26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db007c07bef95399968e38859798fcb72b81ff0c18dd0fd7edbab2d075d253f5333592330f0b5166bc7604c3d6b7ad39dce65870b476ade66149c3e8f0f2ee51f7e9b403f49b37fef228efb4625475a02d735c4304f102049ed9764276d19cbefefc5ef78296837d7735e172379d1d5c0225c35dc6119016e63995bff049de2fa3195d02cb977382617fdef078b7dbc97e7aec272d495cf9ce2443fdf394032eb5c875094c5124514165b448d78aba1765b138fa5d328771a6674dc27f5734e217927803de4baf2cd1fafaedb9b968de50d2577ac1f1d8a1dae244beee563580e7208628f0d259e68e45347578232d627e0950", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB="10f67019fe"], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1670.703721][T13578] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1670.770313][T13581] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1670.776366][T13578] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1670.906836][T13578] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1670.906836][T13578] program syz-executor.2 not setting count and/or reply_len properly [ 1670.998486][T13572] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1671.055349][T13572] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) setresuid(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, r3}}]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, r5}}]}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, r7}}]}) fsetxattr$system_posix_acl(r0, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x6}], {0x4, 0x3}, [{0x8, 0x0, r3}, {0x8, 0x5, r5}, {0x8, 0x4, r7}], {0x10, 0x1}}, 0x4c, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\a']) 17:20:34 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x990000, 0x0, 0x1, r0, 0x0, &(0x7f0000000080)={0x0, 0x1f, [], @p_u8=&(0x7f0000000040)=0x40}}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000180)=0x5) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:34 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1ff, 0x3, 0xd000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0xfb, 0xffffffffffffffff, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x8000000100, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1671.324512][T13609] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1671.324512][T13609] program syz-executor.2 not setting count and/or reply_len properly [ 1671.354396][T13610] FAT-fs (loop3): bogus number of reserved sectors [ 1671.365496][T13610] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1671.427661][T13609] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:34 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x4, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1671.468402][T13609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1671.480364][T13610] FAT-fs (loop3): bogus number of reserved sectors [ 1671.494427][T13610] FAT-fs (loop3): Can't find a valid FAT filesystem 17:20:34 executing program 3: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000100)=[{&(0x7f0000000000)="1400050900000a0e6661748ea039a20a570e000000e800", 0x17}], 0x0, &(0x7f0000000040)={[{@dots='dots'}]}) 17:20:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000240)='net/wireless\x00') ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000280)=0x4) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="08000000d501f78db3aeb60d53900000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c5fbc2475cc6474c7469cee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da0010a2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00db00"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ptrace$pokeuser(0x6, 0x0, 0x7f, 0x2f) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:34 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0x2006, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100], 0x0, 0x102400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12021, &(0x7f00000002c0)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1671.675233][T13628] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1671.675233][T13628] program syz-executor.0 not setting count and/or reply_len properly [ 1671.746169][T13634] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1671.786057][T13634] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:34 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = fcntl$getown(r1, 0x9) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c009900000000800200000008005200", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x88100}, 0x4000000) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r0, 0x82000000}, 0x10) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r6, 0x0) mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='fuseblk\x00', 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="fbd506", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r2, @ANYBLOB="2c4943f93db772db1d8e68050000000000009336f539ba33002e16b143d9e2fada43f357f6946e505f705477db421a0549c7424c7d5e55fd0f478b816d67db33175be357fc7324986042a5be102b5eb79ce63f355123dc3795c1b62f59f83e19a3bba126e3317c184ac1a21de91add9d", @ANYRESDEC=r4, @ANYBLOB="62626c6b73697a653d3078303030ffff30303030303030313030302c7375626a5f75ff65723d8f73646f73002c66756e633d4d4d41505f434845434b2c64e1fe860a473845a6c71910a3cd6f6e745f61707072616973652c736d61636b66736861c2e2ef09726f6f74636f6e746578743d7573b3e35f752c726f6f74636f78743d75", @ANYRESDEC=r6, @ANYBLOB=',dont_hash,permit_directio,smackfsfloor=!