 0x290) setresuid(0xffffffffffffffff, 0x0, 0x0) 03:46:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000680000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 12) 03:46:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6c00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 3013.087110] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3013.087110] program syz-executor.3 not setting count and/or reply_len properly [ 3013.101467] FAULT_INJECTION: forcing a failure. [ 3013.101467] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.101489] CPU: 1 PID: 16751 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 3013.101500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.101507] Call Trace: [ 3013.101532] dump_stack+0x107/0x167 [ 3013.101553] should_fail.cold+0x5/0xa [ 3013.101578] ? security_file_alloc+0x34/0x170 [ 3013.101602] should_failslab+0x5/0x20 [ 3013.101621] kmem_cache_alloc+0x5b/0x310 [ 3013.101650] security_file_alloc+0x34/0x170 [ 3013.101675] __alloc_file+0xb7/0x320 [ 3013.101694] alloc_empty_file+0x6d/0x170 [ 3013.101713] alloc_file+0x5e/0x5a0 [ 3013.101736] alloc_file_pseudo+0x16a/0x250 [ 3013.101753] ? alloc_file+0x5a0/0x5a0 [ 3013.101780] ? ctx_sched_out+0xa00/0xa00 [ 3013.101806] anon_inode_getfile+0xc8/0x1f0 [ 3013.101830] __do_sys_perf_event_open+0xf59/0x2e60 [ 3013.101858] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3013.101880] ? perf_event_set_output+0x5b0/0x5b0 [ 3013.101898] ? wait_for_completion_io+0x270/0x270 [ 3013.101946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.101965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.101986] do_syscall_64+0x33/0x40 [ 3013.102004] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 3013.102018] RIP: 0033:0x7f081562fb19 [ 3013.102036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:46:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="779f8d9a001f000000"]) chdir(&(0x7f0000000240)='./file0\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0xa400, 0x0) setresuid(0x0, r0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:46:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 13) 03:46:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000006c0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 3013.102047] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3013.102069] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 3013.102080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3013.102092] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.102103] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3013.102115] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 3013.232766] FAULT_INJECTION: forcing a failure. [ 3013.232766] name failslab, interval 1, probability 0, space 0, times 0 03:46:33 executing program 1: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0xfffffffb) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r4}}, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000400)=0x5) syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='syscall\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9, 0x1, 0x8, 0x20, 0x0, 0x7fff, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000180), 0xc}, 0x8040, 0x5005, 0x4, 0x6, 0x200, 0x1000, 0x2, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r5, 0x8) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/70, 0x46, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mknodat$loop(r6, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) fcntl$getownex(r2, 0x10, &(0x7f0000000280)) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) [ 3013.232782] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 3013.232790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.232794] Call Trace: [ 3013.232812] dump_stack+0x107/0x167 [ 3013.232826] should_fail.cold+0x5/0xa [ 3013.232841] ? create_object.isra.0+0x3a/0xa20 [ 3013.232856] should_failslab+0x5/0x20 [ 3013.232868] kmem_cache_alloc+0x5b/0x310 [ 3013.232881] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 3013.232896] create_object.isra.0+0x3a/0xa20 [ 3013.232909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3013.232925] kmem_cache_alloc+0x159/0x310 [ 3013.232946] security_file_alloc+0x34/0x170 [ 3013.233003] __alloc_file+0xb7/0x320 03:46:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[]) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x77}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xe0d72ae3454b88f6}, 0x8000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400002, 0x9) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000012c0)={{r0}, "34cc81db7fdf2490859ca287483f21fed31d9724d6f30907bec000ffc9730df8719a23dd9926002bd591ea273006a3fb2fbf88367893ae0f5d76930da0fe5854315fd2cbeed380369afbcdd1d2c248b969e26daa16bb4f1a0b61a1ea98b461b7f46a508ead3d4608dd23a3a04915c074f08185c8f3292a68e764a124aa4226885ceab0a098a20726d0f7ee8c1c2dd3252c9cc76e00f12a674e8a65ef134fd64636d211c97f4189d72e61d7d7eaf580fe34b83d37aa412324640fab2ed4d4ee8a5b0533251529235c01a16319972f063d51b7726309e23152b49f2ab643a0422f7843a0d41196631aff2c76ab9bf81e8c03ebf308178695e0b28e308ab52509c6098b74f3e3557d4a160698bd75ef9a3aea3bbd07000a53878f66870af537384707256eda6c178ce822fcdc0334ab24a268b19aeb431dc8921115c277b09f7641ce64b94fbce40a8f8bf7debfa35f2b318fbb9358fd7b7768bb98900779e34831a92cecaa8b2e23cc3b7824a18221678868f1ef93b022a5222bdbabcfc37c09503b9ec006b59c7c054863e4f67cf82714ee7b5c51f5ab216b1c14f6f6180fc5785870448f39fdc84caee95fc372bd1f900843ed72cf561b9c9713a5c48bcbcfc9c97db4d47970ad365d4e746cd1a71dd465df772832d85e403d912a4e750dddeac920b6f8caff7a7705a06df52d788f00c77d21f51a350a857dd9a05750e2f118b893d455763178f62d05cf33e9eca59e6e7536a8ab3dab3d030d7f81dc3192a015ba9e1e18d110edf14220661896e11fb0213cf27ffaf4fc75ac55bfab414ce0400e04a6cf55ea346a8b387370c1ee78e406e963da7b4a9a13092195ac193b60fe10961237210cfd045e1fd9469be11b4e4050c29e9436e18d3b77ee148f1ad9228bce89bab14d7ab41503dbd56777380fc4d4399964abd97cdb7185f4d44c5974c1464a2475e1bb66eae6c8b961c82f5ac61a5b4b8817d4ae50d4f778d47414fa59d29ab0155ff8bf3bb4efd94b40bf4a4e45a8fda4d8949aff731faff7307abf168010cb39fe2e382b1d467b49330a86908eb6eaf567c9026b90814404bfc5d2d947a137a30d38e654b08a4dd0e125d0f6ca7f969a56dc05d833a308d87701a4a29a4bd2cf99acde672616b0e36ee357881da8004a23c48c1bf863065bc65a6251f64d88e314f428ec58f0b8c9ce4fcb34171b2d64369dc39b16ee997987f70458f9cdb857c661a0abc797844753259bbb17971d8ba99b638c6815117ee2e840bd1bbdda2b7d58de693eac993832828abc7712a783435f90778db37b4ca9459dc914901da4f437d15a9a15e41f06dc14081943c69cde9c54f7f15fac0193725b4770a58a6e55534cd3f15619df5cdc05eaed82bd55388bd36a0a776be39c7c5e0b55fa4479a920f87ff5ef17d70c1ef51c6775bbeda51b432e22365541c18c7acb20c8b3b24216b2612e023e6494c808c04c16f75240a54c8c183b561d9aaba384ca44ef44d0b32b7945054a25addce01bcbcd23300fd73d08b59c248dcd37040e81e8a87bc22864fa1126dc955c8dd783461083926992cdc943a8d3a9e186e2a0898d4da65a63a292ceffdb3e18f66c3a01a50a6494c96e202da3c817e869df3ad930692d789ade83f281abf29d920a7daf9bb7ce27f3053328eaede51872918e63466891b7aeeac9eafe7569c48d4c872dee0c683f0740f2f0472e207f04ecab1a5165d299e3fa74d138fa8d1ce2b3ac0a0e3ac050e28ec4c106e633b97e68d473a7330bd0eda1d646e0dee21cab403245ee5ff05325fc6a04e9c3633181df3c678ceb9ca90b0629f7db971e701c5294276b50cb87f1668758a6d6b3788f21da5bfc2c574a00e0007bf28796dde5f9e82dc8e8c8d96bb39e98f5fd7a9f6cf3602b9706225f47025b4f30e5589754c892c46bdd1044c493f57b562a9b5a2f671e247db491cb4fe67d549179b4cfb27cad1f2027a482603cd635d6d75240bc990786d374a41072309536dd8737fb3ff2fde3d97b8cf204b6d7e7f8dc714c00e401ca387eccc250df5d24e0b3bc35e4a6a8aa90ab9e2f7a4900b78378fd60c9e64654e545d2c9dfb30789748f82451bc0044338dc0f6efc6f6389e2b7dd765d9fcf69e439b8192f4bcd705b3e18b6443bdfe71a2b766a60642e8ac12c8828b97555c3639353272480967fe909c9404689f97f2d28c939fd02f889a3dc2a91cc63c33ab1daa61ed3c457dd728633907e7a0f5d195265e21e6aea77e6d523123bf14fe3714291e9d1eaa88eb0cc099994895bd6e784ac3ea2762591a572a7e41120e85b771e1f26f725c1f8bababf6363efb3351cd0f43617dcffb9aaae135f723747f10e64f858adda81db80fb842f21d864d4aa04847b4e7be6315b6a546fff4d73e58b543db457ffc8fdc48d38ff24832b114ecae75e8f1a2306f789954318843036f8360501d10d170093c290f3cd03e7eb5f4ad99c38ffe0ab528c77ec25569a35ac6654aa4c8061e435d4557081da4f6a21b261ab1e6373b75e40578b47d39e254face224542a4f2dff2af1157440a243d0cbd25a681770dead0989ce2cf1a44ae5ffc2ac3372d4318431f80c45796ed174722b88ac97855dc4a540b2f853eeb79024235284f5b0ca56c9f1cf536d363d426295b7e53bef925114fd8a79d0f0e8c1832db744cc6d0128c4e3c336a64754ab42a5108d7e7e68cf6e334f853e4baf61741bf4161757f240418bf8595a6410d9d63d640b4c7376d9fa9bf1228204fbdbcc63cb7ea9cb1717b302a9389212dec39c9901484c7b1e285fe8686643a8a9c6df9537440c6eb47fac5947bfc5a3505e9db9663ea842eed7e5034d8cd48abb5f035a4ccdcd36bd328a88b6de223973b039585961236859c0a721555482a588e9ed75b28a7b87546b1a763c32f07e2fd0eddb5d6e55e2d2a5fd8bbafbba948888a294b20e6fa1e56d304ea58e3135dc26f46ebe1b96fbb6e861a756ac14e3520b2c8b5bd47a08e19cdd5b84edd73a08e2078f84b6b27f72f6dff1aa44a83199d19689ba387cbad89c1b54431472501d108bbc2bba3d5511dd5355af27f9e0f82f526178d5e45cf0ef02feb1c9949b6402c657395f018f3ec76354c7e9a83ed5526bc00f4fb4da2343e394307a7e58eb80870a0642a43a7089bf9814c920ed89fce3c290270a4435d9e7c34c571a78c479bb16ad1444c61863930ccb7e07b7b2b557f56741c084c2ea5c152426f1a834c0e37fa8c7b3ff922887f988045108c4c8edeeb05829212ce7f9a645d97f94f352d14b04ccad817fde005d8ec062277666d6efad6a8555759536f158bee3a5f4d2623fcdb1ee1bf372e41c74fb2866e2437a9eba3f7d7b308b3ed12930fc7e04056dd8a9be48316621f468a3578cfd89b5c52ce4ae05e07f9ce7f465ebe6ec0164a3f1f2d1a85a68e125e98135b8bc361dd338f09d8e6eda42d6609b2995cb556a5bdb0d105b4220962fb4f704b84b2c892519db2e10cbe607b933a83520e68137e822a54a3e462c38416e0d016b661a6fad3e4fd2b0a563356c82cebb107599cca1f4500ea67213a30c37498ba3c9da3894b02dc46c36065aef8c6526e2179089f2bb00b3b4375dbd854e38a62aed830123affe5292ca17462b30311a1630cc6062ef36fcd348498cd0610d8881295ad3e80890113a62012b37481d5464b386131f3d2d56ad742c5b98847d2d489f05f82cae0c9ae8ac4d7dfa9bfa97349c171b9cd3ffdea7d73cd8ac9326abd58467f17a1f6224469c9c8098309b94d5bbce7791229a3990d8857c28a2f0207f6f75a4f955ff62728ec89930ca78b26b94e32a8b9153879945563bea2c0daf0ce8d782f5b6af87183cdffef2b3a2cf3ec12d3318a9cf8eae82c2c5f964775166bab717c1a25a210516e2488c85827f518877a52bd9f98c28c183b78b1caac89b09a5eb2d1ac9356b966116a2bd01dd2607cca18fce102e54aafe6aafb6760e65b86afc49010ab48ed87a4051b6c9b6fe166d0a0c2af2a28d0354d6de40f95208a02caf23f2164041092130501db9270145a215e9951dd4d753c5943803c6240b1768dd09867eedda6f5e8970bdaa6fd67c5fe877d576c09a7ad5d47782a04b9ff96505094c2c29ffd4bf357ef26da53fc9d7383d7eec10a6c67a9ddd26f1febb4c21a5663f8d208e066ebc6d8160d4c67441d8e3c707ee7d6600adb5a5c6a0194ed85ec946d1d102cad0950d135d0a2d11ed445a9f75f8b97e5ed367950a2eccc876f25ffd57d56e2e1faaba5f4f5e3d681f5b08b373037c6ef808320dba3a3c88a64ade1c7788fa02045a1826453f93f07401c63b2b24778c2d90cb99c2b9285391f1ba6afd20fa3ab2b89d57eb96f5e6f0531eef4c48fbbb10bbae5eb7341c19851a495bfca248f038c059acfb0ac8a26dcea37301bcb255ac2e6899a85cf1db7e37c6165a890bdeadb4209e29a93c9ca15b98093a3325372de4d8a963d45c597d83987627098ab1c00005a99db77b6b5ac7f54049ff7148608f978c7beece9a9cc041cd8f2672a7f1b2e5fb7b55b1416040e294953a94bb620740ebaea873cb6c6e86f061ef9bcbe4fb48b03cfa3c31697432c92478a83ea27d2933bf338f94026764bcc3bb9456fff6030229e0e99b3f0715fa36e8aef4aa484caa7fcfcdb30c18b10715e691450729d3aac026cf20b331dc31a410cd513eef8626d551286a736ab776c34461568a1f436d68017a5687a99b8af8aba3bc00ab1d15a85150adfdb2f57910515fde039c4030de09bd94bfb1f443e82564cba8c4dc037496146e8e9ae96da86c53146b4fec6976cf64bd7d0e05d645ae330a495c6a96ac8e61a798ea5ca2bec90b9f777e9aa15f62eac96489ad8a19b40cdf879e40fefba658a81b7eba0c808a089379b1ad51b47c3471af86555ea26779373b2ab5ab20876d191e69c761826faaf345d3c4ea5b8425d3b4e443fdb0fc6a709f5b7ee8fbdbf4a23673c05ef2234d6774216f96d9fefc66cd40e650cd69810ff3dd1df500e52c0b40a647a31ac4ef1cb018c9ad7f46430e8bf0e0b8f6934c92f2bcce994bd974a77e7c77ad02a6db9de64b02e430036215afcd092d6e7cc2bf2af1b54e9c35c9f049e6a6f36067d9c267ba0b6c73e6ba6f080565697d8dc058e635aafb6a1b9163de9dcd6ccbe2286925c0ea21430887886f54d6159120f980a436e8ae229f22f5af377802f63fe9e6c3e6b4562ca27452fab7d9a9ebb9841c5b26dd51d67c7b70e4aee5aa2d61a5459fe14b3b09c448c577bef1bbc933e0b5c1e14a55aea558b3a8769cb0e8ad4527ec5cc8de555d230e74b7720294a7a7d7d81d7c27bfb7dea2564d5a6b063bad2b71a5051ca077474e692cb3095d646badf70cadea84a89899270f0d76763f1173c1d9d8984ab2268c4b233bdcddaf7f5123f1047855f211b07c12e041a8915e308d3a6c0b94870bde1bb0459c26abe57d1b0f7fc117bf97657c138acde903d2c2b52ef3de2e85d009f85ee1dddb0e5b840ab3658b3c4199c688b90d7b500ed2c781bae06a22393c4495bacf717d99346658ace6c0736b72faf327cb9959f37783a0e8a450af9cf6a99f4ac271ae9afce992e0fc5ca87d4f7204f031eafb4b9787b99c56bc5b93103b21d9f1cdcf912d4e097ce4c0d21d32d660612b9a281c474b04ad4ac1241263d5c1ae4ce25f1bb88e8457f2756db604bcf8d15a30cb9f471f5672bfdb8aaa81432c04d77420121a35cab1a300c2f82062cc2338349466f7e45ea45e6166b919481f7c6dafddf0"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) fcntl$dupfd(r5, 0x0, r6) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000600)={0x53, 0xffffffffffffffff, 0x1000, 0x3, @scatter={0x3, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/103, 0x67}]}, &(0x7f00000022c0)="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", &(0x7f0000000500)=""/167, 0x1, 0x27, 0x2, &(0x7f00000005c0)}) r7 = openat$cgroup_int(r2, &(0x7f0000000180)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) tee(0xffffffffffffffff, r3, 0x0, 0x6) ftruncate(r7, 0x3) sendmmsg$inet(r4, &(0x7f0000001280)=[{{&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x0) [ 3013.233015] alloc_empty_file+0x6d/0x170 [ 3013.233028] alloc_file+0x5e/0x5a0 [ 3013.233042] alloc_file_pseudo+0x16a/0x250 [ 3013.233053] ? alloc_file+0x5a0/0x5a0 03:46:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 14) [ 3013.233071] ? ctx_sched_out+0xa00/0xa00 03:46:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000740000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 3013.233088] anon_inode_getfile+0xc8/0x1f0 [ 3013.233103] __do_sys_perf_event_open+0xf59/0x2e60 [ 3013.233122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3013.233137] ? perf_event_set_output+0x5b0/0x5b0 [ 3013.233149] ? wait_for_completion_io+0x270/0x270 [ 3013.233180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.233192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.233206] do_syscall_64+0x33/0x40 [ 3013.233222] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 3013.233231] RIP: 0033:0x7f081562fb19 [ 3013.233243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.233250] RSP: 002b:00007f0812ba5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3013.233264] RAX: ffffffffffffffda RBX: 00007f0815742f60 RCX: 00007f081562fb19 [ 3013.233271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001d80 [ 3013.233278] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.233286] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3013.233293] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 3013.235432] cgroup: Unknown subsys name 'wŸš' 03:46:33 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3013.256336] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3013.256336] program syz-executor.3 not setting count and/or reply_len properly [ 3013.333403] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3013.333403] program syz-executor.5 not setting count and/or reply_len properly [ 3013.341464] FAULT_INJECTION: forcing a failure. [ 3013.341464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3013.341485] CPU: 1 PID: 16875 Comm: syz-executor.0 Not tainted 5.10.215 #1 [ 3013.341497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.341504] Call Trace: [ 3013.341529] dump_stack+0x107/0x167 [ 3013.341551] should_fail.cold+0x5/0xa [ 3013.341580] _copy_to_user+0x2e/0x180 [ 3013.341608] simple_read_from_buffer+0xcc/0x160 [ 3013.341634] proc_fail_nth_read+0x198/0x230 [ 3013.341659] ? proc_sessionid_read+0x230/0x230 [ 3013.341680] ? security_file_permission+0x24e/0x570 [ 3013.341698] ? perf_trace_initcall_start+0xf1/0x380 [ 3013.341729] ? proc_sessionid_read+0x230/0x230 [ 3013.341749] vfs_read+0x228/0x580 [ 3013.341777] ksys_read+0x12d/0x260 [ 3013.341797] ? vfs_write+0xa70/0xa70 [ 3013.341824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.341846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.341870] do_syscall_64+0x33/0x40 [ 3013.341890] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 3013.341903] RIP: 0033:0x7f08155e269c [ 3013.341923] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3013.341934] RSP: 002b:00007f0812ba5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3013.341956] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f08155e269c [ 3013.341967] RDX: 000000000000000f RSI: 00007f0812ba51e0 RDI: 0000000000000003 [ 3013.341979] RBP: 00007f0812ba51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.341990] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 3013.342003] R13: 00007ffd1d5180cf R14: 00007f0812ba5300 R15: 0000000000022000 [ 3013.374175] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3013.374175] program syz-executor.3 not setting count and/or reply_len properly [ 3013.797877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.798479] print_req_error: 6 callbacks suppressed [ 3013.798491] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.800000] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.800011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.800034] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.801707] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3013.802248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.803866] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.804451] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.805262] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3013.806275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.808895] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.809947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.810473] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.811492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.811983] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.813008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.813515] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.814499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.814976] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3013.816290] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 3013.817504] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 3013.818695] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 3013.819875] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 3013.821079] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 3013.822281] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 3013.883214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.883757] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3013.883777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.886095] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3013.886114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.887825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.891997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.892591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.893151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3013.893791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:46:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:47 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000174a7414b59d000007002e2f66696c6530"], 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50f200, 0x120) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@un=@file={0x1, './file0\x00'}}, 0x3) r4 = fcntl$dupfd(r2, 0x0, r3) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000000)=0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) mkdirat(r7, &(0x7f00000001c0)='./file0\x00', 0x40) getdents(r4, &(0x7f0000000180)=""/1, 0x1) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x853, 0x0, &(0x7f0000000100), 0x840, &(0x7f0000000140)={[{'){'}, {'.{'}, {'\'/+,#\xc8-'}, {'@5]-+&@'}, {'%--#[:#'}], [{@dont_measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) fadvise64(r1, 0x0, 0x0, 0x4) 03:46:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x7) 03:46:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7400, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:46:47 executing program 6: getgroups(0x0, &(0x7f0000000180)) mount$tmpfs(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYBLOB="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", @ANYBLOB="5944a6d00217abdaf5997daa8af0ac1e13d027c0900081717137d9ff54bad32467", @ANYBLOB="00006500fbff000006006500ff00000006006500010000003b005b0036bb1a6a06a95fe6cf645f9562206bfd49392e43ab875f3bc7dd35c80a7c3ca63afa659948effd32c65ea56353da57cb978d575c11882b0000005b007b7632985b2dfcc91cd241fa11de9cd60a474fbcad10bf4b86b4a1495fe864f5e3f8c1cf14deaa48fbbb35be3ca785fbab45e8f6839d4b65e7b5d1a67d3f005ad4fe78dde994e592194872ac3f000000", @ANYRES32, @ANYRES32], 0x128}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat(r0, 0x0, 0x200, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r5 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8081}, 0x40000) 03:46:47 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:46:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37363838323433383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4080}, {&(0x7f0000012600)="8081000000c04000d5f4655fd5f4655fd5f4655f000000000000010080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000100"/128, 0x80, 0x4300}, {&(0x7f0000012700)="c041000000400000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4500}, {&(0x7f0000012800)="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"/768, 0x300, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012c00)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000012d00)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000012e00)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000012f00)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013000)="504d4d00504d4dffd5f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000013200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000013700)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000013800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/96, 0x60, 0x80000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x80fe0}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xa0000}], 0x0, &(0x7f0000013b00)) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') 03:46:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc030000007a0000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 3027.460550] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3027.460550] program syz-executor.3 not setting count and/or reply_len properly [ 3027.495400] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3027.495400] program syz-executor.5 not setting count and/or reply_len properly 03:46:47 executing program 6: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r2 = syz_io_uring_complete(0x0) io_uring_enter(r1, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000080000000000000000000000000fbff03000000000000000000000000000000ecffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000f2e6aa37c3af4d236ac5d3faeda89280ba966e0b5a268c8aef04e381a81af6db0d6bc8b51fb3998a696a9cf86ab8ce"], 0xb8}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r3}) 03:46:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000001008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 3027.510507] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3027.510507] program syz-executor.5 not setting count and/or reply_len properly 03:46:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x93) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 03:46:47 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x8) umount2(&(0x7f0000000100)='./file1\x00', 0x5) lseek(r1, 0xfa2b, 0x3) umount2(&(0x7f0000000300)='./file1\x00', 0x4) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000280)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES64=r3]) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000400)={@dev, @empty}, &(0x7f0000000440)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001300)='smaps_rollup\x00') readv(r4, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) 03:46:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_setup(0x103f, &(0x7f0000000a80)={0x0, 0x4560, 0x4, 0x0, 0x26}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x72bc, &(0x7f00000001c0)={0x0, 0x42f7, 0x0, 0x2, 0x336, 0x0, r0}, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, r0, &(0x7f0000000240)={0x40000000}, r0}, 0xa263) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x235, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 3027.606549] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3027.606549] program syz-executor.3 not setting count and/or reply_len properly 03:46:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7a00, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:46:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x70, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000040)={0x6, 0x1}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 3027.702812] tmpfs: Unknown parameter 'ÿÿÿÿ' 03:46:47 executing program 6: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7e66, 0x9016, 0x2, &(0x7f0000000340)={[0x5]}, 0x8) 03:46:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000002008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x7000, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x40000010}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x49d, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000100)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f00000000c0)={0x1, 0x9, 0x2}) [ 3027.814577] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3027.814577] program syz-executor.3 not setting count and/or reply_len properly 03:46:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:46:47 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000ffdbdf253b00eeff08000300", @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:46:47 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffffc0340000000000000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0xf8, 0x0, 0x7ef3, 0x42, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x10, 0x40, 0x1ff, 0x82ad}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0), 0x4) dup3(r1, r3, 0x80000) r4 = socket$inet(0x2, 0xa, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x24040051}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 03:46:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9003, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:46:47 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000003008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:46:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/key-users\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xa, 0x1d012, r0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x234, 0x2e, 0x100, 0x70bd2a, 0x25dfdbfe, {0x4}, [@nested={0x21d, 0x96, 0x0, 0x1, [@generic="486c9c9bf3c5d1d76dae3fe25ea4633cd9bc2e3ec10b978e47df1637deee82a6a6d594af02f21a05b5cfb1d1df4cde4d1a93b28ec96f8fe6a3830b6035164d60e56037015b10024f607fa41c5c2bb09f501498cf11b9513ee75bbb5c0ebca7dd52aa153754ff5f35f1d6b41a100b3235519c84a7811a09d6c7086db5b62ba36b48026a0ebba8929e8eec9782e9799478d1019816fbf539b414fff46894836edd985393d1ad5abc93d6c5192572768b5dab2fe0cc397229dd92f753d72065aec9ed56bfb86625f19fce0ff692ecfd4dab4a5dff4bfd4042948bff", @generic="8c577f389ae29efc456f64b6c5719ada1443447a2422575a1286ebd047c465aae48318f893787d08661edbf162276bf2535ab2390b17d2cb6442ac8bbb34f37849aec36a2d337e0a790d98b45961d9dcd444d4b99726c1ead78e1ea076fef1da869d87d005c7dd10f763c11ff7635c81", @typed={0x4, 0x35}, @generic="4754a7b3fa9074820a8eeecc085ce014dc12ada4b78ea87558a3dcc1d8ccc5eb00ccb2fc277454a02edafd88986d36279cdb44475724e2e0103532f4dff2335afa2a6bb8abd0d9ab435c1fdad2ef563d16ef982ec29e2cd3e74682daa99bce8c6d666b16f796ecec0cb447fc934c41d933bcda082307db7b005a46d25cbd3d103cda023ba3d68ec9836a7b9a2ec6520fc81efdb003fadbc0817ed65c0a71b2efc7dba52b0bc9ef3734a5c6b06f7a7cb4737b62c3e841f066baafaa3cb56d26e21d06b7968592dd6ed9ecbd"]}]}, 0x234}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) finit_module(r0, 0x0, 0x0) 03:46:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x200, 0xfffffffd, 0x8400, 0x0, 0x0, "ddc10500d643f211459b0000004100", 0x0, 0xfffffffd}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 3028.009908] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3028.009908] program syz-executor.3 not setting count and/or reply_len properly 03:46:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x9603, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 3028.052146] kauditd_printk_skb: 49 callbacks suppressed [ 3028.052168] audit: type=1400 audit(1713930407.904:290): avc: denied { module_load } for pid=17166 comm="syz-executor.6" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=59733 