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", 0x1000}, {&(0x7f0000002b00)="1938b15ae0758716a5f2edfdb830da955dff095593c87b6eebd230a276a2799fc7c18ff23c86fa598cc982626044b67945ff5937ea0cc290d35142f197c3bf7ab5f313b98b9cc109cb27d60ef7442e47b7b65beff5c63e5b0660b2c651cd64b25c02d80c9fe50318d2a15cac72a02c3ee9975402457f680fb5540d0b4e2a0283cee528508ce582901c2267b03658bc34e3016f0c6886111d53490a144a", 0x9d}, {&(0x7f0000002bc0)="a90dec9a15e773d7fea3c4b564225c727b895a7badcefdb34d3578ee8868096cc8616b95d25789fd1fb0241e8dba441d433b555c168d91d9bfaf8e700ce04e2e200d7959ae20374788ec31ecdb2489ed1b6bae887c634e2b45a89ca3f5c4826001ae23e5df13d5957fdeeea54a4f4922428c5ebe058efc60cd39a7a8282235975f", 0x81}], 0x8, &(0x7f0000002d00)=[{0xd0, 0xff, 0x2, "db99e8941cb04fb3d4e218008c2e716638358e0b7b32f9de249536ba261693256c1facce60ecf21833d6841378698956dd4a219b49e2eddbda5a2c9d426777f2aee8d6a65bfc21a5739bb69f7101a1d23cc451b52e7c21979c3a8ad5ead47b507fe65ffa267c9e75cd635dc01a4f48e0a21db118d202856625a8ae71f57f64467cbf12b30da9d272a78b84c460bdca363c6a5f5d8beaa9ce3ba602f749cec3fcc93c3b8cb8e8c843de8e017a06efca1e73cd9e268cebbc696f328cfbb8d8"}, {0xa0, 0x108, 0x81f, "6bb9dfecb91118ecee4b1847d495ab0cccc29e802db85f2bfabcc0a9d4c6fe8862beacd9b67efd9210f513ac84e32b3b3b300e32e269cf575094f9e67c448a70e971c85a9755c0455c9d88e15f9c56fcb9dee0e10c9b5ac77abf9baa8e42e4fada7fd6678dc286575e294162792fd8c87111309a64ec3a4a2af1dcab694ac62c5c40b90af09176a966"}, {0x68, 0x101, 0x3ff, "4c81c3aaed1888e328708cccc782983bca35d972b4b119607f998a34ce1294762759d40d08c8c9c4c22b096138474dc9f8d9c1ebbfac8ed58a7a2de171d35ef7742602b35fd06911def1fa0f0398f8c57f972263dd45cd"}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002f00)="3c47865357cf0d32f471cd86c27b971002b52e0e6bb93e1e21be12e9a5b74d201d02482c8da14669f8e6", 0x2a}, {&(0x7f0000002f40)="e184ba4a07899a81c0968f8f1832d2e5aeac814c671ed3c238e76c0ba03d5da2dbcaac3cef81108addd1a9421a1dc3cc77a1d64dede385712cf3e41aec308ae2fe995dd4a4636c9c08eb609faf8024c1c2e97fc925b1b00512b61c2ecf5edafc12701a3952cffb4c738b42dc76ee9ea069d33e3477e5897a0ac616e84a57fe1701f26873387e8cda8d3fdce6f6ac785f2ab2e25ba7055a7703395fa6ca4d3703ad029d586871c149f51df0f5a4a41eeec94bc9af39fcb1cf801de8e051027141199ee212a69bbbc6db30308168064c68c7e5e47fe878acdf9248e07bbb9bad31bacbb9", 0xe3}, {&(0x7f0000003040)="a4046fa20fb75b977635347117754832ed211ec7e8f094659e6d69180beb543eb38bea2c3112c722eb8bda2a537d46d0c6d50d797f57d2f7c0d460b59b4b6adaec72e8c5d32874106fe99e94a323c8b02e630ee9a74954c0314d373081c206fffb715f770b2cef81dc97aec038dd025dc29796c4ac0973767eac248195597fa4ae421507c9c8b2b38a1638427f4d1bbc9f529c07852858ba790f8ada9c99cccda5cfd7a84ff848e7adfbd1e0d24980d3d854554cdb867539907339a9884ae86a8bb2d62c7bc120f926ff75be3337bc55ab0b74e6f99b5eee6a4a4b0904d39fcb725b3519b46bfd5003", 0xe9}, {&(0x7f0000003140)="712769f21d7f70c849b8649076d8358f677dbab3ad865246faf9dc", 0x1b}, {&(0x7f0000003180)="6589dd4dea44437812786bd97b1dc27f966db9643e410caf0cde7377c61fdfcb4edaec6ae2c864b53e4afd9b24a613e69bdec34b43c667e8", 0x38}, {&(0x7f00000031c0)="4ca2a6f1713d8bf2e2d2be31bb7f1ab945f6fbd3eb80ae965851d61ce7a22d0a655c3d65e99b584e830b328c9db8c870f2707764bd1c680a3f679cdf832e2654c53b455c2d58a5cdfc775366e729811369060f5566e1e57f6ece2c467c24464a9f461c87f0b06027897d513ed1c2bcc23b28d3caac942eb577aced70e13fb5eb8a0699fa535cb973aefb986f9d68f25a4a20fbf6396f8ff78607b7a21f97b7c36f89fd8fd31e893d7bb829467d224b02ffc3fc6704c8e38ea9a6f6ccaabe", 0xbe}], 0x6, &(0x7f0000003300)=[{0xc8, 0x6, 0x10001, "c0b2ecc446133ee13b03e246beac8e3895026e0f7d9a0c8ccb5f1df361ef118cccf4bfc5793860f86a30ed92059d8e3fe66ecb66a1700fdacb7f5dabc3f0a6f931196679e850d8ac3cf7fe0fcc77c3a15d8fd214dc6d30085d9724df8b3ff73bae8b1e9fcafaabcf02a744a2c2bebd76cae9db37155b023fe86fe6510f2d71ecfcad7d26bcfc19bce3f4f138d764c64eacfcaa877a76f9f4fa8408471ffd8f5565cb8f9e607869bf2032222e8879c39e49"}], 0xc8}}], 0x5, 0x0) (async) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 01:33:14 executing program 1: perf_event_open(&(0x7f0000001900)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x100000000, 0x0, &(0x7f0000000140), 0x40000, &(0x7f0000000180)={[{@dots}, {@fat=@discard}, {@fat=@usefree}], [{@subj_type}]}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x8bb01000) open(&(0x7f00009e1000)='./file0\x00', 0x182c40, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/78, 0x4e) 01:33:14 executing program 1: perf_event_open(&(0x7f0000001900)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x100000000, 0x0, &(0x7f0000000140), 0x40000, &(0x7f0000000180)={[{@dots}, {@fat=@discard}, {@fat=@usefree}], [{@subj_type}]}) (rerun: 32) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x8bb01000) (async) open(&(0x7f00009e1000)='./file0\x00', 0x182c40, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/78, 0x4e) [ 806.797805][T14373] loop1: detected capacity change from 0 to 264192 01:33:14 executing program 1: perf_event_open(&(0x7f0000001900)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x100000000, 0x0, &(0x7f0000000140), 0x40000, &(0x7f0000000180)={[{@dots}, {@fat=@discard}, {@fat=@usefree}], [{@subj_type}]}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x8bb01000) (async) open(&(0x7f00009e1000)='./file0\x00', 0x182c40, 0x0) (async) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/78, 0x4e) 01:33:14 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000340)=0x80, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000340)=0x80, 0x4) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x2b}}, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0xffffffffffffff98, 0xde, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x140) syz_open_procfs$userns(0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x20004801) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) getsockopt(r0, 0x0, 0x10000, &(0x7f0000000200)=""/226, &(0x7f0000000300)=0xe2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000140)={0x6, 0xf620}) [ 807.126506][ T24] audit: type=1400 audit(1639531995.054:624): avc: denied { bind } for pid=15035 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 01:33:15 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf) 01:33:15 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x2b}}, 0xe8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) (rerun: 32) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0xffffffffffffff98, 0xde, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x140) (rerun: 64) syz_open_procfs$userns(0x0, &(0x7f0000000040)) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32) sendmmsg$unix(r3, 0x0, 0x0, 0x20004801) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) (async) getsockopt(r0, 0x0, 0x10000, &(0x7f0000000200)=""/226, &(0x7f0000000300)=0xe2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000140)={0x6, 0xf620}) (rerun: 32) 01:33:15 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x8000000000000, 0x0, 0x0) 01:33:15 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, &(0x7f0000000340)=0x80, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:15 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='\x00', 0xc1, 0x109001}, 0x0) (async) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async, rerun: 32) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (rerun: 32) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) r6 = dup3(r0, r0, 0x80000) poll(&(0x7f0000000440)=[{r3, 0x300a}, {0xffffffffffffffff, 0x2000}, {r0, 0x8040}, {0xffffffffffffffff, 0x4}, {r6, 0x5200}, {r0, 0x2}, {0xffffffffffffffff, 0x4}], 0x7, 0x9) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:15 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 807.552878][ C0] scsi_io_completion_action: 8 callbacks suppressed [ 807.552908][ C0] sd 0:0:1:0: tag#4084 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 807.569358][ C0] sd 0:0:1:0: tag#4084 CDB: opcode=0xe5 (vendor) [ 807.575717][ C0] sd 0:0:1:0: tag#4084 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 807.584768][ C0] sd 0:0:1:0: tag#4084 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 807.593806][ C0] sd 0:0:1:0: tag#4084 CDB[20]: ba 01:33:15 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:15 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 807.704451][ C1] sd 0:0:1:0: tag#4085 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 807.714307][ C1] sd 0:0:1:0: tag#4085 CDB: opcode=0xe5 (vendor) [ 807.720655][ C1] sd 0:0:1:0: tag#4085 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 807.729677][ C1] sd 0:0:1:0: tag#4085 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 807.738707][ C1] sd 0:0:1:0: tag#4085 CDB[20]: ba 01:33:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x2b}}, 0xe8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0xffffffffffffff98, 0xde, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x140) syz_open_procfs$userns(0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x20004801) (async) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) getsockopt(r0, 0x0, 0x10000, &(0x7f0000000200)=""/226, &(0x7f0000000300)=0xe2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000140)={0x6, 0xf620}) [ 807.760803][ C0] sd 0:0:1:0: tag#4086 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 807.770652][ C0] sd 0:0:1:0: tag#4086 CDB: opcode=0xe5 (vendor) [ 807.776983][ C0] sd 0:0:1:0: tag#4086 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 807.786026][ C0] sd 0:0:1:0: tag#4086 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 807.795075][ C0] sd 0:0:1:0: tag#4086 CDB[20]: ba 01:33:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x2b}}, 0xe8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x1]}, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0xffffffffffffff98, 0xde, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x140) syz_open_procfs$userns(0x0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x20004801) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) getsockopt(r0, 0x0, 0x10000, &(0x7f0000000200)=""/226, &(0x7f0000000300)=0xe2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000140)={0x6, 0xf620}) 01:33:16 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:16 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x16) 01:33:16 executing program 1: r0 = io_uring_setup(0x38b0, &(0x7f00000000c0)) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) recvmsg$unix(r2, &(0x7f0000003880)={&(0x7f0000002440)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000024c0)=""/252, 0xfc}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/183, 0xb7}, {&(0x7f0000003680)=""/79, 0x4f}], 0x4, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x128}, 0x10000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000038c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c65ca64"]) clone3(&(0x7f0000003b40)={0x801000, &(0x7f0000003940), &(0x7f0000003980), &(0x7f00000039c0)=0x0, {0x4}, &(0x7f0000003a00)=""/99, 0x63, &(0x7f0000003a80)=""/103, &(0x7f0000003b00)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) r17 = geteuid() statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400, 0x0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3}, [{}, {}], {0x4, 0x5}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x5, 0xee01}, {0x8, 0x3}, {0x8, 0x0, r18}], {0x10, 0x2}, {0x20, 0x9}}, 0x54, 0x1) r19 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r19, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r19, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$unix(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000000)="2e0925390ae659c6b915b677e90422ea9ef3baf2bfba138c8e2cab7922e59633dd14a8356cd2", 0x26}, {&(0x7f0000000180)="f6038de973aece5b01d475a33a0be9b5f430c335c6ba8b1b71b14e0887610ee51f43f6e14d022e187bff0678dae8a38f484bb0969326c968d8965d3e81e978370bc94c9df8047fd47db12948ff8bc2c4a92e2e4426e723f2c152b6b25a09b0f5b3d01dd6fdfcee7e85b3e7812abca3b642bf94764f127d95093db2f870aeaa46cd00af1b4dc64453426f4d00bb881b4e58f2f4b979ca98fbad3eb7f5f848683507a027b052301008307e582eea38b93a37f924efd5a92504d27395362299268d2b76085b7ef0118103ea19caaba094de841531867ebe0ce7f36c1c814811f1487fb87dde25f6431dc80fda8e64c32fc6ad94", 0xf2}, {&(0x7f0000000040)="124273f599714ff5902bcacf34949dec04a7442a34c6149dabfc7758fddb23b423b394bb5967265e411b16bc2e815adf4f59da", 0x33}], 0x4, 0x0, 0x0, 0x44040}}, {{&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001400)="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", 0x1000}], 0x1, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r19, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xa8, 0x40000}}, {{&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004180)="b2329a6040650cfe7997b1fd31cba62793a72eb78670bbda495428cc81692969eb86bc794fee157f66dd62d247171e78303d7568d1bd3e3888b9e1b9025cc766f809a02353151d10c2c2c0f7a677db7c89208cd60ceec3e5b83a0d58c9ec976f1e8261ed0399f372b0e530b4b36a049c80eaa78263d4e11ca085505c0604510075a231edf1ad38ac4203336cf82806b0a9d8f7f058d41c8d0c4a22e0", 0x9c}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004300)="85582326f6784163c2904327ab366c7d3cbe3a5b1afb468d50742bdf0d04fef19ce365a994faa60e6b42e444a44648a7a3c7f15473aeabbc9d185e6bad1167e13da74a1855b200b654f7fb849d952928caddeb52cdd70b6a6a198d08a9bfafd4a4ef685b2468ce83a99dc17a2545f306de6ec5fab10a78d7d3cd16fa9bad3557a0985fbe8f975ec9", 0x88}], 0x1, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x8841}}, {{&(0x7f0000004440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004500)=[{&(0x7f00000044c0)="269bb90cbd667e86b67e1daf7d4a8be0e1c47079c5a3ce2ee5b9dded502b5593e9573af97532b591dac60927bac395", 0x2f}], 0x1, &(0x7f0000004580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r11, 0xffffffffffffffff, r10, r9, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, r12]}}], 0x58, 0x50}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004600)="339ad35386bb60f7a564d98ebbbfd6bd0047a564a1319360125c070cd7d23773ad239e636953a1278ab28cdac97ed44dff24b154d29930", 0x37}, {&(0x7f0000004640)="e36f036c97b65c56a3a579219c9ba9f16968385ac888d9c3bb8efd69d54d0eb160480c0d7bbd6a4957ae0c09b98d7a71204b78f4ac86a5168848216588f2503fb5dd6fdccf9af8ef165e9436e7decc30904ab4c588046332748b99ce5a8b027eb8afaa596d46b67cc2cff9ea2dca6c8192854709021903d7f22e563b472b9a9df6a805065d7fc0bfec26bf9dfcbc86302a019ea8440e3cc7bc292f8ea91267e9882021fbc3a55e8a4d5d48b3f91c576053cd03530cfec1d26548", 0xba}, {&(0x7f0000004700)="3cfa6cfa7bda3df216900af5e0fb43607923a7236fab01127ad93589fe7c3ecc32a19d4eb08b32faa290eee4eea66eff5012f6cc20f375d4c1c2b88111d683ea24cf713d5f79fea6ae89e202f6ff8d0724187b38d1bf41709f9834e0f0dd8078c1f6b83033e86446804008d2d626d4941c2fa6e338cadc57d260b68198279b36743439af81e00f45c80b476389fbee5e14581f8a32a371b296dda3371b21cefbd640282acecec787dfb318d0d29f8be416412e79", 0xb4}, {&(0x7f00000047c0)="c5072a1d7c5419f31153eb0aa2ae6f24910c6248462559d574a7fa923978f122fadf87d7cd58168fc6761d4088b74e9621c405a163236dc43ce644f3d75a7230cfc714c0677c76db04dd30dd600a290f6d78397770972dfa184fc2558a76", 0x5e}, {&(0x7f0000004840)="0526ef360601f66dc417944e28bd0744b029482f07f94bf015da881c3eb7a45834106c6bd67f3254db9861eaeb6657f8d11050365a03d16b5369d8b86c65230662ca265457eea8791a03ee4b5fe3db79a43a6c8867ab3e781e26d046ebf2bf2146c7e56d7407b934a67837b2bb0a024f05f5fe19eaebc8c2c126c11479ffb45c44edbd9b36222c6010cf3c8e8e9f3b280fed8148b13dbe69a5c7aa906229964f60a36ea6cd3c75d9f3c7a2768582231b2f5081cc885ed2818bc40c551ba31bab3622ea90688ae1c7c5e6b070a855c1bcf3cf9e35628efe6e92a7ad", 0xdb}, {&(0x7f0000004940)="d69a85f67a2dfdf2c74f3f65fda281b4df778544d6906167a4a6705ec363a8142b28714f2ba5c7d37526b3ecb9fd8f7ddcbc9cc41315f6a4fdb3f4f44195edd002168178e6715e96a35e57fe62a83e397a49b7bf5ecab38a784fac3cec2eee3f7255b9a3769817a9b70d65c0635492a9573a976dc007509a4f229dc2", 0x7c}], 0x6, 0x0, 0x0, 0x4000001}}], 0x6, 0x0) 01:33:16 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) (async, rerun: 64) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) (async, rerun: 32) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 32) 01:33:16 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x100000000000000, 0x0, 0x0) 01:33:16 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:16 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000340)) 01:33:16 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) (async) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:16 executing program 1: r0 = io_uring_setup(0x38b0, &(0x7f00000000c0)) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) recvmsg$unix(r2, &(0x7f0000003880)={&(0x7f0000002440)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000024c0)=""/252, 0xfc}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/183, 0xb7}, {&(0x7f0000003680)=""/79, 0x4f}], 0x4, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x128}, 0x10000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000038c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c65ca64"]) clone3(&(0x7f0000003b40)={0x801000, &(0x7f0000003940), &(0x7f0000003980), &(0x7f00000039c0)=0x0, {0x4}, &(0x7f0000003a00)=""/99, 0x63, &(0x7f0000003a80)=""/103, &(0x7f0000003b00)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) r17 = geteuid() statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400, 0x0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3}, [{}, {}], {0x4, 0x5}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x5, 0xee01}, {0x8, 0x3}, {0x8, 0x0, r18}], {0x10, 0x2}, {0x20, 0x9}}, 0x54, 0x1) r19 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r19, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r19, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$unix(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000000)="2e0925390ae659c6b915b677e90422ea9ef3baf2bfba138c8e2cab7922e59633dd14a8356cd2", 0x26}, {&(0x7f0000000180)="f6038de973aece5b01d475a33a0be9b5f430c335c6ba8b1b71b14e0887610ee51f43f6e14d022e187bff0678dae8a38f484bb0969326c968d8965d3e81e978370bc94c9df8047fd47db12948ff8bc2c4a92e2e4426e723f2c152b6b25a09b0f5b3d01dd6fdfcee7e85b3e7812abca3b642bf94764f127d95093db2f870aeaa46cd00af1b4dc64453426f4d00bb881b4e58f2f4b979ca98fbad3eb7f5f848683507a027b052301008307e582eea38b93a37f924efd5a92504d27395362299268d2b76085b7ef0118103ea19caaba094de841531867ebe0ce7f36c1c814811f1487fb87dde25f6431dc80fda8e64c32fc6ad94", 0xf2}, {&(0x7f0000000040)="124273f599714ff5902bcacf34949dec04a7442a34c6149dabfc7758fddb23b423b394bb5967265e411b16bc2e815adf4f59da", 0x33}], 0x4, 0x0, 0x0, 0x44040}}, {{&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001400)="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", 0x1000}], 0x1, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r19, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xa8, 0x40000}}, {{&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004180)="b2329a6040650cfe7997b1fd31cba62793a72eb78670bbda495428cc81692969eb86bc794fee157f66dd62d247171e78303d7568d1bd3e3888b9e1b9025cc766f809a02353151d10c2c2c0f7a677db7c89208cd60ceec3e5b83a0d58c9ec976f1e8261ed0399f372b0e530b4b36a049c80eaa78263d4e11ca085505c0604510075a231edf1ad38ac4203336cf82806b0a9d8f7f058d41c8d0c4a22e0", 0x9c}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004300)="85582326f6784163c2904327ab366c7d3cbe3a5b1afb468d50742bdf0d04fef19ce365a994faa60e6b42e444a44648a7a3c7f15473aeabbc9d185e6bad1167e13da74a1855b200b654f7fb849d952928caddeb52cdd70b6a6a198d08a9bfafd4a4ef685b2468ce83a99dc17a2545f306de6ec5fab10a78d7d3cd16fa9bad3557a0985fbe8f975ec9", 0x88}], 0x1, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x8841}}, {{&(0x7f0000004440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004500)=[{&(0x7f00000044c0)="269bb90cbd667e86b67e1daf7d4a8be0e1c47079c5a3ce2ee5b9dded502b5593e9573af97532b591dac60927bac395", 0x2f}], 0x1, &(0x7f0000004580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r11, 0xffffffffffffffff, r10, r9, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, r12]}}], 0x58, 0x50}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004600)="339ad35386bb60f7a564d98ebbbfd6bd0047a564a1319360125c070cd7d23773ad239e636953a1278ab28cdac97ed44dff24b154d29930", 0x37}, {&(0x7f0000004640)="e36f036c97b65c56a3a579219c9ba9f16968385ac888d9c3bb8efd69d54d0eb160480c0d7bbd6a4957ae0c09b98d7a71204b78f4ac86a5168848216588f2503fb5dd6fdccf9af8ef165e9436e7decc30904ab4c588046332748b99ce5a8b027eb8afaa596d46b67cc2cff9ea2dca6c8192854709021903d7f22e563b472b9a9df6a805065d7fc0bfec26bf9dfcbc86302a019ea8440e3cc7bc292f8ea91267e9882021fbc3a55e8a4d5d48b3f91c576053cd03530cfec1d26548", 0xba}, {&(0x7f0000004700)="3cfa6cfa7bda3df216900af5e0fb43607923a7236fab01127ad93589fe7c3ecc32a19d4eb08b32faa290eee4eea66eff5012f6cc20f375d4c1c2b88111d683ea24cf713d5f79fea6ae89e202f6ff8d0724187b38d1bf41709f9834e0f0dd8078c1f6b83033e86446804008d2d626d4941c2fa6e338cadc57d260b68198279b36743439af81e00f45c80b476389fbee5e14581f8a32a371b296dda3371b21cefbd640282acecec787dfb318d0d29f8be416412e79", 0xb4}, {&(0x7f00000047c0)="c5072a1d7c5419f31153eb0aa2ae6f24910c6248462559d574a7fa923978f122fadf87d7cd58168fc6761d4088b74e9621c405a163236dc43ce644f3d75a7230cfc714c0677c76db04dd30dd600a290f6d78397770972dfa184fc2558a76", 0x5e}, {&(0x7f0000004840)="0526ef360601f66dc417944e28bd0744b029482f07f94bf015da881c3eb7a45834106c6bd67f3254db9861eaeb6657f8d11050365a03d16b5369d8b86c65230662ca265457eea8791a03ee4b5fe3db79a43a6c8867ab3e781e26d046ebf2bf2146c7e56d7407b934a67837b2bb0a024f05f5fe19eaebc8c2c126c11479ffb45c44edbd9b36222c6010cf3c8e8e9f3b280fed8148b13dbe69a5c7aa906229964f60a36ea6cd3c75d9f3c7a2768582231b2f5081cc885ed2818bc40c551ba31bab3622ea90688ae1c7c5e6b070a855c1bcf3cf9e35628efe6e92a7ad", 0xdb}, {&(0x7f0000004940)="d69a85f67a2dfdf2c74f3f65fda281b4df778544d6906167a4a6705ec363a8142b28714f2ba5c7d37526b3ecb9fd8f7ddcbc9cc41315f6a4fdb3f4f44195edd002168178e6715e96a35e57fe62a83e397a49b7bf5ecab38a784fac3cec2eee3f7255b9a3769817a9b70d65c0635492a9573a976dc007509a4f229dc2", 0x7c}], 0x6, 0x0, 0x0, 0x4000001}}], 0x6, 0x0) io_uring_setup(0x38b0, &(0x7f00000000c0)) (async) close(r0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0x7) (async) setuid(r4) (async) recvmsg$unix(r2, &(0x7f0000003880)={&(0x7f0000002440)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000024c0)=""/252, 0xfc}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/183, 0xb7}, {&(0x7f0000003680)=""/79, 0x4f}], 0x4, &(0x7f0000003740)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x10000) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000038c0)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c65ca64"]) (async) clone3(&(0x7f0000003b40)={0x801000, &(0x7f0000003940), &(0x7f0000003980), &(0x7f00000039c0), {0x4}, &(0x7f0000003a00)=""/99, 0x63, &(0x7f0000003a80)=""/103, &(0x7f0000003b00)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) (async) geteuid() (async) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400, 0x0, &(0x7f0000001300)) (async) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3}, [{}, {}], {0x4, 0x5}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x5, 0xee01}, {0x8, 0x3}, {0x8, 0x0, r18}], {0x10, 0x2}, {0x20, 0x9}}, 0x54, 