\\,\x00']) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={r9, 0x82000000}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r10, 0x3e}, &(0x7f00000001c0)=0x8) 17:20:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xaa15513c184d7828}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYRES16=r0], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x800) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x404400, 0x0) r3 = getpid() getpgid(0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = getpid() r6 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r6, r5, 0x7, 0xffffffffffffffff, 0x0) getpid() kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r2, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0x7fffffff, r3}) r7 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1672.044231][T13616] ntfs: (device loop4): parse_options(): Invalid gid option argument: 0x00000000ffffffff [ 1672.082757][T13652] FAT-fs (loop3): bogus number of reserved sectors [ 1672.125110][T13652] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1672.190830][T13661] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1672.222389][T13661] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1672.223001][T13652] FAT-fs (loop3): bogus number of reserved sectors [ 1672.243384][T13652] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1672.262292][T13665] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1672.303458][T13616] ntfs: (device loop4): parse_options(): Invalid gid option argument: 0x00000000ffffffff [ 1672.327250][T13665] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1672.746398][T13616] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1672.746398][T13616] program syz-executor.4 not setting count and/or reply_len properly [ 1673.284142][T13616] ntfs: (device loop4): parse_options(): Invalid gid option argument: 0x00000000ffffffff 17:20:36 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000000)=""/153) 17:20:36 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = fcntl$getown(r1, 0x9) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c009900000000800200000008005200", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x88100}, 0x4000000) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:36 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x3000}) 17:20:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x0, 0x5f5e0ff}]}}, &(0x7f0000000300)=""/248, 0x26, 0xf8, 0x8}, 0x20) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x9, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="147d090000a60e666174000404090a1000027400f8010000000000000000000000000000579daa594c9557107e62663072a6310d1488bdc3b6eda897737cc69f47134bc0ba6990122ed4b49933b5c08ca535ec96e055cd5bc0c82d14ec35020bb3cd723e55dda8581d1e7a9e6cff6f0db25d8f8d27befefcfc1ef90b9b90f11e2b60946290ff143d9821a3ef1dc3a613f50c288f38d265bb4b6c09ddc806e472c9b516eaf8443816d34186becd15d5db5741109d4034e2d413394b6e533672ef2e74c6b071da4e33e99daa0c", 0xcc}], 0x2080000, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) modify_ldt$write2(0x11, &(0x7f0000000000)={0x8, 0x20000000, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x2) 17:20:36 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = semget(0x2, 0x4, 0x1) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000bc0)=""/4096) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x3, 0x94, 0x800, 0x100, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x2, 0x16, 0x401, r4}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x200080, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}}, 0x804) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[], 0x1e, r2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r2, 0x1000, 0xa3}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120036173683d78786861736836340000000000000000000000000000ff0300"/79], &(0x7f0000000a80)="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", &(0x7f0000000240)=""/163) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1673.781835][T13708] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1673.790487][T13712] BPF:[1] ENUM (anon) [ 1673.802358][T13712] BPF:size=99999999 vlen=0 [ 1673.809219][T13712] BPF: [ 1673.812138][T13712] BPF:Unexpected size [ 1673.818139][T13712] BPF: [ 1673.818139][T13712] 17:20:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x48000}, 0x80) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:36 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = fcntl$getown(r1, 0x9) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c009900000000800200000008005200", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x88100}, 0x4000000) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1673.874469][T13708] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) [ 1673.978753][T13708] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.018308][T13708] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:36 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x2200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/130) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1674.158512][T13744] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:37 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x800, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000100)) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000040)={0x81, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) 17:20:37 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32=r1, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="6606de6f", @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x1018c1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x6, 0x2, {0x1, 0x3, 0xffff, 0x2, 0x6}, 0x40}) 17:20:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) 17:20:37 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x82000000}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = getpid() r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000040)={0x0, 0x2e, 0x0, @tid=r3}) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="08f200000300000008005204", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1674.453027][T13749] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.510756][T13749] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1674.544436][T13768] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:37 