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=system permissive=1 [ 3028.098791] Module has invalid ELF structures [ 3028.290223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.291191] print_req_error: 22 callbacks suppressed [ 3028.291217] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.294355] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.296475] buffer_io_error: 6 callbacks suppressed [ 3028.296487] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3028.304083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.305122] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.306886] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.308584] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3028.310152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.311065] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.312770] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.314454] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 3028.315955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.316871] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.318575] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.320253] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 3028.321757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.322669] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.324598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.325518] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3028.327496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.328553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.329623] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 3028.330869] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 3028.332091] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 3028.333322] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 3028.514725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.515755] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3028.521443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.522401] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3028.524321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.528408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.529532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.531117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.532896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3028.534020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 03:47:02 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:47:02 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x5, 0x80000001, 0x80, 0x1, 0x18, "59f2bbfbeb4c537946f4d88cc9354d8c7e9b9b"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x128, 0x14, 0x1, 0x0, 0x0, {{@in6=@private2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03002bbd7000ffdbdf252e00000005002e000000000006000400a1aa000005002b0003e9ffff07000200", @ANYRES32=0x0, @ANYBLOB="08002c007400000008002c000900000008000200", @ANYRES32=r4, @ANYBLOB="06000400a0aa000008002c0017000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xfe, 0x7f, 0x3f, 0x0, 0x0, 0x99, 0x10, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0x1, 0x9}, 0x40080, 0x5, 0x400, 0x9, 0x5, 0x0, 0x9, 0x0, 0x101, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r5, 0x0) 03:47:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380100001a0001000000000000000000ac1414bb0000000000000010000000007f0000010000000000000000000002000000009f0e6f08fd654e00000000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200636263286165732900"/240], 0x138}}, 0x0) 03:47:02 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000fffffdfd0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e18f3835023f5b3b1ab5ef114656c07d33f4486a667121fcc64e224d7be04b3b99c6a90aade7b4ac50aa8f0baa857a391d6929acc2c2413bb84c3fdef115b9385cfbfe18911dd6b5055cde977505603a5411b872f832408f9baeed6b777bee7d8fd3aa9b099"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x81, 0x20, 0x0, 0x30, 0x0, 0x9, 0x18008, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x5, 0x3}, 0x20, 0xaf3, 0x800, 0x6, 0x1ff, 0x80000000, 0x20, 0x0, 0x81, 0x0, 0x10000}, 0xffffffffffffffff, 0xa, r4, 0x2) unshare(0x48020200) 03:47:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x77, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000004008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:47:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0xfffe, 0x6}, {0x400}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x100, 0xff}}, './file0\x00'}) ioctl$TCFLSH(r2, 0x540b, 0x2) flock(r1, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x8001, 0x0, 0x0, 0x0, 0x1, "dde1816366f7debe92ccc800000000008000", 0x0, 0xfffffffe}) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) dup2(r3, r0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) fallocate(r4, 0x40, 0xffffffffffffffff, 0x4000004a4c3b26) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) 03:47:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xd803, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 3042.318687] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3042.320423] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.6'. [ 3042.346090] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3042.346090] program syz-executor.3 not setting count and/or reply_len properly [ 3042.350680] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.5'. 03:47:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x78, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d2, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd07a) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x8, 0x0, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) 03:47:02 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000005008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:47:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xf803, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:47:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', r3, 0x4, 0x81, 0x1, 0xef, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x8800, 0x40, 0x8}}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fork() perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x0, 0xf9, 0x9, 0x0, 0x9, 0x512, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x2, 0x9, 0xd01d, 0x1, 0x1, 0x6, 0x2, 0x0, 0x401, 0x0, 0x2}, r5, 0x1, r4, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) fallocate(r8, 0x61, 0x0, 0x1000002) dup3(r6, r7, 0x80000) kcmp(r5, 0x0, 0x3, r7, r4) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r9, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x356, 0x100000, 0x0, 0x38, 0x3, 0x5}, [], "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"}, 0x4d9) 03:47:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/45, 0x2d}], 0x4}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000002740)=[{&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/121, 0x79}, {&(0x7f0000001680)=""/28, 0x1c}, {&(0x7f00000016c0)=""/23, 0x17}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/64, 0x40}], 0x9, &(0x7f0000002800)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002840), 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000028c0)=""/69, 0x45}, {&(0x7f0000002940)=""/237, 0xed}, {&(0x7f0000002a40)=""/105, 0x69}], 0x3, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x3, 0x3040, &(0x7f0000002c40)={0x0, 0x989680}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000002c80)={0x2, {0x2, 0x4, 0x3, 0x7ad0, 0x3, 0x2}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) [ 3042.540826] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; 03:47:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xacf, 0x9f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3421, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000)=0x1) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x12, r3, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x8000000) io_submit(0x0, 0x0, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x4000) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 3042.540826] program syz-executor.3 not setting count and/or reply_len properly [ 3042.602505] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3042.602505] program syz-executor.6 not setting count and/or reply_len properly [ 3042.676301] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3042.676301] program syz-executor.6 not setting count and/or reply_len properly [ 3043.002044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.002945] print_req_error: 22 callbacks suppressed [ 3043.002965] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.005391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.006180] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.007789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.008611] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.010260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.011049] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.012659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.013497] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.015089] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.016644] buffer_io_error: 6 callbacks suppressed [ 3043.016656] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3043.018541] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.020070] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3043.021210] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.022773] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 3043.023900] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.025446] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 3043.026586] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3043.028110] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 3043.029383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.030309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.031254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3043.033801] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 3043.034964] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 3043.036112] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:47:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfa03, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:47:16 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:47:16 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000006008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:47:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$KDADDIO(r0, 0x4b34, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x15, 0x7, 0x2, 0x1, 0x0, 0x7, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x482a, 0x0, 0xdbd, 0x0, 0x4, 0xffff, 0x7, 0x0, 0x1ff, 0x0, 0x4}, r1, 0x2, 0xffffffffffffffff, 0xb) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x1d, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001900010000000000000000002c210014000580000000000000000000"], 0x30}}, 0x0) 03:47:16 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @local, 0xffffffff}, 0x1c) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:47:16 executing program 5: getgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000049c0)={0x4, &(0x7f0000000040)=[{0x4, 0x9, 0x0, 0x9}, {0x6, 0x5, 0x0, 0x1000}, {0x5, 0x1, 0x5}, {0x2, 0xa0, 0x3, 0x3ff}]}) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 03:47:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x10) fstatfs(r0, &(0x7f0000000000)=""/46) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x0, 0x7f, 0x7fff, 0x3f, 0x9, 0x80000}, {0x0, 0x99, 0x5, 0xdf, 0x7ff, 0x99}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0xfffffffc}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7fff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x1737, 0x3, &(0x7f0000000240)="542e875f9ca38f38d439f64dc73abafc1f3ea8e10d61a2ed3d77289e80ae0cc2878d76038dc7743bf817db1ef807d0b7d789642966a1be8a9e3b9e3b4707aebbf736e406989562bdd483da586324279b168b7b96706bada782bfb23214fc72cca85bd1d3ef2816077dc0f71dbc48d702b11ee94c934f4e2665d1e90f227cf34edfc0340473246006ee5a9d0199e9646461994fe17fc082b73ecfda7b00440fdde861243df6ed7dfff08412da8562bac1ed96ecf73735ee84b4fbd02f52f981845ac29d64c8d9105cffa6c7e88c39875e90400c70d4089e450ed791b593cae1a2622576e10b9a8b4409d9d094", 0x0, 0x0, 0x1, {0x3}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback}, &(0x7f00000000c0)=0xc) r3 = socket$inet(0x2, 0xa, 0xffffe8ba) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth1_virt_wifi\x00', {0x2, 0x0, @empty}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r1, 0x0) [ 3056.854383] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3056.854383] program syz-executor.3 not setting count and/or reply_len properly 03:47:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x27}, 0x4202, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:47:32 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000880)={{0x1, 0x1, 0x8, 0x3, 0x7f}, 0x1000, 0x6}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) write(r5, &(0x7f00000001c0)="98394fe08a5d83da3f18007216e8723b084a056116c2a90716cb65ccbf195c1b40d4d64ba2ea7fa7809d039646a7edb29dc20b2b27ccfbd59f2adfc8c77fc3ed853eef3ffb0d7ae27c033b9cd73b", 0x4e) getdents(r5, &(0x7f0000000140)=""/77, 0x4d) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x4, 0x5, &(0x7f0000000700)=[{&(0x7f0000000340)="5756454be3b611a977e9b1688a77c838d6f561d6115d95bc04bddb67c6f6e119f0b1c5dd034934d80f7444d9fa9f32b520a98456e054e7c7676ebfbd6f", 0x3d, 0x8}, {&(0x7f0000000380)="1507cd6c145af4d845521f3abdaaca23bbb46b164e80a38c46aa96722a9309fc05995dc1715400ba147969d86f0683c66a4f5ceb49b69a223f80b2a3b62acba07da7c5874a8816abd21c467f9937d739209e6a482a04d41817cbe4b1b471f9827d5fff3a5de3b576b51974b9c68be2b6de183dcc835dab21e5324e29ed36f012a60d47a8904e04717a15d87526b656a49949c6ce7697ade0ec8c722bc4791a555309d3e346cbbaf2eb16ede082afbe1e158598568000ddb10053897dbbfb496debeb250cfa44482f3abbf4fff4819265b27c689da8ac34b422738a27f9b954f2fb76a4434b46b09e", 0xe8, 0x5}, {&(0x7f0000000480)="441d7366132933f61fc36db735dbc6102e9da9b3c506385c202a0ed6b1ec2116e300da3d1e7d78de2a6b4b83a086ba88fbea6011f4e78143af559d3bb632dab884d68189ae1a784eac7cedf784505a236957f3c7b49617c3b9ccc7d47d20127373e384ca06b74702aa5b3b0406a1f2d3722c4e868ec2411f41feed4390a2128067a34a4ff1f44da2a9850efc37a01ea6f2535af58223c9085e68c549444096e71b3671281f2e94206630e9beb75e452e09aea415c07da9d8402eac699fb56b3adab0ce0a06fdf1", 0xc7, 