0x1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r19, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r19, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmmsg$unix(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="dbbc7449aee2bec25e6ae8ab2ef338869407b4a6824397f542563e894fb9e2ff26ca8cbb03e0d44beae705526e92a98023b87e82d7bea285fe4c50cddb4db66f8c0de6b9d45d54417f2c892236ab2cef5956f2fec541185f0295e24885d788d8e6e83e2bb82692095e523224baf9d8e87c1d1ea2312a978017c4f9665a6b8c2f2671ed030d1d7b577f1abe7147c43e34e270a55ba94e46e4a33bb9ab7dd53b7b1e0eb455be11c770699a157793bda10ffce6869563ab5b1178ec1f8be16543f1d6b52c61abf7c7c91ca1c5a1ee61ab216df6bf199792b6dac7ee0d073e00b140153715470b781c427ca9cfde87fa140e1c9fa27013ef9c04cd181e267989c29b6b7189298a597352e74881f506779442256102931da0f5b11408456d515faf45843f19e3227120aa38e8617daf6c99ff2929d7a66abe03de9449df2378e0d6f46795afb76773eab1037e9772c57521dae8825e1004e8bf26ba8df28aff721f38aec66aa69e347cb6fb6d4de568157455d6cecd96c187594fc8329d79cb3b5995fef92bf9b60d83ee053ae1f96e8992bc263fba326d401a92b6f091b7b072d682e9fff9e391c3933039b32b8ec5463e89adbdfb7bcbd50e299201881990b6bf86cda6ac804052bd827b9e601b4caaea43cffff7ca7f57b2f2e193b77078a95ccbee1c6316606c6a7ad0d00e5370a44252c363998fea9c557760b88d0161f72cffeae300a68882a5ca65e22f9a8d324b1cc58d34110b0266e6a69b3a352200288ee88215a058c0907ff9cd9a497409fa7062d8500cf81dcecce9c10a90022029c037db1b941f4003a2391c799bfe618e421318b23c1e0285c3aef1de2248a899fc975ccb0cf2c3aa1d91a339217d38f8b440626cede9362abf0d3af69d9f4b149b20628ad07795d34436ce840c0b74bb7d4d7d7b03b85893823a5608bd4625f91fc90df98e8fc2829abe3f12c863dd6230d9dcfebe25a92296c51bfbb0654d1e2571ece8b3a15edf6c7bc5254312699e3ba3ec48deabd7d2d4467504bb87d9da10b4bd0304e8faae320ca004ff34b7de3e3b94770c65a7510db68a7c8b29ac20616077b958a1b10dbf11752f21be020628e571786452e4931db6846e11ffd02321d1f1efdf08d2cb82876c3c2896cd229685a79cac330e9a576d06d5d94a264a10a877205b85155f4b75b89f928a172f455fd94c2f84bb45d0bb5842f225c1fdf9b49c423d9691546d0b2fe6e499ddebbe5e99f0e9ade775bf26d7118b812c7e7df45a468f5e0ae062a76fb7a609394a3dc4f709f48f7a73678d16f2fdede1682312fd34e376a20a9600d2c8cd326700e1a1281dfe774fe93d28b1ca123a821610f743829cf3a2601e03130164c5daa3f4f33f83aa3bfbaea79f193ef17f6cfe9d35cfe6ffec2fc5d80f286e73441a9500506fef7145028d64229d58b5710b39c83e357808d0f8d78ac1e11841d16835cd1e5cf2842dafdb9fc09a8ec0d77e88d4ce92f2b9b610660fbc17a0babce914f321c9bc6e36bbc5ad163fdcb5d2f39911b2e8befd189d896b277b5a467e8d780d7341070bf8db8cbf0403ba0089b61619296080d4b12a85abb2eaf2d02570ddc287e8ae4d3ffc78fa09466408e5c26cd341733a48a93d676e8dc12085957c9de05544673fac2dd7ca24b2ffbac632f98119e08c2934921dad8306b2f05f7b247c3bc53a53e5fc66b888def51175cc64973e6d3510c1226d7be061d2484b3237567364306cd31e616d59f9b1a0afd976c3577d0ffa400e3fe576242549653be94c1ab1d29e5880b1002e17e6b5983e395f0e49fe7f33c79d4ca43565bb92d43c12a43cf49db1f28e9da6bd917e8ff08da7ba060f94e20c1c5664e6dda02975ba2cc116719d9089e5ad84c1d2289496fac9b024cea469e5edd14e1a3e116db132d5a529f524a46aab3ff5a30783f29eeed9852c9aa8bd059a9d343324780290dffc8ba1c4d3b844483c2f20fbf2a14992afb376c8b6200b7f0066466efbd60758f17add1f6e574494d575629a6aacdf8c455875a0ec540b794d83c3448ad1f578585b650f11e47963d805c6f9d7b15c75d8187d02d0e5396a72e86ec38fef608ac3312e56e2f836e19352f1ed5374c9b02bb1baf38f77b48109dd109fbadaf9173bbb60729f75b476ccfb6821122bce5efb494e9449416217b2d3f6e4181c981fdb882b4775cf1c04c5fe6f48a03ea8e5345526d9e840121191b1a821575933e481e63eb14b8f90b4bc6fa2d75d0c2813effba7165ecd5661f4d6f334174229964b38a09613a7f74a106fa6d0b01da779700a1e32c51d7bf56c200ee5d9eb286c0c3678b1c85898a55a37c3f4fcf68b64ad8f7d5b7be31f530553d0dbb8dcb53cb47870e5fe72e5b9953f43fc41ef6f180ada39da380be1afbc51cfa918f825ed00875f8199c7e0cb7d513dc3ce41e70fa1b8dc3ac03b6a2415c3f8961f488e1efcc1c7ca41cd5d3373b84d76a8515c34cc366b7700205fa56e54727782cf12aa057018f99fbc4e7ea5bcdcca66edd37b301b4789a6329261fad3ae58808e4f4a9ac083a17946a71b9f91c8085ae481305e48bd3c09973c97e527d1b794d375ff59988693ac06a2806a8b6248d031cff63bfff638f15acf752be095ec3c99f6742da0ce466ede7f578f0bbca8cd557c89a594361fc9db4444ef45d56262845ab91dadffbce3b8ac199b29b28c75c979cf2613460d94d575ef094015641d71b1b826c4001beb05c8ccd8c625f96f4ed67eedd846144ee45fb707b07d5569f22144be34cf5d7fa3b721a46058539bb7e6fe722d22083e9e617effb175b6c65e20e49a437daff30584a75436bfeb3768da3ed273897deb4d4c5d9aba27484db0a94eafaa56d9ce44b5341ad1efdd23615c58027b10044eab369c026801669c5c662cd7962b596e20956b67c0cc850add04276317c25387b2b01a030d5558f7bb6f44618d9fa0353f79d0e9d714252c5d83a1b0148c150a6188ab5d7b2b1d22ca490ab29c7196aea5d19b719302a8170bf7f1bd7c341887d0f5312a86f0d4c566755711d0dcacefe6e00a425e8e75a00b6a8e0f4387e7fcf5c93eca434b0ae5a8aefab664c4919c2489315fac1873714684a0b3cdda5ee84267bca2cbfb3d3b99e522b78d6f5abc462e6f26ae802d73106b914fdd66947bfb982442b346323fc323f335eadeea60d743bcb6c2a572ad51c3cd73189ef992125889fa251277c7eca58eb6425888f0d006e29cddb66838bcc9b428e8848ee5b0f47286ea7a08d5484e5ce062fca9cb2e76b3ed402ccfa8846b08e5b3d0ec95d945ab2e6057ebce98fb00e82ae20421e4e624d25084fda953ef3b7bcc049fc194e5e8255c4f96f43e088811c80e2bd159df2d683946910bf6467a26fa2617c84006cb6e20ec8336665592b2411eae5e2fec95c3f38e4ab94696d3a0cf0de5442b7dc53113152248160ac32795d634ee9e7634c92c8c1b3cb59feaf9ac9db6ec6c9ab511f499550c67bab2418214483c6799f7c85e74c892b8238ab6eead3835008a1db5fb10e2b1cdca883f4e994a4c2714344ef43fbbfbb8934a077bf772bfd5c64dfccc26c3e45e09e99274338aff5bde3050201e82c59e6b9267fd57a66c4f870d921a33205b590188e9f74603329cd199d2de3e16bfbc47c18a026a3b482dad756463f6f22ec868064b6262c3f1198099e1ee4b8e54a8d7cd7472a8ce516d4280def999d1ae53a19ee5d1a6d3e476c900b9143972f851960a0422cd5cd607f5e29669a0e2ed71221d10525394385dac6e8c3ba6f6603b8eb9aa7595a5600e49efa2184b8605288bf860406f4225bdfb679d46384180cbb7bbd8b3aae195764ad3b0f44aafe685c051866a424b5bbd070c48149db0600459782e769b9c193299c37eb833392f0710355b939a9c1e150bcc7b4471b1ee1c5bdaccc63696401665de7899ff2563aab249afcc0c9497490725fa153f970969ffbdb76cd21bcc671881fc4b5d5a1baac0221fd65813ec9abfaebb1247a631c6eb50654f8cc1fecac1134c19107dd9e3af7cab69eccb128ce9633809d5a444f196dc1fea5cf5d64aa37bbff465127bf9378d10ccfa989e5750df5e9562d18e7707ca876a608b83d9e84fea341d0fbb47ae776d00cc988a4dbbe222c2384866597a07d1e13fe86e7d08dacee326748f5b3b77e38c7ab68947321c402716f4d9f46406c465e031d70aa520c4ecdd2d7f8854c884e6de7c3a74a3b20df68555a62dffe74bad820a8c6289762c3497d417b6960bba4c24f9cb05c75cb70c03ec80c6dbb0046878dec79cdb3cdf9167bac7f9e0826fa3fa2435b64b2e0b04b53bda0294acf54c82f80032fe1919936a4cffc41b4040ccb50f82665ee0e07014f0123f357710cc0f8e1376b875aacbf5f973fc4f2a9eff99d9e813fe0f088bd40c356c2db6f7a3dcaca1d8d9e6305fcdb9034edb285052755c51b57bf49cde762bb0e78c9f8b677366e82665e2f991b5bd2a8f00f0c2cd6e92285572bb2e284addcb03083879d73c14c538c2204519b46611cf60c66a34a53102ee17eac81a727a1d6629afe98c5acb24ccc71115d9f9c4477b934ad76b38c4a7a10a5f35fd5fd57e169358ea5142b5842f56391badd973c7c84b10399f41ba6838d115b1d32bf70fa66f40814ff1850815f56a74029208150bbe3cf174ab9d9cc303788218d2e7867fb4b8361a848f9b7f89fb2356b49bc09b541b163898ddb6083f472db744ca51583d49b7db68ce421c2adc9913a944f82374900aab692da31f4334b91b7de315cfd61cf0d495daf04df176a807b137b6e8b5dc82043873f5a8fed4fb70f7d622020c9395236d42c36936783ff93892d67109ab76e37a5f01a7d420f54137e78415df66404e8f6d5cea68bed53fa624c07a7fb4a165a24ea0ae9bfb291bbdf958a7ab7fb0c72a7b7ca56ad6de2e2cee7354f4397ce325f92374ab26a678ab883c4f451ab537f6bc9d90f1f594530d1a1c2d8d0059b6e9cd033f1279fc54f640cc41d01cf27987b03770139ff9d747ba534b1d53cdfb067bcc3a3135918bf76cfd791282a1d1a582a841e4c7656045526fda47389e1597bf043f3296f2a9ab5ac8c0829fc8994225403f7f6c7bc48b5c80e764f796dbd434d40978e1e99c002a0ad3d378f9838a31ca7f5b23c521d644dcf55246bfebf9cb903b7cfd7b5d438c3a4b94ab2905fd39a6f4c1186865bcf69b3e434c5f4a32f0a8214a17e854ea4bd10be81a7885718ed6b91d7eecea3babe3d3407e65da2878805bf9704aa94cdb91ed3177587d1144277a94cb5af6d4c14734d0fcd126237b30f79906b45559ddd5fff47fa0ef490d208856a5b75c35d5173d4007e823c91f11104c1f1ede30d81d256607d795cbaf05c6605892b0bb070f2d073a5097aa899e4f5adcb96b5264207cfb06df28c72a47944c470f8b503fe791c4eaeed9954d23b3a119c5c435c46803333289e0cb1bee5b794e44cb1c732313d1bc3e0a53aa5e1154303fa7bb9a02ef28e5478761dd49ca74ede37ca51535c80fc5eda42126f4cef8de3b97085cc391ae8861447a954b1a369f5330f903278e66abe3c2e2b342e63beecfad2f0d4ed887fa28c819750cd2fee42a9299e26e469bf3c5e1b315ad1aedd79a69ce517ab9ef3053fbb418c672d1a278fce103c446cab47c90f107ec254f903b52cdf7c353c7651f3f68e6e5676fd900ede72f4edeab6a631b4f4ab5f4a94be7ee43baebf7a381557891260979cf215fc403f0539dd9086c7ae46c5ea1c18a7350aa14aebbacb802", 0x1000}, {&(0x7f0000000000)="2e0925390ae659c6b915b677e90422ea9ef3baf2bfba138c8e2cab7922e59633dd14a8356cd2", 0x26}, {&(0x7f0000000180)="f6038de973aece5b01d475a33a0be9b5f430c335c6ba8b1b71b14e0887610ee51f43f6e14d022e187bff0678dae8a38f484bb0969326c968d8965d3e81e978370bc94c9df8047fd47db12948ff8bc2c4a92e2e4426e723f2c152b6b25a09b0f5b3d01dd6fdfcee7e85b3e7812abca3b642bf94764f127d95093db2f870aeaa46cd00af1b4dc64453426f4d00bb881b4e58f2f4b979ca98fbad3eb7f5f848683507a027b052301008307e582eea38b93a37f924efd5a92504d27395362299268d2b76085b7ef0118103ea19caaba094de841531867ebe0ce7f36c1c814811f1487fb87dde25f6431dc80fda8e64c32fc6ad94", 0xf2}, {&(0x7f0000000040)="124273f599714ff5902bcacf34949dec04a7442a34c6149dabfc7758fddb23b423b394bb5967265e411b16bc2e815adf4f59da", 0x33}], 0x4, 0x0, 0x0, 0x44040}}, {{&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001400)="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", 0x1000}], 0x1, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r19, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xa8, 0x40000}}, {{&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004180)="b2329a6040650cfe7997b1fd31cba62793a72eb78670bbda495428cc81692969eb86bc794fee157f66dd62d247171e78303d7568d1bd3e3888b9e1b9025cc766f809a02353151d10c2c2c0f7a677db7c89208cd60ceec3e5b83a0d58c9ec976f1e8261ed0399f372b0e530b4b36a049c80eaa78263d4e11ca085505c0604510075a231edf1ad38ac4203336cf82806b0a9d8f7f058d41c8d0c4a22e0", 0x9c}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004300)="85582326f6784163c2904327ab366c7d3cbe3a5b1afb468d50742bdf0d04fef19ce365a994faa60e6b42e444a44648a7a3c7f15473aeabbc9d185e6bad1167e13da74a1855b200b654f7fb849d952928caddeb52cdd70b6a6a198d08a9bfafd4a4ef685b2468ce83a99dc17a2545f306de6ec5fab10a78d7d3cd16fa9bad3557a0985fbe8f975ec9", 0x88}], 0x1, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x8841}}, {{&(0x7f0000004440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004500)=[{&(0x7f00000044c0)="269bb90cbd667e86b67e1daf7d4a8be0e1c47079c5a3ce2ee5b9dded502b5593e9573af97532b591dac60927bac395", 0x2f}], 0x1, &(0x7f0000004580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r11, 0xffffffffffffffff, r10, r9, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, r12]}}], 0x58, 0x50}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004600)="339ad35386bb60f7a564d98ebbbfd6bd0047a564a1319360125c070cd7d23773ad239e636953a1278ab28cdac97ed44dff24b154d29930", 0x37}, {&(0x7f0000004640)="e36f036c97b65c56a3a579219c9ba9f16968385ac888d9c3bb8efd69d54d0eb160480c0d7bbd6a4957ae0c09b98d7a71204b78f4ac86a5168848216588f2503fb5dd6fdccf9af8ef165e9436e7decc30904ab4c588046332748b99ce5a8b027eb8afaa596d46b67cc2cff9ea2dca6c8192854709021903d7f22e563b472b9a9df6a805065d7fc0bfec26bf9dfcbc86302a019ea8440e3cc7bc292f8ea91267e9882021fbc3a55e8a4d5d48b3f91c576053cd03530cfec1d26548", 0xba}, {&(0x7f0000004700)="3cfa6cfa7bda3df216900af5e0fb43607923a7236fab01127ad93589fe7c3ecc32a19d4eb08b32faa290eee4eea66eff5012f6cc20f375d4c1c2b88111d683ea24cf713d5f79fea6ae89e202f6ff8d0724187b38d1bf41709f9834e0f0dd8078c1f6b83033e86446804008d2d626d4941c2fa6e338cadc57d260b68198279b36743439af81e00f45c80b476389fbee5e14581f8a32a371b296dda3371b21cefbd640282acecec787dfb318d0d29f8be416412e79", 0xb4}, {&(0x7f00000047c0)="c5072a1d7c5419f31153eb0aa2ae6f24910c6248462559d574a7fa923978f122fadf87d7cd58168fc6761d4088b74e9621c405a163236dc43ce644f3d75a7230cfc714c0677c76db04dd30dd600a290f6d78397770972dfa184fc2558a76", 0x5e}, {&(0x7f0000004840)="0526ef360601f66dc417944e28bd0744b029482f07f94bf015da881c3eb7a45834106c6bd67f3254db9861eaeb6657f8d11050365a03d16b5369d8b86c65230662ca265457eea8791a03ee4b5fe3db79a43a6c8867ab3e781e26d046ebf2bf2146c7e56d7407b934a67837b2bb0a024f05f5fe19eaebc8c2c126c11479ffb45c44edbd9b36222c6010cf3c8e8e9f3b280fed8148b13dbe69a5c7aa906229964f60a36ea6cd3c75d9f3c7a2768582231b2f5081cc885ed2818bc40c551ba31bab3622ea90688ae1c7c5e6b070a855c1bcf3cf9e35628efe6e92a7ad", 0xdb}, {&(0x7f0000004940)="d69a85f67a2dfdf2c74f3f65fda281b4df778544d6906167a4a6705ec363a8142b28714f2ba5c7d37526b3ecb9fd8f7ddcbc9cc41315f6a4fdb3f4f44195edd002168178e6715e96a35e57fe62a83e397a49b7bf5ecab38a784fac3cec2eee3f7255b9a3769817a9b70d65c0635492a9573a976dc007509a4f229dc2", 0x7c}], 0x6, 0x0, 0x0, 0x4000001}}], 0x6, 0x0) (async) 01:33:16 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 808.554317][ C1] sd 0:0:1:0: tag#4087 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 808.564204][ C1] sd 0:0:1:0: tag#4087 CDB: opcode=0xe5 (vendor) [ 808.570557][ C1] sd 0:0:1:0: tag#4087 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 808.579585][ C1] sd 0:0:1:0: tag#4087 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 808.588714][ C1] sd 0:0:1:0: tag#4087 CDB[20]: ba [ 808.647447][ C0] sd 0:0:1:0: tag#4089 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 808.657320][ C0] sd 0:0:1:0: tag#4089 CDB: opcode=0xe5 (vendor) [ 808.663666][ C0] sd 0:0:1:0: tag#4089 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 808.672707][ C0] sd 0:0:1:0: tag#4089 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 808.681734][ C0] sd 0:0:1:0: tag#4089 CDB[20]: ba 01:33:16 executing program 1: r0 = io_uring_setup(0x38b0, &(0x7f00000000c0)) close(r0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r4) (async) recvmsg$unix(r2, &(0x7f0000003880)={&(0x7f0000002440)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f00000024c0)=""/252, 0xfc}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/183, 0xb7}, {&(0x7f0000003680)=""/79, 0x4f}], 0x4, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x128}, 0x10000) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000038c0)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c65ca64"]) (async) clone3(&(0x7f0000003b40)={0x801000, &(0x7f0000003940), &(0x7f0000003980), &(0x7f00000039c0)=0x0, {0x4}, &(0x7f0000003a00)=""/99, 0x63, &(0x7f0000003a80)=""/103, &(0x7f0000003b00)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) (async) r17 = geteuid() (async) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x400, 0x0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x3}, [{}, {}], {0x4, 0x5}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x5, 0xee01}, {0x8, 0x3}, {0x8, 0x0, r18}], {0x10, 0x2}, {0x20, 0x9}}, 0x54, 0x1) (async) r19 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r19, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r19, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmmsg$unix(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000000)="2e0925390ae659c6b915b677e90422ea9ef3baf2bfba138c8e2cab7922e59633dd14a8356cd2", 0x26}, {&(0x7f0000000180)="f6038de973aece5b01d475a33a0be9b5f430c335c6ba8b1b71b14e0887610ee51f43f6e14d022e187bff0678dae8a38f484bb0969326c968d8965d3e81e978370bc94c9df8047fd47db12948ff8bc2c4a92e2e4426e723f2c152b6b25a09b0f5b3d01dd6fdfcee7e85b3e7812abca3b642bf94764f127d95093db2f870aeaa46cd00af1b4dc64453426f4d00bb881b4e58f2f4b979ca98fbad3eb7f5f848683507a027b052301008307e582eea38b93a37f924efd5a92504d27395362299268d2b76085b7ef0118103ea19caaba094de841531867ebe0ce7f36c1c814811f1487fb87dde25f6431dc80fda8e64c32fc6ad94", 0xf2}, {&(0x7f0000000040)="124273f599714ff5902bcacf34949dec04a7442a34c6149dabfc7758fddb23b423b394bb5967265e411b16bc2e815adf4f59da", 0x33}], 0x4, 0x0, 0x0, 0x44040}}, {{&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001400)="8a2be04a7c09f25b227446527b6b3d532d6813f3da4dccf5f46573aed695656d3998d0453447f1925e6ef40c9f1e9817a538da46b8f37297642640f26bc507ac389776074b8ee7794a00cd723bf55561f496e2115f8ae2c37df9bfafaab504d5b69c2d0c7e369c0d6424069741bd02c8efc9c73de30714a8eac7cda6ffd62abe06a3eb5740f1a90eff047314e07d5cca041096b68353a56216acae64daa93991c27785ab323683a86e4e40d54510e4d7bd460cdbaa8da20fc77693120d7118f872b57ec7371c41806092b07b236d508a0c2e120e20134b948b178dfe9a50606a56072082545545cdb7d072f0d7c37531fb6d057e6200b059511320a59741570f274093163e7d5782c9a555a8fde0cc541e205fbe5f253f5f2e01c738497ef826c7db366ff4afc36f2f004f28a206599a33f323ecb7e595f919bf7dd92be3147a65a866f2c1b7f9eb724cc9cf3ab7769d3f5f61dee0e1eb26fb3479047d0541f359f816b78f10b42bc208bb8459d8e448fb9ebf1fcdd1ed4f676ed4fc4a11dbd9c5ebb746c297ef96d3a66a83e9be6aa10e192081607da4a27fadafbae1e12d7817cb54eaf9f3a0a51e9ec7fdbdcc9df20b8c10815970ee78a1b7b775dce5379429ed57150c28e5d0faff2fce4a079608ce1cdb8299abb277a2fab93da79976ac08fd3f94120b2d163f2bab6c83af82e6e915140776c172c615c8c2bb6f8f405356f2b0234771da3ebd1542e6532c98be433983070cd7efa67859d01f783174694023c8a3e894eb53fcdafe3e91475a1bdbea8ecb2a4d16e9ce711b65e4d187b47a824dfe6205504f54054209ba52063323ddf3295684c78bb48c1cfe226cf101c920aadee8d23d0e9b4187f470bb586e5c6debf0045b05a89035b7911abe451de0cce4f367bf634bbd5c7a741ae32980119f316f39352f53bc1399d649f06aa33984206c0f48f7efa34d1feaaf3742220efaddb475dbb61d9fdd4d72b2c1a2538e38988fb7f57d529da74ef833deae265ef02a3b1d20d1d097c7a62fa475c59cabb9731b7443b9b17c160f9abb03637abc9eb3c3e7b76e43c3ee908615bc41445e6fc0463ef96ae115559e07cb5466fe9a63ce5ab1e981a1b5512750586b250b73c101ba234e57503828d5f38dc9bb81985332e9b63428766a8ad9988ff1b1b023fc6ce321701aceba4061f3285a0283218001affe125fa16374aad94a12622d74b7f431a6ad0790300a351adeefc00f2229de0a0327326c0f627ad17368e21f4a93dce0a0c8cb35a8e05e5a987359791104b89bd9fcb97c0b3b36a6572f5d8f297892f3273321a1a086e3d38ebf8eaa039b62014dfa6ff2231c519df0f12a9b1a24b16cc4290679265b61a74a960a9df14d586660a444e5c072a4980a0eb873121537edd20cb7a577024a8fed0f16d4b6cb3ad39919e6395f2bd0f17be87c7b461189acb7875d8ce18bec4e53b2ae4cd06ff019b62c720b98cccb7aed03e990ebf279da8397b97ba1e51f7257ee73f3274f449b65d6c6fa4af2667d8d0376c37ed7e744f4e44b68a216f65c4811d89bc53804e2a4933630977cfcd18269ad5975d2a44821d9511cb7a55bfd06e3d0a567f7be0108955380ea012aad4b52590133eaccc79eef7b2e460da00c18ce84bd0ad95e072eb6b299a6c446422b1f27d4fc5e021ba1294c0d814d44f0f85d62806c1ca1e877eebed62ebd85063f7fc157caad794bd38b080a34ab11c259485f87090615b5c8cad297afdded7b6590b4eb6ad541bf26c4f001413be6be7b348fca1344857022015f73b910d9938058b24f58d6384a1b900889867f167f28bd0b8b7523c5ff886da5fd6a2ffd9e10f5063d8569fea80e347f10b3e6c5fe599b294781162d96fb546851424814c4e71d8b1ead9a6ab9df1f8742105a8c2281f17e3262319bcefc62270f56329d0c198955370a867e42dc0e744c863584c725e96848bd432d5531a27b076edff6b3692bee446769b1e24f5fe58ca8c0f5b77706d3f15466d383fcc765e6b91fa530feca7ea8b976bc7f7749856cda08b86e9d2ea34954fd0e012e00cbaf822c278f025a8bd637604d47967e7fefe063d763f5008fe380a9b77c7206f7186caf7c852a3b68aa1ae5e7b57e94ff7a770d3785efbf09c5ef23711abcdf41fb3d78e13eedd8c3b842a537ada444a300fa9ce367530e03b5eabbd785448a822ca6d81c0670535926af26908a288fe7cc58ccd648351a93f88addd05f4c531a4082577ed00c110f3c5db80300a2b2f9df548dd702d3fdf241eae86d03d2c558e76ee04b070bfd6cc444ecde52565aef089a4380f0bfc8d626a6faa0356f4f1a0d1852b071ca0f7a533a361db0edeb1e1cec8d514ea2dc1e1693ac0417b81559307e0f3e82bbedca51c93babc867482f07fcb07cee42d66544e0be596113ae791ce9d6d93bd84a88181bf9462fda801d8255dd292d73d300f3cdf66156dde9fe69f00b1122b64f02c2ce4d70566ced353d250dbb9453aff9728378ed156c302da63fbd5063a517940524f23e134408edc2488169d99c4f5930d5e38eae9b621ad1bd7fa223e61465cd636407ab114d95b7d7b79a764fd0da622cc5dc5954fa2797a946483cd8ea05fdcecc9cf6233d555c7b6816f9059cdb2380e32926020225b2ef2e20585b864d4b1822328993da4fde66846074c51688e1e80aeb67c0fc575a3897e290e6c5055b8fa5a2ae6aee5fcef3de50090df456fb6a67cc1805553d60640152386c2dfbcbb0fd65e3364058698a0a31bf743a202d83640aa82b8e57863a99bc9577970e6fca5f00366f88fa00516e9efe244093455c494e77d256878b614b9192586217675d7fd8b1b5c275a72ae6c3882989405629a2d16d1dd1d3ee5dcb3eb95ed157b3e93ff7645ef29d07aef72ced924860e80332f46d1310b76fef6f116c3428269190232b242d1b52fa3594e3982475f8e6771be179b208660166533cc4b1b77bf448147b5aed54759fa5e1cb38fce2aff5213fe658d6643892d45ca704d2c8541ec9b790cd6aa502204fd39574665e3c3807f0a877141606f5b6838ad1c81f3c3808789414f6a7c8b0270ee017ab79bd90386004ef01842ee22571ae5d1b1c31b4b46e686fcaff3491ee3c0426365e6fe6b31e0137a98f27c64ad6123cbde0ff641a61b660021a97f1c9bb8a7c5d4ebeb46a6a956f868a95135201df690d9f94cd7c7afa3c63f0727419b399336f7778aa13619790c60ff2f4b768687e76f4db0992d46a38b54dd9d09fd9b98090c416387143a00b13d80e87de873205381b617ce24962cfed31930c4d189d843f341bf387f279080e2b85430646b799e72638c734e7714d67e7468b0f21e79074ab29fe6d3529e88b1afbb55cf645704f90e8d4e75f522b60c42781143d3643542bf82a0157652c308577bfa0f1f77c89cc2c9f9d0e9cb9c4a9cedead51f9daa2a38269fee4d1e90e1d3f72f66f4bb902b0778c5cd556272d57e0a94a3c6bb3faf73fb197dd946a71f0b224c00f945fac84a98709e5a79511f86e8e4aaa4ad85246c2e76e05c8765d5a75cf89ab4b704163a94e5a0d19ff5de55888f1a30bec5e649aff354992ff91a051d7766beb05616b4228a87845cdd11e797dffe827ddb996215e6e9c7c95c70cd314695b6e31189e34e197727910930ed860f57c865746cb60bdc531c1342575bcf557deabf5e6569c79725fa32fca84d3af29c9cfe023287d626905548f1f3bd6a3564ddb4662cb5e133e659a88da2822a9ad89e3d7b9af79ec06dbcd663c183416f125a96b6b7abc894d2d7c92478280ad54838a1bf281b2a3ba7e884ec22bab3431ea15ab911d97ca7d7a3fbe3e84bce454c2a7479bb1a698cb432e2d8c65e9b506f2413d7c4e15086927abff10741101f85583fabde9bdb077b25cbbac18ee2411d57c13f78f7ecb600219bf1e250b9cde6ac3f6eafff3e2ae5efc1b848cc77efaa00127098f184f6d9db85dfec6323f137a912264d051f646a9b0ef5df9e5c3531125e5bdb8fa3bc024fd7faf5ffe9ccff3d8cc7fd6539e4c2ce1ff9b28212b62d4e694f6db99dd37bf6d242597e9d5a8f1121b6c5e01b0da09f06a3ebd788a17924746d4fe320f36d33e0adcf80b757d0fcd6b0b7803d056de70ad60e9af0131e08f1cf21a2c5b3569abba97cf24812f8eaae89f876d437cc6358abeccc686f40b1c71412a48e78b2ccbef3508b6ba56197a8a57bb1b0500a762cad9393919da9932f6d784858ef81e6f8ff1b3e7fef23d35956975791760cf54db848833b1f3efd10cc7e9885abf136b21647af69b760baf1eb679f87daf31ec28dd5d98010c2923c5a7628b4fb805862a72643612bb6554fb1e4941b02d02082a4eb1ebf24ea8d93ea60d575bdbed3ec1e7cb872f6e9eea782b80a06941899b5ad9252f88481a6419302924adac652c3fe5f3b013ce6ec144f991dace26cabfffc4776f5f4193f77386af87a92820d7c189b73b77733f6f01dcf65da0abb3680617af0d75d1ec41e6093f599b42d0ef03bc394aa47eb837d6e853d7f28cf79ed03054c47c60da84913f3b00e0a31ff5000f917cef4fc4eb3f9abf8cb2ecdfbbea2b0bac0d08315fdc55b6cf596a9b2f3df3fce3e6a3be71eca650708c6ac585aba725c9d8249ca8a11025fec644dc629b5e043587357d0ac48e7a8d43d847622e4c0faf28868bb6413b4e4475f7eff02aac9942ecc3b470be774efa5793e633128f5c193c04fca3d14a3451aad8d801189e5fb2e348d2a3972763becf0d38a9eadad6f09805eab1e107a94b006c5a49b980e4c10ef20b114e19230cd30ba981b0ccad71aab4cf95cbd412e0486cdf27bec5f7b783dad3b65c44d8a5cd53d80f34ba6e7b8e8998242db9d7321ec5a8331865154cdc69a9b8c0bc5cdea6c824d08a2bdd64ac79644d2eb181310eb2f91bc3671a296c6e73f5f0f040ebdbea938a34bd871c9482970ac03ecccec3852aea97e33681291dd69c6b5559862538da499026a3fe15c633db6406d3aca6f515801d7acca7f867ce8547297e697a8d79672068248a299352ef4ceed761186fa437973603ca054100150dfd5753451d59baca64e6b31d86f6ab4843fddcf376027624c5775a0c793a920c46c34bb17a2cb386a1d111a6d21ade6a81b0bd7de3795a0d65d17266a4b508675b0027fb325882261718e6ce3715d1b9b0a573c4d891d3f41502bf2d1008cab31415c20e4a7409766fb0e9052bb3115c699c3381bb919af700419ee92d73114fad5a4173a860030d3d959e94f7cdc3e9eae1098a0bf464b57edcf0331b3ba846bf8c5057d971f8e03ad7796a0066e77ca077ea14fbc25413ecf8ff8fd3f298e7b79b6d7a77ed300146f1ac52155ebca5aaaff5c9f628de05c970487ccdfe09c3b7ddc5389d93e5b1713f4808d3eb60c483295f0c9a827a76b2e414daed7f928a0b7b894df82a8f62a3e210d237a1dd6bc3ccb0bde04c96adc747cc57dcf7e25199b38946b9fbad1d4a8f507ea821dca2314589908edcc8128bd6594624ddde6ce40ef396c445a7a71d14f9f8f25bf744b6a0751eeb22832fc05905aa82a8d44807abfd07ab0ca362502f3ec429b3da14e765c09be64c8da7d5229431d7ce4b39c0286c40ba647c75cdf0daa3d3df5519f9f95aadcef11983f2ffa390a0091cdc0cf6b514338da53062f086a502b0067c58a0d4bc360030bed7f25a543db7c22b5445453ded0bf70f8167878828f81f52bfe9ba3223aa06961693cd16fbce1f79028955bdeec6b209e22e1dc1e01a2cba45e8ec77", 0x1000}], 0x1, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r19, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xa8, 0x40000}}, {{&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004180)="b2329a6040650cfe7997b1fd31cba62793a72eb78670bbda495428cc81692969eb86bc794fee157f66dd62d247171e78303d7568d1bd3e3888b9e1b9025cc766f809a02353151d10c2c2c0f7a677db7c89208cd60ceec3e5b83a0d58c9ec976f1e8261ed0399f372b0e530b4b36a049c80eaa78263d4e11ca085505c0604510075a231edf1ad38ac4203336cf82806b0a9d8f7f058d41c8d0c4a22e0", 0x9c}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000004280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004300)="85582326f6784163c2904327ab366c7d3cbe3a5b1afb468d50742bdf0d04fef19ce365a994faa60e6b42e444a44648a7a3c7f15473aeabbc9d185e6bad1167e13da74a1855b200b654f7fb849d952928caddeb52cdd70b6a6a198d08a9bfafd4a4ef685b2468ce83a99dc17a2545f306de6ec5fab10a78d7d3cd16fa9bad3557a0985fbe8f975ec9", 0x88}], 0x1, &(0x7f0000004400)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x8841}}, {{&(0x7f0000004440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004500)=[{&(0x7f00000044c0)="269bb90cbd667e86b67e1daf7d4a8be0e1c47079c5a3ce2ee5b9dded502b5593e9573af97532b591dac60927bac395", 0x2f}], 0x1, &(0x7f0000004580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r11, 0xffffffffffffffff, r10, r9, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, r12]}}], 0x58, 0x50}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000004600)="339ad35386bb60f7a564d98ebbbfd6bd0047a564a1319360125c070cd7d23773ad239e636953a1278ab28cdac97ed44dff24b154d29930", 0x37}, {&(0x7f0000004640)="e36f036c97b65c56a3a579219c9ba9f16968385ac888d9c3bb8efd69d54d0eb160480c0d7bbd6a4957ae0c09b98d7a71204b78f4ac86a5168848216588f2503fb5dd6fdccf9af8ef165e9436e7decc30904ab4c588046332748b99ce5a8b027eb8afaa596d46b67cc2cff9ea2dca6c8192854709021903d7f22e563b472b9a9df6a805065d7fc0bfec26bf9dfcbc86302a019ea8440e3cc7bc292f8ea91267e9882021fbc3a55e8a4d5d48b3f91c576053cd03530cfec1d26548", 0xba}, {&(0x7f0000004700)="3cfa6cfa7bda3df216900af5e0fb43607923a7236fab01127ad93589fe7c3ecc32a19d4eb08b32faa290eee4eea66eff5012f6cc20f375d4c1c2b88111d683ea24cf713d5f79fea6ae89e202f6ff8d0724187b38d1bf41709f9834e0f0dd8078c1f6b83033e86446804008d2d626d4941c2fa6e338cadc57d260b68198279b36743439af81e00f45c80b476389fbee5e14581f8a32a371b296dda3371b21cefbd640282acecec787dfb318d0d29f8be416412e79", 0xb4}, {&(0x7f00000047c0)="c5072a1d7c5419f31153eb0aa2ae6f24910c6248462559d574a7fa923978f122fadf87d7cd58168fc6761d4088b74e9621c405a163236dc43ce644f3d75a7230cfc714c0677c76db04dd30dd600a290f6d78397770972dfa184fc2558a76", 0x5e}, {&(0x7f0000004840)="0526ef360601f66dc417944e28bd0744b029482f07f94bf015da881c3eb7a45834106c6bd67f3254db9861eaeb6657f8d11050365a03d16b5369d8b86c65230662ca265457eea8791a03ee4b5fe3db79a43a6c8867ab3e781e26d046ebf2bf2146c7e56d7407b934a67837b2bb0a024f05f5fe19eaebc8c2c126c11479ffb45c44edbd9b36222c6010cf3c8e8e9f3b280fed8148b13dbe69a5c7aa906229964f60a36ea6cd3c75d9f3c7a2768582231b2f5081cc885ed2818bc40c551ba31bab3622ea90688ae1c7c5e6b070a855c1bcf3cf9e35628efe6e92a7ad", 0xdb}, {&(0x7f0000004940)="d69a85f67a2dfdf2c74f3f65fda281b4df778544d6906167a4a6705ec363a8142b28714f2ba5c7d37526b3ecb9fd8f7ddcbc9cc41315f6a4fdb3f4f44195edd002168178e6715e96a35e57fe62a83e397a49b7bf5ecab38a784fac3cec2eee3f7255b9a3769817a9b70d65c0635492a9573a976dc007509a4f229dc2", 0x7c}], 0x6, 0x0, 0x0, 0x4000001}}], 0x6, 0x0) 01:33:16 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 808.842042][ C0] sd 0:0:1:0: tag#4090 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 808.851949][ C0] sd 0:0:1:0: tag#4090 CDB: opcode=0xe5 (vendor) [ 808.858296][ C0] sd 0:0:1:0: tag#4090 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 808.867356][ C0] sd 0:0:1:0: tag#4090 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 808.876390][ C0] sd 0:0:1:0: tag#4090 CDB[20]: ba 01:33:17 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000940)={{'\x00', 0x3}, {0x80000001}, 0x3a, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)="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", 0x19d, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x28b}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 809.090339][ C0] sd 0:0:1:0: tag#4091 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.100379][ C0] sd 0:0:1:0: tag#4091 CDB: opcode=0xe5 (vendor) [ 809.106712][ C0] sd 0:0:1:0: tag#4091 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 809.115777][ C0] sd 0:0:1:0: tag#4091 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 809.124827][ C0] sd 0:0:1:0: tag#4091 CDB[20]: ba 01:33:17 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x17) 01:33:17 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (rerun: 64) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000340)) 01:33:17 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x200000000000000, 0x0, 0x0) 01:33:17 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000340)) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000340)) (async) 01:33:17 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 809.537588][ C0] sd 0:0:1:0: tag#4092 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.547462][ C0] sd 0:0:1:0: tag#4092 CDB: opcode=0xe5 (vendor) [ 809.553813][ C0] sd 0:0:1:0: tag#4092 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 809.562939][ C0] sd 0:0:1:0: tag#4092 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 809.571985][ C0] sd 0:0:1:0: tag#4092 CDB[20]: ba 01:33:17 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 809.835857][ C1] sd 0:0:1:0: tag#4093 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.845723][ C1] sd 0:0:1:0: tag#4093 CDB: opcode=0xe5 (vendor) [ 809.852164][ C1] sd 0:0:1:0: tag#4093 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 809.861214][ C1] sd 0:0:1:0: tag#4093 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 809.870273][ C1] sd 0:0:1:0: tag#4093 CDB[20]: ba 01:33:17 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1}, 0x7) r7 = dup(0xffffffffffffffff) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:17 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000940)={{'\x00', 0x3}, {0x80000001}, 0x3a, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)="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", 