executing program 1: write(0xffffffffffffffff, &(0x7f0000000140)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x4, 0x2, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xcf, 0x0, 0x8, 0xfe, 0x8000000, 0x1, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x8000], 0x0, 0x81494}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000300)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010100}, 0x1e0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)='xfrm0\x00', 0x6, 0x8, 0xe20}) 17:20:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/130) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:37 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = getpid() r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) move_pages(r2, 0x4, &(0x7f0000000040)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], &(0x7f0000000080)=[0x6, 0x8f0], &(0x7f00000000c0)=[0x0], 0x5) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:37 executing program 2: r0 = getpid() r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x4, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) r5 = getpid() r6 = getpgid(r5) kcmp$KCMP_EPOLL_TFD(r6, r5, 0x7, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)=r5, 0x12) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r7, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1674.793853][T13783] sg_write: 3 callbacks suppressed [ 1674.793868][T13783] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1674.793868][T13783] program syz-executor.0 not setting count and/or reply_len properly [ 1674.914153][T13793] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.994618][T13793] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x100000000]}, 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f00000000c0)={0x0, &(0x7f0000000040)="5be0bffbb4cb283f2acffb232827ab802a08a1aac2e469a857feeaf0ea9d7614bfae0977c345483ee5b6d95e36f0c088f6c73c794d7d0b4193d77d92a4e9f3a0870ae4a69f6bf42beddd24480b577aabf10f19a75f1c4c25fa22f503550f80dd154f0edf685f5e28a5f4672db13cc6e542626da9", 0x74}) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0300000068000a01000020763f0362391c57bc2475cc6434c7469fee863a839c2ca897786d22730a7c4b891a5f9b1395c2cd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:37 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20302, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000240)={0xffff, 0x5, 0x77}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000180)={0x82, &(0x7f0000000040)=""/130}) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[], 0x1e, r5) keyctl$clear(0x7, r5) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:37 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1675.170549][T13803] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1675.170549][T13803] program syz-executor.2 not setting count and/or reply_len properly [ 1675.228696][T13808] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1675.293960][T13808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1675.342868][T13803] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1675.342868][T13803] program syz-executor.2 not setting count and/or reply_len properly [ 1675.371360][T13810] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1675.394646][T13810] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0762391c57bc2475cc6474c7469fee863a839c92ad97786dca0000000000000009476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:40 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:40 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x92) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x42, 0x0) syz_open_pts(r1, 0x80000) 17:20:40 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xe9) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='/dev/sg#\x00', &(0x7f0000000040)='^\x00', 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) [ 1677.367429][T13833] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1677.367429][T13833] program syz-executor.2 not setting count and/or reply_len properly [ 1677.424651][T13839] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:40 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001740)='/dev/hwrng\x00', 0x109000, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000017c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x4004) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1677.493163][T13839] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) bind$l2tp6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback, 0x8, 0x4}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[]}, 0x1, 0x0, 0x0, 0x4080}, 0x48000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1677.565163][T13839] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1677.565163][T13839] program syz-executor.2 not setting count and/or reply_len properly 17:20:40 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1677.609638][T13833] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1677.638492][T13833] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:40 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc873c71145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd"], 0x92) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) r4 = getpid() r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, 0xffffffffffffffff, 0x0) getpgrp(r5) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1677.699938][T13850] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:40 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20302, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000240)={0xffff, 0x5, 0x77}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000180)={0x82, &(0x7f0000000040)=""/130}) r5 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[], 