0x450}, {&(0x7f0000000580)="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", 0xfe, 0xaf}, {&(0x7f0000000680)="cf6ba0f4bd0320bc691774e27b0cea1520184a30a1d63078a96d80f848332ac9da9edd852c4d4117c15cc9848a46f1764b5ee959642b0f4ae3fdf0bf85377d011f4cca317a88c0f185cae0af903d2ca67504957ec0677f697a161f9484d2bdb95fe009ea3faf9997", 0x68, 0x1}], 0x2000, &(0x7f0000000780)={[{@nogrpid}, {@nouid32}, {@data_journal}, {@nolazytime}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@obj_role={'obj_role', 0x3d, '/dev/sg#\x00'}}, {@audit}, {@seclabel}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '\\'}}, {@smackfshat={'smackfshat', 0x3d, 'system.posix_acl_default\x00'}}, {@pcr={'pcr', 0x3d, 0x38}}]}) fallocate(r0, 0x8, 0x0, 0x8000) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 03:47:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x402, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:47:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000008008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:47:32 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000040000006c6530007a9f461419d44e5de4d695cec5bc94afdddfed50e5b5fa78a2ef27dd14f6e1fdd2a48a49205b567ba0ca64ef6399a8bfe5ea61d2266cfe90671474336ad0ea73b76a3bdaeb35af6b87398014ac3077ef7a36980e3ca3ff5b0f87a4f47a53"]) r2 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x9, 0x40202) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2180424, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x5}}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@aname}, {@fscache}, {@loose}, {@nodevmap}, {@mmap}], [{@uid_eq}]}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0xb600, 0x0, 0x7, 0x0, 0x8000000b7a, 0x1000000, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x7, @tick=0xffff0000, {}, {0x0, 0xfc}, @connect={{0x1, 0xa8}, {0xe6, 0x8}}}], 0x9) r6 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0x0, 0xffffffffffffffff) clone(0x541a0000, 0x0, 0x0, 0x0, 0x0) 03:47:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) 03:47:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) r6 = io_uring_setup(0x3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x31f, 0x0, r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000001c0)=@sco}, 0x0) r7 = eventfd2(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000040)={0x3, 0x2}) io_uring_enter(r1, 0x76d3, 0x80, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffda, 0x27}, 0x4202, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fsmount(r5, 0x0, 0x8) execveat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000bc0)='\x00\x80C\x107\xa64\xee\xbd*\xd4o\x8a?[\x98\xf29\xee\xc7\x90\x97\xaa\xc3\xc8Zq\xf3\x91\x04[S\\B2m=V\x89\x99\x96Q\xcaA\x18\xaf\xaf:\xf1\xab\x80\"\x7f\xb3\x18\xfe\xd7\xbd\xcd\xcdIf\xae\xb5\x87\xb8#\xe1\xbe\xec\xf0\t\xa1\xf7\xa7\xb1\x9d\xc7\xc2\xf0\x02\xaf\xc4\xd0@\xc2\x12\'\xb9\x9a\xea\x90e%\xe6\xd2E\x19E\x83\f\x1fe\xf3\x1d\xfd0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:47:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x402, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:47:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4a, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/86, 0x56) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x8, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x80000000}) 03:47:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x30581) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0xfffffff9, 0x2, 0x0, 0xfffff800, 0x6, "1552153d693267a6edb80afcde89ffbccea243", 0x9, 0x1}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000200)={0xfff, 0x0, 0x8, 0x20, 0x1, "e0929d5640d5bc6347f33262fcffd49531d2ae", 0x1, 0x8}) syz_open_dev$tty1(0xc, 0x4, 0x3) 03:47:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000009008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:47:49 executing program 6: r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000340)="c9", 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x1) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) accept4$packet(r6, 0x0, &(0x7f0000000080), 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r7, &(0x7f0000000080)=ANY=[], 0x1020) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:47:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x403, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 3089.708073] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3089.708073] program syz-executor.3 not setting count and/or reply_len properly [ 3089.719492] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3089.719492] program syz-executor.6 not setting count and/or reply_len properly 03:47:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:47:49 executing program 5: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000200)={'veth1_to_batadv\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendto$inet(r1, &(0x7f0000000180)='\\', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x3, &(0x7f0000000100), 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x4}, &(0x7f0000000180)=0x28) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x5}, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) sendmsg$inet6(r2, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) 03:47:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x402, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:47:49 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000000000a008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:47:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x407, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:47:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x6) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r1 = io_uring_setup(0x55ab, &(0x7f0000000180)={0x0, 0xd3f4, 0x2, 0x3, 0x7c}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r3 = fcntl$dupfd(r0, 0x406, r2) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000200)={0x9, 0x3, 0x20, 0x292, 0x80, "391fa428db283440c6ca9c0251baf9e72b7c77", 0x7fffffff, 0x9}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSIG(r5, 0x40045436, 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) ftruncate(r5, 0x4) 03:47:49 executing program 6: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) lseek(0xffffffffffffffff, 0x2, 0x3) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000040000080000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) bind$802154_dgram(r2, &(0x7f0000000200)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0002}}}, 0x14) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2a29c0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='/dev/bsg\x00', &(0x7f0000000100)='k', 0x1) connect$802154_dgram(r3, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) bind$802154_dgram(r2, &(0x7f0000000100)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 03:47:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3089.943701] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3089.943701] program syz-executor.3 not setting count and/or reply_len properly [ 3090.321476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.322426] print_req_error: 6 callbacks suppressed [ 3090.322445] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.324748] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.324795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.326507] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3090.327293] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.330011] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.330069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.331679] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3090.333575] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.335246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.335294] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.336030] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.336150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.337709] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 3090.339179] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.340208] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.342044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.342625] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 3090.344146] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.345362] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 3090.346126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.348232] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 3090.348773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3090.350567] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 3090.354250] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:48:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbf3077e5ba441939bf00", 0x3, 0x2}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 03:48:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x414, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:48:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x402, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) [ 3109.492491] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3109.492491] program syz-executor.3 not setting count and/or reply_len properly 03:48:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000000000d008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:48:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3f, 0x400000) syz_io_uring_setup(0x719a, &(0x7f0000000300)={0x0, 0x59ed, 0x0, 0x2, 0x304, 0x0, r3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000380)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r7, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) dup3(r6, r4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000040)={0x7, 'macvlan1\x00', {0x101}}) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x0) 03:48:09 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:48:09 executing program 5: prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f00000000c0)={0x0, 0xd016, [0x7, 0x9564, 0x6, 0x101, 0x5, 0x9]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) dup3(r1, r0, 0x0) 03:48:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:48:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:48:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000000000e008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:48:09 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd_index=0x4, 0x7, 0x0, 0x0, 0x16, 0x1, {0x2, r1}}, 0x401) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000080)={0x1, 0x100000001}) openat(r3, 0x0, 0x440800, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000000c) [ 3109.644594] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3109.644594] program syz-executor.3 not setting count and/or reply_len properly 03:48:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffc00, 0x1ff, 0x2, 0x5, 0x0, "9fc4f98bc68c88e550b8465ea8f61a4bac1bcb", 0x6, 0x8001}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x0, 0x0, "ddc12fbfd643f211459b00"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xfe) 03:48:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x45f, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:48:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:48:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000006c0)=[{&(0x7f0000000400)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0187e1ff53ef010001000000dbf4655f00000000000000000100004208a4ffbf14ad6e000001000008000000d24201734a", 0x65, 0x400}, {&(0x7f0000000140)="000000000000000000000000457900aa5f634b37b3ec3232a27d76ed9c7a311e22dd28f05295cbfbb818025529e576fed49293fcf98d9490fdefa4248b0109f50f187a456315def0db90352701c0d7da97c3e92367e30f3f8535acc2325c568ba8a5e86eebe2c57e7918affc583bb4fdb20700516db9a466552980034aceb8", 0x7f, 0x4e0}], 0x0, &(0x7f0000000100)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28080, 0x5) 03:48:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc0300000000003e008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:48:09 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x22000c0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYBLOB=',wfdno=', @ANYRES32=r2, @ANYRES16=r0, @ANYRES16=0x0, @ANYRES64=r1]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @multicast2}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000140)) dup2(r0, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) accept4(r0, 0x0, &(0x7f0000000100), 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x495c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001d00210c0000000000a2000004000200"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 03:48:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0x0, 0x2, 0x0, 0x0, "ddc12fbfd643f2113f00", 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x0, 0xff}, {0xf800, 0x1000}, {0x1, 0x4}, {0x2, 0x2}, {0x5}, {0x7ff, 0x7}]}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000240)={0x0, 0x5, 0x7fff, 0x50, 0xff, "d84eb9a5912a125702876187fdf6d9cc543f02", 0x0, 0x9}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000180)={&(0x7f00000000c0)=""/170, 0xaa}) [ 3109.810802] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3109.810802] program syz-executor.3 not setting count and/or reply_len properly 03:48:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:48:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000040008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) 03:48:09 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x1) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) futimesat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x30, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000011c0)) openat(0xffffffffffffffff, 0x0, 0x80000, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(r1, r5, 0x0, 0x10000000c) [ 3109.940751] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3109.940751] program syz-executor.3 not setting count and/or reply_len properly [ 3109.993317] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3109.993317] program syz-executor.5 not setting count and/or reply_len properly [ 3110.208324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.208863] print_req_error: 6 callbacks suppressed [ 