0x19d, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000da010000000000000cdf0000000c10ae18db80ab6dbb0cc34d5fec9befed78f1ee15fcf452436463da055b684efbddc178e2c7bd05ffffa1a0098b156a89f281f4427ed606098e997206a466e5d4cb50e25b12eeefbc86c6eef8c9b78a7e80d654fad28263665bfd14c6bb3f14ac3afb09b92b9d46fc7dcf33023d80b07dfa6bc2f3c42386fc34f8726b1ef20d8d54ebb098b7bc77e187a13586abc7bfddd2d6d0f99f5d62fdbf4dc4070555757e20513018b19d351fe30634fc031ff96b230dcdaec95db5e4573fa4b9b3317f96128bce30dd6dc4675fb477b0def1efb7d1ee000000e4452007245bb3da2d44cad9faea6c5bd457f1374847379e3e30426275cbb0994cc0cccaa4e49255c5d451fb3b237d07fb57d0192feb231e3ed370aa296fdeb5f8c9e12d98d286d2442250fe78cc149620a10fe3d3d52d2c1f36e71507580d28c23a643d34f077e6ae20be06a0e4034e45be1f4568d1a0bc322c7510a279f37e7fab5a86b440f229ad4bf10d5303345d17f9e6df664019e8778dfe65bb235cefcc3f462d8c07b0184324f361e43fce2c519a84ab439887d72352e201f17b36bcc66d797e2fdac1f97f4376f561135ec7cbee98a180bb2ec4daf97339c998425940ec7eac8923798520cabdd924a5000000f29ba08cd76cb7f4b3ad2c5860274146d477ad498871f407498c0db84625eb66cb6fbd8a18944b834f2f6036782973900902133f42554f4a8cbee71dc178d4ff7c1a355b2ae1d391096902f5f972b7ab8f76a38b51d3262139f33aef72073082107a6ac0ba50f7d862c89463f35a62c4b1375c4575e9dbfd5aac6e43380736163a875171dc242d6ad09c5a3cd9e5adf5b267203fcbb224dd6309921911ff90f2e46d94a74f00000000f6d6f9c1a4e5653fbb88811914cf4515dee30ebd1d349696498bfbba3b3113f4efe037bc83b4654336b95841d0d43e4878c479b9c4e0b554e1956769bfe4b29fd71095bf2873efbb2d3aa0"], 0x28b}) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000940)={{'\x00', 0x3}, {0x80000001}, 0x3a, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)='./file1\x00', &(0x7f00000004c0)="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", 0x19d, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x28b}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x7632, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x8000}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000340)=0x3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 810.169512][ C1] sd 0:0:1:0: tag#4034 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 810.179389][ C1] sd 0:0:1:0: tag#4034 CDB: opcode=0xe5 (vendor) [ 810.185738][ C1] sd 0:0:1:0: tag#4034 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 810.194779][ C1] sd 0:0:1:0: tag#4034 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 810.203833][ C1] sd 0:0:1:0: tag#4034 CDB[20]: ba 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x7632, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x8000}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000340)=0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x400000000000000, 0x0, 0x0) 01:33:18 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x18) 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x7632, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x8000}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000340)=0x3) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1}, 0x7) (async) r7 = dup(0xffffffffffffffff) write$nbd(r7, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c) recvmsg(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001840)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r4, 0x5, &(0x7f0000002400)="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", 0xff, 0x2, 0x1}, 0x5e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1}, 0x7) (rerun: 32) r7 = dup(0xffffffffffffffff) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c) recvmsg(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001840)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r4, 0x5, &(0x7f0000002400)="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", 0xff, 0x2, 0x1}, 0x5e) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c) (async) recvmsg(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001840)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r4, 0x5, &(0x7f0000002400)="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", 0xff, 0x2, 0x1}, 0x5e) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:18 executing program 2: r0 = syz_io_uring_setup(0x3d29, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000440)={0x7, 0x20, 0x800, 0x8, 0x10, "4efd822da1189b38f19fe29f50af95539b6156"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:19 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x700000000000000, 0x0, 0x0) 01:33:19 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (rerun: 64) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:19 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x30) 01:33:19 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:19 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:19 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x80000000) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:19 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@phonet, &(0x7f0000000340)=0x80, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:20 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:20 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x800000000000000, 0x0, 0x0) 01:33:20 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:20 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x50) 01:33:20 executing program 2: r0 = syz_io_uring_setup(0x3d29, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000440)={0x7, 0x20, 0x800, 0x8, 0x10, "4efd822da1189b38f19fe29f50af95539b6156"}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:20 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@phonet, &(0x7f0000000340)=0x80, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) accept4(0xffffffffffffffff, &(0x7f00000004c0)=@phonet, &(0x7f0000000340)=0x80, 0x800) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000540)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:20 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:20 executing program 2: r0 = syz_io_uring_setup(0x3d29, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000440)={0x7, 0x20, 0x800, 0x8, 0x10, "4efd822da1189b38f19fe29f50af95539b6156"}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) [ 812.829164][ C0] scsi_io_completion_action: 8 callbacks suppressed [ 812.829207][ C0] sd 0:0:1:0: tag#4043 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 812.845681][ C0] sd 0:0:1:0: tag#4043 CDB: opcode=0xe5 (vendor) [ 812.852045][ C0] sd 0:0:1:0: tag#4043 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 812.861083][ C0] sd 0:0:1:0: tag#4043 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 812.870129][ C0] sd 0:0:1:0: tag#4043 CDB[20]: ba 01:33:20 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:20 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 812.937050][ C1] sd 0:0:1:0: tag#4044 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 812.946918][ C1] sd 0:0:1:0: tag#4044 CDB: opcode=0xe5 (vendor) [ 812.953298][ C1] sd 0:0:1:0: tag#4044 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 812.955289][ C0] sd 0:0:1:0: tag#4045 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 812.962332][ C1] sd 0:0:1:0: tag#4044 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 812.962351][ C1] sd 0:0:1:0: tag#4044 CDB[20]: ba 01:33:20 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x20000400) ioctl$TIOCSLCKTRMIOS(r5, 0x545d, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 812.972139][ C0] sd 0:0:1:0: tag#4045 CDB: opcode=0xe5 (vendor) [ 812.992552][ C0] sd 0:0:1:0: tag#4045 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.001600][ C0] sd 0:0:1:0: tag#4045 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.010655][ C0] sd 0:0:1:0: tag#4045 CDB[20]: ba 01:33:20 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 813.103817][ C1] sd 0:0:1:0: tag#4046 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.105093][ C0] sd 0:0:1:0: tag#4047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.113719][ C1] sd 0:0:1:0: tag#4046 CDB: opcode=0xe5 (vendor) [ 813.123480][ C0] sd 0:0:1:0: tag#4047 CDB: opcode=0xe5 (vendor) [ 813.129795][ C1] sd 0:0:1:0: tag#4046 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.136111][ C0] sd 0:0:1:0: tag#4047 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 01:33:21 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x20000400) ioctl$TIOCSLCKTRMIOS(r5, 0x545d, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) unshare(0x20000400) (async) ioctl$TIOCSLCKTRMIOS(r5, 0x545d, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) [ 813.145116][ C1] sd 0:0:1:0: tag#4046 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.154120][ C0] sd 0:0:1:0: tag#4047 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.163121][ C1] sd 0:0:1:0: tag#4046 CDB[20]: ba [ 813.172113][ C0] sd 0:0:1:0: tag#4047 CDB[20]: ba [ 813.272570][ C1] sd 0:0:1:0: tag#4048 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.282440][ C1] sd 0:0:1:0: tag#4048 CDB: opcode=0xe5 (vendor) [ 813.288777][ C1] sd 0:0:1:0: tag#4048 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.297828][ C1] sd 0:0:1:0: tag#4048 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.306867][ C1] sd 0:0:1:0: tag#4048 CDB[20]: ba 01:33:21 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0xf00000000000000, 0x0, 0x0) 01:33:21 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:21 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x700) 01:33:21 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x20000400) (async) ioctl$TIOCSLCKTRMIOS(r5, 0x545d, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 813.358115][ C0] sd 0:0:1:0: tag#4049 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.367970][ C0] sd 0:0:1:0: tag#4049 CDB: opcode=0xe5 (vendor) [ 813.374325][ C0] sd 0:0:1:0: tag#4049 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.383377][ C0] sd 0:0:1:0: tag#4049 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.392417][ C0] sd 0:0:1:0: tag#4049 CDB[20]: ba 01:33:21 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000004c0)=@phonet, &(0x7f0000000340)=0x80, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000540)) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:21 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:21 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 813.463017][ C0] sd 0:0:1:0: tag#4050 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.472877][ C0] sd 0:0:1:0: tag#4050 CDB: opcode=0xe5 (vendor) [ 813.479208][ C0] sd 0:0:1:0: tag#4050 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.488240][ C0] sd 0:0:1:0: tag#4050 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.497291][ C0] sd 0:0:1:0: tag#4050 CDB[20]: ba [ 813.548810][ C0] sd 0:0:1:0: tag#4051 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.558669][ C0] sd 0:0:1:0: tag#4051 CDB: opcode=0xe5 (vendor) [ 813.565195][ C0] sd 0:0:1:0: tag#4051 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.574239][ C0] sd 0:0:1:0: tag#4051 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.583281][ C0] sd 0:0:1:0: tag#4051 CDB[20]: ba 01:33:21 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) io_uring_enter(r3, 0xfb8, 0x61b6, 0x2, &(0x7f0000000340)={[0x100]}, 0x8) 01:33:21 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:21 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (rerun: 64) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:21 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:21 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 813.823477][ C0] sd 0:0:1:0: tag#4052 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.833366][ C0] sd 0:0:1:0: tag#4052 CDB: opcode=0xe5 (vendor) [ 813.839712][ C0] sd 0:0:1:0: tag#4052 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.849009][ C0] sd 0:0:1:0: tag#4052 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 813.858066][ C0] sd 0:0:1:0: tag#4052 CDB[20]: ba 01:33:22 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x1300000000000000, 0x0, 0x0) 01:33:22 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:22 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf00) 01:33:22 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffff0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:22 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_enter(r3, 0xfb8, 0x61b6, 0x2, &(0x7f0000000340)={[0x100]}, 0x8) 01:33:22 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) io_uring_enter(r3, 0xfb8, 0x61b6, 0x2, &(0x7f0000000340)={[0x100]}, 0x8) 01:33:22 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x1e1ac3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) bind$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @loopback, 0x8}, 0x1c) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:22 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:22 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x1e1ac3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) bind$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @loopback, 0x8}, 0x1c) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:22 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x1e1ac3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) bind$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e22, 0x2, @loopback, 0x8}, 0x1c) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:22 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@delneigh={0x38, 0x1d, 0x300, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x8, 0x15, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_IFINDEX={0x8}, @NDA_PROBES={0x8, 0x4, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:22 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:23 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x1800000000000000, 0x0, 0x0) 01:33:23 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffff0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffff0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:23 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1600) 01:33:23 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffff0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:23 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r6) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x200000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x3e}}], [{@dont_measure}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@uid_lt}, {@euid_lt={'euid<', r6}}, {@fowner_lt={'fowner<', r7}}]}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:23 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:23 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@delneigh={0x38, 0x1d, 0x300, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x8, 0x15, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_IFINDEX={0x8}, @NDA_PROBES={0x8, 0x4, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:23 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@delneigh={0x38, 0x1d, 0x300, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x8, 0x15, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_IFINDEX={0x8}, @NDA_PROBES={0x8, 0x4, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:23 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001940)="ccefd70350e867597227585c6e159ab1bdb595bf751eaa22fe176d0540c053580efefba810dbecbd425f8f504ccba90fe16fe08fdeecb87b2dbf293abbe364bcbb91d04270b65eafc3a667afdb845a144add1d098919e8e89e66be16b5210ef9c121d27bbb27f083d284d396ceb71e46b9836c52a4d71afaa19a255da25a7626f7b87d8c6a1cb2a52e4677d36283d1207924cb91a1c8b22108f10887d4e41a187e13241489d3e0524a83927f168758ef1420f04f23983fe2463808d166e0fa179ec8c5dcd29e09a3f1a57d09d4ebcd82675d", 0xd2}, {&(0x7f0000001a40)="228457b6cf3f8606c60622e4af2dcc5d5dcd4463620f44a0c43624fa51947768b020686dd9e19dc3c812bcbc1a9012ecba51f9cea5dd2573a9e87732a7e96616c5b89acd400e54398dc3bc407998f5ad517b1c5c7a3e30c65d0eab759a891307cd2419facf3d719e02b352c429480e9c5323f7561dffd2b80f89dcb072005ef83e31550479e2754e68bf33d4211330676f183374a6c33b1fc2b711aa48d805", 0x9f}, {&(0x7f0000001b00)="45e638f22cdc49712ae66b776571269666f164fb462dc586e59ed4f8c695c4f7d05996cdc8f436b16998cf59533c7bf8211e734d9733606d0b71491d85cd2f2a04eb52aa2e58ae64f90185eab81142ec5fac95a90d72496951699d63c84163c4671f74aee051e8e58d3a04d7df9865d432a4286ae42695f30ae2a233c2d5312350b61e9d248f701ea2c6598433c71d3394c4bd4df717ecaba94e", 0x9a}, {&(0x7f0000001bc0)="e1aa833aacec6bd636d991dcdeb9fefe6f54812fd6c14e2ae819fbb0ec287aa49e8d9c9d7f83d8fe09df1a6ca5115a29789baa1dd9b231d3bd3f1b1944599c898684cd332d73bbc89115e255cb877550466098a47c5cd5518be91a7de969e1884e1291164ae1ac04fc731ac610a6f1e9e08c3edda475893ff886595399c6fb55522aa2c4261b9eb62a918242766f16687df373bb76c145a94d4f4bfc46b5d8e36c24639787dd8a03b8415a2e2d44c4d8adbdb2fc89bee979e677f41e7d6ed78e8f2b3c", 0xc3}, {&(0x7f0000001cc0)="f34b67e96f610ae62acee4f409f3ad9748106423095eb1069678a84b86dc23acb03ec840ae721e07b7bd96b6846ed3499db4abe76032c3b7a8a7cc06007acccc8eb3d711034a7113bea862ea4e75e029f53fc2045cf83a566a9d21f4ac38ff154854f1ef3be0601af5d8026bd2ffff8fc879c23f0314bd3989c3da980317f6bb4ff59ccffbd834d56c8844d77e9cd90a992f717a8d14fdb4ed8b16fefa66e48bb10fdf4fa65bf6815e8fdaca2fee90881272620a1e8f6099b9f8b605a639ace2e62741abd91d7de1d498a97521f9e126ee", 0xd1}], 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="18000000173bdd1464cf130811e493730ff08cdd76027018d2dc2f48cdfb63659333a09229a4036eef501f7f5f3eb8e36be80b4fd75626e022561ac4fd3cab9c7c2e248a04a3fc54127c19b9dad59897c85ec4cdf0c8045df0273c401342f09e0a8e4f22f63ba6509706d0fc4ee8c26f908c6cae52674c779f96a0dfed89410818c975ef3eefd3db65418965bf9af3149ea623ec08c3a4023c55750ceb00edc1998de568fa365d9fe1c8706ef74c07400383725ea56e5c9f6428eab9d12c7d14b9784d6411400bb0ab891688072596860b667ce1cd4c57000000", @ANYRES32, @ANYRES32], 0x18, 0x24008084}, 0x20040011) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r5, &(0x7f0000000440)={&(0x7f00000004c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/226, 0xe2}], 0x3, &(0x7f0000001740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x2000) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000001880)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:23 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:23 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x2000000000000000, 0x0, 0x0) 01:33:24 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1700) 01:33:24 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001940)="ccefd70350e867597227585c6e159ab1bdb595bf751eaa22fe176d0540c053580efefba810dbecbd425f8f504ccba90fe16fe08fdeecb87b2dbf293abbe364bcbb91d04270b65eafc3a667afdb845a144add1d098919e8e89e66be16b5210ef9c121d27bbb27f083d284d396ceb71e46b9836c52a4d71afaa19a255da25a7626f7b87d8c6a1cb2a52e4677d36283d1207924cb91a1c8b22108f10887d4e41a187e13241489d3e0524a83927f168758ef1420f04f23983fe2463808d166e0fa179ec8c5dcd29e09a3f1a57d09d4ebcd82675d", 0xd2}, {&(0x7f0000001a40)="228457b6cf3f8606c60622e4af2dcc5d5dcd4463620f44a0c43624fa51947768b020686dd9e19dc3c812bcbc1a9012ecba51f9cea5dd2573a9e87732a7e96616c5b89acd400e54398dc3bc407998f5ad517b1c5c7a3e30c65d0eab759a891307cd2419facf3d719e02b352c429480e9c5323f7561dffd2b80f89dcb072005ef83e31550479e2754e68bf33d4211330676f183374a6c33b1fc2b711aa48d805", 0x9f}, {&(0x7f0000001b00)="45e638f22cdc49712ae66b776571269666f164fb462dc586e59ed4f8c695c4f7d05996cdc8f436b16998cf59533c7bf8211e734d9733606d0b71491d85cd2f2a04eb52aa2e58ae64f90185eab81142ec5fac95a90d72496951699d63c84163c4671f74aee051e8e58d3a04d7df9865d432a4286ae42695f30ae2a233c2d5312350b61e9d248f701ea2c6598433c71d3394c4bd4df717ecaba94e", 0x9a}, {&(0x7f0000001bc0)="e1aa833aacec6bd636d991dcdeb9fefe6f54812fd6c14e2ae819fbb0ec287aa49e8d9c9d7f83d8fe09df1a6ca5115a29789baa1dd9b231d3bd3f1b1944599c898684cd332d73bbc89115e255cb877550466098a47c5cd5518be91a7de969e1884e1291164ae1ac04fc731ac610a6f1e9e08c3edda475893ff886595399c6fb55522aa2c4261b9eb62a918242766f16687df373bb76c145a94d4f4bfc46b5d8e36c24639787dd8a03b8415a2e2d44c4d8adbdb2fc89bee979e677f41e7d6ed78e8f2b3c", 0xc3}, {&(0x7f0000001cc0)="f34b67e96f610ae62acee4f409f3ad9748106423095eb1069678a84b86dc23acb03ec840ae721e07b7bd96b6846ed3499db4abe76032c3b7a8a7cc06007acccc8eb3d711034a7113bea862ea4e75e029f53fc2045cf83a566a9d21f4ac38ff154854f1ef3be0601af5d8026bd2ffff8fc879c23f0314bd3989c3da980317f6bb4ff59ccffbd834d56c8844d77e9cd90a992f717a8d14fdb4ed8b16fefa66e48bb10fdf4fa65bf6815e8fdaca2fee90881272620a1e8f6099b9f8b605a639ace2e62741abd91d7de1d498a97521f9e126ee", 0xd1}], 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="18000000173bdd1464cf130811e493730ff08cdd76027018d2dc2f48cdfb63659333a09229a4036eef501f7f5f3eb8e36be80b4fd75626e022561ac4fd3cab9c7c2e248a04a3fc54127c19b9dad59897c85ec4cdf0c8045df0273c401342f09e0a8e4f22f63ba6509706d0fc4ee8c26f908c6cae52674c779f96a0dfed89410818c975ef3eefd3db65418965bf9af3149ea623ec08c3a4023c55750ceb00edc1998de568fa365d9fe1c8706ef74c07400383725ea56e5c9f6428eab9d12c7d14b9784d6411400bb0ab891688072596860b667ce1cd4c57000000", @ANYRES32, @ANYRES32], 0x18, 0x24008084}, 0x20040011) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000440)={&(0x7f00000004c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/226, 0xe2}], 0x3, &(0x7f0000001740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x2000) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000001880)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001940)="ccefd70350e867597227585c6e159ab1bdb595bf751eaa22fe176d0540c053580efefba810dbecbd425f8f504ccba90fe16fe08fdeecb87b2dbf293abbe364bcbb91d04270b65eafc3a667afdb845a144add1d098919e8e89e66be16b5210ef9c121d27bbb27f083d284d396ceb71e46b9836c52a4d71afaa19a255da25a7626f7b87d8c6a1cb2a52e4677d36283d1207924cb91a1c8b22108f10887d4e41a187e13241489d3e0524a83927f168758ef1420f04f23983fe2463808d166e0fa179ec8c5dcd29e09a3f1a57d09d4ebcd82675d", 0xd2}, {&(0x7f0000001a40)="228457b6cf3f8606c60622e4af2dcc5d5dcd4463620f44a0c43624fa51947768b020686dd9e19dc3c812bcbc1a9012ecba51f9cea5dd2573a9e87732a7e96616c5b89acd400e54398dc3bc407998f5ad517b1c5c7a3e30c65d0eab759a891307cd2419facf3d719e02b352c429480e9c5323f7561dffd2b80f89dcb072005ef83e31550479e2754e68bf33d4211330676f183374a6c33b1fc2b711aa48d805", 0x9f}, {&(0x7f0000001b00)="45e638f22cdc49712ae66b776571269666f164fb462dc586e59ed4f8c695c4f7d05996cdc8f436b16998cf59533c7bf8211e734d9733606d0b71491d85cd2f2a04eb52aa2e58ae64f90185eab81142ec5fac95a90d72496951699d63c84163c4671f74aee051e8e58d3a04d7df9865d432a4286ae42695f30ae2a233c2d5312350b61e9d248f701ea2c6598433c71d3394c4bd4df717ecaba94e", 0x9a}, {&(0x7f0000001bc0)="e1aa833aacec6bd636d991dcdeb9fefe6f54812fd6c14e2ae819fbb0ec287aa49e8d9c9d7f83d8fe09df1a6ca5115a29789baa1dd9b231d3bd3f1b1944599c898684cd332d73bbc89115e255cb877550466098a47c5cd5518be91a7de969e1884e1291164ae1ac04fc731ac610a6f1e9e08c3edda475893ff886595399c6fb55522aa2c4261b9eb62a918242766f16687df373bb76c145a94d4f4bfc46b5d8e36c24639787dd8a03b8415a2e2d44c4d8adbdb2fc89bee979e677f41e7d6ed78e8f2b3c", 0xc3}, {&(0x7f0000001cc0)="f34b67e96f610ae62acee4f409f3ad9748106423095eb1069678a84b86dc23acb03ec840ae721e07b7bd96b6846ed3499db4abe76032c3b7a8a7cc06007acccc8eb3d711034a7113bea862ea4e75e029f53fc2045cf83a566a9d21f4ac38ff154854f1ef3be0601af5d8026bd2ffff8fc879c23f0314bd3989c3da980317f6bb4ff59ccffbd834d56c8844d77e9cd90a992f717a8d14fdb4ed8b16fefa66e48bb10fdf4fa65bf6815e8fdaca2fee90881272620a1e8f6099b9f8b605a639ace2e62741abd91d7de1d498a97521f9e126ee", 0xd1}], 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="18000000173bdd1464cf130811e493730ff08cdd76027018d2dc2f48cdfb63659333a09229a4036eef501f7f5f3eb8e36be80b4fd75626e022561ac4fd3cab9c7c2e248a04a3fc54127c19b9dad59897c85ec4cdf0c8045df0273c401342f09e0a8e4f22f63ba6509706d0fc4ee8c26f908c6cae52674c779f96a0dfed89410818c975ef3eefd3db65418965bf9af3149ea623ec08c3a4023c55750ceb00edc1998de568fa365d9fe1c8706ef74c07400383725ea56e5c9f6428eab9d12c7d14b9784d6411400bb0ab891688072596860b667ce1cd4c57000000", @ANYRES32, @ANYRES32], 0x18, 0x24008084}, 0x20040011) write$nbd(r5, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) recvmsg$unix(r5, &(0x7f0000000440)={&(0x7f00000004c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/226, 0xe2}], 0x3, &(0x7f0000001740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x2000) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000001880)) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r6) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x200000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x3e}}], [{@dont_measure}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@uid_lt}, {@euid_lt={'euid<', r6}}, {@fowner_lt={'fowner<', r7}}]}) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000180)=""/132, 0x1a, 0x84, 0x1}, 0x20) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r6) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x200000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x3e}}], [{@dont_measure}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@uid_lt}, {@euid_lt={'euid<', r6}}, {@fowner_lt={'fowner<', r7}}]}) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x1903, &(0x7f00000004c0)={0x0, 0x7f56, 0x8, 0x1, 0x2ec, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x80}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x1903, &(0x7f00000004c0)={0x0, 0x7f56, 0x8, 0x1, 0x2ec, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)=0x0) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x80}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:24 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x1903, &(0x7f00000004c0)={0x0, 0x7f56, 0x8, 0x1, 0x2ec, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x80}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x1903, &(0x7f00000004c0)={0x0, 0x7f56, 0x8, 0x1, 0x2ec, 0x0, r0}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000440)) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x80}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:24 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x3f00000000000000, 0x0, 0x0) 01:33:25 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1800) 01:33:25 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:25 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10010, r0, 0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xee2, 0x0, &(0x7f0000000340)="41efdbe78580b46aa5b99956649c7b43afa0f348", 0x7, 0x0, 0x1}, 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:25 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000180)=""/132, 0x1a, 0x84, 0x1}, 0x20) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async, rerun: 32) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:25 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:25 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000180)=""/132, 0x1a, 0x84, 0x1}, 0x20) (async, rerun: 64) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:25 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x19}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r4 = dup(0xffffffffffffffff) write$nbd(r4, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x0, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000440)) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:25 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10010, r0, 0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xee2, 0x0, &(0x7f0000000340)="41efdbe78580b46aa5b99956649c7b43afa0f348", 0x7, 0x0, 0x1}, 0x1) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:25 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10010, r0, 0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xee2, 0x0, &(0x7f0000000340)="41efdbe78580b46aa5b99956649c7b43afa0f348", 0x7, 0x0, 0x1}, 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10010, r0, 0x0) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xee2, 0x0, &(0x7f0000000340)="41efdbe78580b46aa5b99956649c7b43afa0f348", 0x7, 0x0, 0x1}, 0x1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:25 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0xf6ffffff00000000, 0x0, 0x0) 01:33:25 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x19}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r4 = dup(0xffffffffffffffff) write$nbd(r4, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x0, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000440)) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x19}, 0x1c) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r4, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x0, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000440)) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:26 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:26 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x2000) 01:33:26 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 818.118362][ C0] scsi_io_completion_action: 17 callbacks suppressed [ 818.118407][ C0] sd 0:0:1:0: tag#4074 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 818.134954][ C0] sd 0:0:1:0: tag#4074 CDB: opcode=0xe5 (vendor) [ 818.141315][ C0] sd 0:0:1:0: tag#4074 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 818.150345][ C0] sd 0:0:1:0: tag#4074 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 818.159372][ C0] sd 0:0:1:0: tag#4074 CDB[20]: ba 01:33:26 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x75, 0x0, 0xff, 0xfb, 0x0, 0x3, 0x220, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2933ad2f, 0x1, @perf_config_ext={0x8, 0x2}, 0x800, 0x441d, 0x7d, 0x2, 0x5, 0x4, 0x4, 0x0, 0x69, 0x0, 0xc9ef}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) [ 818.224449][ C1] sd 0:0:1:0: tag#4076 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 818.234315][ C1] sd 0:0:1:0: tag#4076 CDB: opcode=0xe5 (vendor) [ 818.240664][ C1] sd 0:0:1:0: tag#4076 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 818.249695][ C1] sd 0:0:1:0: tag#4076 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 818.258750][ C1] sd 0:0:1:0: tag#4076 CDB[20]: ba [ 818.262425][ C0] sd 0:0:1:0: tag#4075 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 01:33:26 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 818.273675][ C0] sd 0:0:1:0: tag#4075 CDB: opcode=0xe5 (vendor) [ 818.280053][ C0] sd 0:0:1:0: tag#4075 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 818.289077][ C0] sd 0:0:1:0: tag#4075 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 818.298123][ C0] sd 0:0:1:0: tag#4075 CDB[20]: ba 01:33:26 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 818.357317][ C1] sd 0:0:1:0: tag#4077 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 818.367182][ C1] sd 0:0:1:0: tag#4077 CDB: opcode=0xe5 (vendor) [ 818.373549][ C1] sd 0:0:1:0: tag#4077 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 818.382612][ C1] sd 0:0:1:0: tag#4077 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 818.391653][ C1] sd 0:0:1:0: tag#4077 CDB[20]: ba [ 818.445425][ C0] sd 0:0:1:0: tag#4078 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 818.455276][ C0] sd 0:0:1:0: tag#4078 CDB: opcode=0xe5 (vendor) [ 818.461626][ C0] sd 0:0:1:0: tag#4078 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 818.470668][ C0] sd 0:0:1:0: tag#4078 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 818.479685][ C0] sd 0:0:1:0: tag#4078 CDB[20]: ba 01:33:26 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x19}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r4 = dup(0xffffffffffffffff) write$nbd(r4, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x0, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000440)) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bind$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x19}, 0x1c) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r4, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x0, 0xffffffffffffffff}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000440)) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:26 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0xfeffffff00000000, 0x0, 0x0) 01:33:26 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:27 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0x2) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 819.016314][ C0] sd 0:0:1:0: tag#4079 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 819.026166][ C0] sd 0:0:1:0: tag#4079 CDB: opcode=0xe5 (vendor) [ 819.032520][ C0] sd 0:0:1:0: tag#4079 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 819.041557][ C0] sd 0:0:1:0: tag#4079 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 819.050604][ C0] sd 0:0:1:0: tag#4079 CDB[20]: ba 01:33:27 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x3000) 01:33:27 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x75, 0x0, 0xff, 0xfb, 0x0, 0x3, 0x220, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2933ad2f, 0x1, @perf_config_ext={0x8, 0x2}, 0x800, 0x441d, 0x7d, 0x2, 0x5, 0x4, 0x4, 0x0, 0x69, 0x0, 0xc9ef}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) (async) syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x75, 0x0, 0xff, 0xfb, 0x0, 0x3, 0x220, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2933ad2f, 0x1, @perf_config_ext={0x8, 0x2}, 0x800, 0x441d, 0x7d, 0x2, 0x5, 0x4, 0x4, 0x0, 0x69, 0x0, 0xc9ef}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) (async) [ 819.355938][ C0] sd 0:0:1:0: tag#4080 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 819.356316][ C1] sd 0:0:1:0: tag#4081 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 819.365794][ C0] sd 0:0:1:0: tag#4080 CDB: opcode=0xe5 (vendor) [ 819.365812][ C0] sd 0:0:1:0: tag#4080 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 819.375596][ C1] sd 0:0:1:0: tag#4081 CDB: opcode=0xe5 (vendor) [ 819.381901][ C0] sd 0:0:1:0: tag#4080 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 01:33:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x75, 0x0, 0xff, 0xfb, 0x0, 0x3, 0x220, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2933ad2f, 0x1, @perf_config_ext={0x8, 0x2}, 0x800, 0x441d, 0x7d, 0x2, 0x5, 0x4, 0x4, 0x0, 0x69, 0x0, 0xc9ef}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) (async) syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x75, 0x0, 0xff, 0xfb, 0x0, 0x3, 0x220, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2933ad2f, 0x1, @perf_config_ext={0x8, 0x2}, 0x800, 0x441d, 0x7d, 0x2, 0x5, 0x4, 0x4, 0x0, 0x69, 0x0, 0xc9ef}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) (async) [ 819.390919][ C1] sd 0:0:1:0: tag#4081 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 819.397197][ C0] sd 0:0:1:0: tag#4080 CDB[20]: ba [ 819.406197][ C1] sd 0:0:1:0: tag#4081 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 819.406214][ C1] sd 0:0:1:0: tag#4081 CDB[20]: ba 01:33:27 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 819.522513][ C0] sd 0:0:1:0: tag#4082 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 819.532379][ C0] sd 0:0:1:0: tag#4082 CDB: opcode=0xe5 (vendor) [ 819.538737][ C0] sd 0:0:1:0: tag#4082 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 819.539023][ C1] sd 0:0:1:0: tag#4083 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 819.547771][ C0] sd 0:0:1:0: tag#4082 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 819.547789][ C0] sd 0:0:1:0: tag#4082 CDB[20]: ba 01:33:27 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:27 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r3, 0x1, {}, 0x2, 0xa, 0x0, {0x0, 0x0, r5}}, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x3ad36f99b2646759, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x1}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 819.571722][ C1] sd 0:0:1:0: tag#4083 CDB: opcode=0xe5 (vendor) [ 819.578063][ C1] sd 0:0:1:0: tag#4083 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 819.587107][ C1] sd 0:0:1:0: tag#4083 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 819.596161][ C1] sd 0:0:1:0: tag#4083 CDB[20]: ba 01:33:27 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:27 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r3, 0x1, {}, 0x2, 0xa, 0x0, {0x0, 0x0, r5}}, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x3ad36f99b2646759, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x1}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r3, 0x1, {}, 0x2, 0xa, 0x0, {0x0, 0x0, r5}}, 0x0) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x3ad36f99b2646759, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x1}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:27 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0xffffffff00000000, 0x0, 0x0) 01:33:27 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:27 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0x2) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x3f00) 01:33:28 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 32) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r3, 0x1, {}, 0x2, 0xa, 0x0, {0x0, 0x0, r5}}, 0x0) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x3ad36f99b2646759, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x1}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000340)=0x2) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)=0x11) r8 = dup(0xffffffffffffffff) write$nbd(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xf6d]}, 0x8) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nfc', 0x100, 0x2) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xf6d]}, 0x8) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nfc', 0x100, 0x2) (async, rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 32) 01:33:28 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xf6d]}, 0x8) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/nfc', 0x100, 0x2) (async, rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:28 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x4, 0x224}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c1401}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x4, @buffer={0x0, 0xc2, &(0x7f00000004c0)=""/194}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x2, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x10010, r5, 0xd5aa000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 820.548388][ T24] audit: type=1400 audit(1639532008.474:625): avc: denied { map } for pid=32468 comm="syz-executor.2" path="socket:[213662]" dev="sockfs" ino=213662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 01:33:28 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0xffffffffffffffff, 0x0, 0x0) 01:33:28 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x4, 0x224}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c1401}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x4, @buffer={0x0, 0xc2, &(0x7f00000004c0)=""/194}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x2, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 32) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x10010, r5, 0xd5aa000) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:28 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x5000) 01:33:28 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x2) 01:33:28 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)=0x11) r8 = dup(0xffffffffffffffff) write$nbd(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)=0x11) (async) dup(0xffffffffffffffff) (async) write$nbd(r8, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:28 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:28 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x4, 0x224}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c1401}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x4, @buffer={0x0, 0xc2, &(0x7f00000004c0)=""/194}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x2, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x10010, r5, 0xd5aa000) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/209, 0xd1}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa00) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$qrtr(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000030c0)=""/256, 0x100}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/163, 0xa3}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/161, 0xa1}, {&(0x7f0000003000)=""/134, 0x86}, {&(0x7f0000002b00)=""/192, 0xb}], 0x9, &(0x7f0000002c80)=[{0xb8, 0x0, 0x0, ""/161}, {0xd8, 0x0, 0x0, ""/200}, {0xf8, 0x0, 0x0, ""/228}, {0x98, 0x0, 0x0, ""/135}], 0x320, 0x40010060}, 0x38, 0x21) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x241f81, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4800, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}], [{@seclabel}, {@smackfshat={'smackfshat', 0x3d, '/dev/ppp\x00'}}]}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000340)={0x7fff000000, 0x7, 0x1, 0x1, 0x0, [0x0, 0x12, 0x6, 0x7fffffff]}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1000) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000440)=0x11) (async) r8 = dup(0xffffffffffffffff) write$nbd(r8, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = io_uring_setup(0x102a, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x10, 0x0) io_uring_enter(r5, 0xa6, 0xcfca, 0x0, &(0x7f0000000340)={[0x1]}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = io_uring_setup(0x102a, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x10, 0x0) io_uring_enter(r5, 0xa6, 0xcfca, 0x0, &(0x7f0000000340)={[0x1]}, 0x8) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x80000) 01:33:29 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = io_uring_setup(0x102a, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x10, 0x0) (async) io_uring_enter(r5, 0xa6, 0xcfca, 0x0, &(0x7f0000000340)={[0x1]}, 0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x4) 01:33:29 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/209, 0xd1}], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa00) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) recvmsg$qrtr(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000030c0)=""/256, 0x100}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/163, 0xa3}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/161, 0xa1}, {&(0x7f0000003000)=""/134, 0x86}, {&(0x7f0000002b00)=""/192, 0xb}], 0x9, &(0x7f0000002c80)=[{0xb8, 0x0, 0x0, ""/161}, {0xd8, 0x0, 0x0, ""/200}, {0xf8, 0x0, 0x0, ""/228}, {0x98, 0x0, 0x0, ""/135}], 0x320, 0x40010060}, 0x38, 0x21) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 64) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x241f81, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4800, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}], [{@seclabel}, {@smackfshat={'smackfshat', 0x3d, '/dev/ppp\x00'}}]}}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000340)={0x7fff000000, 0x7, 0x1, 0x1, 0x0, [0x0, 0x12, 0x6, 0x7fffffff]}) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:29 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x13, 0x0, 0x343, 0x0, r0}, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) syz_io_uring_setup(0x2d63, &(0x7f00000004c0)={0x0, 0x9fb0, 0x10, 0x3, 0x15d}, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:30 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/209, 0xd1}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa00) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) recvmsg$qrtr(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000030c0)=""/256, 0x100}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/163, 0xa3}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/161, 0xa1}, {&(0x7f0000003000)=""/134, 0x86}, {&(0x7f0000002b00)=""/192, 0xb}], 0x9, &(0x7f0000002c80)=[{0xb8, 0x0, 0x0, ""/161}, {0xd8, 0x0, 0x0, ""/200}, {0xf8, 0x0, 0x0, ""/228}, {0x98, 0x0, 0x0, ""/135}], 0x320, 0x40010060}, 0x38, 0x21) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x241f81, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4800, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}], [{@seclabel}, {@smackfshat={'smackfshat', 0x3d, '/dev/ppp\x00'}}]}}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000340)={0x7fff000000, 0x7, 0x1, 0x1, 0x0, [0x0, 0x12, 0x6, 0x7fffffff]}) (async) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:30 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:30 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0xa}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:30 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:30 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x13, 0x0, 0x343, 0x0, r0}, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) syz_io_uring_setup(0x2d63, &(0x7f00000004c0)={0x0, 0x9fb0, 0x10, 0x3, 0x15d}, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x13, 0x0, 0x343, 0x0, r0}, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) syz_io_uring_setup(0x2d63, &(0x7f00000004c0)={0x0, 0x9fb0, 0x10, 0x3, 0x15d}, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000440)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:30 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x7) 01:33:30 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:30 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x23b000) 01:33:31 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0xa}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:31 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x13, 0x0, 0x343, 0x0, r0}, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) syz_io_uring_setup(0x2d63, &(0x7f00000004c0)={0x0, 0x9fb0, 0x10, 0x3, 0x15d}, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x13, 0x0, 0x343, 0x0, r0}, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) syz_io_uring_setup(0x2d63, &(0x7f00000004c0)={0x0, 0x9fb0, 0x10, 0x3, 0x15d}, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000440)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:31 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0xa}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:31 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fdatasync(r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 823.253676][ C1] scsi_io_completion_action: 16 callbacks suppressed [ 823.253706][ C1] sd 0:0:1:0: tag#4040 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 823.270259][ C1] sd 0:0:1:0: tag#4040 CDB: opcode=0xe5 (vendor) [ 823.276590][ C1] sd 0:0:1:0: tag#4040 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 823.285630][ C1] sd 0:0:1:0: tag#4040 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 823.294668][ C1] sd 0:0:1:0: tag#4040 CDB[20]: ba 01:33:31 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 823.459430][ C1] sd 0:0:1:0: tag#4041 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 823.469310][ C1] sd 0:0:1:0: tag#4041 CDB: opcode=0xe5 (vendor) [ 823.475682][ C1] sd 0:0:1:0: tag#4041 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 823.484724][ C1] sd 0:0:1:0: tag#4041 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 823.493769][ C1] sd 0:0:1:0: tag#4041 CDB[20]: ba 01:33:31 executing program 4: r0 = io_uring_setup(0x102a, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x10, 0x0) r1 = syz_io_uring_setup(0x1271, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/kernel', 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f0000000340)="a36fc61c2c3363ac1c1bb21299", 0xd, 0x28854, &(0x7f0000000440)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0x1c) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:31 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:31 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x8) [ 823.897594][ C1] sd 0:0:1:0: tag#4042 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 823.907476][ C1] sd 0:0:1:0: tag#4042 CDB: opcode=0xe5 (vendor) [ 823.913833][ C1] sd 0:0:1:0: tag#4042 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 823.922869][ C1] sd 0:0:1:0: tag#4042 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 823.931914][ C1] sd 0:0:1:0: tag#4042 CDB[20]: ba 01:33:31 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x300000) 01:33:32 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 824.092369][ C1] sd 0:0:1:0: tag#4043 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 824.102251][ C1] sd 0:0:1:0: tag#4043 CDB: opcode=0xe5 (vendor) [ 824.108591][ C1] sd 0:0:1:0: tag#4043 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 824.117661][ C1] sd 0:0:1:0: tag#4043 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 824.126731][ C1] sd 0:0:1:0: tag#4043 CDB[20]: ba 01:33:32 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fdatasync(r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) fdatasync(r3) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:32 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 824.212481][ C1] sd 0:0:1:0: tag#4044 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 824.222367][ C1] sd 0:0:1:0: tag#4044 CDB: opcode=0xe5 (vendor) [ 824.228697][ C1] sd 0:0:1:0: tag#4044 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 824.237763][ C1] sd 0:0:1:0: tag#4044 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 824.246802][ C1] sd 0:0:1:0: tag#4044 CDB[20]: ba [ 824.262922][ C0] sd 0:0:1:0: tag#4045 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 824.272791][ C0] sd 0:0:1:0: tag#4045 CDB: opcode=0xe5 (vendor) [ 824.279123][ C0] sd 0:0:1:0: tag#4045 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 824.288157][ C0] sd 0:0:1:0: tag#4045 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 824.297187][ C0] sd 0:0:1:0: tag#4045 CDB[20]: ba 01:33:32 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 824.629114][ C1] sd 0:0:1:0: tag#4046 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 824.638995][ C1] sd 0:0:1:0: tag#4046 CDB: opcode=0xe5 (vendor) [ 824.645344][ C1] sd 0:0:1:0: tag#4046 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 824.654388][ C1] sd 0:0:1:0: tag#4046 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 824.663432][ C1] sd 0:0:1:0: tag#4046 CDB[20]: ba 01:33:32 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:32 executing program 4: r0 = io_uring_setup(0x102a, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x10, 0x0) (async) r1 = syz_io_uring_setup(0x1271, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (rerun: 32) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/kernel', 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r6, &(0x7f0000000340)="a36fc61c2c3363ac1c1bb21299", 0xd, 0x28854, &(0x7f0000000440)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0x1c) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 824.735731][ C0] sd 0:0:1:0: tag#4047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 824.745603][ C0] sd 0:0:1:0: tag#4047 CDB: opcode=0xe5 (vendor) [ 824.751946][ C0] sd 0:0:1:0: tag#4047 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 824.760992][ C0] sd 0:0:1:0: tag#4047 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 824.770044][ C0] sd 0:0:1:0: tag#4047 CDB[20]: ba 01:33:32 executing program 4: r0 = io_uring_setup(0x102a, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x10, 0x0) r1 = syz_io_uring_setup(0x1271, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/kernel', 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f0000000340)="a36fc61c2c3363ac1c1bb21299", 0xd, 0x28854, &(0x7f0000000440)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0x1c) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) io_uring_setup(0x102a, &(0x7f0000000000)) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x10, 0x0) (async) syz_io_uring_setup(0x1271, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/kernel', 0x0, 0x4) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r6, &(0x7f0000000340)="a36fc61c2c3363ac1c1bb21299", 0xd, 0x28854, &(0x7f0000000440)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0x1c) (async) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:32 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf) 01:33:32 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x500000) 01:33:33 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 825.158747][ C1] sd 0:0:1:0: tag#4052 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 825.168624][ C1] sd 0:0:1:0: tag#4052 CDB: opcode=0xe5 (vendor) [ 825.174976][ C1] sd 0:0:1:0: tag#4052 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 825.184016][ C1] sd 0:0:1:0: tag#4052 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 825.193076][ C1] sd 0:0:1:0: tag#4052 CDB[20]: ba 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 64) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) fdatasync(r3) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x153b, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000640)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="32479b2f995438a4f883cfe9c0d45acd95db0407418b534ade5f4bbfdfd3187b7962f2d0e39d651d4c6ee089bfc4d725c09d9c251663ca01003ec2694d669fe9ae104bfb3d7fa5b162c8efebc3979bd9e6c52cb73694e949e6e77b3631f6227b5f9235875c67c3f1cd1300000000e48c609b26747f3f670b88596b06f9d7109e804e17488c39fb78c816b27b93bf199d3c040d09b912eee203aa10f98f3b6367f35fdadded657819804d289ff81618fa2c8475699dc137f60acc5077efdb11d7c4456343a0e3f8a4eca6f638dce5d56aa2b20c2c8b51e868d6de8857734e9b000000000000000000", 0xe8, 0x800, 0x0, {0x0, r9}}, 0x3) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 825.423549][ C0] sd 0:0:1:0: tag#4053 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 825.433442][ C0] sd 0:0:1:0: tag#4053 CDB: opcode=0xe5 (vendor) [ 825.439789][ C0] sd 0:0:1:0: tag#4053 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 825.448862][ C0] sd 0:0:1:0: tag#4053 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 825.457901][ C0] sd 0:0:1:0: tag#4053 CDB[20]: ba 01:33:33 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:33 