0x1e, r5) keyctl$clear(0x7, r5) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000d50104000000000100000100000025bdbc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8fca088cb0e290476c85f3da616da2f4b8c2ee7aafe1de28d1f9f58db9ba4680c8b1f90c4fe7bc4a951fc3d183dbd2a9977a12f2a906a87d4b19645cb40f0c818e2cdefe25c8e83a1d62680429bb1773fecad35c5feea2ba9778e73b5ff95762f3f58c71f391450b818e9a83da382fdfd52e86cc8f27813a0b1908a7f764d12716c6f0d46faa7800"/198], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r6, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x70, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17:20:40 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd74bc3ec5f0a0db6fdb0700000068000af5000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafdf4b62cc893a726fee74da03cacbeae1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d16d6adbdad491c05065dbff66054f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449060000003fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36bb948a510fd28e57b6316c56861a22e1fb26ad126b174a11f3840"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:40 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000640)=""/143, &(0x7f0000000340)=0x8f) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {0x6}, {0x8, 0x11, 0x7f}}}, 0x24}, 0x1, 0x3a000000}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4044811) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='discard-\x00']) 17:20:41 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) 17:20:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffeae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x101000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc002, 0x4, 0x48e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = socket$unix(0x1, 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="1986c360d9b47aec0f17d54c94e89666cc76631716b9d75d33e7c47c0862f9e1f9c91a0263b56408d7fd1e95736cfc2aab2a2d4799db6918ef", 0x39}, {&(0x7f0000000240)="38bfa7d80b59c8a273b382242351df15b47f3b9cde699bd8380dc42deee69934ad76514c6b7084803aeee2ed34f973d4bcc14534d2d0346ac76e17715ab3a8a1def9a7f309a43316f7a04d62acbfd157a5829a940025afe80e89d8feaf49157445c12c1dea17f49c590a7949d36e812457fb1f2e2a4aab3c9e10a1e3fdb8162b9ce2c8cc14775161c0e4308320f827bd446eb16a50fd3aa6f2939a877c0ae5c9db2f792b414f62c325411b9d94ed41aedbf414eeb7ae", 0xb6}, {&(0x7f0000000300)="7aff6f9c5bc8110f79f77666557abd973532346c1476ea6225cdcf865c7cc35eb41605e830e37af84e1d10545f313acfde32429e7a33d14ab7c3f0c189ef601f33ad0ed35c2314f76f4cabf54fc9adbb6d66af07ee3694dffab4a0751c4b31f7830d6e9f98f084d610735657f5e4fa6fb510b6f25e7a3183e502c3fb944e927535369d58982b70548fe15b43645af4996d2a79c9c3ec16ec631da78fffe6f014dcb17d6b5a5a8dd4f27f42aefbd840d7663ca37dd85f3ef807030d", 0xbb}, {&(0x7f00000003c0)="6c6cc383f4377ac41bb028b296b73a23c341604a5f9db6fe1b2c4da93e4979ccf7723d0739aca3611cf31a2a415254a784c853d43cad94f21af2f879ba1d0a86b8160ae4179b250c96e5b5f148160a36f92535e4ab62344cd7919fb4964ea992ae1ce9950109e133c4dc91559934d9a3121d016b57a11d5bef6579a65f58f3c124b49b9056760c3bfbab474863dc069679a4beb6990e784ac6c5a84a444c1480cda90acabd45a61a3d074833cd26387d24e6716f1d8675e4856c6d763fcdba0dfbb34612439db7da82937cc7fb8c1597b248da3d0e9a762e9edd", 0xda}, {&(0x7f00000004c0)="8570acf3d002861aa6967925d5943b280157a259a39601d5cf4b700f0c108e5dac4ad3104e9b932a8a160c0cb54a536e7e7053145a4fb1b8eeab4e80ddf55c8467eca5eb3259d1a4124558dc15d340b2e27c8fc397c0a0b3f87dfa069f8daf2a66013cb60ea0528485c30837db1f1564d111a7dfc39054b8861d4a649104e41b93c146d40ac618e264785fe9b9", 0x8d}], 0x5) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000024763f0362cae1a4d1a5a0c02c74c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee924d6db6fa309f77328dfc7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc8900}, 0x4008894) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000580)=0x1, 0x4) close(0xffffffffffffffff) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@remote}, &(0x7f0000000600)=0x14) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1678.386184][T13888] tipc: Started in network mode [ 1678.431167][T13888] tipc: Own node identity 7f, cluster identity 4711 [ 1678.470040][T13888] tipc: 32-bit node address hash set to 7f [ 1678.492640][T13891] FAT-fs (loop3): Unrecognized mount option "discard-" or missing value 17:20:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x5, 0x80}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:41 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x4e21, 0x9, 0x4e24, 0x12, 0x2, 0xa0, 0x20, 0x6c, 0x0, r2}, {0x74, 0x4, 0x3f, 0x9986, 0x800, 0x5, 0x1f, 0x5}, {0x8, 0x10001, 0x10000, 0x100000000}, 0xee2a, 0x6e6bbc, 0x2, 0x1, 0x0, 0x1}, {{@in6=@private1, 0x4d3, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x2, 0x5, 0x6, 0x8, 0x8000}}, 0xe8) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x306d}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x3c8}}, 0x48000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="63617294106447dc0571ac642c200d6cd9f1d41c48545448bc5efdabe51d04d110cee3c1ac905dcae36860369505df0031f54072dcfe72a2d68bdf7969e0842cc86a67255ba809f5e55c04efb7f3ab655c5daa84ca80d62cb35e3a888dd0f407ac8b34d4fa52d8c07eeb70c211210fc51a113407abd355e0f2de7d8fb76cf24fb53fde860d193c00a9b0cc6fe7b82096229e6aa872173fcdf6cbd28944062970f617c1089f6bf9a15bd6d810364ef3b33ac75a4a1bbf904844bcb5e7755d493306"]) 17:20:41 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000040)) 17:20:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x3068, 0x1, 0x10, 0x0, 0x8, 0x5, 0x2, 0x4, 0x0, 0x101, 0x0, 0x0, 0x0, 0x100], 0x4000, 0x100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1678.749407][T13906] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1678.749407][T13906] program syz-executor.0 not setting count and/or reply_len properly [ 1678.774772][T13909] FAT-fs (loop3): Unrecognized mount option "car”dGÜq¬d" or missing value 17:20:41 