3110.208873] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.210330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.210810] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.211784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.212280] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.213252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.213729] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.214707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.215183] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.216140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.216638] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.217605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.218087] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.219060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3110.219555] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.220515] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.221451] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3110.222126] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3110.223049] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3110.223722] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 3110.224401] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 3110.225056] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 3110.225731] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 3110.226423] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 3110.227082] Buffer I/O error on dev loop4, logical block 2096903, async page read 03:48:24 executing program 4: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1d74}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) syz_io_uring_setup(0x241e, &(0x7f00000003c0)={0x0, 0xa61, 0x0, 0x1, 0x2f9}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e05000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r5, r2, &(0x7f0000000580)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r6, 0x0, &(0x7f00000004c0)="496f3fd4466af6151f20557023655cbbbdef83e7235668fa5df7ccc29590443147b5c28f3cfedae036dc06c2972e995f2dcbe02823a8a41013c9b0a2f867d95c39c11fd76768fc9e3e7bb8cb0f730b59cd17e045c0ae480499a7a3464373db8ed04204ecfd5a900c797acbfaa3e84572f9cef45f89ac6ec096b7fcb0d6ffcf81efca599e36837b8d01fc3e8e8f087ba45b90b512b4bcc0f31f493277770e357e038cd4554774e372614c4dab6115eaa7905f1576675e9717525b818b", 0xbc, 0x4000041, 0x1}, 0xef) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r7) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r1, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c009900ff7f00007800000023003300e0a48000ffffffffffffffffffffffff50505050505028007e0041410700010004006c00"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) close(r8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000bc0), 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:48:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001500), &(0x7f0000001540)=0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000015c0)={0x0}, &(0x7f0000001600)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x24924924, 0x7}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r4 = syz_open_procfs(r2, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000280)={0x0, 0x3, 0x5, 0x5}) setsockopt$inet6_int(r5, 0x29, 0x12, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="ffff00000000080000000000000008000000000010000bef00000032c5abfd91881b0400000280000000000000ff0f000000000000040000000219000005000000040000000000000000000000000000120900000000001b2000"/121]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 03:48:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x5, 0x0, 0x0, 0x1, [@generic='H']}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) fork() r1 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6bd2d348, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="f33d814b8f053f7734603b06ec3aacb76c9f8caba7d7f275943c59abe20677c56b856ddceddad2042ba0e97b", 0x2c, 0x9}, {&(0x7f0000000100)="72852aaf3da9f5", 0x7, 0x3ff}], 0x800002, &(0x7f0000000240)={[{'*'}, {'\x00'}, {}], [{@obj_user}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) close_range(r1, r0, 0x2) 03:48:24 executing program 1: syz_emit_ethernet(0x92, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "94eab5444ae4208de5ed0d92880106a7"}, @sack={0x5, 0xe, [0x4, 0x20, 0xb85]}, @fastopen={0x22, 0xa, "e6704be48635b0fb"}, @generic={0x0, 0x9, "d791783204f8f9"}, @sack={0x5, 0xa, [0x5, 0x1]}, @exp_fastopen={0xfe, 0x13, 0xf989, "45b621adf3bff8811f757fa7699f09"}, @generic={0x0, 0xb, "9d2d3fc1eedb1c62c4"}]}}}}}}}, 0x0) 03:48:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:48:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000100)={0xd, 0x10001}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xfff, 0xfffffffd, 0xfffffffc, 0x0, 0x0, "dddc4300000000000000000000000000006e9c"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000180)={0xd, 0x101}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x5, 0xfffff800, 0x1, 0x0, 0x9, "b1d194a96ecfc1fa7e5c4fcb1aa71ba93e2064", 0xff0, 0x8000}) 03:48:24 executing program 6: syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x44322, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x800}, 0x1c280, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x280400, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) timer_gettime(r0, &(0x7f0000000080)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 03:48:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000048008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) [ 3124.878851] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 3124.878851] program syz-executor.3 not setting count and/or reply_len properly [ 3124.884725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3124.907598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3124.908427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3124.909609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3124.996890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3125.018873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3125.020018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3125.022635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3125.229749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.230390] print_req_error: 6 callbacks suppressed [ 3125.230403] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.231893] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.231904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.231928] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.233535] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 3125.234038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.235606] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.236182] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.236947] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 3125.237944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.239423] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.240062] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.240822] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 3125.243448] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.243523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.245038] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 3125.246425] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.247426] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3125.247448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.249012] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 3125.249516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.250660] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 3125.251094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3125.252153] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 3125.253733] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 3127.064431] syz-executor.7 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3127.065704] CPU: 0 PID: 285 Comm: syz-executor.7 Not tainted 5.10.215 #1 [ 3127.066328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.067049] Call Trace: [ 3127.067290] dump_stack+0x107/0x167 [ 3127.067618] dump_header+0x106/0x655 [ 3127.067953] oom_kill_process.cold+0x10/0x15 [ 3127.068345] out_of_memory+0x1149/0x1440 [ 3127.068711] ? oom_killer_disable+0x280/0x280 [ 3127.069106] ? mutex_trylock+0x237/0x2b0 [ 3127.069466] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3127.069981] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3127.070519] ? lock_acquire+0xf7/0x470 [ 3127.070864] ? warn_alloc+0x190/0x190 [ 3127.071221] __alloc_pages_nodemask+0x51d/0x600 [ 3127.071630] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3127.072167] ? find_get_entry+0x2c8/0x740 [ 3127.072542] alloc_pages_current+0x187/0x280 [ 3127.072926] __page_cache_alloc+0x2d2/0x360 [ 3127.073314] pagecache_get_page+0x2c7/0xc80 [ 3127.073693] filemap_fault+0x177d/0x2210 [ 3127.074061] ? read_cache_page_gfp+0x30/0x30 [ 3127.074470] ? handle_mm_fault+0x28b1/0x3500 [ 3127.074853] ? lock_downgrade+0x6d0/0x6d0 [ 3127.075233] ext4_filemap_fault+0x87/0xc0 [ 3127.075593] __do_fault+0x113/0x410 [ 3127.075921] handle_mm_fault+0x1e53/0x3500 [ 3127.076294] ? find_held_lock+0x2c/0x110 [ 3127.076654] ? __pmd_alloc+0x5e0/0x5e0 [ 3127.076999] ? vmacache_find+0x55/0x2a0 [ 3127.077359] do_user_addr_fault+0x56e/0xc60 [ 3127.077739] exc_page_fault+0xa2/0x1a0 [ 3127.078087] ? asm_exc_page_fault+0x8/0x30 [ 3127.078466] asm_exc_page_fault+0x1e/0x30 [ 3127.078831] RIP: 0033:0x7f5d0509eab5 [ 3127.079166] Code: Unable to access opcode bytes at RIP 0x7f5d0509ea8b. [ 3127.079736] RSP: 002b:00007fffb9211bd0 EFLAGS: 00010202 [ 3127.080205] RAX: 0000000000000000 RBX: 00000000000004b2 RCX: 00007f5d050c38e1 [ 3127.080836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3127.081466] RBP: 00007fffb9211c5c R08: 0000000000000000 R09: 00007fffb933c080 [ 3127.082091] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000032 [ 3127.082723] R13: 00000000002fb15f R14: 0000000000000014 R15: 00007fffb9211cc0 [ 3127.083451] Mem-Info: [ 3127.083688] active_anon:9095 inactive_anon:65193 isolated_anon:0 [ 3127.083688] active_file:3 inactive_file:19 isolated_file:0 [ 3127.083688] unevictable:0 dirty:1 writeback:0 [ 3127.083688] slab_reclaimable:9228 slab_unreclaimable:68327 [ 3127.083688] mapped:69659 shmem:174 pagetables:3999 bounce:0 [ 3127.083688] free:2771 free_pcp:0 free_cma:0 [ 3127.086400] Node 0 active_anon:36380kB inactive_anon:260772kB active_file:12kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278636kB dirty:4kB writeback:0kB shmem:696kB writeback_tmp:0kB kernel_stack:7072kB all_unreclaimable? yes [ 3127.088408] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3127.090680] lowmem_reserve[]: 0 1616 1616 1616 [ 3127.091097] Node 0 DMA32 free:4576kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:36380kB inactive_anon:260772kB active_file:136kB inactive_file:296kB unevictable:0kB writepending:4kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:15996kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3127.093557] lowmem_reserve[]: 0 0 0 0 [ 3127.093913] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3127.095221] Node 0 DMA32: 503*4kB (UM) 115*8kB (UM) 48*16kB (UM) 26*32kB (UM) 11*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5364kB [ 3127.096536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3127.097296] 230 total pagecache pages [ 3127.097631] 0 pages in swap cache [ 3127.097931] Swap cache stats: add 0, delete 0, find 0/0 [ 3127.098427] Free swap = 0kB [ 3127.098697] Total swap = 0kB [ 3127.098958] 524158 pages RAM [ 3127.099240] 0 pages HighMem/MovableOnly [ 3127.099588] 105062 pages reserved [ 3127.099893] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=285,uid=0 [ 3127.101656] Out of memory (oom_kill_allocating_task): Killed process 285 (syz-executor.7) total-vm:93280kB, anon-rss:376kB, file-rss:34808kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 3127.444039] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 3127.444991] CPU: 0 PID: 103 Comm: systemd-journal Not tainted 5.10.215 #1 [ 3127.445593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.446320] Call Trace: [ 3127.446552] dump_stack+0x107/0x167 [ 3127.446874] dump_header+0x106/0x655 [ 3127.447209] oom_kill_process.cold+0x10/0x15 [ 3127.447602] out_of_memory+0x1149/0x1440 [ 3127.447977] ? oom_killer_disable+0x280/0x280 [ 3127.448376] ? mutex_trylock+0x237/0x2b0 [ 3127.448738] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3127.449266] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3127.449794] ? lock_acquire+0xf7/0x470 [ 3127.450139] ? warn_alloc+0x190/0x190 [ 3127.450497] __alloc_pages_nodemask+0x51d/0x600 [ 3127.450906] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3127.451436] ? find_get_entry+0x2c8/0x740 [ 3127.451809] alloc_pages_current+0x187/0x280 [ 3127.452203] __page_cache_alloc+0x2d2/0x360 [ 3127.452582] pagecache_get_page+0x2c7/0xc80 [ 3127.452975] filemap_fault+0x177d/0x2210 [ 3127.453340] ? read_cache_page_gfp+0x30/0x30 [ 3127.453730] ? replace_page_cache_page+0x1200/0x1200 [ 3127.454173] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3127.454646] ext4_filemap_fault+0x87/0xc0 [ 3127.455010] __do_fault+0x113/0x410 [ 3127.455346] handle_mm_fault+0x1e53/0x3500 [ 3127.455721] ? fsnotify+0xf50/0xf50 [ 3127.456043] ? find_held_lock+0x2c/0x110 [ 3127.456405] ? __pmd_alloc+0x5e0/0x5e0 [ 3127.456757] ? vmacache_find+0x55/0x2a0 [ 3127.457108] ? vmacache_update+0xce/0x140 [ 3127.457483] do_user_addr_fault+0x56e/0xc60 [ 3127.457867] exc_page_fault+0xa2/0x1a0 [ 3127.458215] ? asm_exc_page_fault+0x8/0x30 [ 3127.458595] asm_exc_page_fault+0x1e/0x30 [ 3127.458958] RIP: 0033:0x7f45e987df49 [ 3127.459286] Code: Unable to access opcode bytes at RIP 0x7f45e987df1f. [ 3127.459855] RSP: 002b:00007ffe8f6a5aa8 EFLAGS: 00010202 [ 3127.460335] RAX: 000000000000000a RBX: 00007ffe8f6a6370 RCX: 00007f45e98a8480 [ 3127.460967] RDX: 000000000000000a RSI: 00007f45e9affa7a RDI: 00007ffe8f6a6370 [ 3127.461591] RBP: 00007ffe8f6a84a0 R08: 00007f45e9affa70 R09: 00007ffe8f747080 [ 3127.462223] R10: 00007ffe8f7470f0 R11: 0000000000000000 R12: 00007ffe8f6a5b14 [ 3127.462850] R13: 00007ffe8f6a6370 R14: 0000000000000100 R15: 0000000000000000 [ 3127.463525] Mem-Info: [ 3127.463756] active_anon:9095 inactive_anon:65183 isolated_anon:0 [ 3127.463756] active_file:2 inactive_file:40 isolated_file:0 [ 3127.463756] unevictable:0 dirty:0 writeback:0 [ 3127.463756] slab_reclaimable:9224 slab_unreclaimable:68083 [ 3127.463756] mapped:69634 shmem:174 pagetables:3973 bounce:0 [ 3127.463756] free:2396 free_pcp:62 free_cma:0 [ 3127.466476] Node 0 active_anon:36380kB inactive_anon:260732kB active_file:8kB