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x13) 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x153b, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r5 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000640)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="32479b2f995438a4f883cfe9c0d45acd95db0407418b534ade5f4bbfdfd3187b7962f2d0e39d651d4c6ee089bfc4d725c09d9c251663ca01003ec2694d669fe9ae104bfb3d7fa5b162c8efebc3979bd9e6c52cb73694e949e6e77b3631f6227b5f9235875c67c3f1cd1300000000e48c609b26747f3f670b88596b06f9d7109e804e17488c39fb78c816b27b93bf199d3c040d09b912eee203aa10f98f3b6367f35fdadded657819804d289ff81618fa2c8475699dc137f60acc5077efdb11d7c4456343a0e3f8a4eca6f638dce5d56aa2b20c2c8b51e868d6de8857734e9b000000000000000000", 0xe8, 0x800, 0x0, {0x0, r9}}, 0x3) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:33 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x153b, 0x10}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r5 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r9}}, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000640)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="32479b2f995438a4f883cfe9c0d45acd95db0407418b534ade5f4bbfdfd3187b7962f2d0e39d651d4c6ee089bfc4d725c09d9c251663ca01003ec2694d669fe9ae104bfb3d7fa5b162c8efebc3979bd9e6c52cb73694e949e6e77b3631f6227b5f9235875c67c3f1cd1300000000e48c609b26747f3f670b88596b06f9d7109e804e17488c39fb78c816b27b93bf199d3c040d09b912eee203aa10f98f3b6367f35fdadded657819804d289ff81618fa2c8475699dc137f60acc5077efdb11d7c4456343a0e3f8a4eca6f638dce5d56aa2b20c2c8b51e868d6de8857734e9b000000000000000000", 0xe8, 0x800, 0x0, {0x0, r9}}, 0x3) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:33 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:33 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xb02300) 01:33:34 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={0x0, 0x7, 0x95, 0xfbfc6a16d06107c9}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x5, 0x2}]}]}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x79}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8a, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:34 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4136, 0x1028}], 0x1}, 0x12083) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x100, 0x0, @empty, 0x2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) listen(r4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0xe0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:34 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:34 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={0x0, 0x7, 0x95, 0xfbfc6a16d06107c9}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x5, 0x2}]}]}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x79}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8a, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={0x0, 0x7, 0x95, 0xfbfc6a16d06107c9}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x5) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x5, 0x2}]}]}]}, 0x38}}, 0x0) (async) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x79}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8a, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:34 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:34 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x18) 01:33:34 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={0x0, 0x7, 0x95, 0xfbfc6a16d06107c9}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x5, 0x5) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x5, 0x2}]}]}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x79}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8a, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:34 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc204, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)='./file0\x00', 0x104, 0x2, 0x23456}, 0x80000000) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e24, 0xe6e5, @empty, 0x200}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:34 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1000000) 01:33:35 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc204, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (rerun: 32) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r7, r3, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)='./file0\x00', 0x104, 0x2, 0x23456}, 0x80000000) (async) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e24, 0xe6e5, @empty, 0x200}, 0x1c) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc204, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)='./file0\x00', 0x104, 0x2, 0x23456}, 0x80000000) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e24, 0xe6e5, @empty, 0x200}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc204, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r7, r3, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r6, 0x0, &(0x7f0000000340)='./file0\x00', 0x104, 0x2, 0x23456}, 0x80000000) (async) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e24, 0xe6e5, @empty, 0x200}, 0x1c) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:35 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4136, 0x1028}], 0x1}, 0x12083) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x100, 0x0, @empty, 0x2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) listen(r4, 0x1) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0xe0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4136, 0x1028}], 0x1}, 0x12083) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x100, 0x0, @empty, 0x2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) listen(r4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0xe0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4136, 0x1028}], 0x1}, 0x12083) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x100, 0x0, @empty, 0x2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) listen(r4, 0x1) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0xe0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:35 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x700) 01:33:35 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x2000000) 01:33:35 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0x8f21, 0x2, 0xfffffffe, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000000340), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:35 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 01:33:36 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 01:33:36 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x9, {}, 0x3, 0xa, 0x0, {0x0, 0x0, r0}}, 0x6) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x1b, 0x3, 0x8000, 0x100, 0x20, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x40) writev(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)="242fbe94f191575fbd474f68d131ea984ea2670300ea5d6fe5f028963881e7bf22fb", 0x22}, {&(0x7f0000000500)="18693528bfa39ec2dae0ecc82fa0578fb21f0141f1", 0x15}, {&(0x7f0000000540)="5defd045da158717c2b0e488075b27a2e5ec8401608150444b7f6563f6118209198c0469f1956eb73ceb14256a52db3588acabf8f0b435", 0x37}, {&(0x7f0000000580)="4ab4ffb6dc115f682fc727b3dfd57d9cbda9432e4fddee6deb38ebd7d0161bcc8f1f2f92857a5618cea72850e6f4219f80fb72c748af3c9d1a7bad7603b6e22a113eb4759acf057a53e1611d26ad01aa630d83f63126e9a68f7b52f8c9281a694fa2af406f84f51dab4b906a781f5e6f742bd87f065f7b23289dcc1c49baa1abf642a08045a530a8a2ab016efa087a1e927c7f734b17c9b72c7e63ad45ff633acdbe52c187f3dce74594b72a5cfbaee0f4d478240b6eff619f807d5628b5d76e95480d8e1771ad69", 0xc8}], 0x4) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:36 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 828.498663][ C1] scsi_io_completion_action: 15 callbacks suppressed [ 828.498690][ C1] sd 0:0:1:0: tag#4069 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.515250][ C1] sd 0:0:1:0: tag#4069 CDB: opcode=0xe5 (vendor) [ 828.521597][ C1] sd 0:0:1:0: tag#4069 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 828.530656][ C1] sd 0:0:1:0: tag#4069 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 828.539675][ C1] sd 0:0:1:0: tag#4069 CDB[20]: ba [ 828.545780][ C0] sd 0:0:1:0: tag#4070 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.555633][ C0] sd 0:0:1:0: tag#4070 CDB: opcode=0xe5 (vendor) [ 828.561996][ C0] sd 0:0:1:0: tag#4070 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 828.571020][ C0] sd 0:0:1:0: tag#4070 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 828.580043][ C0] sd 0:0:1:0: tag#4070 CDB[20]: ba 01:33:36 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf00) 01:33:36 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0x8f21, 0x2, 0xfffffffe, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000000340), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:36 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:36 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) 01:33:36 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0x8f21, 0x2, 0xfffffffe, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000000340), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0x8f21, 0x2, 0xfffffffe, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000000340), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) [ 828.645747][ C1] sd 0:0:1:0: tag#4071 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.655609][ C1] sd 0:0:1:0: tag#4071 CDB: opcode=0xe5 (vendor) [ 828.662005][ C1] sd 0:0:1:0: tag#4071 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 828.671038][ C1] sd 0:0:1:0: tag#4071 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 828.680100][ C1] sd 0:0:1:0: tag#4071 CDB[20]: ba 01:33:36 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x0, 0x0, 0x0, 0x0) [ 828.735832][ C1] sd 0:0:1:0: tag#4072 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.745730][ C1] sd 0:0:1:0: tag#4072 CDB: opcode=0xe5 (vendor) [ 828.752081][ C1] sd 0:0:1:0: tag#4072 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 828.761118][ C1] sd 0:0:1:0: tag#4072 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 828.770185][ C1] sd 0:0:1:0: tag#4072 CDB[20]: ba [ 828.824383][ C1] sd 0:0:1:0: tag#4073 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.834249][ C1] sd 0:0:1:0: tag#4073 CDB: opcode=0xe5 (vendor) [ 828.840605][ C1] sd 0:0:1:0: tag#4073 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 828.849635][ C1] sd 0:0:1:0: tag#4073 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 828.858689][ C1] sd 0:0:1:0: tag#4073 CDB[20]: ba 01:33:36 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x4000000) 01:33:36 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 828.939331][ C1] sd 0:0:1:0: tag#4074 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 828.949197][ C1] sd 0:0:1:0: tag#4074 CDB: opcode=0xe5 (vendor) [ 828.955547][ C1] sd 0:0:1:0: tag#4074 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 828.964592][ C1] sd 0:0:1:0: tag#4074 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 828.973639][ C1] sd 0:0:1:0: tag#4074 CDB[20]: ba 01:33:37 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) io_uring_enter(r0, 0x425a, 0xeafc, 0x3, &(0x7f0000000340)={[0xff]}, 0x8) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xe206, 0x2, 0x0, 0x121, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0xf}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x2, 0x2007, @fd, 0x80, &(0x7f00000004c0)="8849c6d96e2f7b964a5342ac679538fee5ddd43e0da62e6f513064ac601ed5cf5d2178b1f8f1", 0x26}, 0x3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffe, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x20000, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5}, 0xa200, 0x3, 0x0, 0x9, 0x2000000, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000440)=0x2b) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:37 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) io_uring_enter(r0, 0x425a, 0xeafc, 0x3, &(0x7f0000000340)={[0xff]}, 0x8) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xe206, 0x2, 0x0, 0x121, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0xf}, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x2, 0x2007, @fd, 0x80, &(0x7f00000004c0)="8849c6d96e2f7b964a5342ac679538fee5ddd43e0da62e6f513064ac601ed5cf5d2178b1f8f1", 0x26}, 0x3) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffe, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x20000, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5}, 0xa200, 0x3, 0x0, 0x9, 0x2000000, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000440)=0x2b) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) io_uring_enter(r0, 0x425a, 0xeafc, 0x3, &(0x7f0000000340)={[0xff]}, 0x8) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xe206, 0x2, 0x0, 0x121, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0xf}, 0x2) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x2, 0x2007, @fd, 0x80, &(0x7f00000004c0)="8849c6d96e2f7b964a5342ac679538fee5ddd43e0da62e6f513064ac601ed5cf5d2178b1f8f1", 0x26}, 0x3) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffe, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x20000, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5}, 0xa200, 0x3, 0x0, 0x9, 0x2000000, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000440)=0x2b) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:37 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x9, {}, 0x3, 0xa, 0x0, {0x0, 0x0, r0}}, 0x6) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x1b, 0x3, 0x8000, 0x100, 0x20, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x40) writev(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)="242fbe94f191575fbd474f68d131ea984ea2670300ea5d6fe5f028963881e7bf22fb", 0x22}, {&(0x7f0000000500)="18693528bfa39ec2dae0ecc82fa0578fb21f0141f1", 0x15}, {&(0x7f0000000540)="5defd045da158717c2b0e488075b27a2e5ec8401608150444b7f6563f6118209198c0469f1956eb73ceb14256a52db3588acabf8f0b435", 0x37}, {&(0x7f0000000580)="4ab4ffb6dc115f682fc727b3dfd57d9cbda9432e4fddee6deb38ebd7d0161bcc8f1f2f92857a5618cea72850e6f4219f80fb72c748af3c9d1a7bad7603b6e22a113eb4759acf057a53e1611d26ad01aa630d83f63126e9a68f7b52f8c9281a694fa2af406f84f51dab4b906a781f5e6f742bd87f065f7b23289dcc1c49baa1abf642a08045a530a8a2ab016efa087a1e927c7f734b17c9b72c7e63ad45ff633acdbe52c187f3dce74594b72a5cfbaee0f4d478240b6eff619f807d5628b5d76e95480d8e1771ad69", 0xc8}], 0x4) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x10000000) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x9, {}, 0x3, 0xa, 0x0, {0x0, 0x0, r0}}, 0x6) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x1b, 0x3, 0x8000, 0x100, 0x20, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x40) (async) writev(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)="242fbe94f191575fbd474f68d131ea984ea2670300ea5d6fe5f028963881e7bf22fb", 0x22}, {&(0x7f0000000500)="18693528bfa39ec2dae0ecc82fa0578fb21f0141f1", 0x15}, {&(0x7f0000000540)="5defd045da158717c2b0e488075b27a2e5ec8401608150444b7f6563f6118209198c0469f1956eb73ceb14256a52db3588acabf8f0b435", 0x37}, {&(0x7f0000000580)="4ab4ffb6dc115f682fc727b3dfd57d9cbda9432e4fddee6deb38ebd7d0161bcc8f1f2f92857a5618cea72850e6f4219f80fb72c748af3c9d1a7bad7603b6e22a113eb4759acf057a53e1611d26ad01aa630d83f63126e9a68f7b52f8c9281a694fa2af406f84f51dab4b906a781f5e6f742bd87f065f7b23289dcc1c49baa1abf642a08045a530a8a2ab016efa087a1e927c7f734b17c9b72c7e63ad45ff633acdbe52c187f3dce74594b72a5cfbaee0f4d478240b6eff619f807d5628b5d76e95480d8e1771ad69", 0xc8}], 0x4) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) [ 829.479528][ C0] sd 0:0:1:0: tag#4075 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 829.489401][ C0] sd 0:0:1:0: tag#4075 CDB: opcode=0xe5 (vendor) [ 829.495745][ C0] sd 0:0:1:0: tag#4075 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 829.504783][ C0] sd 0:0:1:0: tag#4075 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 829.513814][ C0] sd 0:0:1:0: tag#4075 CDB[20]: ba 01:33:37 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:37 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1300) 01:33:37 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) io_uring_enter(r0, 0x425a, 0xeafc, 0x3, &(0x7f0000000340)={[0xff]}, 0x8) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xe206, 0x2, 0x0, 0x121, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0xf}, 0x2) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x2, 0x2007, @fd, 0x80, &(0x7f00000004c0)="8849c6d96e2f7b964a5342ac679538fee5ddd43e0da62e6f513064ac601ed5cf5d2178b1f8f1", 0x26}, 0x3) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffe, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x20000, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5}, 0xa200, 0x3, 0x0, 0x9, 0x2000000, 0x200, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000440)=0x2b) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:37 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_complete(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000940)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)='./file1\x00', 0x1dd, 0x200600, 0x12345}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffe, 0x4d, 0x9, @scatter={0x5, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/48, 0x30}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/246, 0xf6}]}, &(0x7f00000007c0)="d7333f27b3e62a2fd08c63ce60ad0b8eb7c67cbef431f25a8b2167e1c0b0dece990a73af25a4b4ead598e72f8303e3d390f221fb7204dcc18e7fe78441c497842931aa64b824c9ff07a902c129", &(0x7f0000000840)=""/117, 0x6, 0x10024, 0x0, &(0x7f0000000340)}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:37 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_complete(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000940)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)='./file1\x00', 0x1dd, 0x200600, 0x12345}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffe, 0x4d, 0x9, @scatter={0x5, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/48, 0x30}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/246, 0xf6}]}, &(0x7f00000007c0)="d7333f27b3e62a2fd08c63ce60ad0b8eb7c67cbef431f25a8b2167e1c0b0dece990a73af25a4b4ead598e72f8303e3d390f221fb7204dcc18e7fe78441c497842931aa64b824c9ff07a902c129", &(0x7f0000000840)=""/117, 0x6, 0x10024, 0x0, &(0x7f0000000340)}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_complete(r3) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000940)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)='./file1\x00', 0x1dd, 0x200600, 0x12345}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffe, 0x4d, 0x9, @scatter={0x5, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/48, 0x30}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/246, 0xf6}]}, &(0x7f00000007c0)="d7333f27b3e62a2fd08c63ce60ad0b8eb7c67cbef431f25a8b2167e1c0b0dece990a73af25a4b4ead598e72f8303e3d390f221fb7204dcc18e7fe78441c497842931aa64b824c9ff07a902c129", &(0x7f0000000840)=""/117, 0x6, 0x10024, 0x0, &(0x7f0000000340)}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:37 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:37 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x7000000) 01:33:37 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_complete(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000940)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)='./file1\x00', 0x1dd, 0x200600, 0x12345}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffe, 0x4d, 0x9, @scatter={0x5, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/48, 0x30}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/246, 0xf6}]}, &(0x7f00000007c0)="d7333f27b3e62a2fd08c63ce60ad0b8eb7c67cbef431f25a8b2167e1c0b0dece990a73af25a4b4ead598e72f8303e3d390f221fb7204dcc18e7fe78441c497842931aa64b824c9ff07a902c129", &(0x7f0000000840)=""/117, 0x6, 0x10024, 0x0, &(0x7f0000000340)}) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 829.939783][ C0] sd 0:0:1:0: tag#4076 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 829.949646][ C0] sd 0:0:1:0: tag#4076 CDB: opcode=0xe5 (vendor) [ 829.956013][ C0] sd 0:0:1:0: tag#4076 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 829.965073][ C0] sd 0:0:1:0: tag#4076 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 829.974107][ C0] sd 0:0:1:0: tag#4076 CDB[20]: ba 01:33:38 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f00000007c0), 0x1, 0x0, 0x1}, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000004c0)="af064bff33ca6f47cecec4bac3628236595e1d09d07ea3f906ea28b175cc2f114d05d7c106a9d6c35c185e10a94ea7a4bbeea8257524bc30817cf038ac1ff18eeae2570597064bfd988b71ad63b72d2df00e79ba850120c109d76cc2eb5170c22f7d87be9959d6142a4de6369f93af97624b94f577eb875b4421c120f26d64c231f03735bef031", 0x87, 0x4000880, &(0x7f0000000340)={0xa, 0x4e24, 0x1, @private1, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000580)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:38 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:38 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x30, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x9, {}, 0x3, 0xa, 0x0, {0x0, 0x0, r0}}, 0x6) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x1b, 0x3, 0x8000, 0x100, 0x20, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x40) writev(r6, &(0x7f0000000680)=[{&(0x7f00000004c0)="242fbe94f191575fbd474f68d131ea984ea2670300ea5d6fe5f028963881e7bf22fb", 0x22}, {&(0x7f0000000500)="18693528bfa39ec2dae0ecc82fa0578fb21f0141f1", 0x15}, {&(0x7f0000000540)="5defd045da158717c2b0e488075b27a2e5ec8401608150444b7f6563f6118209198c0469f1956eb73ceb14256a52db3588acabf8f0b435", 0x37}, {&(0x7f0000000580)="4ab4ffb6dc115f682fc727b3dfd57d9cbda9432e4fddee6deb38ebd7d0161bcc8f1f2f92857a5618cea72850e6f4219f80fb72c748af3c9d1a7bad7603b6e22a113eb4759acf057a53e1611d26ad01aa630d83f63126e9a68f7b52f8c9281a694fa2af406f84f51dab4b906a781f5e6f742bd87f065f7b23289dcc1c49baa1abf642a08045a530a8a2ab016efa087a1e927c7f734b17c9b72c7e63ad45ff633acdbe52c187f3dce74594b72a5cfbaee0f4d478240b6eff619f807d5628b5d76e95480d8e1771ad69", 0xc8}], 0x4) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:38 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1800) 01:33:38 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x20}, 0x1c) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:38 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f00000007c0), 0x1, 0x0, 0x1}, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f00000004c0)="af064bff33ca6f47cecec4bac3628236595e1d09d07ea3f906ea28b175cc2f114d05d7c106a9d6c35c185e10a94ea7a4bbeea8257524bc30817cf038ac1ff18eeae2570597064bfd988b71ad63b72d2df00e79ba850120c109d76cc2eb5170c22f7d87be9959d6142a4de6369f93af97624b94f577eb875b4421c120f26d64c231f03735bef031", 0x87, 0x4000880, &(0x7f0000000340)={0xa, 0x4e24, 0x1, @private1, 0x7}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000580)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 830.604222][ C0] sd 0:0:1:0: tag#4081 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 830.614105][ C0] sd 0:0:1:0: tag#4081 CDB: opcode=0xe5 (vendor) [ 830.620451][ C0] sd 0:0:1:0: tag#4081 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 830.629495][ C0] sd 0:0:1:0: tag#4081 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 830.638525][ C0] sd 0:0:1:0: tag#4081 CDB[20]: ba 01:33:38 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f00000007c0), 0x1, 0x0, 0x1}, 0x2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) sendto$inet6(r5, &(0x7f00000004c0)="af064bff33ca6f47cecec4bac3628236595e1d09d07ea3f906ea28b175cc2f114d05d7c106a9d6c35c185e10a94ea7a4bbeea8257524bc30817cf038ac1ff18eeae2570597064bfd988b71ad63b72d2df00e79ba850120c109d76cc2eb5170c22f7d87be9959d6142a4de6369f93af97624b94f577eb875b4421c120f26d64c231f03735bef031", 0x87, 0x4000880, &(0x7f0000000340)={0xa, 0x4e24, 0x1, @private1, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000580)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:38 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000340)={0xcd, 0x1b, 0x761, 0x7, "fc1ff84f2f51aa1606c6820f7984f5480c627a8e0d7052da7cd45fc07b861b56"}) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = signalfd(r0, &(0x7f0000000440)={[0x8]}, 0x8) dup3(r6, r7, 0x80000) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:38 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x8000000) 01:33:38 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 830.964058][ C1] sd 0:0:1:0: tag#4082 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 830.973943][ C1] sd 0:0:1:0: tag#4082 CDB: opcode=0xe5 (vendor) [ 830.980312][ C1] sd 0:0:1:0: tag#4082 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 830.989336][ C1] sd 0:0:1:0: tag#4082 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 830.998374][ C1] sd 0:0:1:0: tag#4082 CDB[20]: ba 01:33:39 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x20}, 0x1c) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:39 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (async) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 64) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r6, r3, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x20}, 0x1c) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:39 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x5, 0x7, 0x0, 0x75, 0x0, 0x1}, 0xdc) 01:33:39 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:39 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000340)={0xcd, 0x1b, 0x761, 0x7, "fc1ff84f2f51aa1606c6820f7984f5480c627a8e0d7052da7cd45fc07b861b56"}) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = signalfd(r0, &(0x7f0000000440)={[0x8]}, 0x8) dup3(r6, r7, 0x80000) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:39 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x2000) 01:33:39 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000340)={0xcd, 0x1b, 0x761, 0x7, "fc1ff84f2f51aa1606c6820f7984f5480c627a8e0d7052da7cd45fc07b861b56"}) (async) write$nbd(r5, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$rxrpc(0x21, 0x2, 0x2) (async) r7 = signalfd(r0, &(0x7f0000000440)={[0x8]}, 0x8) dup3(r6, r7, 0x80000) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:39 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpgrp(0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x20, 0x6, 0x6, 0x4, 0x0, 0x8, 0x80020, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x1010, 0x180000000000, 0x40, 0x0, 0x6, 0xfffffffa, 0x7, 0x0, 0x8, 0x0, 0x8000}, r7, 0xa, r6, 0x2) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:39 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:39 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf000000) 01:33:40 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = getpgrp(0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x20, 