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800030051c63c974e8bb7d209b045339dc78cff775f4daa7b2dcc41791c66bb82906c3dd4df52778ddcf6d351db7a62f0ee59a03d6b711024f128bd37affc17cd9204686420d9a102ce04866b9f5be695b3206323e60d9824e37fdff16142056327da", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1678.821061][T13917] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1678.842429][T13909] FAT-fs (loop3): Unrecognized mount option "car”dGÜq¬d" or missing value [ 1678.862028][T13917] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:20:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000d50104000000000100000100000025bdbc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8fca088cb0e290476c85f3da616da2f4b8c2ee7aafe1de28d1f9f58db9ba4680c8b1f90c4fe7bc4a951fc3d183dbd2a9977a12f2a906a87d4b19645cb40f0c818e2cdefe25c8e83a1d62680429bb1773fecad35c5feea2ba9778e73b5ff95762f3f58c71f391450b818e9a83da382fdfd52e86cc8f27813a0b1908a7f764d12716c6f0d46faa7800"/198], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r6, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x70, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17:20:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000640)={'veth0_to_batadv\x00', {0x2, 0x4e21, @loopback}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="400005"], 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f00000001c0)={0x20, 0x7, 0xf1, {0xf1, 0x11, "f1fcba1512e38210779792b3e9b08462d90f150b458e5a59068ba07fae250ec43b1b7f019c048fbc253ccaba6c8943fe307731193116bb8de0181c08f184d7a2ec81eb0655abec5ca5497a09a30d9acc2e12006b8713dd913859c98898fb1017f65db16d7d6abba812172a263bf8921d2f970dd10ca5f462c1d945690e1a57a952b4356f93e6f3ae99349c4371735c809eed6038fc53059d3ed3f02a9320b4158022c53d610d6b7c2325d33f293d950236b9e05ab0e68b949fdaf8719b384df2eb8d057cb2169a3b06c8a3d9927806b2b15091122d4dad2d295616380f80c9b5c90659fa9493e74f2569efec4e7120"}}, &(0x7f00000002c0)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "47298ef5ce4500ac01d15c83527f18090e83a0f6b49070bbffcae3898ad6df3bb0e3fe7b82221df90549be77a672874a8f459d59ada973114af6db57e17791619e9351465b7047b12442f0f1a6441986ac2e6c6b2530154ce7faa3f03639ab2efb7aca77d082caea80924fdf1d2391e74ec055d15d775efeeda1dc9f9f85e7d46aaf36f7f0a98e9064f5f61919d2a0ecdd24e2e42cde55f9b321f13da0b7372812e4b12997c95d2906fb756084388404ebaee3fb9abc4c7071c711bc236fcbffb9"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x20, 0xf, 0xb7, "418c10ea587459a59809ae3c071c58241a19fa4ebade8951c04ffc1389a6449d052d37b200453b71466f80db6e11338a1d3471b22a1f85e9b886b4c7fdb936247b479e2eb0d94a2f7833215738a66d1d69c9a85e40117decdf257d4201d46dfd49e2670d6c9a4c76a3ed1f3aa8f169b7b2a22cd9b2fe672eed66cfe5d3675bc0a94a02b55fba826ed71c821f722059e43ea470f0e1f33df8fd10927c0194ecf04fbd117d8b410e6236b49a05f528ee322fd775a8195c5c"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000140)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x7e, {0x7c, "ba63fa19a8f426904aecd20398b1c2fc49e7467e8bc4debf8cbd8dd4ff40577211d30037a0c8a47284a30c18c93f1c556445e56b82de0719d5dc486a74be5d4bd0d0ba840e3e461756374d32054c194e9e0fa72406e65ad08d93ad00eefc5413259432c359942793a4d501803c4f3f182b9bd99034f0ef33f8c77f42"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0xfe}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x5}}) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1678.989677][T13929] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1678.989677][T13929] program syz-executor.5 not setting count and/or reply_len properly [ 1679.046817][T13934] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:41 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x8, 0xfb, 0x0, 0x2, 0x4, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYBLOB="2342d5c5ef2ccc6b37ecbe5d33099337bbecb2b2d265d066ada64a3b1adf4594a4e4067cc831e6316074f8b194454c02bde1951416fdb8305db4143a384da25707ec0d305f175822b72787d888ef2704e8827d63652d8b95ab9ce08ed1e63127266840df40469fe7f19cd4705d4060abb9512f50c7071f2de1c5bc1e84e832790c06efed4e3412055fd275cb1b5352175bbc22f33c2b94f7a3e5a31df966034ea834719952c503e31664a8ebe75e8f0fb64808334b91c3f1cc2e13ac7266fbf754a6b9", @ANYRES64, @ANYRES32, @ANYRES16=r0, @ANYRES16, @ANYRESHEX, @ANYRES32]}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1679.109305][T13934] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getpid() write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000050) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1679.178190][T13934] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1679.178190][T13934] program syz-executor.5 not setting count and/or reply_len properly [ 1679.246299][T13929] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1679.278131][T13929] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:42 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7c2b, 0x88000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) syz_mount_image$erofs(&(0x7f00000002c0)='erofs\x00', &(0x7f0000000300)='./file0\x00', 0x7, 0x5, &(0x7f00000026c0)=[{&(0x7f0000000640)="57916faf3c40fc4e376462d1a231db3aec6413d633b47608edfeab065e6b4807ba7c2cd5895758e55c34bf8038779746b9f2b600b191fa2d427d649aa1664857d6c656c7b41690f9247de54fcf9fa84ca9a379d4fda6cff5076630050c8a0af08f3c4797fd9434b2159fee53957dfd4d99562e55e6d0bd82164a610d021639c36e6e32a2baeaa036952d6df3bfe3124775309b96e7485f0eb1307114419254d87f8217d7163ff325e9d6d64a6056a0b33ade8d4fea814451f478f0326562865a5da711c90e20d56d4b57f388011759edfd07e52da956668561a663856d68bfbef73434a2f525b6b35f3fe730c0db4ecf988012e54dfba2d7a5a4fe146c4e2874122dcc76e0e9b13f5daee9776a7edbfbbb737c0bec53edb236458d0e82065b6cc95599e59539c288cac4d4bb806ad8150ec4e8cd815633bde37134f0bf16f2ca62f776240cd3a3d45fdae7a8e1f1c15576dc4bd4d79e1d04733838c30273683c59b678a92282292260058f0eb7361041817ae4b60149292a84f9984e8e75e8a98e777fe0cfe6cb6342f1f6c994a35bd3bef7c1c976d123dc9d5404419f534f9f1783616997f4225a9d966682352f2581f13888933e526d9848f742861cf20ccc77d44df6747a5b4617b771133eabcd25d916b52c2ec90