inactive_file:160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:696kB writeback_tmp:0kB kernel_stack:7072kB all_unreclaimable? yes [ 3127.468472] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3127.470741] lowmem_reserve[]: 0 1616 1616 1616 [ 3127.471164] Node 0 DMA32 free:3100kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:36380kB inactive_anon:260732kB active_file:36kB inactive_file:148kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:15892kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3127.473681] lowmem_reserve[]: 0 0 0 0 [ 3127.474044] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3127.475255] Node 0 DMA32: 454*4kB (UM) 88*8kB (UM) 24*16kB (ME) 7*32kB (M) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3512kB [ 3127.476495] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3127.477244] 220 total pagecache pages [ 3127.477580] 0 pages in swap cache [ 3127.477894] Swap cache stats: add 0, delete 0, find 0/0 [ 3127.478381] Free swap = 0kB [ 3127.478644] Total swap = 0kB [ 3127.478910] 524158 pages RAM [ 3127.479188] 0 pages HighMem/MovableOnly [ 3127.479533] 105062 pages reserved [ 3127.479837] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0 [ 3127.482082] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:40028kB, anon-rss:988kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:104kB oom_score_adj:-250 [ 3127.513763] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3127.514634] CPU: 1 PID: 254 Comm: syz-fuzzer Not tainted 5.10.215 #1 [ 3127.515153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.515821] Call Trace: [ 3127.516044] dump_stack+0x107/0x167 [ 3127.516345] dump_header+0x106/0x655 [ 3127.516648] oom_kill_process.cold+0x10/0x15 [ 3127.517010] out_of_memory+0x1149/0x1440 [ 3127.517347] ? oom_killer_disable+0x280/0x280 [ 3127.517715] ? mutex_trylock+0x237/0x2b0 [ 3127.518044] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3127.518531] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3127.519011] ? lock_acquire+0xf7/0x470 [ 3127.519334] ? warn_alloc+0x190/0x190 [ 3127.519657] __alloc_pages_nodemask+0x51d/0x600 [ 3127.520037] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3127.520520] ? find_get_entry+0x2c8/0x740 [ 3127.520861] alloc_pages_current+0x187/0x280 [ 3127.521218] __page_cache_alloc+0x2d2/0x360 [ 3127.521569] pagecache_get_page+0x2c7/0xc80 [ 3127.521916] filemap_fault+0x177d/0x2210 [ 3127.522253] ? read_cache_page_gfp+0x30/0x30 [ 3127.522618] ? replace_page_cache_page+0x1200/0x1200 [ 3127.523024] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3127.523452] ext4_filemap_fault+0x87/0xc0 [ 3127.523782] __do_fault+0x113/0x410 [ 3127.524075] handle_mm_fault+0x1e53/0x3500 [ 3127.524423] ? _copy_from_user+0xfb/0x1b0 [ 3127.524758] ? __pmd_alloc+0x5e0/0x5e0 [ 3127.525079] ? vmacache_find+0x55/0x2a0 [ 3127.525399] ? vmacache_update+0xce/0x140 [ 3127.525742] do_user_addr_fault+0x56e/0xc60 [ 3127.526095] exc_page_fault+0xa2/0x1a0 [ 3127.526412] ? asm_exc_page_fault+0x8/0x30 [ 3127.526749] asm_exc_page_fault+0x1e/0x30 [ 3127.527077] RIP: 0033:0x466533 [ 3127.527339] Code: Unable to access opcode bytes at RIP 0x466509. [ 3127.527816] RSP: 002b:000000c00003fe80 EFLAGS: 00010202 [ 3127.528242] RAX: ffffffffffffff92 RBX: 000000003887d573 RCX: 0000000000466533 [ 3127.528808] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 3127.529370] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000 [ 3127.529932] R10: 000000c00003feb8 R11: 0000000000000202 R12: 0000000000438880 [ 3127.530504] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 3127.531102] Mem-Info: [ 3127.531332] active_anon:9095 inactive_anon:65183 isolated_anon:0 [ 3127.531332] active_file:22 inactive_file:39 isolated_file:0 [ 3127.531332] unevictable:0 dirty:0 writeback:0 [ 3127.531332] slab_reclaimable:9224 slab_unreclaimable:68083 [ 3127.531332] mapped:69634 shmem:174 pagetables:3973 bounce:0 [ 3127.531332] free:2396 free_pcp:62 free_cma:0 [ 3127.533802] Node 0 active_anon:36380kB inactive_anon:260732kB active_file:88kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:696kB writeback_tmp:0kB kernel_stack:7072kB all_unreclaimable? yes [ 3127.535628] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3127.537677] lowmem_reserve[]: 0 1616 1616 1616 [ 3127.538061] Node 0 DMA32 free:3100kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:36380kB inactive_anon:260732kB active_file:36kB inactive_file:148kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:15892kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 3127.540340] lowmem_reserve[]: 0 0 0 0 [ 3127.540666] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3127.541767] Node 0 DMA32: 454*4kB (UM) 88*8kB (UM) 24*16kB (ME) 7*32kB (M) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3512kB [ 3127.542907] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3127.543585] 220 total pagecache pages [ 3127.543884] 0 pages in swap cache [ 3127.544155] Swap cache stats: add 0, delete 0, find 0/0 [ 3127.544596] Free swap = 0kB [ 3127.544835] Total swap = 0kB [ 3127.545089] 524158 pages RAM [ 3127.545352] 0 pages HighMem/MovableOnly [ 3127.545664] 105062 pages reserved [ 3127.545939] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=254,uid=0 [ 3127.547778] Out of memory (oom_kill_allocating_task): Killed process 253 (syz-fuzzer) total-vm:1308952kB, anon-rss:250096kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:1028kB oom_score_adj:0 [ 3127.690880] syz-executor.7: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 3127.692036] CPU: 1 PID: 17943 Comm: syz-executor.7 Not tainted 5.10.215 #1 [ 3127.692593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.693252] Call Trace: [ 3127.693466] dump_stack+0x107/0x167 [ 3127.693764] warn_alloc.cold+0x95/0x18a [ 3127.694084] ? zone_watermark_ok_safe+0x260/0x260 [ 3127.694480] ? queue_oom_reaper+0x86/0x1e0 [ 3127.694831] ? wait_for_completion_io+0x270/0x270 [ 3127.695231] __alloc_pages_slowpath.constprop.0+0x1c33/0x2170 [ 3127.695707] ? lock_acquire+0xf7/0x470 [ 3127.696024] ? warn_alloc+0x190/0x190 [ 3127.696357] __alloc_pages_nodemask+0x51d/0x600 [ 3127.696737] ? mark_held_locks+0x9e/0xe0 [ 3127.697064] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3127.697503] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3127.697984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.698413] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3127.698853] alloc_pages_current+0x187/0x280 [ 3127.699224] relay_open_buf.part.0+0x2a5/0xc00 [ 3127.699601] relay_open+0x531/0xa10 [ 3127.699905] do_blk_trace_setup+0x4cf/0xc10 [ 3127.700254] ? _copy_from_user+0xfb/0x1b0 [ 3127.700591] __blk_trace_setup+0xca/0x180 [ 3127.700928] ? do_blk_trace_setup+0xc10/0xc10 [ 3127.701301] ? perf_trace_lock+0xac/0x490 [ 3127.701635] ? SOFTIRQ_verbose+0x10/0x10 [ 3127.701972] blk_trace_setup+0x43/0x60 [ 3127.702299] sg_ioctl_common+0x634/0x2570 [ 3127.702635] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3127.703053] ? do_vfs_ioctl+0x283/0x10d0 [ 3127.703382] ? sg_write+0x120/0x120 [ 3127.703676] ? generic_block_fiemap+0x60/0x60 [ 3127.704040] ? sockfd_lookup_light+0xca/0x180 [ 3127.704416] ? selinux_file_ioctl+0xb6/0x270 [ 3127.704775] ? sg_compat_ioctl+0x120/0x120 [ 3127.705114] sg_ioctl+0x8f/0x120 [ 3127.705395] __x64_sys_ioctl+0x19a/0x210 [ 3127.705729] do_syscall_64+0x33/0x40 [ 3127.706026] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 3127.706446] RIP: 0033:0x7f5d0509eb19 [ 3127.706744] Code: Unable to access opcode bytes at RIP 0x7f5d0509eaef. [ 3127.707270] RSP: 002b:00007f5d02614188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3127.707881] RAX: ffffffffffffffda RBX: 00007f5d051b1f60 RCX: 00007f5d0509eb19 [ 3127.708447] RDX: 0000000020000080 RSI: 00000000c0481273 RDI: 0000000000000005 [ 3127.709013] RBP: 00007f5d050f8f6d R08: 0000000000000000 R09: 0000000000000000 [ 3127.709583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3127.710150] R13: 00007fffb92119af R14: 00007f5d02614300 R15: 0000000000022000 [ 3127.710844] Mem-Info: [ 3127.711059] active_anon:9095 inactive_anon:65162 isolated_anon:0 [ 3127.711059] active_file:18 inactive_file:32 isolated_file:0 [ 3127.711059] unevictable:0 dirty:0 writeback:0 [ 3127.711059] slab_reclaimable:9224 slab_unreclaimable:68083 [ 3127.711059] mapped:69634 shmem:174 pagetables:3973 bounce:0 [ 3127.711059] free:2350 free_pcp:93 free_cma:0 [ 3127.713569] Node 0 active_anon:36380kB inactive_anon:260648kB active_file:72kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:696kB writeback_tmp:0kB kernel_stack:6784kB all_unreclaimable? no [ 3127.715427] Node 0 DMA free:6484kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3127.717976] lowmem_reserve[]: 0 1616 1616 1616 [ 3127.718443] Node 0 DMA32 free:2916kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:36380kB inactive_anon:260732kB active_file:32kB inactive_file:128kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:15892kB bounce:0kB free_pcp:372kB local_pcp:256kB free_cma:0kB [ 3127.720741] lowmem_reserve[]: 0 0 0 0 [ 3127.721071] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3127.722209] Node 0 DMA32: 423*4kB (M) 87*8kB (UM) 24*16kB (UME) 7*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2996kB [ 3127.723347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3127.724017] 220 total pagecache pages [ 3127.724343] 0 pages in swap cache [ 3127.724626] Swap cache stats: add 0, delete 0, find 0/0 [ 3127.725049] Free swap = 0kB [ 3127.725310] Total swap = 0kB [ 3127.725556] 524158 pages RAM [ 3127.725798] 0 pages HighMem/MovableOnly [ 3127.726113] 105062 pages reserved [ 3127.828645] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 3127.830600] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 3127.866385] systemd[1]: systemd-journald.service: Consumed 26.686s CPU time. [ 3127.889906] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 3127.978205] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3128.137535] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3128.511636] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 3128.512812] systemd[1]: ssh.service: Unit process 247 (sshd) remains running after unit stopped. [ 3128.539473] systemd[1]: ssh.service: Consumed 45min 17.024s CPU time. [ 3128.661080] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 1. [ 3128.673529] systemd[1]: Stopped OpenBSD Secure Shell server. [ 3128.674552] systemd[1]: ssh.service: Consumed 45min 17.039s CPU time. [ 3128.677130] systemd[1]: ssh.service: Found left-over process 247 (sshd) in control group while starting unit. Ignoring. [ 3128.694896] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 3128.811890] systemd[1]: Starting OpenBSD Secure Shell server... [ 3128.894534] (sshd) invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3128.895842] CPU: 1 PID: 17975 Comm: (sshd) Not tainted 5.10.215 #1 [ 3128.896347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3128.897004] Call Trace: [ 3128.897224] dump_stack+0x107/0x167 [ 3128.897526] dump_header+0x106/0x655 [ 3128.897826] oom_kill_process.cold+0x10/0x15 [ 3128.898193] out_of_memory+0x1149/0x1440 [ 3128.898536] ? oom_killer_disable+0x280/0x280 [ 3128.898903] ? mutex_trylock+0x237/0x2b0 [ 3128.899231] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3128.899707] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3128.900182] ? lock_acquire+0xf7/0x470 [ 3128.900498] ? warn_alloc+0x190/0x190 [ 3128.900815] __alloc_pages_nodemask+0x51d/0x600 [ 3128.901182] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3128.901671] alloc_pages_vma+0xbb/0x410 [ 3128.901987] wp_page_copy+0x1c3/0x1f00 [ 3128.902319] ? print_bad_pte+0x5a0/0x5a0 [ 3128.902653] ? lock_downgrade+0x6d0/0x6d0 [ 3128.902981] ? vm_normal_page+0x162/0x2e0 [ 3128.903312] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3128.903730] do_wp_page+0x27b/0x1390 [ 3128.904040] handle_mm_fault+0x1cc7/0x3500 [ 3128.904377] ? find_held_lock+0x2c/0x110 [ 3128.904714] ? __pmd_alloc+0x5e0/0x5e0 [ 3128.905029] ? vmacache_find+0x55/0x2a0 [ 3128.905360] do_user_addr_fault+0x56e/0xc60 [ 3128.905713] exc_page_fault+0xa2/0x1a0 [ 3128.906022] ? asm_exc_page_fault+0x8/0x30 [ 3128.906364] asm_exc_page_fault+0x1e/0x30 [ 3128.906697] RIP: 0033:0x7f8631ccc78e [ 3128.906997] Code: c2 81 e2 7f 01 00 00 83 e0 7c 0f 85 7c 00 00 00 53 48 83 ec 10 85 d2 75 7b 8b 0d e5 5c 01 00 85 c9 75 39 31 c0 ba 01 00 00 00 0f b1 17 0f 85 98 00 00 00 8b 57 08 85 d2 0f 85 42 01 00 00 64 [ 3128.908472] RSP: 002b:00007ffc1f43fda0 EFLAGS: 00010246 [ 3128.908901] RAX: 0000000000000000 RBX: 00005615169bf8c0 RCX: 0000000000000000 [ 3128.909475] RDX: 0000000000000001 RSI: 0000561516e43040 RDI: 00005615169bf8d0 [ 3128.910044] RBP: 0000561516e43040 R08: 0000000000000000 R09: 0000000000000000 [ 3128.910619] R10: 0000561516e43049 R11: 0000561516e43040 R12: 0000000000000000 [ 3128.911198] R13: 0000000000000003 R14: 0000000000004000 R15: 0000561516e43040 [ 3128.911813] Mem-Info: [ 3128.912026] active_anon:3276 inactive_anon:26448 isolated_anon:0 [ 3128.912026] active_file:405 inactive_file:457 isolated_file:32 [ 3128.912026] unevictable:0 dirty:2 writeback:0 [ 3128.912026] slab_reclaimable:8009 slab_unreclaimable:65624 [ 3128.912026] mapped:9458 shmem:128 pagetables:608 bounce:0 [ 3128.912026] free:3368 free_pcp:75 free_cma:0 [ 3128.914536] Node 0 active_anon:13104kB inactive_anon:105792kB active_file:1620kB inactive_file:1828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37748kB dirty:8kB writeback:0kB shmem:512kB writeback_tmp:0kB kernel_stack:3104kB all_unreclaimable? no [ 3128.916391] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3128.918499] lowmem_reserve[]: 0 1616 1616 1616 [ 3128.918893] Node 0 DMA32 free:6984kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:12852kB inactive_anon:105372kB active_file:1956kB inactive_file:1836kB unevictable:0kB writepending:132kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:2432kB bounce:0kB free_pcp:700kB local_pcp:40kB free_cma:0kB [ 3128.921243] lowmem_reserve[]: 0 0 0 0 [ 3128.921581] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6484kB [ 3128.922763] Node 0 DMA32: 943*4kB (UME) 231*8kB (UME) 60*16kB (UME) 18*32kB (UM) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7284kB [ 3128.923961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3128.924649] 814 total pagecache pages [ 3128.924954] 0 pages in swap cache [ 3128.925257] Swap cache stats: add 0, delete 0, find 0/0 [ 3128.925689] Free swap = 0kB [ 3128.925940] Total swap = 0kB [ 3128.926196] 524158 pages RAM [ 3128.926451] 0 pages HighMem/MovableOnly [ 3128.926768] 105062 pages reserved [ 3128.927077] Unreclaimable slab info: [ 3128.927721] Name Used Total [ 3128.928210] pid_3 7KB 7KB [ 3128.928643] pid_2 106KB 138KB [ 3128.929080] IEEE-802.15.4-MAC 63KB 63KB [ 3128.929529] IEEE-802.15.4-RAW 63KB 63KB [ 3128.929967] p9_req_t 8KB 8KB [ 3128.930418] ip6-frags 15KB 15KB [ 3128.930851] fib6_nodes 32KB 32KB [ 3128.931294] ip6_dst_cache 48KB 48KB [ 3128.931727] PINGv6 63KB 63KB [ 3128.932162] RAWv6 409KB 409KB [ 3128.932663] UDPLITEv6 93KB 93KB [ 3128.933098] UDPv6 124KB 124KB [ 3128.933545] tw_sock_TCPv6 15KB 15KB [ 3128.933972] request_sock_TCPv6 15KB 15KB [ 3128.934436] TCPv6 62KB 62KB [ 3128.934871] scsi_sense_cache 8KB 8KB [ 3128.935323] sd_ext_cdb 3KB 3KB [ 3128.935750] virtio_scsi_cmd 16KB 16KB [ 3128.936198] sgpool-128 59KB 59KB [ 3128.936630] sgpool-64 63KB 63KB [ 3128.937057] sgpool-32 220KB 220KB [ 3128.937502] sgpool-16 68KB 90KB [ 3128.937937] sgpool-8 60KB 60KB [ 3128.938383] io_kiocb 82KB 101KB [ 3128.938811] mqueue_inode_cache 62KB 62KB [ 3128.939262] nfs_commit_data 15KB 15KB [ 3128.939692] nfs_write_data 47KB 47KB [ 3128.940125] jbd2_inode 7KB 7KB [ 3128.940575] ext4_system_zone 7KB 7KB [ 3128.941009] ext4_io_end_vec 11KB 11KB [ 3128.941460] ext4_bio_post_read_ctx 15KB 15KB [ 3128.941923] kioctx 31KB 31KB [ 3128.942489] aio_kiocb 7KB 7KB [ 3128.943028] dnotify_mark 7KB 7KB [ 3128.943478] dnotify_struct 7KB 7KB [ 3128.943906] dio 46KB 46KB [ 3128.944354] bio-2 24KB 24KB [ 3128.944785] fasync_cache 7KB 7KB [ 3128.945232] pid_namespace 7KB 7KB [ 3128.945679] posix_timers_cache 15KB 15KB [ 3128.946217] rpc_buffers 31KB 31KB [ 3128.946652] rpc_tasks 3KB 3KB [ 3128.947074] UNIX 266KB 352KB [ 3128.947521] ip4-frags 15KB 15KB [ 3128.947944] UDP-Lite 63KB 63KB [ 3128.948392] tcp_bind_bucket 8KB 8KB [ 3128.948814] inet_peer_cache 8KB 8KB [ 3128.949262] xfrm_state 32KB 32KB [ 3128.949692] ip_fib_trie 8KB 8KB [ 3128.950118] ip_fib_alias 19KB 19KB [ 3128.950565] ip_dst_cache 33KB 88KB [ 3128.951085] PING 62KB 62KB [ 3128.951527] RAW 156KB 156KB [ 3128.951954] UDP 190KB 346KB [ 3128.952392] tw_sock_TCP 15KB 15KB [ 3128.952821] request_sock_TCP 15KB 15KB [ 3128.953260] TCP 60KB 60KB [ 3128.953689] hugetlbfs_inode_cache 30KB 30KB [ 3128.954197] bio-1 11KB 11KB [ 3128.954681] eventpoll_pwq 19KB 19KB [ 3128.955111] eventpoll_epi 47KB 47KB [ 3128.955555] inotify_inode_mark 39KB 39KB [ 3128.955992] request_queue 60KB 60KB [ 3128.956501] blkdev_ioc 68KB 82KB [ 3128.956950] bio-0 156KB 156KB [ 3128.957525] biovec-max 391KB 684KB [ 3128.958016] biovec-64 189KB 189KB [ 3128.958543] biovec-16 56KB 56KB [ 3128.958973] user_namespace 31KB 31KB [ 3128.959414] uid_cache 8KB 8KB [ 3128.959969] dmaengine-unmap-2 4KB 4KB [ 3128.960498] audit_buffer 7KB 7KB [ 3128.961076] skbuff_fclone_cache 45KB 82KB [ 3128.961653] skbuff_head_cache 387KB 498KB [ 3128.962165] configfs_dir_cache 8KB 8KB [ 3128.962623] file_lock_cache 66KB 66KB [ 3128.963160] file_lock_ctx 7KB 7KB [ 3128.963604] fsnotify_mark_connector 20KB 20KB [ 3128.964067] net_namespace 201KB 201KB [ 3128.964513] task_delay_info 132KB 173KB [ 3128.964941] taskstats 77KB 77KB [ 3128.965384] proc_dir_entry 689KB 708KB [ 3128.965812] pde_opener 31KB 31KB [ 3128.966254] seq_file 78KB 78KB [ 3128.966683] sigqueue 47KB 47KB [ 3128.967110] shmem_inode_cache 1261KB 1352KB [ 3128.967552] kernfs_iattrs_cache 258KB 258KB [ 3128.967996] kernfs_node_cache 6865KB 6925KB [ 3128.968433] mnt_cache 270KB 275KB [ 3128.968895] filp 826KB 1792KB [ 3128.969329] names_cache 2622KB 2622KB [ 3128.969753] hashtab_node 278KB 278KB [ 3128.970188] ebitmap_node 1149KB 1149KB [ 3128.970622] avtab_node 4976KB 4976KB [ 3128.971046] avc_node 39KB 39KB [ 3128.971523] lsm_inode_cache 2627KB 3059KB [ 3128.971949] lsm_file_cache 158KB 228KB [ 3128.972397] key_jar 70KB 70KB [ 3128.972818] uts_namespace 15KB 15KB [ 3128.973281] nsproxy 7KB 7KB [ 3128.973810] vm_area_struct 1791KB 2016KB [ 3128.974430] fs_cache 57KB 72KB [ 3128.974986] files_cache 217KB 270KB [ 3128.975584] signal_cache 500KB 555KB [ 3128.976022] sighand_cache 490KB 541KB [ 3128.976580] task_struct 1817KB 2441KB [ 3128.977093] cred_jar 140KB 220KB [ 3128.977642] anon_vma_chain 472KB 547KB [ 3128.978200] anon_vma 188KB 282KB [ 3128.978695] pid 61KB 78KB [ 3128.979251] Acpi-Operand 80KB 114KB [ 3128.979781] Acpi-ParseExt 27KB 27KB [ 3128.980342] Acpi-Parse 55KB 71KB [ 3128.980814] Acpi-State 78KB 94KB [ 3128.981310] Acpi-Namespace 24KB 24KB [ 3128.981832] shared_policy_node 4KB 4KB [ 3128.982311] numa_policy 7KB 7KB [ 3128.982822] trace_event_file 176KB 176KB [ 3128.983390] ftrace_event_field 280KB 280KB [ 3128.983824] pool_workqueue 48KB 48KB [ 3128.984328] task_group 16KB 16KB [ 3128.984890] mm_struct 357KB 472KB [ 3128.985337] vmap_area 189KB 189KB [ 3128.985881] page->ptl 424KB 484KB [ 3128.986336] kmemleak_scan_area 94KB 99KB [ 3128.988156] kmemleak_object 145193KB 167282KB [ 3128.988711] kmalloc-8k 5360KB 5536KB [ 3128.989149] kmalloc-4k 9312KB 10016KB [ 3128.989603] kmalloc-2k 7180KB 7648KB [ 3128.990133] kmalloc-1k 3208KB 3488KB [ 3128.990750] kmalloc-512 3239KB 6912KB [ 3128.991195] kmalloc-256 1708KB 1720KB [ 3128.991621] kmalloc-192 764KB 768KB [ 3128.992058] kmalloc-128 693KB 752KB [ 3128.992539] kmalloc-96 428KB 968KB [ 3128.993002] kmalloc-64 1053KB 1576KB [ 3128.993462] kmalloc-32 789KB 876KB [ 3128.993895] kmalloc-16 375KB 376KB [ 3128.994450] kmalloc-8 340KB 346KB [ 3128.994964] kmem_cache_node 47KB 47KB [ 3128.995412] kmem_cache 75KB 75KB [ 3128.995841] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=(sshd),pid=17975,uid=0 [ 3128.998261] Out of memory (oom_kill_allocating_task): Killed process 17975 ((sshd)) total-vm:114456kB, anon-rss:11128kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 3129.132735] systemd[1]: ssh.service: A process of this unit has been killed by the OOM killer. [ 3129.215383] systemd-rfkill invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3129.216256] CPU: 1 PID: 17972 Comm: systemd-rfkill Not tainted 5.10.215 #1 [ 3129.216809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3129.217475] Call Trace: [ 3129.217700] dump_stack+0x107/0x167 [ 3129.217993] dump_header+0x106/0x655 [ 3129.218304] oom_kill_process.cold+0x10/0x15 [ 3129.218665] out_of_memory+0x1149/0x1440 [ 3129.218999] ? oom_killer_disable+0x280/0x280 [ 3129.219372] ? mutex_trylock+0x237/0x2b0 [ 3129.219698] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3129.220174] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3129.220653] ? lock_acquire+0xf7/0x470 [ 3129.220968] ? warn_alloc+0x190/0x190 [ 3129.221290] __alloc_pages_nodemask+0x51d/0x600 [ 3129.221664] ? add_mm_counter_fast+0x220/0x220 [ 3129.222029] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3129.222523] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3129.223020] ? lock_downgrade+0x6d0/0x6d0 [ 3129.223395] ? mark_held_locks+0x9e/0xe0 [ 3129.223722] alloc_pages_vma+0xbb/0x410 [ 3129.224130] handle_mm_fault+0xf00/0x3500 [ 3129.224533] ? vm_mmap_pgoff+0x1b7/0x1f0 [ 3129.224963] ? vm_mmap_pgoff+0xe8/0x1f0 [ 3129.225385] ? __pmd_alloc+0x5e0/0x5e0 [ 3129.225780] ? vmacache_find+0x55/0x2a0 [ 3129.226105] do_user_addr_fault+0x56e/0xc60 [ 3129.226459] exc_page_fault+0xa2/0x1a0 [ 3129.226768] ? asm_exc_page_fault+0x8/0x30 [ 3129.227104] asm_exc_page_fault+0x1e/0x30 [ 3129.227437] RIP: 0033:0x7f4fa4b540ef [ 3129.227814] Code: Unable to access opcode bytes at RIP 0x7f4fa4b540c5. [ 3129.228332] RSP: 002b:00007ffcee75dd48 EFLAGS: 00010202 [ 3129.228756] RAX: 00007f4fa44c8248 RBX: 0000000000000004 RCX: 00007f4fa44c8288 [ 3129.229326] RDX: 0000000000000380 RSI: 0000000000000000 RDI: 00007f4fa44c8248 [ 3129.229888] RBP: 00007ffcee75e080 R08: 00007f4fa44c8248 R09: 0000000000059000 [ 3129.230460] R10: 00007f4fa44c85c8 R11: 0000000000000003 R12: 00007f4fa4633440 [ 3129.231080] R13: 00007ffcee75dd50 R14: 00007ffcee75dde0 R15: 00007ffcee75e110 [ 3129.231845] Mem-Info: [ 3129.232058] active_anon:39 inactive_anon:7563 isolated_anon:0 [ 3129.232058] active_file:162 inactive_file:283 isolated_file:22 [ 3129.232058] unevictable:0 dirty:2 writeback:0 [ 3129.232058] slab_reclaimable:7781 slab_unreclaimable:65623 [ 3129.232058] mapped:9055 shmem:123 pagetables:290 bounce:0 [ 3129.232058] free:4228 free_pcp:555 free_cma:0 [ 3129.235063] Node 0 active_anon:156kB inactive_anon:30252kB active_file:648kB inactive_file:1216kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:36136kB dirty:8kB writeback:0kB shmem:492kB writeback_tmp:0kB kernel_stack:2944kB all_unreclaimable? no [ 3129.237275] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3129.239937] lowmem_reserve[]: 0 1616 1616 1616 [ 3129.240425] Node 0 DMA32 free:10424kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:156kB inactive_anon:30252kB active_file:644kB inactive_file:1552kB unevictable:0kB writepending:8kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:1160kB bounce:0kB free_pcp:1524kB local_pcp:732kB free_cma:0kB [ 3129.243222] lowmem_reserve[]: 0 0 0 0 [ 3129.243593] Node 0 DMA: 2*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 3129.244888] Node 0 DMA32: 1045*4kB (UME) 339*8kB (UME) 141*16kB (UME) 34*32kB (UME) 7*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10940kB [ 3129.246384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3129.247315] 921 total pagecache pages [ 3129.247711] 0 pages in swap cache [ 3129.248006] Swap cache stats: add 0, delete 0, find 0/0 [ 3129.248511] Free swap = 0kB [ 3129.248857] Total swap = 0kB [ 3129.249099] 524158 pages RAM [ 3129.249452] 0 pages HighMem/MovableOnly [ 3129.249854] 105062 pages reserved [ 3129.250250] Unreclaimable slab info: [ 3129.250551] Name Used Total [ 3129.251080] pid_3 7KB 7KB [ 3129.251624] pid_2 106KB 138KB [ 3129.252137] IEEE-802.15.4-MAC 63KB 63KB [ 3129.252690] IEEE-802.15.4-RAW 63KB 63KB [ 3129.253597] p9_req_t 8KB 8KB [ 3129.254062] ip6-frags 15KB 15KB [ 3129.254667] fib6_nodes 32KB 32KB [ 3129.255094] ip6_dst_cache 48KB 48KB [ 3129.255631] PINGv6 63KB 63KB [ 3129.256147] RAWv6 409KB 409KB [ 3129.256679] UDPLITEv6 93KB 93KB [ 3129.257189] UDPv6 124KB 124KB [ 3129.257710] tw_sock_TCPv6 15KB 15KB [ 3129.258162] request_sock_TCPv6 15KB 15KB [ 3129.258701] TCPv6 62KB 62KB [ 3129.259198] scsi_sense_cache 8KB 8KB [ 3129.259716] sd_ext_cdb 3KB 3KB [ 3129.260171] virtio_scsi_cmd 16KB 16KB [ 3129.260696] sgpool-128 59KB 59KB [ 3129.261159] sgpool-64 63KB 63KB [ 3129.261601] sgpool-32 267KB 267KB [ 3129.262029] sgpool-16 68KB 90KB [ 3129.262592] sgpool-8 60KB 60KB [ 3129.263071] io_kiocb 82KB 101KB [ 3129.263594] mqueue_inode_cache 62KB 62KB [ 3129.264021] nfs_commit_data 15KB 15KB [ 3129.264483] nfs_write_data 47KB 47KB [ 3129.264991] jbd2_inode 7KB 7KB [ 3129.265595] ext4_system_zone 7KB 7KB [ 3129.266011] ext4_io_end_vec 11KB 11KB [ 3129.266569] ext4_bio_post_read_ctx 15KB 15KB [ 3129.267019] kioctx 31KB 31KB [ 3129.267544] aio_kiocb 7KB 7KB [ 3129.267960] dnotify_mark 7KB 7KB [ 3129.268396] dnotify_struct 7KB 7KB [ 3129.268843] dio 46KB 46KB [ 3129.269347] bio-2 24KB 24KB [ 3129.269761] fasync_cache 7KB 7KB [ 3129.270304] pid_namespace 7KB 7KB [ 3129.270737] posix_timers_cache 15KB 15KB [ 3129.271241] rpc_buffers 31KB 31KB [ 3129.271655] rpc_tasks 3KB 3KB [ 3129.272069] UNIX 266KB 352KB [ 3129.272585] ip4-frags 15KB 15KB [ 3129.273071] UDP-Lite 63KB 63KB [ 3129.273604] tcp_bind_bucket 8KB 8KB [ 3129.274021] inet_peer_cache 8KB 8KB [ 3129.274558] xfrm_state 32KB 32KB [ 3129.274981] ip_fib_trie 8KB 8KB [ 3129.275444] ip_fib_alias 19KB 19KB [ 3129.275931] ip_dst_cache 33KB 88KB [ 3129.276468] PING 62KB 62KB [ 3129.276887] RAW 156KB 156KB [ 3129.277324] UDP 190KB 346KB [ 3129.277737] tw_sock_TCP 15KB 15KB [ 3129.278147] request_sock_TCP 15KB 15KB [ 3129.278610] TCP 60KB 60KB [ 3129.279129] hugetlbfs_inode_cache 30KB 30KB [ 3129.279680] bio-1 11KB 11KB [ 3129.280172] eventpoll_pwq 19KB 19KB [ 3129.280670] eventpoll_epi 47KB 47KB [ 3129.281155] inotify_inode_mark 39KB 39KB [ 3129.281729] request_queue 60KB 60KB [ 3129.282157] blkdev_ioc 68KB 82KB [ 3129.282700] bio-0 272KB 272KB [ 3129.283124] biovec-max 391KB 684KB [ 3129.283662] biovec-64 315KB 315KB [ 3129.284174] biovec-16 56KB 56KB [ 3129.284620] user_namespace 31KB 31KB [ 3129.285135] uid_cache 8KB 8KB [ 3129.285683] dmaengine-unmap-2 4KB 4KB [ 3129.286196] audit_buffer 7KB 7KB [ 3129.286714] skbuff_fclone_cache 45KB 82KB [ 3129.287263] skbuff_head_cache 415KB 495KB [ 3129.287689] configfs_dir_cache 8KB 8KB [ 3129.288244] file_lock_cache 66KB 66KB [ 3129.288666] file_lock_ctx 7KB 7KB [ 3129.289197] fsnotify_mark_connector 20KB 20KB [ 3129.289752] net_namespace 201KB 201KB [ 3129.290293] task_delay_info 132KB 173KB [ 3129.290719] taskstats 77KB 77KB [ 3129.291265] proc_dir_entry 689KB 708KB [ 3129.291760] pde_opener 31KB 31KB [ 3129.292208] seq_file 78KB 78KB [ 3129.292734] sigqueue 47KB 47KB [ 3129.293172] shmem_inode_cache 1261KB 1352KB [ 3129.293682] kernfs_iattrs_cache 258KB 258KB [ 3129.294234] kernfs_node_cache 6865KB 6925KB [ 3129.294683] mnt_cache 270KB 275KB [ 3129.295231] filp 833KB 1792KB [ 3129.295652] names_cache 2775KB 2775KB [ 3129.296070] hashtab_node 278KB 278KB [ 3129.296512] ebitmap_node 1149KB 1149KB [ 3129.296935] avtab_node 4976KB 4976KB [ 3129.297377] avc_node 39KB 39KB [ 3129.297834] lsm_inode_cache 2627KB 3059KB [ 3129.298275] lsm_file_cache 158KB 228KB [ 3129.298704] key_jar 70KB 70KB [ 3129.299127] uts_namespace 15KB 15KB [ 3129.299565] nsproxy 7KB 7KB [ 3129.300012] vm_area_struct 1827KB 2016KB [ 3129.300450] fs_cache 57KB 72KB [ 3129.300875] files_cache 217KB 270KB [ 3129.301315] signal_cache 500KB 555KB [ 3129.301736] sighand_cache 490KB 541KB [ 3129.302169] task_struct 1817KB 2441KB [ 3129.302620] cred_jar 140KB 220KB [ 3129.303150] anon_vma_chain 472KB 547KB [ 3129.303604] anon_vma 146KB 258KB [ 3129.304030] pid 61KB 78KB [ 3129.304472] Acpi-Operand 80KB 114KB [ 3129.304893] Acpi-ParseExt 27KB 27KB [ 3129.305447] Acpi-Parse 55KB 71KB [ 3129.305871] Acpi-State 78KB 94KB [ 3129.306320] Acpi-Namespace 24KB 24KB [ 3129.306742] shared_policy_node 4KB 4KB [ 3129.307167] numa_policy 7KB 7KB [ 3129.307606] trace_event_file 176KB 176KB [ 3129.308080] ftrace_event_field 280KB 280KB [ 3129.308568] pool_workqueue 48KB 48KB [ 3129.308991] task_group 16KB 16KB [ 3129.309432] mm_struct 357KB 472KB [ 3129.309853] vmap_area 189KB 189KB [ 3129.310308] page->ptl 424KB 484KB [ 3129.310733] kmemleak_scan_area 94KB 99KB [ 3129.312621] kmemleak_object 