0x6, 0x6, 0x4, 0x0, 0x8, 0x80020, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x1010, 0x180000000000, 0x40, 0x0, 0x6, 0xfffffffa, 0x7, 0x0, 0x8, 0x0, 0x8000}, r7, 0xa, r6, 0x2) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = getpgrp(0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x20, 0x6, 0x6, 0x4, 0x0, 0x8, 0x80020, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x1010, 0x180000000000, 0x40, 0x0, 0x6, 0xfffffffa, 0x7, 0x0, 0x8, 0x0, 0x8000}, r7, 0xa, r6, 0x2) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x10001}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x5, 0x7, 0x0, 0x75, 0x0, 0x1}, 0xdc) 01:33:40 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x3f00) 01:33:40 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x5, 0x7, 0x0, 0x75, 0x0, 0x1}, 0xdc) 01:33:40 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46ffb7f08657e3b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x10001}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x10001}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:40 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x16000000) 01:33:40 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x3}, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x9aeff000) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x3}, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x9aeff000) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x3}, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x9aeff000) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r8 = dup(0xffffffffffffffff) write$nbd(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x80000) 01:33:41 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46ffb7f08657e3b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 64) write$nbd(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46ffb7f08657e3b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:41 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 833.744715][ C0] scsi_io_completion_action: 7 callbacks suppressed [ 833.744762][ C0] sd 0:0:1:0: tag#4090 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 833.761224][ C0] sd 0:0:1:0: tag#4090 CDB: opcode=0xe5 (vendor) [ 833.767555][ C0] sd 0:0:1:0: tag#4090 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 833.776600][ C0] sd 0:0:1:0: tag#4090 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 833.785630][ C0] sd 0:0:1:0: tag#4090 CDB[20]: ba [ 833.791873][ C1] sd 0:0:1:0: tag#4091 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 833.801753][ C1] sd 0:0:1:0: tag#4091 CDB: opcode=0xe5 (vendor) [ 833.808080][ C1] sd 0:0:1:0: tag#4091 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 833.817125][ C1] sd 0:0:1:0: tag#4091 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 833.826158][ C1] sd 0:0:1:0: tag#4091 CDB[20]: ba 01:33:41 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r8 = dup(0xffffffffffffffff) write$nbd(r8, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:41 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x17000000) 01:33:41 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r8 = dup(0xffffffffffffffff) write$nbd(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x0, 0x0) (async) syz_io_uring_submit(0x0, r5, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x5) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r8, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:42 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:42 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1000000) [ 834.348972][ C0] sd 0:0:1:0: tag#4092 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 834.358837][ C0] sd 0:0:1:0: tag#4092 CDB: opcode=0xe5 (vendor) [ 834.365184][ C0] sd 0:0:1:0: tag#4092 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 834.374219][ C0] sd 0:0:1:0: tag#4092 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 834.383274][ C0] sd 0:0:1:0: tag#4092 CDB[20]: ba 01:33:42 executing program 4: r0 = syz_io_uring_setup(0x80005d3, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff, 0x0, 0x0, 0x9, 0xbca, 0x2}, &(0x7f0000000440)=0x20) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:42 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:42 executing program 4: r0 = syz_io_uring_setup(0x80005d3, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff, 0x0, 0x0, 0x9, 0xbca, 0x2}, &(0x7f0000000440)=0x20) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:42 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) [ 834.651031][ C1] sd 0:0:1:0: tag#4093 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 834.660912][ C1] sd 0:0:1:0: tag#4093 CDB: opcode=0xe5 (vendor) [ 834.667260][ C1] sd 0:0:1:0: tag#4093 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 834.676313][ C1] sd 0:0:1:0: tag#4093 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 834.685349][ C1] sd 0:0:1:0: tag#4093 CDB[20]: ba 01:33:42 executing program 4: r0 = syz_io_uring_setup(0x80005d3, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff, 0x0, 0x0, 0x9, 0xbca, 0x2}, &(0x7f0000000440)=0x20) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 834.709389][ C0] sd 0:0:1:0: tag#4094 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 834.719245][ C0] sd 0:0:1:0: tag#4094 CDB: opcode=0xe5 (vendor) [ 834.725603][ C0] sd 0:0:1:0: tag#4094 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 834.734633][ C0] sd 0:0:1:0: tag#4094 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 834.743663][ C0] sd 0:0:1:0: tag#4094 CDB[20]: ba 01:33:42 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000004c0)={0x0, 0x1, 0x1e, 0x0, 0x1a1}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x810, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x5, 0x7, 0x0, 0x2f4, 0x2, 0x1, {0x0, r4}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc208, 0x2, 0x3, 0xb0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYBLOB="01000100000000000000000000000000ff03000000000000060000000000ddc6ff00000000008000000000000000ffff2000000016090000000000000600000064000000000000000600000000effafd080522402e00005ef1a6ed7795f92f000800"/112]) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r7 = dup(0xffffffffffffffff) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:42 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000004c0)={0x0, 0x1, 0x1e, 0x0, 0x1a1}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x810, r0, 0x10000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x5, 0x7, 0x0, 0x2f4, 0x2, 0x1, {0x0, r4}}, 0x2) (async, rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (rerun: 64) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc208, 0x2, 0x3, 0xb0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYBLOB="01000100000000000000000000000000ff03000000000000060000000000ddc6ff00000000008000000000000000ffff2000000016090000000000000600000064000000000000000600000000effafd080522402e00005ef1a6ed7795f92f000800"/112]) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r7 = dup(0xffffffffffffffff) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:42 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000004c0)={0x0, 0x1, 0x1e, 0x0, 0x1a1}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x810, r0, 0x10000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x5, 0x7, 0x0, 0x2f4, 0x2, 0x1, {0x0, r4}}, 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc208, 0x2, 0x3, 0xb0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYBLOB="01000100000000000000000000000000ff03000000000000060000000000ddc6ff00000000008000000000000000ffff2000000016090000000000000600000064000000000000000600000000effafd080522402e00005ef1a6ed7795f92f000800"/112]) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r7 = dup(0xffffffffffffffff) write$nbd(r7, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:42 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x18000000) 01:33:42 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd=r4, 0x9771, &(0x7f0000000340)="e333", 0x2, 0xf}, 0xfffffffd) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)="7a4ec735f4b4c5ed4319214db365050d58395d148c5ca87ba059a63387a143e9dc5ff59702fd2b0e896bf02b515f0410228e5d0a36df00a4f8bd1622f214bbdd7e2d4900b96a24262235fe12ee15d536e16cc1c56af7d46323939cbb3e999f1af263c953babe78c9e639c2d632bf76d3c8f7c17e237f8b1cd4684ac8616bf6389ec8917dd4cc5100f761c9b93c7d803a2e724d9fdc7bd07442b046bef2536464f087f4b38927963724f673c5d193864ea4bf94a9a594e275ad494731f4cba6f5cbcbfc80e63bc650232830a1540b5ed64c8d82b50203ac", 0xd7}, {&(0x7f0000000640)="2c3ac2ac11fa0c3505daaaace38a6126988e78430a24981bf42e2618f168bfbdfd8c5836978d7fab1676d3f9c9db0ffdb8f9e5bb77447030e2a91957185758d82890d7d2a391", 0x46}, {&(0x7f00000006c0)="e283d480b135094d1f0d21baaa6097642d4e83c87337aaaf301d69b244b8b9b81cd2c3be102d16632ca04a3ee470e0ad97d081eee8dd52c55d797612c54964a3d6ce15afeec03fafdded08b5d4ce37735513f7b98f1f434b1c38aec05b9f74f94bd8f5ebd729585373bb900fde694054c71bced8fd4a3c302ea1734d2b4cef2a146fda19daa2b018322960e0135d8827e0974984e8e7ac82926d43662f154474db57c36dd9a09bde9b4a80f720f1bf12d04ea365ded82f7cdf436ab77b04cb34", 0xc0}, {&(0x7f0000000780)="11f3ad0b84b9077c704c0d0f5442104788bc8e8ff16eb6c7523c63b1404376493969f779d2f2cb45ef0a2b311f113ae1aaa2c46e2628", 0x36}, {&(0x7f00000007c0)="a41f572492e6a605d4d6adca6a1d0d22eba50401600562c5614fea15f9d4c69056cda7c99995932713e527140462e40229f2c49163f77fddc8640301286c8a22b8323716a24c956e3102fe9f79c37e846bffa7782f3376904f486672377e31f29133c3ce75523f0543fb106f9d7c3cbee3e9fc7f2f2ad899e494407b4687766d8d0cb2400e3240f4fa33484e1e4376aa2e970db5940b433d3c6e3f6c57cbc87ad37726dbe19e0f126b21a983b452e3172f26d7c3975be3e04242ea63400641b895e8833de69da0a45c3fa2e9b85cc3a5e5ee516a110709aa53a4f3ca770d6be060d301c3dd6aa67eadb20155c2013d16f6fcf75ae6d759", 0xf7}], 0x5, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r8, r0, r0, r8, r0]}}], 0x80, 0x4004041}, 0x4845) 01:33:43 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 835.223828][ C1] sd 0:0:1:0: tag#4095 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 835.233698][ C1] sd 0:0:1:0: tag#4095 CDB: opcode=0xe5 (vendor) [ 835.240064][ C1] sd 0:0:1:0: tag#4095 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 835.249088][ C1] sd 0:0:1:0: tag#4095 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 835.258137][ C1] sd 0:0:1:0: tag#4095 CDB[20]: ba 01:33:43 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x2000000) 01:33:43 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd=r4, 0x9771, &(0x7f0000000340)="e333", 0x2, 0xf}, 0xfffffffd) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async, rerun: 32) r6 = dup(0xffffffffffffffff) (rerun: 32) write$nbd(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)="7a4ec735f4b4c5ed4319214db365050d58395d148c5ca87ba059a63387a143e9dc5ff59702fd2b0e896bf02b515f0410228e5d0a36df00a4f8bd1622f214bbdd7e2d4900b96a24262235fe12ee15d536e16cc1c56af7d46323939cbb3e999f1af263c953babe78c9e639c2d632bf76d3c8f7c17e237f8b1cd4684ac8616bf6389ec8917dd4cc5100f761c9b93c7d803a2e724d9fdc7bd07442b046bef2536464f087f4b38927963724f673c5d193864ea4bf94a9a594e275ad494731f4cba6f5cbcbfc80e63bc650232830a1540b5ed64c8d82b50203ac", 0xd7}, {&(0x7f0000000640)="2c3ac2ac11fa0c3505daaaace38a6126988e78430a24981bf42e2618f168bfbdfd8c5836978d7fab1676d3f9c9db0ffdb8f9e5bb77447030e2a91957185758d82890d7d2a391", 0x46}, {&(0x7f00000006c0)="e283d480b135094d1f0d21baaa6097642d4e83c87337aaaf301d69b244b8b9b81cd2c3be102d16632ca04a3ee470e0ad97d081eee8dd52c55d797612c54964a3d6ce15afeec03fafdded08b5d4ce37735513f7b98f1f434b1c38aec05b9f74f94bd8f5ebd729585373bb900fde694054c71bced8fd4a3c302ea1734d2b4cef2a146fda19daa2b018322960e0135d8827e0974984e8e7ac82926d43662f154474db57c36dd9a09bde9b4a80f720f1bf12d04ea365ded82f7cdf436ab77b04cb34", 0xc0}, {&(0x7f0000000780)="11f3ad0b84b9077c704c0d0f5442104788bc8e8ff16eb6c7523c63b1404376493969f779d2f2cb45ef0a2b311f113ae1aaa2c46e2628", 0x36}, {&(0x7f00000007c0)="a41f572492e6a605d4d6adca6a1d0d22eba50401600562c5614fea15f9d4c69056cda7c99995932713e527140462e40229f2c49163f77fddc8640301286c8a22b8323716a24c956e3102fe9f79c37e846bffa7782f3376904f486672377e31f29133c3ce75523f0543fb106f9d7c3cbee3e9fc7f2f2ad899e494407b4687766d8d0cb2400e3240f4fa33484e1e4376aa2e970db5940b433d3c6e3f6c57cbc87ad37726dbe19e0f126b21a983b452e3172f26d7c3975be3e04242ea63400641b895e8833de69da0a45c3fa2e9b85cc3a5e5ee516a110709aa53a4f3ca770d6be060d301c3dd6aa67eadb20155c2013d16f6fcf75ae6d759", 0xf7}], 0x5, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r8, r0, r0, r8, r0]}}], 0x80, 0x4004041}, 0x4845) 01:33:43 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:43 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) r3 = syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x1, 0x2004, @fd=r4, 0x9771, &(0x7f0000000340)="e333", 0x2, 0xf}, 0xfffffffd) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)="7a4ec735f4b4c5ed4319214db365050d58395d148c5ca87ba059a63387a143e9dc5ff59702fd2b0e896bf02b515f0410228e5d0a36df00a4f8bd1622f214bbdd7e2d4900b96a24262235fe12ee15d536e16cc1c56af7d46323939cbb3e999f1af263c953babe78c9e639c2d632bf76d3c8f7c17e237f8b1cd4684ac8616bf6389ec8917dd4cc5100f761c9b93c7d803a2e724d9fdc7bd07442b046bef2536464f087f4b38927963724f673c5d193864ea4bf94a9a594e275ad494731f4cba6f5cbcbfc80e63bc650232830a1540b5ed64c8d82b50203ac", 0xd7}, {&(0x7f0000000640)="2c3ac2ac11fa0c3505daaaace38a6126988e78430a24981bf42e2618f168bfbdfd8c5836978d7fab1676d3f9c9db0ffdb8f9e5bb77447030e2a91957185758d82890d7d2a391", 0x46}, {&(0x7f00000006c0)="e283d480b135094d1f0d21baaa6097642d4e83c87337aaaf301d69b244b8b9b81cd2c3be102d16632ca04a3ee470e0ad97d081eee8dd52c55d797612c54964a3d6ce15afeec03fafdded08b5d4ce37735513f7b98f1f434b1c38aec05b9f74f94bd8f5ebd729585373bb900fde694054c71bced8fd4a3c302ea1734d2b4cef2a146fda19daa2b018322960e0135d8827e0974984e8e7ac82926d43662f154474db57c36dd9a09bde9b4a80f720f1bf12d04ea365ded82f7cdf436ab77b04cb34", 0xc0}, {&(0x7f0000000780)="11f3ad0b84b9077c704c0d0f5442104788bc8e8ff16eb6c7523c63b1404376493969f779d2f2cb45ef0a2b311f113ae1aaa2c46e2628", 0x36}, {&(0x7f00000007c0)="a41f572492e6a605d4d6adca6a1d0d22eba50401600562c5614fea15f9d4c69056cda7c99995932713e527140462e40229f2c49163f77fddc8640301286c8a22b8323716a24c956e3102fe9f79c37e846bffa7782f3376904f486672377e31f29133c3ce75523f0543fb106f9d7c3cbee3e9fc7f2f2ad899e494407b4687766d8d0cb2400e3240f4fa33484e1e4376aa2e970db5940b433d3c6e3f6c57cbc87ad37726dbe19e0f126b21a983b452e3172f26d7c3975be3e04242ea63400641b895e8833de69da0a45c3fa2e9b85cc3a5e5ee516a110709aa53a4f3ca770d6be060d301c3dd6aa67eadb20155c2013d16f6fcf75ae6d759", 0xf7}], 0x5, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, r8, r0, r0, r8, r0]}}], 0x80, 0x4004041}, 0x4845) [ 835.546187][ C1] sd 0:0:1:0: tag#4036 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 835.556056][ C1] sd 0:0:1:0: tag#4036 CDB: opcode=0xe5 (vendor) [ 835.562411][ C1] sd 0:0:1:0: tag#4036 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 835.571453][ C1] sd 0:0:1:0: tag#4036 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 835.580486][ C1] sd 0:0:1:0: tag#4036 CDB[20]: ba 01:33:43 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 32) write$nbd(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:43 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_delrule={0x30, 0x21, 0x18, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x5, 0x40, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {}, 0x4, 0x4}, 0x80000000) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000700)="08c963e8e5f73d61e4ff7658a2922f61f38bfe4633c31f11793efa1cd4658f3a96637a19bb482133e12590fd4be4e50c29de169d2ddf98a74c358fed209914ebbd6634912259a3c32b6b440e9ba6a2873efb02b0a49d77736065f2ab1a51f548d2d5f8ccb5459877b4242e51df79444cce75db89b1dfa29b228c521bd6edf3bd3804d2e19dfb3d124628c3ddffb5ea699a7724bedd21346a80c46482f70412c0013abf60ca76b722d1219f66ab1f8a24b239dbbdc846642e971336", 0xbb, 0x6, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x621, r0, &(0x7f0000000800)="9a7f730441122b9a35775abe2353f6cba2aa347f166d3e8b4013fdc612eb7da7d3f496ce661e424798de1b558ea568174869370ea297a63dd935098d11b1b9eb016840ad7c6651645aacb575547533b38a960c4a5c7ede41d0b8815192bcead249e57a2818089f568a7637f6b116", 0x6e, 0xfffffffffffffff9}]) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:43 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x20000000) 01:33:43 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x81000000}}]}]}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x10, 0xfff2}, {0xc, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008850) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 835.978505][ C1] sd 0:0:1:0: tag#4037 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 835.988391][ C1] sd 0:0:1:0: tag#4037 CDB: opcode=0xe5 (vendor) [ 835.994749][ C1] sd 0:0:1:0: tag#4037 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.003787][ C1] sd 0:0:1:0: tag#4037 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.012826][ C1] sd 0:0:1:0: tag#4037 CDB[20]: ba [ 836.022229][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:33:44 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 836.129685][ C1] sd 0:0:1:0: tag#4038 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.139569][ C1] sd 0:0:1:0: tag#4038 CDB: opcode=0xe5 (vendor) [ 836.145914][ C1] sd 0:0:1:0: tag#4038 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.154949][ C1] sd 0:0:1:0: tag#4038 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.164004][ C1] sd 0:0:1:0: tag#4038 CDB[20]: ba 01:33:44 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x81000000}}]}]}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x10, 0xfff2}, {0xc, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008850) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x81000000}}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x10, 0xfff2}, {0xc, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008850) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:44 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x4000000) [ 836.265204][ C1] sd 0:0:1:0: tag#4039 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 836.275079][ C1] sd 0:0:1:0: tag#4039 CDB: opcode=0xe5 (vendor) [ 836.281440][ C1] sd 0:0:1:0: tag#4039 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 836.290675][ C1] sd 0:0:1:0: tag#4039 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 836.299701][ C1] sd 0:0:1:0: tag#4039 CDB[20]: ba [ 836.311116][T19676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 01:33:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_delrule={0x30, 0x21, 0x18, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x5, 0x40, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) (async) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {}, 0x4, 0x4}, 0x80000000) (async) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000700)="08c963e8e5f73d61e4ff7658a2922f61f38bfe4633c31f11793efa1cd4658f3a96637a19bb482133e12590fd4be4e50c29de169d2ddf98a74c358fed209914ebbd6634912259a3c32b6b440e9ba6a2873efb02b0a49d77736065f2ab1a51f548d2d5f8ccb5459877b4242e51df79444cce75db89b1dfa29b228c521bd6edf3bd3804d2e19dfb3d124628c3ddffb5ea699a7724bedd21346a80c46482f70412c0013abf60ca76b722d1219f66ab1f8a24b239dbbdc846642e971336", 0xbb, 0x6, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x621, r0, &(0x7f0000000800)="9a7f730441122b9a35775abe2353f6cba2aa347f166d3e8b4013fdc612eb7da7d3f496ce661e424798de1b558ea568174869370ea297a63dd935098d11b1b9eb016840ad7c6651645aacb575547533b38a960c4a5c7ede41d0b8815192bcead249e57a2818089f568a7637f6b116", 0x6e, 0xfffffffffffffff9}]) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:44 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_delrule={0x30, 0x21, 0x18, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x5, 0x40, 0x0, 0x0, 0x4}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r1 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {}, 0x4, 0x4}, 0x80000000) (async) io_submit(0x0, 0x2, &(0x7f00000008c0)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000700)="08c963e8e5f73d61e4ff7658a2922f61f38bfe4633c31f11793efa1cd4658f3a96637a19bb482133e12590fd4be4e50c29de169d2ddf98a74c358fed209914ebbd6634912259a3c32b6b440e9ba6a2873efb02b0a49d77736065f2ab1a51f548d2d5f8ccb5459877b4242e51df79444cce75db89b1dfa29b228c521bd6edf3bd3804d2e19dfb3d124628c3ddffb5ea699a7724bedd21346a80c46482f70412c0013abf60ca76b722d1219f66ab1f8a24b239dbbdc846642e971336", 0xbb, 0x6, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x621, r0, &(0x7f0000000800)="9a7f730441122b9a35775abe2353f6cba2aa347f166d3e8b4013fdc612eb7da7d3f496ce661e424798de1b558ea568174869370ea297a63dd935098d11b1b9eb016840ad7c6651645aacb575547533b38a960c4a5c7ede41d0b8815192bcead249e57a2818089f568a7637f6b116", 0x6e, 0xfffffffffffffff9}]) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:44 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xfffffd68}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x30}}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 836.618888][T20315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 01:33:44 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x3f000000) 01:33:44 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:45 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xfffffd68}]]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x30}}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:45 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) write$nbd(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xfffffd68}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x30}}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xfffffd68}]]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x30}}, 0x48000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:45 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x7000000) 01:33:45 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 837.227476][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 01:33:45 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 64) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 64) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x81000000}}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}, {0x10, 0xfff2}, {0xc, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008850) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:45 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x280, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500)) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x80202, 0x48, 0x2}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x701}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x200, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:45 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc208, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x7, 0x6, &(0x7f0000000540)=""/4096, 0x1000, 0x1}, 0xa32c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r6) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xa1, 0x1f, 0x9f, 0x9, 0x0, 0x4, 0x0, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x14a0, 0xffffffffffffff76, 0x0, 0x5, 0x6, 0xb55d, 0xfff, 0x0, 0xb7, 0x0, 0x3ff}, r5, 0x9, r6, 0x8) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:45 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:45 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf6ffffff) 01:33:45 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x280, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500)) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x80202, 0x48, 0x2}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x701}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x200, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x280, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x80202, 0x48, 0x2}, 0x18) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x701}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x200, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:46 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x8000000) 01:33:46 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:46 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc208, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x7, 0x6, &(0x7f0000000540)=""/4096, 0x1000, 0x1}, 0xa32c) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async, rerun: 64) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r6) (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xa1, 0x1f, 0x9f, 0x9, 0x0, 0x4, 0x0, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x14a0, 0xffffffffffffff76, 0x0, 0x5, 0x6, 0xb55d, 0xfff, 0x0, 0xb7, 0x0, 0x3ff}, r5, 0x9, r6, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:46 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x280, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000500)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x80202, 0x48, 0x2}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x701}, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x200, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:46 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc208, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x7, 0x6, &(0x7f0000000540)=""/4096, 0x1000, 0x1}, 0xa32c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r6) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xa1, 0x1f, 0x9f, 0x9, 0x0, 0x4, 0x0, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x14a0, 0xffffffffffffff76, 0x0, 0x5, 0x6, 0xb55d, 0xfff, 0x0, 0xb7, 0x0, 0x3ff}, r5, 0x9, r6, 0x8) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc208, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x7, 0x6, &(0x7f0000000540)=""/4096, 0x1000, 0x1}, 0xa32c) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) gettid() (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) dup(r6) (async) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xa1, 0x1f, 0x9f, 0x9, 0x0, 0x4, 0x0, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x33, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x14a0, 0xffffffffffffff76, 0x0, 0x5, 0x6, 0xb55d, 0xfff, 0x0, 0xb7, 0x0, 0x3ff}, r5, 0x9, r6, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:46 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x7, &(0x7f00000027c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="e33c9c0d8a5dab16bd176a78eb284e0d511adb903f9d29eba7c8a2536a1e7f8b5e8905244d410b4243441cacf31b05ca507d21dc095499954301f842decf3668f69a7d12a5a83b1408734ccb7828117552bfd0e25396caa669d418a9d507f0fe01092305fa9560ac033bb1537d779ab0dd06d9b8f8903c38aefa6f234484c66df7290821809d24ea5f0a1014a2117b51a3cc6b01db44d6a84a8439d38598143a615ab695e91d76a632a8933b2ca6", 