f37a92143c021c4f81bbd29f28fa64f0693fab5bfb3056a4a15118333a17211206f6e23cc55641bef11be33c56e1a4a877dc07c57c86d0600ae88f956881907112cd16d50cd7e07c1a997c43a8d1977a20af0cbd0b45a7df54f1d338c3b6b3869d3b243d853ae3fef59093242a5b5322c50b57ecea808656cac8b02b9ffd6ce419246fc8f91d21d1219e7e68c8715d3ec5569d609dbf5dead55a06c8cac5d998b16210c0bee7aff3ecbbdad506d0e5a2f855f4479d0c626bca19b45783171c9130de0a78b982fdcfa319915bf75e007cb485a82a4d4e1489ff94391575e1067e929c0cd9c720d3f1fb4bd39cf862873058337374ad7041a3fa522a62934c632fd719078c57329786f3b940bb97017cf00a564161403a4330b6d4b58c0dad7065db8c46bca01455943ca97285b4ae166370946456e2cac05cf29f04c83b0f05e9c7cf5b1aebc2bf4615d5599c364a9ef755d83c4f552e4d8f4beb07cf1e4e380fc04b154513d1d193bed8451d6816121ebc8129a73982ffc0f87da1b188fa15709d2f5b4923af630d97eda58799ae9880e9e403074f910ad18cd8c64f178db0286239af7e48be1504a77aa3a5222e6202155dbf5c78b5852144c8fa67bd2c4411712f7933438e6b8f01e99126a8405149d72e8c8506c89f131710ee5e99714fe0b3e809246a6474984f9b0bc3a79e139894a2e50db53a91d80a02fa2efd1cf519e897ccf85d94dedc3ce1da286f91a9295406287415916854b2e3355d52f423aac9df96957b456f4d323f0acc157cef960fb4f2beeff306adb340220bc999c4ffe800088cb8a1fb8d246fe3d42f72b4ba5b33367c5ed68f81a3a740bc6f22eb9261e7fc7851716ddf3b1e8a30b9833ea14f6ba710756a8682f4c70b8f34992819059ecdff0d8b41e0dcdbba08a32da28d4ca4e4c7d0041f7de617830e092a1fbb5df0c91fdf200d257af91c7f10af07e0d76ee6aac3f09d7a068aa3676bd5a4ff3d498b34875cb47ac1d7fd24c3004f192cd91c53b3c9d53657c215312415346a7e46f785a228a9b0b19579a6cfe6a01537514896d3c84f49f25663d6898126c50aa563a3e5553e8e93e4e7f10fd2bffd6fdcef6a04bff098f5f1495d3f7c22da076e7ee1f713611b6e543f3cbb6360d82061f9e3d39fdf6ed16b4470bd1beb82321c8eb9dfb3f4f1f996dd1a6e40ca2d335b74a60d0a45e5ef5ed2872092928bd362bf9dbee65d734ae462d7bddc12e5e8a3593ca294a224b3f0aa87de39e91a2d96285724cb0eb32c775cb03d5afca8ad79f5a0b9cde8448fd193e507a9176a4ca7bfd09a9f5a35534fb3b958a81175938a302e3e2caf591082c83acd48aed82bfcb3fa8c95844c425b981b8d7de4618066e0c4c7771dacf86399762ed880ec388822300326c77d23fd49aedfbca61e5e815e3716bd0a269977d49134801f124ee6df9154e8ccf6b4960b8604eb934c22ba01ec696a7673478e4c951d43f4212cd91022f8704ef2828727e19d80c60a0893f375ba9636883c5ca2d8ae0b4424b03996645848382f09ed2eec1ed0b48025171a43e4719c0f04e3b5ca27635ab2c4f053c23aebd682d7b9773218c9cbf6820bd6d53f274b10568041b5dbe186dcb58f38d47211d1d453beccc004bddff8cf2045184a2b78b2034e83164a025ad4a8a606ae52a55b0cb463b5c357bc63629d83241eb72a20fdeca40c12ec343a736d8ff2819f9c0bea779ab381bdfbf9fe43d30d2965032889034ddadca4b586fa005e65fe501967fa88a26c4ca3c165dd912d5ff24412a4bd84a70b52d8ff67f40f27913d6723d2852fa5f6e5304c60e67135819381e252d371680d675ba9eac085bdfe89391de5485b44b31fa56c6d20fa393cd3eccda696c4a7b84c06c1fb4450f01995ae5446e81da5f372bf4e208b8608d06a2ca7922a756db3b87d4595bf3598baffa912f02fe3fce4b5acd760ca8fa46a68822b74cc841106b6ae3b93d35500eddde89032b96495bd0d193cb9a74ebf630c645180a34f983f79ebe03002154dda14cc4f2d6248d068e167142f8e301d5c03b8989b3a5b86ead665fa4836d55d20d30504ad6be24f7bc9feff2a2326b6bc952631c0bfdb222281bba70617846c2a21f463b644f05ffe0837a15e2473f60f1fbc486de7dc2c8773e5bb2bb28550fdfa919e58080d3860540afa650b7e4f45df5a168ce307f7e0c43def149cd335301e39163ea52f19739ad5401b6b377682c60056caddabe4cad1e8265895a91c793ffab44aca941e4697f8acd059c5af373042b88ae06fe23737f2ce607f6255aa2552f99e46c080e3b8a40081c8693785246a2f9647be3081f209a1088da39fc752d8d12e0753ac02944774459c67588698642f286f06176e5b086d6179d0d523cb549c708a907e845e4a907065292f91ce96584e32460eaa8054c1c6e48e93df86ef9f1b62e3d2b9039021e0ca32ac225ffa402503ec240557ab75dbdfa25f8b3eb6f816147e97e2274f9b9fc547c974745d6d25b9937376481a9275f6da7aa451c51745125b81efef30592dc945a96fa514b29c34ac095b4c98356dc28b70c0d57b55f1047dbb799eb027dd586fe05e9511519f31e309f628406c4a1bc99d64e2ef7851437018316e935df3e9c3091ecd42af61cf719f712f8760a0df8166dc9e54253dba8656d7777463b4d1a4f3f92c17b5cd0fbecde84f629ed1178667c0ce324f67f18c6150276e66c1f2b6d063b4208f77f2af1be8096642b8969c70ee34ecbb073615098a2da938f8e782a14f4062e6c6f5e84436f193e04fa60de42f3ae19688322f2ab45767b58c5688f8fc61b2645b9f83fa89673f340545db208a1af03cf9999999311e84652d2a9f156bff8037ab65bcae01ce178fada51311ee40b37adf7e99fc64dd6c3a20b604267e5cea6041a099466855d9789ff326667c64b9b21e8e7427c34a4bb25894894815f7173c05cc26903d2535c64f51c48a1252f8d7a69f91e1122dc9ae90be11c8bd212b4d502d6ff79c2729cf00893ac0f3a05baaa76f07d1f37c19ec6c2f1ec73636a4e10835a2771b056688f09816d5022242465afc293268cd9f8e0a088e092dc1250d1d13e65733385db70c7b1f30006e686b4a0c00f5a3e0b6369c8e35c3a130ed779b67285c318cfc09a85b4d2cd6a239f12d8776dc0ceb0225a8b8dd8308995a87de3672b12cbdf860432ff6404bc532e06bbf4b869ed0db74d06c9e51b8ee3a189bffa0f7f4498bf5df0e0fb2d0b09c00b23be4310c5c5e87e4c6d4b4e074a901bd257d448cc99f231ebf49e3bd6dfc05d33583524a0887ba42c2af58b676a4deb60ab2797f7ec027920ae40486ccef3d40846408c78cc0d59b871b490e6fc01e913a1318392cc04f956b38b61a8238705fbbbf5fd6cc7047985622aa761862f7df5378531e9ba187bef79fefaca18ca5e585f11c05db3d43e16078757a1383d1884e061f5ab929d999c3a5f2ec1d3976409d2c17c5d69651a0cf743dfd531dda3abbab72152b5167161de5126205562b2221cdffd3b5e0a0eb5d5f3658fe580700ec555f2b6f79d34d2f20ae514ad8b2796a97c2e89b24ba62f9f06a047c54aad31acb239ff513941b7ced8c86a5a9315eb1093b15ad7274ed51bf4f03339752f6aa802b32a04cae3df2bb03efc20b2143ec50319bf48f2b89a7a846456fd247a557200cc9893c8d002df32963b6a3ae685fa3e39803d3ed4221105ff406f48aa30d3275d6df0c6e8aaea8f989b1ea9f8d2b3677e59566e105a981b71304e28a10f90217a5b045004abebcaf0f2fda7176437b4bad6a5dfa1c383fb5d6c3dd92720c262e414b917ca5a5fa8ac862fb3a712a3f284d2457ba97bb8c6324075a9993b084c83eefa5a6dadb8077ee58fdb539328d9eee2f17cd8634e51b4916e66e60c498d9054a3ed148f22251689b44b3032a1ebe1cbaed83ebcb385e6f7647f5c65fb1db0b36422125822a00c86cd79eb6d4007f14563bb01241308ecd742d34a8771d3ab811b71ad02a8e85f14d34c4ea6d768d0634c5f5671b85b39d4a59e957b69d7cff8464c25b7ff7f40b88504e06f0edbeed950e1ce9ae7fbc17adcf4f9e1947982d13f9a2eb41e3f1009017b6c6873e3ec23556f1356