142541KB 167184KB [ 3129.313159] kmalloc-8k 5360KB 5536KB [ 3129.313702] kmalloc-4k 9528KB 10016KB [ 3129.314137] kmalloc-2k 7200KB 7648KB [ 3129.314591] kmalloc-1k 3338KB 3488KB [ 3129.315068] kmalloc-512 3279KB 6880KB [ 3129.315508] kmalloc-256 1718KB 1720KB [ 3129.315932] kmalloc-192 772KB 772KB [ 3129.316394] kmalloc-128 692KB 752KB [ 3129.316865] kmalloc-96 426KB 964KB [ 3129.317340] kmalloc-64 1053KB 1576KB [ 3129.317777] kmalloc-32 792KB 876KB [ 3129.318213] kmalloc-16 375KB 376KB [ 3129.318643] kmalloc-8 340KB 346KB [ 3129.319062] kmem_cache_node 47KB 47KB [ 3129.319502] kmem_cache 75KB 75KB [ 3129.319937] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-rfkill.service,task=systemd-rfkill,pid=17972,uid=0 [ 3129.321364] Out of memory (oom_kill_allocating_task): Killed process 17972 (systemd-rfkill) total-vm:7304kB, anon-rss:128kB, file-rss:16kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:0 [ 3129.481504] oom_reaper: reaped process 17943 (syz-executor.7), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 3129.759489] systemd-udevd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-1000 [ 3129.760383] CPU: 0 PID: 114 Comm: systemd-udevd Not tainted 5.10.215 #1 [ 3129.760924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3129.761601] Call Trace: [ 3129.761825] dump_stack+0x107/0x167 [ 3129.762128] dump_header+0x106/0x655 [ 3129.762442] oom_kill_process.cold+0x10/0x15 [ 3129.762808] out_of_memory+0x358/0x1440 [ 3129.763137] ? oom_killer_disable+0x280/0x280 [ 3129.763512] ? mutex_trylock+0x237/0x2b0 [ 3129.763844] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3129.764338] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3129.764826] ? lock_acquire+0xf7/0x470 [ 3129.765147] ? warn_alloc+0x190/0x190 [ 3129.765478] __alloc_pages_nodemask+0x51d/0x600 [ 3129.765866] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3129.766370] ? find_get_entry+0x2c8/0x740 [ 3129.766720] alloc_pages_current+0x187/0x280 [ 3129.767080] __page_cache_alloc+0x2d2/0x360 [ 3129.767438] pagecache_get_page+0x2c7/0xc80 [ 3129.767793] filemap_fault+0x177d/0x2210 [ 3129.768136] ? read_cache_page_gfp+0x30/0x30 [ 3129.768501] ? replace_page_cache_page+0x1200/0x1200 [ 3129.768921] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3129.769363] ext4_filemap_fault+0x87/0xc0 [ 3129.769707] __do_fault+0x113/0x410 [ 3129.770010] handle_mm_fault+0x1e53/0x3500 [ 3129.770367] ? find_held_lock+0x2c/0x110 [ 3129.770698] ? __pmd_alloc+0x5e0/0x5e0 [ 3129.771023] ? vmacache_find+0x55/0x2a0 [ 3129.771352] ? vmacache_update+0xce/0x140 [ 3129.771696] do_user_addr_fault+0x56e/0xc60 [ 3129.772053] exc_page_fault+0xa2/0x1a0 [ 3129.772375] ? asm_exc_page_fault+0x8/0x30 [ 3129.772721] asm_exc_page_fault+0x1e/0x30 [ 3129.773065] RIP: 0033:0x558c6c129e5a [ 3129.773376] Code: Unable to access opcode bytes at RIP 0x558c6c129e30. [ 3129.773909] RSP: 002b:00007ffd81373db0 EFLAGS: 00010202 [ 3129.774355] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00007f2ffb13f0f3 [ 3129.774944] RDX: 00007ffd81373de0 RSI: 00007ffd81373de0 RDI: 0000000000000000 [ 3129.775532] RBP: 0000000000000000 R08: 0000000000000001 R09: 00007f2ffb125be0 [ 3129.776129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000558c6e3d9cf4 [ 3129.776711] R13: 0000000000000012 R14: 0000000000000012 R15: 0000558c6e3a02a1 [ 3129.777477] Mem-Info: [ 3129.777703] active_anon:36 inactive_anon:7262 isolated_anon:0 [ 3129.777703] active_file:19 inactive_file:53 isolated_file:0 [ 3129.777703] unevictable:0 dirty:0 writeback:0 [ 3129.777703] slab_reclaimable:7127 slab_unreclaimable:65446 [ 3129.777703] mapped:8707 shmem:123 pagetables:267 bounce:0 [ 3129.777703] free:2424 free_pcp:270 free_cma:0 [ 3129.780295] Node 0 active_anon:144kB inactive_anon:29048kB active_file:76kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34828kB dirty:0kB writeback:0kB shmem:492kB writeback_tmp:0kB kernel_stack:2880kB all_unreclaimable? yes [ 3129.782205] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3129.784391] lowmem_reserve[]: 0 1616 1616 1616 [ 3129.784796] Node 0 DMA32 free:5224kB min:9212kB low:10864kB high:12516kB reserved_highatomic:2048KB active_anon:144kB inactive_anon:29048kB active_file:88kB inactive_file:220kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:1068kB bounce:0kB free_pcp:2268kB local_pcp:820kB free_cma:0kB [ 3129.787239] lowmem_reserve[]: 0 0 0 0 [ 3129.787584] Node 0 DMA: 2*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 3129.788737] Node 0 DMA32: 2099*4kB (UMEH) 2458*8kB (UMEH) 475*16kB (UMEH) 5*32kB (UH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35820kB [ 3129.789981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3129.790712] 200 total pagecache pages [ 3129.791033] 0 pages in swap cache [ 3129.791342] Swap cache stats: add 0, delete 0, find 0/0 [ 3129.791785] Free swap = 0kB [ 3129.792038] Total swap = 0kB [ 3129.792310] 524158 pages RAM [ 3129.792568] 0 pages HighMem/MovableOnly [ 3129.792900] 105062 pages reserved [ 3129.793269] Unreclaimable slab info: [ 3129.794105] Name Used Total [ 3129.794622] pid_3 7KB 7KB [ 3129.795075] pid_2 106KB 138KB [ 3129.795541] IEEE-802.15.4-MAC 63KB 63KB [ 3129.795986] IEEE-802.15.4-RAW 63KB 63KB [ 3129.796449] p9_req_t 8KB 8KB [ 3129.796897] ip6-frags 15KB 15KB [ 3129.797361] fib6_nodes 32KB 32KB [ 3129.797804] ip6_dst_cache 48KB 48KB [ 3129.798266] PINGv6 63KB 63KB [ 3129.798716] RAWv6 409KB 409KB [ 3129.799161] UDPLITEv6 93KB 93KB [ 3129.799623] UDPv6 124KB 124KB [ 3129.800069] tw_sock_TCPv6 15KB 15KB [ 3129.800526] request_sock_TCPv6 15KB 15KB [ 3129.800980] TCPv6 62KB 62KB [ 3129.801443] scsi_sense_cache 8KB 8KB [ 3129.801885] sd_ext_cdb 3KB 3KB [ 3129.802349] virtio_scsi_cmd 16KB 16KB [ 3129.802799] sgpool-128 59KB 59KB [ 3129.803256] sgpool-64 63KB 63KB [ 3129.803703] sgpool-32 378KB 378KB [ 3129.804146] sgpool-16 90KB 90KB [ 3129.804609] sgpool-8 67KB 67KB [ 3129.805055] io_kiocb 82KB 101KB [ 3129.805518] mqueue_inode_cache 62KB 62KB [ 3129.805970] nfs_commit_data 15KB 15KB [ 3129.806440] nfs_write_data 47KB 47KB [ 3129.806887] jbd2_inode 7KB 7KB [ 3129.807357] ext4_system_zone 7KB 7KB [ 3129.807803] ext4_io_end_vec 11KB 11KB [ 3129.808261] ext4_bio_post_read_ctx 15KB 15KB [ 3129.808746] kioctx 31KB 31KB [ 3129.809206] aio_kiocb 7KB 7KB [ 3129.809653] dnotify_mark 7KB 7KB [ 3129.810095] dnotify_struct 7KB 7KB [ 3129.810568] dio 46KB 46KB [ 3129.811012] bio-2 24KB 24KB [ 3129.811471] fasync_cache 7KB 7KB [ 3129.811919] pid_namespace 7KB 7KB [ 3129.812382] posix_timers_cache 15KB 15KB [ 3129.812836] rpc_buffers 31KB 31KB [ 3129.813303] rpc_tasks 3KB 3KB [ 3129.813748] UNIX 266KB 352KB [ 3129.814207] ip4-frags 15KB 15KB [ 3129.814665] UDP-Lite 63KB 63KB [ 3129.815108] tcp_bind_bucket 8KB 8KB [ 3129.815568] inet_peer_cache 8KB 8KB [ 3129.816016] xfrm_state 32KB 32KB [ 3129.816480] ip_fib_trie 8KB 8KB [ 3129.816929] ip_fib_alias 19KB 19KB [ 3129.817393] ip_dst_cache 33KB 88KB [ 3129.817842] PING 62KB 62KB [ 3129.818309] RAW 156KB 156KB [ 3129.818756] UDP 190KB 346KB [ 3129.819217] tw_sock_TCP 15KB 15KB [ 3129.819664] request_sock_TCP 15KB 15KB [ 3129.820107] TCP 60KB 60KB [ 3129.820572] hugetlbfs_inode_cache 30KB 30KB [ 3129.821048] bio-1 11KB 11KB [ 3129.821513] eventpoll_pwq 19KB 19KB [ 3129.821959] eventpoll_epi 47KB 47KB [ 3129.822429] inotify_inode_mark 39KB 39KB [ 3129.822883] request_queue 60KB 60KB [ 3129.823346] blkdev_ioc 68KB 82KB [ 3129.823791] bio-0 340KB 340KB [ 3129.824261] biovec-max 391KB 684KB [ 3129.824704] biovec-64 441KB 441KB [ 3129.825150] biovec-16 60KB 60KB [ 3129.825614] user_namespace 31KB 31KB [ 3129.826061] uid_cache 8KB 8KB [ 3129.826531] dmaengine-unmap-2 4KB 4KB [ 3129.826975] audit_buffer 7KB 7KB [ 3129.827441] skbuff_fclone_cache 45KB 82KB [ 3129.827905] skbuff_head_cache 419KB 472KB [ 3129.828370] configfs_dir_cache 8KB 8KB [ 3129.828824] file_lock_cache 66KB 66KB [ 3129.829293] file_lock_ctx 7KB 7KB [ 3129.829736] fsnotify_mark_connector 20KB 20KB [ 3129.830239] net_namespace 201KB 201KB [ 3129.830699] task_delay_info 131KB 173KB [ 3129.831144] taskstats 77KB 77KB [ 3129.831606] proc_dir_entry 689KB 708KB [ 3129.832053] pde_opener 31KB 31KB [ 3129.832518] seq_file 78KB 78KB [ 3129.832966] sigqueue 47KB 47KB [ 3129.833426] shmem_inode_cache 1261KB 1352KB [ 3129.833871] kernfs_iattrs_cache 258KB 258KB [ 3129.834363] kernfs_node_cache 6865KB 6925KB [ 3129.834810] mnt_cache 270KB 275KB [ 3129.835308] filp 831KB 1792KB [ 3129.835754] names_cache 2834KB 2834KB [ 3129.836217] hashtab_node 278KB 278KB [ 3129.836666] ebitmap_node 1149KB 1149KB [ 3129.837115] avtab_node 4976KB 4976KB [ 3129.837581] avc_node 39KB 39KB [ 3129.838060] lsm_inode_cache 2610KB 3055KB [ 3129.838544] lsm_file_cache 158KB 228KB [ 3129.838989] key_jar 70KB 70KB [ 3129.839452] uts_namespace 15KB 15KB [ 3129.839899] nsproxy 7KB 7KB [ 3129.840386] vm_area_struct 1802KB 2012KB [ 3129.840828] fs_cache 57KB 72KB [ 3129.841296] files_cache 214KB 270KB [ 3129.841745] signal_cache 500KB 555KB [ 3129.842205] sighand_cache 490KB 541KB [ 3129.842667] task_struct 1778KB 2441KB [ 3129.843120] cred_jar 139KB 220KB [ 3129.843587] anon_vma_chain 472KB 547KB [ 3129.844045] anon_vma 143KB 251KB [ 3129.844511] pid 59KB 78KB [ 3129.844961] Acpi-Operand 80KB 114KB [ 3129.845424] Acpi-ParseExt 27KB 27KB [ 3129.845871] Acpi-Parse 55KB 71KB [ 3129.846338] Acpi-State 78KB 94KB [ 3129.846783] Acpi-Namespace 24KB 24KB [ 3129.847247] shared_policy_node 4KB 4KB [ 3129.847702] numa_policy 7KB 7KB [ 3129.848146] trace_event_file 176KB 176KB [ 3129.848612] ftrace_event_field 280KB 280KB [ 3129.849067] pool_workqueue 48KB 48KB [ 3129.849531] task_group 16KB 16KB [ 3129.849977] mm_struct 351KB 472KB [ 3129.850449] vmap_area 189KB 189KB [ 3129.850904] page->ptl 422KB 484KB [ 3129.851373] kmemleak_scan_area 94KB 99KB [ 3129.853299] kmemleak_object 139463KB 166417KB [ 3129.853756] kmalloc-8k 5344KB 5504KB [ 3129.854218] kmalloc-4k 9952KB 10016KB [ 3129.854684] kmalloc-2k 7268KB 7648KB [ 3129.855131] kmalloc-1k 3386KB 3488KB [ 3129.855653] kmalloc-512 3226KB 6848KB [ 3129.856101] kmalloc-256 1728KB 1728KB [ 3129.856567] kmalloc-192 772KB 772KB [ 3129.857027] kmalloc-128 690KB 752KB [ 3129.857530] kmalloc-96 419KB 964KB [ 3129.858010] kmalloc-64 1048KB 1576KB [ 3129.858492] kmalloc-32 791KB 876KB [ 3129.858936] kmalloc-16 375KB 376KB [ 3129.859397] kmalloc-8 340KB 346KB [ 3129.859842] kmem_cache_node 47KB 47KB [ 3129.860303] kmem_cache 75KB 75KB [ 3129.860752] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-udevd.service,task=systemd-udevd,pid=17965,uid=0 [ 3129.862322] Out of memory: Killed process 17965 (systemd-udevd) total-vm:35620kB, anon-rss:10196kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 3129.948905] systemd[1]: ssh.service: Control process exited, code=killed, status=9/KILL [ 3129.954015] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 3129.958383] systemd[1]: ssh.service: Unit process 247 (sshd) remains running after unit stopped. [ 3129.985674] systemd[1]: Failed to start OpenBSD Secure Shell server. [ 3129.991787] systemd[1]: systemd-udevd.service: A process of this unit has been killed by the OOM killer. [ 3129.995151] systemd[1]: systemd-rfkill.service: A process of this unit has been killed by the OOM killer. [ 3130.001123] systemd[1]: systemd-journal-flush.service: Succeeded. [ 3130.015915] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3130.018432] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 3130.020079] systemd[1]: systemd-rfkill.service: Failed with result 'oom-kill'. [ 3130.032242] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 3130.043985] systemd[1]: Stopped Journal Service. [ 3130.047819] systemd[1]: systemd-journald.service: Consumed 26.686s CPU time. [ 3130.066528] systemd[1]: Starting Journal Service... [ 3130.088282] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3130.091860] systemd[1]: systemd-udevd.service: Failed with result 'oom-kill'. [ 3130.107036] systemd[1]: systemd-udevd.service: Consumed 1min 7.713s CPU time. [ 3130.110488] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 2. [ 3130.113783] systemd[1]: systemd-udevd.service: Scheduled restart job, restart counter is at 1. [ 3130.120870] systemd[1]: Stopped OpenBSD Secure Shell server. [ 3130.149098] systemd[1]: Starting OpenBSD Secure Shell server... [ 3130.149762] systemd[1]: Stopped Rule-based Manager for Device Events and Files. [ 3130.150706] systemd[1]: systemd-udevd.service: Consumed 1min 7.713s CPU time. [ 3130.176919] systemd[1]: Starting Rule-based Manager for Device Events and Files... [ 3130.294848] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3130.308755] systemd-journald[17978]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3130.442724] systemd[1]: Started Rule-based Manager for Device Events and Files. [ 3130.523118] systemd[1]: Started OpenBSD Secure Shell server. [ 3130.619780] systemd[1]: Stopped target Bluetooth. [ 3130.758328] systemd[1]: Started Journal Service. [ 3130.860015] systemd-journald[17978]: Received client request to flush runtime journal. VM DIAGNOSIS: 03:48:29 Registers: info registers vcpu 0 RAX=0000000080010004 RBX=ffff88800f498000 RCX=ffffffff81f3af04 RDX=000000000000c062 RSI=ffffffff81f3af12 RDI=0000000000000007 RBP=000000000001c062 RSP=ffff88806ce09db0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=ffffffff8539db00 R13=ffff88800f49c338 R14=0000000000000000 R15=ffff88800f498008 RIP=ffffffff81f3af16 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f850aecdb31 CR3=000000000fa4c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff00ffffffffffffffffffffff XMM01=707465675f6c697475646f6d6d61705f XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000050 RBX=ffff88800f498000 RCX=ffffffff81f3af04 RDX=00000000000001f7 RSI=ffffffff81f3af12 RDI=0000000000000007 RBP=00000000000101f7 RSP=ffff88800e257720 R8 =0000000000000001 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=00000000000003e7 R13=ffffed1001e93001 R14=dffffc0000000000 R15=ffff88800f498008 RIP=ffffffff81f3af16 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f933e1b7130 CR3=000000004c802000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff XMM02=42494c4700342e332e325f4342494c47 XMM03=000000000000000000006e7274730065 XMM04=6475610066746e6972706e73006e656c XMM05=00007f933ddea00000007f933ddeb900 XMM06=00007f933ddeb33000007f933e629520 XMM07=00007f933ddead3000007f933ddea7a0 XMM08=00007f933e6569e800007f933ddea000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000