0xae}, {&(0x7f0000001640)="54159f36f2187ad7e2f90820ef49b1a01aad0a65d902c1c38fa3dbc494005b046ac512097a0dcc45cb2fa1b70a5a288125d0e5c30ed2f68f874ebbc6a05abac9e141528fa917a5dcb82fe739e8192c8d65cc2b5569dc2adb4a9e72e7a15bd6f7d646a46ea5dbcffdf979c78e49165c1f748e02d1eb9b0367abc9219017694d63058417b2460864833f95dd1f4f0accdf16a37873bdf3f136a7f9e18ec64e40b5b158ccdb608394c8cb4261d90854a1b597aa75e6c6c60702eccd35d6414d1fb56058e55d9dfe68bc6ec856fdcb1e15d1a4ea2c5ec33c72cc1f44560b620bc22d97d41d17cdf51f4dd5014db13eb0e92590ecea17326b66eea43b7605e8cad4719c798e8c41d9120270f9539a58a74ad306b4ff96b241fafbdbecf4b922fd65183780a1b912895e468df015d04919e2347ac4f9afd598d19cfe5df47f09395442a9fb8553ec8b5a29c69b3e904403b20dcafe4f7712cdd8e9aa0454fad11aeb67dfdfd11fa501a80db0ad30320fddaefedbb2dd64c1745aa332f009f57212d0f2fcff4faa000090727b754961a95ad88b863b417507ca9c90869295790b2771dc4022f03920d74bfc22e91d96e574327c51bee329877740ab33432d892815a6bb9028e9120fb26dd0a43f375355ccaba9ba85a62668df42acd91abc7103966e92f381f481f7597f73c562222641ca025daaa97ac653e1fd929aa17976c3b303a8f6734081e1d8d43b064d117ef6e6cbdd95a27423eceddd4eb4c476cb35088450adbfac8fd2ebf0f56bff3178808ff58e2159003edefce96956a193264b9abcafa07c9f3d857de255d6d1e38d93439baef93ee5a2ca92bd03bc01c8e44d98e60623693442908da4bbe3b225434382ba0615ea45aa2266c537b18b71c5336ae218c4eebb58718eb925d2d3a713509b93f5c3e2c35e7df69017c0373ceabc6423bacdd8cbea8cada654c06dcb7d9338b4d7a96c775a154ab2959b94d0bef1bc6c09c3f52c890456743a25fad1779f84341a4a93f9d5ad13191999c6cf4fbda330b12dd237ec2ecd628141b63a0b7bcf7585366bf4b174e98f266da6f0e9758280b3b57685db49e7aac8d5fb7a81cb65699b536b590747e9dac0083b2452cb169c2c367bff112154aa4c160bc142e94ada293ada1d6fcc44b81039c20a938442bd8c623f71cd34fd4abe6aa453d1d735c04d9c8a93d1a9ec6b86914cd7cb5768b5382887ca267cdc952efc109c218b976cedbb23ffe7838a887fa7d86c4741a89bf287b6a3573480ad5228c65bbbdf169f5cdcbd9d91f0422bb782c752b04da4de3df14835afe9d82057b3fec780ee6e72eeb81d50ddb76597505814679d987fa094b77a8b1c5bbd586343ccc7e09ca0ba48bca05aedfd5ff9a62b2ef0448a707731199a3ef9d63e85948fe32879a9952eb6ed6f473fb6ca5de813d7304633ecacb5a727a41589bfe6b1108a3dd65da8ffd17199a00c528a93dd0c0284a2967121fac33c7d69b9b5ba7f00408e7a1f77bf57b1dca168f163018366d27cc5d858ddcdaa2f5b15c94bb87d725ce84c5e879f6835dc05c4af3190e460e41b1785dbdeb6c0dc0b75aa7d2771d4a2cacdb223464bdb9dabb7145a2b4af273dbd12910e819ac67b2d2d37480f47ed851ecd73737bd4c87f581531de904f4bbeda7569bc53fd87bfb230ed29801896554e6f4e953d77bd6ebff42a7dbdc597ce21419d4759658ed5fe06b5b207a037e58ab205386b57ffc25ad8320f509eeb492fa4a7eb87f3678f9cb7cb784cc79d24241df1e663a13ddf8bcf0675645cccccde4decd50fc8fb859d4ec5d1e1e56df55c37ee8c455221e81ba603c558246e1492e92c9b1c2c79e22a563c6c5b9d8dd7a2427cb8b6c8dbd122b7cd2cf5346d08f4b1d4f28ed29e8c8cf3553e5433aa1def8954ddd14389fe0cffe5872252463455ecede3a55dfbab84fac59f965dfda65e67cee77312119e4535f853e30adf8f595e44e507cc6daafcc0cbfa64255b4b5c51c043a23f3cad77e168b84b9b6896cd52e95c39afcbd55297f9ddc53a8488dc5dc16e962ca6c4da50f7a592a4d6031ac4ea9217c5e46fd67dcd8d5d8edf59d6eab85c130b957d5e36bf3dbc75270c69a54bb460d6c2254592e30731ed04a707111eadb953dd409ea0ea76f0793cc838fe6bd5b5783488de19410be0943934dbb5250bb0919df96113983ae7732bd7ced431f7d7bd0ad3bdc78b89f984e0dc1e6ce4d116d63218c20045d6df0e7c92204949efca506ccb6e86902675e376e4939e14c06155c71287f99933cf81a6be712e54103853bddb56a8fe50982af6139a206ceafacef7fc70ada40370668647dfc579ee83a6d9e839e0919053e713c72150ca3a601596743a0300d430d15d2798d1df9d1e4524fdfa0cacf08f6159fd6ca5dcefdf9770281055b0f823c37c45f12a1bbcca93fd6e2f72336ec2ecd172ee3d094f4fc1909fe11c20822c84bc8c7c77e949f6e976b29a857ebe85aa0a35c9ed18b78929562a4a876173568dabdf2c60dd729b31138f718bda7a8f86de7b377783995d72e6e48cf8970ed178626a76690c7e613f679c0016d59feb2f68b699c41c9d4fc77f55bbefd6ec18d4de1080c6487cc48e65ded08d78829e7c3290a0122fad90f82fe89a74fbf47332a05522707324895ceb64515dcb8b192d86f2f65fba99725a3bc9715a6e4674f63f990cc6cb790774a11242ad19ff910e4e289a4c7e30a76f77fcaff70d86d4b0e01888f653590cfea223678f316507eaef4ca0edbfb0d0a84321eddf83df52c5a5bfda5a89724dcb42f522e5f557462179daadc0118eceec3232a417d61679926c3ad12322011bad7c8d60ad1684a777c018de4cbb8b792386fea4033dba59ee40c798b339425754feb8c2345536bddb06883cfdcf639f41f5edd079216d1f5589e9302209ab6f31e2bd625a85f49da0d239453eb52f79f6bcb5c2cf548205022bc26bd5887d6411fcb4e89ef708c92d8bd5219f6401d091cef47fcaf4690bdb446b9f0bf7e525d580fe01eb70ec98bc777c1a578c33b627564c77e988b2fe450555d7285792468d3de9910cd467cb65d25df5f197e25f499d63128883e8fe1da06e71d43c3881043ae683302d837a4ba583a6adc6b4bed4013a1d00c300f6be99506b050df8049e7399dadc302c0a48e93fd03735844135c7b392c6e965bddc7949a027aea52598d46c1335b829fd8d699d8bab5d8226a211b69071814755f4af68eabdd9c9d09e2180fb5103cd1bb3ebad6d65a308e9c78d1f0e733c88fa3a2107a248aa9a078cb0256003e7e459f0d878264971597d0fd1c3d982eca2795a2d5ea13e78ac18f0b9574b317dda3c1f37e5af749d11a6ca4c473c5a124d86750ca835ff020f32e42140704a3583efda567be312a545580cca1df698ea4254fb26fde516c5ed731db356534d7973d256fb9f19e3b59769c5d2f9d967e8fd4ca97653143e7e6c60c5187df09b1b226520ae4080a181dd30b0fcc55b7f3490c62aa0d7f429c240019a385287e88bdc2e7da18fb0259e80523057f4e44912a51249d1e606abb03d08e2580a60acb68a73fc0503961e585604ad95746320cc9ceaed95e293def46a80d8c58945c1d6892235414046aa6eba6223c00f508f305692c163b5f7f6d7e0d42ccca004f3da82aa7404cec7c3d7698639cf543d462a5186b62bb99b484a8cf6f98d4260e017842a39630b9b5cc9e1df9fef6d6a88ebd7c87cd6c0a8d8c6e476a5730e8b9180c0289cfd39960552a14138d201b9a1b754e979b3969dfcce04873aca2c688c8d87e337347c2c9a364fd42fd37615b7df8e75fe295764a26129b9568acb98c070a21ac87e97f278404f0e3fb98838f4f416fda99c4d5c7886b7a2b1befea0dc5bdd5d3da6bb2f705d786757e6a04c109b8a2123c388b807b7e50d8029e8f1c8a0ee0ae497d7e7ae8e1f8696556a92e495b498145a76e7c256e95a4f9428b480b446e880614c805a83a33e8202e28a08d2dd37cb85bc4554926348e5cd9aeb90ab3aaf8bf143fd2d7b29169be05f76fe69885f13bda4e676690d025aa5e299f57027dee053a754e8da613f18a01dc3e2376d88c9924db965269a8ff120eabe6e46078ba42a44364be1a0bbf3c47181b82a8afa4994af8230af5a3df15e421591960145c1e1d9d01f463b0468fea3bf553f06d21085d5aaa5465f309d871eb793820b9dbde3c8dbf1b417e3f5adc725ab0e07271760b486f47773333f7039c27e78e3e144257f6ff1cddec46ccfb5979b1eb0c8742b8bc1e56dc0962abe49fdb5847de12cc2ed7c6daf11bae089f350dab5fd878147ac16560afed49f044605ae070ad54664db28799f87aa4704ffa7e9218a618968656652aa854d76e48acb15e4f14ae95b35d1e3d4e4a3a0dab1d40e35cd74816207efbd6a740b6ea6410c2d78dd74542753c34ecc7daaa7df191356925b0574d2e77649535b49f491e5efaa7b6992da19e8f8282f88ce40008169eec4e8c8ef6a123b1e2cc5dd78a3c9655c3ac4ff0f086c63599a2593fd559b883fe32cc7617b8d221a9c4d3491bb6f93c6e95930351c1132649715ff1ffaf197a36b5a78748e8ca192e62abd67042968b67b26a4145106b9e9a5c8bc054139eb89c3626da4dac37c2e0645199e993832251301e80cf05826082541f069a0c3f1cd43fa6c0a84278fdd97587835ac12b3c18cc0b606193a245695192e9e274d3b09c504a46183b153af2142496945b5cc03b68eb8183487d5b3cb11ed342720ab66a006251e62034d99d8d274dd89dc7a84fc40a21c5949a66ddcf11a60d94935a1d210f1dedb0f162a3826bd4ec083a9c79d8aeb66b1634209fc81ed4ce72bfeb277b33528866f3d8a8b786e8bdaec1215296464ca33674fb6374361bdd81ac7dee489e8bcb3fed2dc569c8039efef90f857c20d1b18c075fc8bdb55d4bf7f51cb347222d282d586690f1707100ab96fedaaf6fe92b8b4c89343a21e71d885d18331756038c3d3376943d3ca0a4756cb718b19245f8ebad2b2691abe0832488d612bf5126de29b0d6c5765df7778586773d8e1b85fd3502933f58b5e260cd1cdb1d8b3e826baa03eabc9c848aed7f9bbb3eda648c9e0e3b3118de5af091eed40eab48f02e394067d4374613c9b7e14e62fe48132e7fbde70ecbb83b2fec0dab7207273c1e9c86fafa16cb1902ea6eee73cacb75756b9f378b5a1d27db23e686ccb420f0443cc17b5ec9f49f8c1d7a231d3b3c2ac806e5853126f3f19493dbeea47d2ade5d6c21314ba2a42a207fee43830ac58ee0000874daf4a01346f52f33623536d46e0029f19c947c5cfe7caaf29cd34d74c3ccb7afda5e1dd57179174a824c673e668b4f3c2e559112ab24b4de21c58307478a5372cd18ed7c11fa5df96be9e427a9fdcb0c57f0f9dbc6977c61f66ca6c3a3e7f250f94724685ca691ffbd2ce415636dc84f31f6ea2e2524f658838e87cd8392d6499d46475dd99d8b3738f165b5b239d6d11c96697743841510263ecac8bf34bca0ea28564cadd6f6fe23a2a409bb71f8bbc183533c96f1184ac43f13879eb23ecb634ca8b4fb76be1e8ac315128eb180d92a9f7fb3bb367fa6c235a0a1748cba1db80fe7c7e2ff27318e1e9d8d11e93abf22be4d40ca325a833d68884ca3f206880e1ab34a38b4124861a51ae37b91f26a175d6074004e2fccad3ae3ed3f8435499165b3512a713b961918069ffc2ac0905892e506931f3a389c1893b4e19c004a9fa28bacf02dd031cc69640ed38677803837e1f11a", 0x1000}, {&(0x7f0000002640)="7ee80ab5d936042ad514a55726bd8c99153d8fd4ecd04058e1ebb89668073c8fda6c9cce41eeb951836c18d24cae820e8c9be48b59c0c64cddda83e8014e09434fe984abae9de602f7ad414afb680cec23e590f1a6e9e4926660854ec4325c6e3bb1bd2906f0748bfa1939359c", 0x6d}, {&(0x7f00000026c0)="684f7d95f349b5298800d132a27b127a5c6528a1b19decb2f108fa6f45aa0b8d520a25cfdbb4f48e54fe23b17ec34e892fd631cc0dcfd0488adbfa7d2dd8ddcd8a65a5a7e82aec019ed934b534a6a386132c1a904e1ac97dc435843c98e6d5fc81cd2b282a0100931285053f6ea59559d25542cea6e1aff1b64b847a996e0edfb6c7f7f02102cd4ced43cdac2cde70543c92f7440edbfb5275d94a27e64a4355a2b5bc79b60228a1bf5271a4d3d1af296c62b152a0a3801bb7ffc1290f7f51bfdc42aa025a902ae8a6157ec4f6008ca4d40fa32b15ac339365cb5794e25f47752d34112da879aa3df2f18808e177ca0359caa833", 0xf4}, {&(0x7f0000000500)="deda8bc8e1f55632199b20c62097cf40a582e5485e5a92bc9182ef1c0028ca925270d05daacf2db34a6cc21bdbdb876e08495a803df45bbb31cc", 0x3a}], 0x6, 0xf, 0x0, {0x2, r8}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x7) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:46 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 64) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x7, &(0x7f00000027c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="e33c9c0d8a5dab16bd176a78eb284e0d511adb903f9d29eba7c8a2536a1e7f8b5e8905244d410b4243441cacf31b05ca507d21dc095499954301f842decf3668f69a7d12a5a83b1408734ccb7828117552bfd0e25396caa669d418a9d507f0fe01092305fa9560ac033bb1537d779ab0dd06d9b8f8903c38aefa6f234484c66df7290821809d24ea5f0a1014a2117b51a3cc6b01db44d6a84a8439d38598143a615ab695e91d76a632a8933b2ca6", 0xae}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="7ee80ab5d936042ad514a55726bd8c99153d8fd4ecd04058e1ebb89668073c8fda6c9cce41eeb951836c18d24cae820e8c9be48b59c0c64cddda83e8014e09434fe984abae9de602f7ad414afb680cec23e590f1a6e9e4926660854ec4325c6e3bb1bd2906f0748bfa1939359c", 0x6d}, {&(0x7f00000026c0)="684f7d95f349b5298800d132a27b127a5c6528a1b19decb2f108fa6f45aa0b8d520a25cfdbb4f48e54fe23b17ec34e892fd631cc0dcfd0488adbfa7d2dd8ddcd8a65a5a7e82aec019ed934b534a6a386132c1a904e1ac97dc435843c98e6d5fc81cd2b282a0100931285053f6ea59559d25542cea6e1aff1b64b847a996e0edfb6c7f7f02102cd4ced43cdac2cde70543c92f7440edbfb5275d94a27e64a4355a2b5bc79b60228a1bf5271a4d3d1af296c62b152a0a3801bb7ffc1290f7f51bfdc42aa025a902ae8a6157ec4f6008ca4d40fa32b15ac339365cb5794e25f47752d34112da879aa3df2f18808e177ca0359caa833", 0xf4}, {&(0x7f0000000500)="deda8bc8e1f55632199b20c62097cf40a582e5485e5a92bc9182ef1c0028ca925270d05daacf2db34a6cc21bdbdb876e08495a803df45bbb31cc", 0x3a}], 0x6, 0xf, 0x0, {0x2, r8}}, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x7) (async) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (rerun: 64) 01:33:46 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async, rerun: 32) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (rerun: 32) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd, 0x7, &(0x7f00000027c0)=[{&(0x7f0000000580)="12adb2c83702ded16cbb6cde2e67d0b6faef512cd9f950a25fdf6d0a0c68203602aec5e2e1ce8e65212eff7ff904a82b8fc112bd767cdfd372603ca5c4fa32d0fad407004d53523c4cc5e891d195bcaecde523af656686e40b320de58a35d6e7c9916eafed943d62f3cfa111a0fe1e298076f8550948dd78a9e4013671f0e3dfe1d0245ee5d873439b210c96b05e9b1625f094c82a199dfe399b61b5237971a694713ba0a35e0271abec28b3570e0c542c1ab5d025195f9e43945483433066990600c81d4a59ca897504c99548b4f470b7bbc5fb4ef2c19b81fc992b01ee1b1e2b81c3a239a47182e53e2b3cd8a25c9be7203dc6d6d51631e011997396acb731a69655671fa74d2145ed5db7e471452f2570f56894866bb51bbe82087b1bb98f5d9ae0d352c9ee9841831bf2791c87ce05bca06c39f53031595b7a0020f3f43cd3c14b46d227864f142e7b5e3d41c3d95cf3ea7496fba504714faf4d48e26b62bd998ccbcdf66c074c5a72724e14130ab67f39ef4415f9a19f8312476b89acd08d577e5b8ebdf864d3a45325c5a52cd6ce571c03ea84bab77363b0be9280ff4f1a096a65079d449a2bd570ac73f24ac6dcfdbede1e0d3041b5e6b3eda4f3ecbe2ac73e77c1b5cacdb75993ea66b19a3df21d0a692cc83a9d50838456a9ab6035f558f06a8d19e214390dde63a2b2e8f7679bc614ebf6a610ed6a37b3db8fca1d05f56a88688c835bb5a782de135c58957040fce2f73459650b40d8fbeb17ea46b3b785a2efc2b100ab2ff1f2e50aff6a0c6177d024de5a231614f697e30989d590367ea7b508bf814e48e5717b072f0b3f48feade0fabec5679ccbaf44af25d5860ebc227674cd11c0de2ddeb5189866520ec565c51d98cce6ba647fda6e4b15b87c611bbed37a1bd09e020b4c13b53c919f14f4d86e916ac51049181ff77526abd55769563dc0077d5bf481534e2fcd343db9d0cb8d8250cc39bbfae249da14584aacab735c70231156f854ebc31d6c34231c47c09e2d73b1b98f04da4a907b0e167bef429f0cd5bf5c1934b445c2852689211a832b171bb09ac301dd13587c68a33c6973ee6852fd161d8ec2e8e3f637bbc68fa2c72bc6ef0a2ac50e79f65e95385e473cc2bdcf69d5d621afe088a10179b2d395b15d33fd455af2e100282aecd003b075956040614150ce393fa570f5cdfc547ccb399f93e7bb7b1e3238d5a195af1d552e1b04b3c554af2089df4b457c7750a9e22ae8d042e7a9f96ea8f60033e1172fb3b6da5002acde9b623c51d259e99a10ee04d4764a9f23ff405088fedde6e71b5fbda699406e8759e2d0d1199549ed65fb4132562ca93d63bfb1ec66c10986c73895ceaa3fab090ff55491939139f1c16cfd0fa6239e63de9793aac3b27fab05b903011705de54a907215fd32a1a6674fd577f386f1babb5b395dc8f90ee28b8c8c543f0204736f427da357a26825a76a32f1d39b103c282aea70ebe753287446c94e21f83f49177a8b7e97b9fa28b10765f0e52ed2c80cd10157dfaf2e440ec78c69641dba8fca5caf790c6b2e4eea71ca64eaa99f42c5d035dab655f5665e1ff26ee4615c5ced876c7a9169e77a752ae9327458cc03fc70ad09203cb1e66125be2d617c135cdb3f8d8b557780405f58ad6ccee46998fe82437cc8850009ea2cf70521c5cbc1a2a2f4b8fd1fc8ac7e2da24254365f0b3367fb857e0d5b7c062320d0111840a5e56fb2504fb2c27cea460047b880fbf86775a0b0c0df4adf7c43c88cdada82feb7794d3254ad8a757199724c811611efe4c1e2dcc352a9470a33404d4da2df06ff9e481ca1a4861bab63b19927cab1a2980cf3c327f26d1f5b6e6c640743105ef859f1adc31dabdf32672e0469baf87cedb0824c6fff68ee42b1c4c1e6b6b22e0c58f963c061b0c686b0493763004dd8610fe476033021b58dc0f6ea365c828b71541fa94662beef82c0dc616f971dbd448cfd45ce275e5b469107dfcfd1bae701f4facd10cb69eb4186f8edf1b72b417cedc22c4855a297a9b56cb380e3f14d3cf8e952c9a85a57d69db6f033ad7d7da4d6304ed24811ae0f5feded8eb9715113d16cbfed3572661a28d1bdd44f82d03ccfef22637dc4456825a3a557e34ed5be8b4abdd65f68ebee6c810ff184dcb2f2bc81dd10230bfc2b6d73ebd0980e977e11df047617f18fa6ce4675a01846a542eabd1e78b23ce28f34b09c3d228b52a1fd460cfc4b8179262b4f66d641395e487194ade8fb186c3ac2a73f84c7a0430d6fc67f7f1195d03e1839b848e8617d7945b6c25ccf544c53030478496783bd1adeb33c186b55c92fb0c2da854698aaa65bc4fb80999b33365c1efe699ed02527d00b850fc8501f62bc91ed0ea299b7b8035cca6c3f0f68a2cde05d0bac46e59e1c66ce8776a49d09641a475d2036b71d62c39fb8bf1ea877d90cab618ffa6b051150c1b8b9c286d8e89252365acd7dc1b0da9cec9f2be38bc8464339f7ac5e1fba5b3499e3ce23ae15827299b17c4d6801f81332d6695318d561a2c5bd567f65e7757eece8df7a19ddbfd8123fa341ff79975d01d193f7b2c79e678df0ce2c05053afcc14b2f27289f8c792d291af2d842ae16ec372b0dccfea82a41593fe0c795a3e94b63608a05bd0f385596a78504f03c89d22858a0037e65776b27ff511bc1525876d2eb0fb0049c3c430b1a1bca0e91eb2e758ab1279c24da2d95a58104a80988193c78cdaa545088b9521bcde5aa2c6b8468b692c1277e88a3b0c0a610b1671d3c1d058628ec05436d4974a7f572826a0ea93c226e005e5093efaba80b3d1c19f267aea169443a6c327f4d4ef7f2572ef917051927d0c86223f131df72bc8dfb58467a7d6a84b6480a5539194be1d6a39a4c8b67d90ac913569afea9464154b1cb8d3e3fe0cfd59540433afb45963647c6fe96deda07cb4e919380b7136c2974828437be20948572b710c10aebf427ae6a8580974cdc44d45c7c0ed98e130074765523096a4dfe99af1e1c229d4962c40c476f9bf78998efc0543e2596e404b2a1c3b7ff6e59f4059fa1cd323bc8dfdb0ab3c57a4460a0d95ede5dbc09001b9e26bffeb0dc6702fb2b56e3fdf29955e2732198a3904183d54069a5292dac29ab7d2a48e4bafaefc761053e49fbc783c3ec906968992d645ebae0f69f86b8be9ac554625be330ead3a73c9a51f3d0289cb38daad4fd8842a40b02a4652ef37756e749267c42e4a283ea841cef4f31d43e97c5c9bdc704cda8e9d2df86ea3a57af2d3b4ae1b1e4514ac735a2a06e1a3ed994cbe35226438d521c1c19d10d70da35a608ed7b47254abe400c9657eef199856fc76c5a01a95f114277fdf90613be77c37666d7bf6a537ee0b53738c19238a93ebcdf4ede85d8c966db7636435adfa83beedbf0c446f59d820a12c84fbcebc18969b751bb1f63a62d9f3e31168445cb6ac70cc181f65dddd24776b5911629dafe09c0d9de0269c1360eb726f7c541bdbbaf749144545b37bb83a6729145d3bbae509f79e97bf7eeba296a360bd3d5ca5c6310725aef50664a0b4e1ffaa6d7a0196d3569a759d50cc0ae2893dd10401599f8080b08694cbd9f09fd5841c92c5b55394e010bf626c08a1f4b6f0bcf9debe79f44425187d563b9ab49fcb3073fedc819409e4efb69093049c80caf07466137952a43f605ef356d492823d3751f7b9efa4359bdc66299b63263b550f606a2bd308fce8df2db2e840ef5e9414c8e2bd2483cbed204937cbac29bdac30e1d90824985f2a56984720fa82037f1c0890f890bb461410781f0d318405a9f4e43ba9b812505f34ea02ab999b8b2c39acbf3ebff4c7f78a2c758b9c66f252016a6b127ca4ea5364a01334f490f2b9d4cf84b28099e0e4062708dd504e67a8ee8a57fb327f98f4a3daa1d859e2e1ce7cf8bd538a65726020cbc929202db291aae6c41e48a1e1eb875b79115c0c9c6ca8d0ef0e200faf3265f5d4ab0386fefcb7361dfeb96bd1351659b4ffe3648f6ec26188296e28f0bb366b61f5f812f1de94360a876f57d9f493ff2089ff8f852c20369a244688ffdeb22a041293d71c4e7512ff469273ce754c06ad7b8a9b9caac9a2c7e6886fe46d35b9bc5016385d013a8fbbb672d29ee93334f6ab25d72f9f4f1e7a26c659bac3632bb909e29893db8cbf63f186676fb868bc5c20d79702f4c28d3a381f7db26af425ff292a782cec682128f7a52d6fbd9dc11b81df0ff30b758cfd57e07192d3b0f03781ec58f42866cf52439f3fa525535fff297e7dd36277aaa3ed97a89a4aebde3d7acb3df34a13d9ae6ac3577e92c6fda8eda18c86c4f44896a5bb563ec112246ed9fccf7b19c0c4aca9056924f47819708de56ab0125af3f10308b10969f49545569587c44cab1e064e5b754e9fb13ccf01aad9119b4b0e38a05bc5f24e91e4cb2b6c88cd573121903aa4c73886737e03f5b2685b39e03bc752db73838ed8b90e4e70418b59a4a76041dbcc94fdea8bf55605b5038e75386c3c4a7cb78ea0c3c8fb47a5a12014b531f4786b991b2256818e9c64d5cb2c84795296bb024c1f9257c04613ec12552cb80e401c669198a70e3f19890c40b54ade4d7a701b9007d48dc7ab9dbb23ec4f9421ef3f9ce96bf8113204f0d71131f7c7e2fee553b69e736d30ad8426c747b2545b00e707cf34ed89d616576a2df6d3186e5e8a4f08bf3b89445494df882f605a124aa5a9a3612658636aef8850e845762c43e64d2a1c80f7c0db4c139e9db1ee2383a0a6ad43966d9e3976564145697291b4cdd56f6a7a66f02e5c6bbc82102d80423cb079aa0af5283708f47528202fb04953fa9e7b4729067bb0651370fe3981beada899e88cb8f2b300af4dba2cd1ce6acb88cb684c80ed69f69398c47fc0dc9423704b8ec14cc78bcdd2c257aed9787c78494c4527691565b9b24bde2bcb0cc664314e52cc0de25be3beb5b51c13407d25899b4b55f82477768a46d07001511f195a4ec5fd7fb39fdb3d0b4167765b7baa0300152502f3ca98cb64d195e94e4a6e9ebc72fa9345c8b079e85481eb73d9b352fcf53317b44e4243d24e1ecabe9bce48eccadabd6954479f55152cb73b84dd785a9499a745bb5f18ef1f3a88156ce90ca1891baa763daeaf8a49419f86cc1deb918c801039db2cc0691af3d335e832609c6d1368087db5215f0418b6e8d680fdc39e19e4f2f8b321b53ad4ca35196d4872b7ebd40e712bc3c00661024133c8169d2e2de34d79774c5b6cc07b2c44b86b3a07384d2ac77a92dfa7fd201ba18772022f5aecb84f582403e3e7e87e40b4febcca491c1b7dc1f29386a57da67f49f30a07611b7e23e73c625d155eee0d1222742740acfeda7b04007f3cad4bcdd7a7fb118df8c65940fb51c1735beec615c5255797b49e58a063f8e94be77f0a4dbabe4fc9bada58b4c3ce140d8f2b903f44eaa40473303d5b82f91d2d6b452eb75f4fc157a26807106a8ca4aa4ea67a21c6e452a5cbab35937149e6e71d87fbc09fab14f64c57fa6376f63d9d9c9f6dd3ed1f7f15572690465ab73c326232c0373b1fd8f658bc9c5c3e50c05f2b008d7f235fe9f67c4fe2800409fbb0010e1c679765f3aeacb05b85ca6172f58585e1d9755a339ccc1dc3cfb891c5de512ffa1a28d6b46e287c87333614f0d47d625752011c0d258223c144ce4c24139732d23a527904f35097cce3d46292bf273c5328e3db97c053ce7ed334f68f2ee4c8ba96dd8bc0a72e15f56e14c9803f19426f3e2235bc5e5583942b0352ff9becd8", 0x1000}, {&(0x7f0000001580)="e33c9c0d8a5dab16bd176a78eb284e0d511adb903f9d29eba7c8a2536a1e7f8b5e8905244d410b4243441cacf31b05ca507d21dc095499954301f842decf3668f69a7d12a5a83b1408734ccb7828117552bfd0e25396caa669d418a9d507f0fe01092305fa9560ac033bb1537d779ab0dd06d9b8f8903c38aefa6f234484c66df7290821809d24ea5f0a1014a2117b51a3cc6b01db44d6a84a8439d38598143a615ab695e91d76a632a8933b2ca6", 0xae}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="7ee80ab5d936042ad514a55726bd8c99153d8fd4ecd04058e1ebb89668073c8fda6c9cce41eeb951836c18d24cae820e8c9be48b59c0c64cddda83e8014e09434fe984abae9de602f7ad414afb680cec23e590f1a6e9e4926660854ec4325c6e3bb1bd2906f0748bfa1939359c", 0x6d}, {&(0x7f00000026c0)="684f7d95f349b5298800d132a27b127a5c6528a1b19decb2f108fa6f45aa0b8d520a25cfdbb4f48e54fe23b17ec34e892fd631cc0dcfd0488adbfa7d2dd8ddcd8a65a5a7e82aec019ed934b534a6a386132c1a904e1ac97dc435843c98e6d5fc81cd2b282a0100931285053f6ea59559d25542cea6e1aff1b64b847a996e0edfb6c7f7f02102cd4ced43cdac2cde70543c92f7440edbfb5275d94a27e64a4355a2b5bc79b60228a1bf5271a4d3d1af296c62b152a0a3801bb7ffc1290f7f51bfdc42aa025a902ae8a6157ec4f6008ca4d40fa32b15ac339365cb5794e25f47752d34112da879aa3df2f18808e177ca0359caa833", 0xf4}, {&(0x7f0000000500)="deda8bc8e1f55632199b20c62097cf40a582e5485e5a92bc9182ef1c0028ca925270d05daacf2db34a6cc21bdbdb876e08495a803df45bbb31cc", 0x3a}], 0x6, 0xf, 0x0, {0x2, r8}}, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x77359400}, 0x1, 0x1}, 0x7) (async) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0xfffffffffffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:46 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r8}}, 0x6) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:46 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:46 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0xeebd) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:46 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xfeffffff) [ 838.930193][ T24] audit: type=1400 audit(1639532026.854:626): avc: denied { override_creds } for pid=26966 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 01:33:47 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf000000) 01:33:47 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r8}}, 0x6) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:47 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 839.118482][ C1] scsi_io_completion_action: 7 callbacks suppressed [ 839.118518][ C1] sd 0:0:1:0: tag#4047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 839.134996][ C1] sd 0:0:1:0: tag#4047 CDB: opcode=0xe5 (vendor) [ 839.141354][ C1] sd 0:0:1:0: tag#4047 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 839.150397][ C1] sd 0:0:1:0: tag#4047 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 839.159425][ C1] sd 0:0:1:0: tag#4047 CDB[20]: ba 01:33:47 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r8}}, 0x6) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000100)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r8}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r8}}, 0x6) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) [ 839.261884][ C0] sd 0:0:1:0: tag#4048 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 839.271769][ C0] sd 0:0:1:0: tag#4048 CDB: opcode=0xe5 (vendor) [ 839.278101][ C0] sd 0:0:1:0: tag#4048 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 839.287133][ C0] sd 0:0:1:0: tag#4048 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 839.296164][ C0] sd 0:0:1:0: tag#4048 CDB[20]: ba 01:33:47 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0xeebd) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r6 = dup(0xffffffffffffffff) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0xeebd) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) write$nbd(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:47 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 839.573398][ C0] sd 0:0:1:0: tag#4049 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 839.583267][ C0] sd 0:0:1:0: tag#4049 CDB: opcode=0xe5 (vendor) [ 839.589597][ C0] sd 0:0:1:0: tag#4049 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 839.598634][ C0] sd 0:0:1:0: tag#4049 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 839.607668][ C0] sd 0:0:1:0: tag#4049 CDB[20]: ba 01:33:47 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 839.755781][ C0] sd 0:0:1:0: tag#4050 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 839.765643][ C0] sd 0:0:1:0: tag#4050 CDB: opcode=0xe5 (vendor) [ 839.771990][ C0] sd 0:0:1:0: tag#4050 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 839.781036][ C0] sd 0:0:1:0: tag#4050 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 839.790061][ C0] sd 0:0:1:0: tag#4050 CDB[20]: ba 01:33:47 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xfffffff6) 01:33:47 executing program 2: r0 = syz_io_uring_setup(0x1cb, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000440)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x55}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x81) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x100, 0x12345}, 0x7f) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x2}, 0xa00, 0x100000001, 0x0, 0x2, 0x28a, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:47 executing program 2: r0 = syz_io_uring_setup(0x1cb, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000440)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x55}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x81) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x100, 0x12345}, 0x7f) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x2}, 0xa00, 0x100000001, 0x0, 0x2, 0x28a, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1cb, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000004c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000440)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x55}}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x81) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x100, 0x12345}, 0x7f) (async) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x2}, 0xa00, 0x100000001, 0x0, 0x2, 0x28a, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x2) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) [ 839.916293][ C0] sd 0:0:1:0: tag#4051 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 839.926187][ C0] sd 0:0:1:0: tag#4051 CDB: opcode=0xe5 (vendor) [ 839.932544][ C0] sd 0:0:1:0: tag#4051 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 839.941593][ C0] sd 0:0:1:0: tag#4051 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 839.950621][ C0] sd 0:0:1:0: tag#4051 CDB[20]: ba [ 839.998873][ C1] sd 0:0:1:0: tag#4052 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 840.008760][ C1] sd 0:0:1:0: tag#4052 CDB: opcode=0xe5 (vendor) [ 840.015113][ C1] sd 0:0:1:0: tag#4052 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 840.024151][ C1] sd 0:0:1:0: tag#4052 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 840.033209][ C1] sd 0:0:1:0: tag#4052 CDB[20]: ba 01:33:48 executing program 2: r0 = syz_io_uring_setup(0x1cb, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000440)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x55}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x81) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x100, 