f63897e22c397b50a6fb34184c875a05f9d4f150f1ac5bf945b5c102d7a97d2fa077315b40e908c38bceaba7d81e005004cb672c6012e16d614edbb02212cf3c0eef8fa88818c64843268450d73fd25c06196e55c87aa5553006b94af373dfcfd85f6804140cd18b195ac3a8fa6c6b5262491ccd5bcdbe451e0aeb4328e1041b167ac74fc7ccd01194979674694874791ce246ba8ec9882f27787b19187e2e0a9b02753e637025a5256159a65bd51ddf7639294239f4f666676e0e098b292682f60d784595435b13fbc91fc8018031487b9d6fe75fcc343ef897608143ec7cc5bd9fc6060232358d2148db3f1391999c72af661b0ef1df097446d459f98d7049a90e724a7e30e5146b270df1ee384e3e063435b79440784153c0bb7c0b0422d4895d2aef756b01cefa114d55caa7ab5c6237b29b95276e0201c54fe9e5ac411155040cd7740a42b595bfbbcb770abdbacba78aad5281eb7ab0c17fdabfe79a6a78784abd7e698a3576ab62be9bf81fca9ac85266ac2c70083fd43068889b2fef4dc0b55aa683ee81a8031fa55bf23c63c4c300f7026ede73031869dcf013c42d3f4e23bb632804917caa667574862ce7111ae70419b7044e7f13434a2234386b312acb98a8200140f4f7c2b2f7a0b949a80c972c90c576fcffdd95cea03f3de5ce6194d466bc32305ca94bc5a356459f65ca26947feda07694138e3ffb14b6ada55f87a8ef587950dd20c8efcba790193208224697ccd6bd7d3b8a5a5044a9079a4008da552abce11822b801c830bb2153ca16b0f355da10aae8ea9e379941935723b28e8f8f09037c83968e8414615f51660d0d53e173b69881e2113a8b60b3f26389b7e7ced19276e4dacc6219ec933f69c83b69d963cfeb37ad39671827bf41cb24934fb4effcd7eb7b098689eb33bab5ec156c88f14fcf83b341b82b2e4a52536c890fc9b621998869411bc270ca47aea3eb36097d359835", 0x1000, 0x9}, {&(0x7f0000001640)="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", 0x1000, 0x800}, {&(0x7f0000000500)="bb5357fdbd6e30c2e8293a92c0878e4f0e0a9624eb9bca6566", 0x19, 0x7}, {&(0x7f0000000540)="aa6d631593decf1c8ee7788f71", 0xd, 0x10001}, {&(0x7f0000002640)="ba2474850bb2a7607693de83be10df2f9c8fd95b854d790f63d162e6cc6892fa172122bd596dffff357c5a7f59e7e7c150ab675befff7679beb50933f92b77d72d94d84c", 0x44}], 0x10808, &(0x7f0000002780)={[{@acl='acl'}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'cpuacct.stat\x00'}}, {@uid_eq={'uid'}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:42 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000300)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r1 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="000001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x20000055, 0x3, 0x38f6, 0x80000000, 0x200, 0x10000000, 0x20, 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000001c0)=0xfffffe4b) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000040)=""/176) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x1000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1679.383094][T13952] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1679.383094][T13952] program syz-executor.2 not setting count and/or reply_len properly [ 1679.443862][T13957] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1679.455916][T20884] usb 4-1: new high-speed USB device number 121 using dummy_hcd 17:20:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100], 0xf000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1679.527051][T13957] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1679.608224][T13964] erofs: Unknown parameter 'smackfsdef' [ 1679.612198][T13952] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1679.612198][T13952] program syz-executor.2 not setting count and/or reply_len properly 17:20:42 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1679.814441][T20884] usb 4-1: device descriptor read/64, error 18 [ 1679.844520][T13984] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1679.844520][T13984] program syz-executor.5 not setting count and/or reply_len properly 17:20:42 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="04143c09b1653170067608a464"], 0xd, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x10, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x2, 0x83cb) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x6, 0xe7}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1ad40b9586b84aa14d29d2349c8dffc3ea127fe85077205bf9f6da79831ff15b007ef656401b89fd0dc997d596127c4ef0caa3ec7ac86c9de18767eddad906d2da8b45f9f452da4fe12fa8cf5182b3f0bf77e9b4180c364d", @ANYRES16=r6, @ANYBLOB="000128bd7000fcdbdf250100000008001100000000000600010008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4085) 17:20:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d5010400000000bbb171b0e57e4135bd4286be9084baa5b5db0700000068000a01000020763f0262391c57bc2475cc4474c7469fee863a839c9aad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x9, 0x6, 0x106, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4010) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r5}}, 0xc) [ 1679.897756][T13985] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1679.932360][T13985] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1679.975601][T13985] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1679.975601][T13985] program syz-executor.5 not setting count and/or reply_len properly 17:20:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x100) r2 = getpid() r3 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, r3) [ 1680.039250][T13984] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1680.102844][T13984] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:42 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="04143c09b1653170067608a464"], 0xd, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x10, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x2, 0x83cb) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x6, 0xe7}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1ad40b9586b84aa14d29d2349c8dffc3ea127fe85077205bf9f6da79831ff15b007ef656401b89fd0dc997d596127c4ef0caa3ec7ac86c9de18767eddad906d2da8b45f9f452da4fe12fa8cf5182b3f0bf77e9b4180c364d", @ANYRES16=r6, @ANYBLOB="000128bd7000fcdbdf250100000008001100000000000600010008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4085) [ 