0x12345}, 0x7f) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x2}, 0xa00, 0x100000001, 0x0, 0x2, 0x28a, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1cb, &(0x7f00000000c0)={0x0, 0x0, 0x4}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000004c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000440)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) syz_io_uring_setup(0x5846, &(0x7f0000000240), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x55}}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r8}}, 0x81) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) syz_io_uring_submit(r3, 0x0, &(0x7f00000005c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x100, 0x12345}, 0x7f) (async) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x2}, 0xa00, 0x100000001, 0x0, 0x2, 0x28a, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x2) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:48 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x13000000) [ 840.128568][ C1] sd 0:0:1:0: tag#4053 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 840.138455][ C1] sd 0:0:1:0: tag#4053 CDB: opcode=0xe5 (vendor) [ 840.144812][ C1] sd 0:0:1:0: tag#4053 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 840.153849][ C1] sd 0:0:1:0: tag#4053 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 840.162902][ C1] sd 0:0:1:0: tag#4053 CDB[20]: ba 01:33:48 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0xeebd) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async, rerun: 32) r6 = dup(0xffffffffffffffff) (rerun: 32) write$nbd(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:48 executing program 2: r0 = syz_io_uring_setup(0x2d45, &(0x7f00000000c0)={0x0, 0xfaa0, 0x10, 0x3, 0x1ffffd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x0, {0x0, r10}}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:48 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:48 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 840.285792][ C0] sd 0:0:1:0: tag#4054 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 840.295685][ C0] sd 0:0:1:0: tag#4054 CDB: opcode=0xe5 (vendor) [ 840.302052][ C0] sd 0:0:1:0: tag#4054 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 840.311084][ C0] sd 0:0:1:0: tag#4054 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 840.320127][ C0] sd 0:0:1:0: tag#4054 CDB[20]: ba 01:33:48 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000340)) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 840.329121][ C1] sd 0:0:1:0: tag#4055 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 840.338967][ C1] sd 0:0:1:0: tag#4055 CDB: opcode=0xe5 (vendor) [ 840.345325][ C1] sd 0:0:1:0: tag#4055 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 840.354375][ C1] sd 0:0:1:0: tag#4055 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 840.363436][ C1] sd 0:0:1:0: tag#4055 CDB[20]: ba 01:33:48 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:48 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 840.495448][ C0] sd 0:0:1:0: tag#4058 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 840.505324][ C0] sd 0:0:1:0: tag#4058 CDB: opcode=0xe5 (vendor) [ 840.511670][ C0] sd 0:0:1:0: tag#4058 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 840.520732][ C0] sd 0:0:1:0: tag#4058 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 840.529794][ C0] sd 0:0:1:0: tag#4058 CDB[20]: ba 01:33:48 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xfffffffe) 01:33:48 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:48 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:48 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (rerun: 64) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) r5 = dup(0xffffffffffffffff) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000340)) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:49 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x18000000) 01:33:49 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) r5 = dup(0xffffffffffffffff) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000340)) write$nbd(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)) (async) dup(0xffffffffffffffff) (async) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000340)) (async) write$nbd(r5, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:49 executing program 2: r0 = syz_io_uring_setup(0x2d45, &(0x7f00000000c0)={0x0, 0xfaa0, 0x10, 0x3, 0x1ffffd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x0, {0x0, r10}}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:49 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:49 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:49 executing program 2: r0 = syz_io_uring_setup(0x2d45, &(0x7f00000000c0)={0x0, 0xfaa0, 0x10, 0x3, 0x1ffffd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x0, {0x0, r10}}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2d45, &(0x7f00000000c0)={0x0, 0xfaa0, 0x10, 0x3, 0x1ffffd}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000100)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r10}}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x0, {0x0, r10}}, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:49 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:49 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1000000000000) 01:33:49 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x20000000) 01:33:50 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:50 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:50 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) (async) dup(0xffffffffffffffff) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) (async) write$nbd(r7, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:50 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x8000000000000) 01:33:50 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x3f000000) 01:33:51 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:51 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:51 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:51 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) dup2(0xffffffffffffffff, r5) 01:33:51 executing program 1: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:51 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x30000000000000) 01:33:51 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xf6ffffff) 01:33:51 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:51 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 844.071636][ T3389] ================================================================== [ 844.079733][ T3389] BUG: KCSAN: data-race in __d_drop / __d_lookup_rcu [ 844.086385][ T3389] [ 844.088683][ T3389] read to 0xffff8881346db850 of 8 bytes by task 3387 on cpu 0: [ 844.096196][ T3389] __d_lookup_rcu+0x13f/0x3e0 [ 844.100848][ T3389] lookup_fast+0xc1/0x360 [ 844.105153][ T3389] path_openat+0x489/0x1eb0 [ 844.109628][ T3389] do_filp_open+0x105/0x220 [ 844.114104][ T3389] io_openat2+0x292/0x560 [ 844.118406][ T3389] io_issue_sqe+0x160f/0x55e0 [ 844.123055][ T3389] __io_queue_sqe+0x20/0x440 [ 844.127617][ T3389] io_submit_sqe+0x77a/0x47d3 [ 844.132268][ T3389] io_submit_sqes+0x25d/0x670 [ 844.136917][ T3389] __se_sys_io_uring_enter+0x212/0xb00 [ 844.142355][ T3389] __x64_sys_io_uring_enter+0x74/0x80 [ 844.147708][ T3389] do_syscall_64+0x44/0xd0 [ 844.152098][ T3389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 844.157966][ T3389] [ 844.160266][ T3389] write to 0xffff8881346db850 of 8 bytes by task 3389 on cpu 1: [ 844.167873][ T3389] __d_drop+0x16a/0x250 [ 844.172007][ T3389] __dentry_kill+0x12f/0x450 [ 844.176576][ T3389] dput+0x218/0x430 [ 844.180366][ T3389] step_into+0x468/0xee0 [ 844.184588][ T3389] path_openat+0x1059/0x1eb0 [ 844.189153][ T3389] do_filp_open+0x105/0x220 [ 844.193631][ T3389] io_openat2+0x292/0x560 [ 844.197934][ T3389] io_issue_sqe+0x160f/0x55e0 [ 844.202584][ T3389] io_wq_submit_work+0x1c5/0x370 [ 844.207496][ T3389] io_worker_handle_work+0x4ca/0xbd0 [ 844.212757][ T3389] io_wqe_worker+0x1bc/0x4f0 [ 844.217320][ T3389] ret_from_fork+0x1f/0x30 01:33:52 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:52 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:52 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 844.221713][ T3389] [ 844.224013][ T3389] Reported by Kernel Concurrency Sanitizer on: [ 844.230134][ T3389] CPU: 1 PID: 3389 Comm: iou-wrk-3387 Not tainted 5.16.0-rc5-syzkaller #0 [ 844.238614][ T3389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.248641][ T3389] ================================================================== 01:33:52 executing program 1: r0 = syz_io_uring_setup(0x5d3, 0x0, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 844.291519][ C1] scsi_io_completion_action: 16 callbacks suppressed [ 844.291552][ C1] sd 0:0:1:0: tag#4077 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 844.308079][ C1] sd 0:0:1:0: tag#4077 CDB: opcode=0xe5 (vendor) [ 844.314443][ C1] sd 0:0:1:0: tag#4077 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 844.323502][ C1] sd 0:0:1:0: tag#4077 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 844.332539][ C1] sd 0:0:1:0: tag#4077 CDB[20]: ba 01:33:52 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 844.409832][ C1] sd 0:0:1:0: tag#4078 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 844.419702][ C1] sd 0:0:1:0: tag#4078 CDB: opcode=0xe5 (vendor) [ 844.426071][ C1] sd 0:0:1:0: tag#4078 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 844.435103][ C1] sd 0:0:1:0: tag#4078 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 844.444167][ C1] sd 0:0:1:0: tag#4078 CDB[20]: ba 01:33:52 executing program 1: r0 = syz_io_uring_setup(0x5d3, 0x0, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 844.545009][ C0] sd 0:0:1:0: tag#4080 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 844.554895][ C0] sd 0:0:1:0: tag#4080 CDB: opcode=0xe5 (vendor) [ 844.561235][ C0] sd 0:0:1:0: tag#4080 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 844.570266][ C0] sd 0:0:1:0: tag#4080 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 844.579293][ C0] sd 0:0:1:0: tag#4080 CDB[20]: ba 01:33:52 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) dup2(0xffffffffffffffff, r5) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) dup2(0xffffffffffffffff, r5) (async) 01:33:52 executing program 1: r0 = syz_io_uring_setup(0x5d3, 0x0, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:52 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x50000000000000) 01:33:52 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 844.908855][ C1] sd 0:0:1:0: tag#4081 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 844.918733][ C1] sd 0:0:1:0: tag#4081 CDB: opcode=0xe5 (vendor) [ 844.925081][ C1] sd 0:0:1:0: tag#4081 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 844.934117][ C1] sd 0:0:1:0: tag#4081 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 844.943165][ C1] sd 0:0:1:0: tag#4081 CDB[20]: ba 01:33:52 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xfeffffff) 01:33:52 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 844.954671][ C0] sd 0:0:1:0: tag#4082 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 844.964534][ C0] sd 0:0:1:0: tag#4082 CDB: opcode=0xe5 (vendor) [ 844.970876][ C0] sd 0:0:1:0: tag#4082 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 844.979929][ C0] sd 0:0:1:0: tag#4082 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 844.988947][ C0] sd 0:0:1:0: tag#4082 CDB[20]: ba 01:33:53 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:53 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xfffffff6) [ 845.022948][ C1] sd 0:0:1:0: tag#4083 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 845.032807][ C1] sd 0:0:1:0: tag#4083 CDB: opcode=0xe5 (vendor) [ 845.039153][ C1] sd 0:0:1:0: tag#4083 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 845.048209][ C1] sd 0:0:1:0: tag#4083 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 845.057248][ C1] sd 0:0:1:0: tag#4083 CDB[20]: ba 01:33:53 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 845.187953][ C1] sd 0:0:1:0: tag#4084 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 845.197821][ C1] sd 0:0:1:0: tag#4084 CDB: opcode=0xe5 (vendor) [ 845.204177][ C1] sd 0:0:1:0: tag#4084 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 845.213220][ C1] sd 0:0:1:0: tag#4084 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 845.222283][ C1] sd 0:0:1:0: tag#4084 CDB[20]: ba 01:33:53 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 845.301681][ C1] sd 0:0:1:0: tag#4085 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 845.311565][ C1] sd 0:0:1:0: tag#4085 CDB: opcode=0xe5 (vendor) [ 845.317897][ C1] sd 0:0:1:0: tag#4085 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 845.326947][ C1] sd 0:0:1:0: tag#4085 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 845.336006][ C1] sd 0:0:1:0: tag#4085 CDB[20]: ba [ 845.407524][ C1] sd 0:0:1:0: tag#4086 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 845.417407][ C1] sd 0:0:1:0: tag#4086 CDB: opcode=0xe5 (vendor) [ 845.423755][ C1] sd 0:0:1:0: tag#4086 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 845.432794][ C1] sd 0:0:1:0: tag#4086 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 845.441857][ C1] sd 0:0:1:0: tag#4086 CDB[20]: ba 01:33:53 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:53 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 845.508329][ C1] sd 0:0:1:0: tag#4087 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 845.518202][ C1] sd 0:0:1:0: tag#4087 CDB: opcode=0xe5 (vendor) [ 845.524559][ C1] sd 0:0:1:0: tag#4087 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 845.533593][ C1] sd 0:0:1:0: tag#4087 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 845.542630][ C1] sd 0:0:1:0: tag#4087 CDB[20]: ba 01:33:53 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmsg(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) dup2(0xffffffffffffffff, r5) 01:33:53 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:53 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:53 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xb0230000000000) 01:33:53 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0xfffffffe) 01:33:53 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:53 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r6 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000340)) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:54 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:54 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:54 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:54 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x100000000000000) 01:33:54 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x1000000000000) 01:33:54 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r6 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000340)) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) (async) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) (async) dup(0xffffffffffffffff) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000340)) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:55 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:55 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:55 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:55 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x8000000000000) 01:33:55 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x200000000000000) 01:33:56 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r6 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000340)) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) (async) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) (async) dup(0xffffffffffffffff) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000340)) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) (async) 01:33:56 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) write$nbd(r7, 0x0, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:56 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:56 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:56 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x100000000000000) 01:33:56 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x400000000000000) 01:33:57 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x162}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="01006909a1f2e648ae1b6c11dd00000100000018000000b13509588a010101ff3d62b28602e524ced9ba4acbff9093f060e7f5af84f9a36ce777dbd73ab7784ad75907ca88c69c24a7a661869ed349ed0861427a014df34854cce51a19b676bb4679f4", @ANYRES32=r0, @ANYBLOB="ffb438ea6ac6a69afabf9706000000b234b07c15b1470092f352a0da2773d43f832ab3d0f4625d51b47277fa"]) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000440)=0x10) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x3, 0x6000, @fd, 0x9, &(0x7f00000004c0)="ec70947600c72475c30ac8e057dfe6532ae57c81669c7ab8c87ea5baa4af06ac6e2bc821df99027300dab33d0e1497d353811f6039fca04f7bd0d9e949b60a406aae71fe88408ce1ada48271bce4f4c06d4f49b4a39fb04e79802d9cd9dbdf18828d5edba29c815da8d6861653e2cfe9388de2c2a06e4e4c55267c6daddf33619e2a71588d7f9f26552bd460860d0fa0b7983aa11bed90f93a6ad0ab32531a7d42c0093bd2d70e41a699620e251f1c3791350a55dc61836d11ca58", 0xbb, 0x2, 0x1, {0x0, r8}}, 0x4) io_uring_enter(r0, 0x601a, 0x2, 0x3, 0x0, 0x0) 01:33:57 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x162}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="01006909a1f2e648ae1b6c11dd00000100000018000000b13509588a010101ff3d62b28602e524ced9ba4acbff9093f060e7f5af84f9a36ce777dbd73ab7784ad75907ca88c69c24a7a661869ed349ed0861427a014df34854cce51a19b676bb4679f4", @ANYRES32=r0, @ANYBLOB="ffb438ea6ac6a69afabf9706000000b234b07c15b1470092f352a0da2773d43f832ab3d0f4625d51b47277fa"]) (async) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000440)=0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x3, 0x6000, @fd, 0x9, &(0x7f00000004c0)="ec70947600c72475c30ac8e057dfe6532ae57c81669c7ab8c87ea5baa4af06ac6e2bc821df99027300dab33d0e1497d353811f6039fca04f7bd0d9e949b60a406aae71fe88408ce1ada48271bce4f4c06d4f49b4a39fb04e79802d9cd9dbdf18828d5edba29c815da8d6861653e2cfe9388de2c2a06e4e4c55267c6daddf33619e2a71588d7f9f26552bd460860d0fa0b7983aa11bed90f93a6ad0ab32531a7d42c0093bd2d70e41a699620e251f1c3791350a55dc61836d11ca58", 0xbb, 0x2, 0x1, {0x0, r8}}, 0x4) io_uring_enter(r0, 0x601a, 0x2, 0x3, 0x0, 0x0) [ 849.459390][ C1] scsi_io_completion_action: 11 callbacks suppressed [ 849.459422][ C1] sd 0:0:1:0: tag#4039 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.475984][ C1] sd 0:0:1:0: tag#4039 CDB: opcode=0xe5 (vendor) [ 849.482330][ C1] sd 0:0:1:0: tag#4039 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 849.491369][ C1] sd 0:0:1:0: tag#4039 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 849.500407][ C1] sd 0:0:1:0: tag#4039 CDB[20]: ba 01:33:57 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:57 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x9, 0x0, 0x2, 0x0, 0x1}, 0x5) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:57 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:57 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x162}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async, rerun: 64) write$nbd(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000680)=ANY=[@ANYBLOB="01006909a1f2e648ae1b6c11dd00000100000018000000b13509588a010101ff3d62b28602e524ced9ba4acbff9093f060e7f5af84f9a36ce777dbd73ab7784ad75907ca88c69c24a7a661869ed349ed0861427a014df34854cce51a19b676bb4679f4", @ANYRES32=r0, @ANYBLOB="ffb438ea6ac6a69afabf9706000000b234b07c15b1470092f352a0da2773d43f832ab3d0f4625d51b47277fa"]) (async, rerun: 64) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000440)=0x10) (rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4107, 0x100b}], 0x1}, 0x2) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x3, 0x6000, @fd, 0x9, &(0x7f00000004c0)="ec70947600c72475c30ac8e057dfe6532ae57c81669c7ab8c87ea5baa4af06ac6e2bc821df99027300dab33d0e1497d353811f6039fca04f7bd0d9e949b60a406aae71fe88408ce1ada48271bce4f4c06d4f49b4a39fb04e79802d9cd9dbdf18828d5edba29c815da8d6861653e2cfe9388de2c2a06e4e4c55267c6daddf33619e2a71588d7f9f26552bd460860d0fa0b7983aa11bed90f93a6ad0ab32531a7d42c0093bd2d70e41a699620e251f1c3791350a55dc61836d11ca58", 0xbb, 0x2, 0x1, {0x0, r8}}, 0x4) (async) io_uring_enter(r0, 0x601a, 0x2, 0x3, 0x0, 0x0) [ 849.622606][ C1] sd 0:0:1:0: tag#4040 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.632485][ C1] sd 0:0:1:0: tag#4040 CDB: opcode=0xe5 (vendor) [ 849.638829][ C1] sd 0:0:1:0: tag#4040 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 849.647901][ C1] sd 0:0:1:0: tag#4040 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 849.656946][ C1] sd 0:0:1:0: tag#4040 CDB[20]: ba [ 849.662135][ C1] sd 0:0:1:0: tag#4041 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 01:33:57 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) r5 = syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r6 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000340)={0x57, 0x1}) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:57 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 849.672058][ C1] sd 0:0:1:0: tag#4041 CDB: opcode=0xe5 (vendor) [ 849.678388][ C1] sd 0:0:1:0: tag#4041 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 849.687439][ C1] sd 0:0:1:0: tag#4041 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 849.696478][ C1] sd 0:0:1:0: tag#4041 CDB[20]: ba 01:33:57 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 849.733127][ C0] sd 0:0:1:0: tag#4042 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.743014][ C0] sd 0:0:1:0: tag#4042 CDB: opcode=0xe5 (vendor) [ 849.749338][ C0] sd 0:0:1:0: tag#4042 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 849.758381][ C0] sd 0:0:1:0: tag#4042 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 849.767455][ C0] sd 0:0:1:0: tag#4042 CDB[20]: ba 01:33:57 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x200000000000000) [ 849.781863][ C1] sd 0:0:1:0: tag#4043 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.791715][ C1] sd 0:0:1:0: tag#4043 CDB: opcode=0xe5 (vendor) [ 849.798047][ C1] sd 0:0:1:0: tag#4043 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 849.807100][ C1] sd 0:0:1:0: tag#4043 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 849.816162][ C1] sd 0:0:1:0: tag#4043 CDB[20]: ba 01:33:57 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x700000000000000) 01:33:57 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 849.862094][ C0] sd 0:0:1:0: tag#4044 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.871951][ C0] sd 0:0:1:0: tag#4044 CDB: opcode=0xe5 (vendor) [ 849.878310][ C0] sd 0:0:1:0: tag#4044 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 849.887358][ C0] sd 0:0:1:0: tag#4044 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 849.896421][ C0] sd 0:0:1:0: tag#4044 CDB[20]: ba 01:33:57 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 849.962849][ C0] sd 0:0:1:0: tag#4045 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.972721][ C0] sd 0:0:1:0: tag#4045 CDB: opcode=0xe5 (vendor) [ 849.979052][ C0] sd 0:0:1:0: tag#4045 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 849.988094][ C0] sd 0:0:1:0: tag#4045 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 849.997234][ C0] sd 0:0:1:0: tag#4045 CDB[20]: ba [ 850.003600][ C1] sd 0:0:1:0: tag#4046 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 850.013453][ C1] sd 0:0:1:0: tag#4046 CDB: opcode=0xe5 (vendor) [ 850.019780][ C1] sd 0:0:1:0: tag#4046 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 850.028824][ C1] sd 0:0:1:0: tag#4046 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 850.037859][ C1] sd 0:0:1:0: tag#4046 CDB[20]: ba 01:33:58 executing program 4: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x100000000}) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x11) dup(0xffffffffffffffff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64, 0x1}, 0x400) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:58 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) r5 = syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r6 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) (async) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000340)={0x57, 0x1}) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:58 executing program 0: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x400000000000000) 01:33:58 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:58 executing program 2: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) (async) syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)) (async) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) (async) r5 = syz_io_uring_setup(0x3b63, &(0x7f00000002c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) (async) r6 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd, 0x6, {0x0, r5}, 0x4, 0x4, 0x0, {0x0, 0x0, r6}}, 0x80000000) (async) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000340)={0x57, 0x1}) write$nbd(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:58 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) [ 850.779407][ C0] sd 0:0:1:0: tag#4047 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 850.789268][ C0] sd 0:0:1:0: tag#4047 CDB: opcode=0xe5 (vendor) [ 850.795616][ C0] sd 0:0:1:0: tag#4047 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 850.804647][ C0] sd 0:0:1:0: tag#4047 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 850.813678][ C0] sd 0:0:1:0: tag#4047 CDB[20]: ba 01:33:58 executing program 5: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_io_uring_setup(0x1f16, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x8281336) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:58 executing program 1: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x113802}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x2, 0x10}, &(0x7f0000000440)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000300)=0x8281336) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x6019, 0x2, 0x0, 0x0, 0x0) 01:33:58 executing program 3: r0 = syz_io_uring_setup(0x5d3, &(0x7f00000000c0), &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00'}, 0x0) syz_io_uring_setup(0x1f16, &(0x7f0000000240)={0x0, 0xc206, 0x2, 0x0, 0x343, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x20000401) dup(r3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_ent