1680.183609][T13994] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1680.183609][T13994] program syz-executor.2 not setting count and/or reply_len properly [ 1680.224228][T20884] usb 4-1: device descriptor read/64, error 18 [ 1680.251782][T13995] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1680.297595][T13995] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1680.396142][T13994] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1680.433940][T13977] debugfs: Directory '13977-4' with parent 'kvm' already present! [ 1680.451382][T13994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1680.516114][T20884] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1680.825998][T20884] usb 4-1: device descriptor read/64, error 18 [ 1681.214246][T20884] usb 4-1: device descriptor read/64, error 18 [ 1681.334332][T20884] usb usb4-port1: attempt power cycle 17:20:44 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x98a, 0x4) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) close(r0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = pidfd_getfd(r0, r4, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f00000000c0)={0x23, 0x3, 0x0, {0x6, 0x2, 0x0, ':%'}}, 0x23) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1682.044218][T20884] usb 4-1: new high-speed USB device number 123 using dummy_hcd 17:20:44 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:44 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333efae7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, [], [{0xe4a, 0x7fffffff, 0xa7, 0x80, 0x1ff, 0xfffffffffffff001}, {0x0, 0xffffffc1, 0x7, 0x5, 0x2, 0x9}], [[]]}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:44 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0xf2cd, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x8, 0xfa, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xfe, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x403a6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7d8f632a3e96b5e00808dae65469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x202001, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x5, @local, 0x8000}, {0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x1000, [0x9, 0x6399, 0x3, 0x81, 0x1, 0x9, 0x3, 0x8]}, 0x5c) [ 1682.177168][T20884] usb 4-1: device descriptor read/8, error -71 [ 1682.200101][T14045] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1682.200101][T14045] program syz-executor.0 not setting count and/or reply_len properly [ 1682.260234][T14056] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:45 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) read$hidraw(r2, &(0x7f0000000bc0)=""/4096, 0x1000) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7, 0x1, 0x81, 0x6, 0x0, 0x9, 0x400, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9c, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x1}, 0x40, 0x3f, 0x0, 0x4, 0x9, 0x81, 0x2}, 0xffffffffffffffff, 0x9, r0, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1682.319568][T14056] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockname$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1682.406810][T20884] usb 4-1: device descriptor read/8, error -71 [ 1682.439378][T14067] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:45 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0xe43c1, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000001c0)=0xfffffead) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000, 0xffffffff}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x13d) [ 1682.517175][T14071] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1682.517175][T14071] program syz-executor.5 not setting count and/or reply_len properly 17:20:45 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x422000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1682.617920][T14077] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:45 executing program 0 (fault-call:4 fault-nth:0): openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:45 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1682.782630][T14077] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1682.829805][T14071] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1682.878505][T14071] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1683.097028][T14051] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1683.097028][T14051] program syz-executor.4 not setting count and/or reply_len properly 17:20:45 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000840)={0x0, 0x3, 0x7fffffff, &(0x7f0000000800)=0x5}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a80)={0x654, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd4}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x1ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @empty, 0xfc000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3ff, @ipv4={[], [], @local}}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x2fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd8, 0x3, "50fa638f79d1cb8e7d73e218687bd854cfd5b44acf2687fbfd2f4a3d6b507a347ea81c05d83b4e068eab6a2cade6b350d5a666e300bfc2dfa32dd768cd07ac456e51fc4341bc690d3b24b30da073e86b094d00c1a4ef2120fae504a8d55c85e21c6b7715b1dc98c77f54dc6ebad4f778a9bd3985a51edce1ca029d9400e3a2c3c928acc57665e75d04e8bb9d42f686b1215066bab236172ea8a7a598e8b859afc717dc4e6086dfa7ff58e6bcc4f7a0290ab6f7ed4006d56a54ee2b8ed12034ba04be8b4ea151812920f9d89ebf6f50d3e1a2b063"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "806faca9965689c7998e1df6d544420e590948ba004b99bf3597d1e6bbeb19f793e3a8794b905b2d9328e68070242df4b8abf3f962e5c496040a4df22c2b42df5a5cc19bcb528a9fc14767810d3dbbe57e6a68af3f7f01c770c815c0fed61d14fa9e1bb8bc00905939c6329ad3865a51f175fae1ddc66db3cde85b1e5836d2b1e1bd667d4c4852587e9a479d95699296534edcf58c75e704f238540a2eba1b59c145306e9077f76cbbfb8363496c77af4dd62a190e9d599c98318c4455213fd871e451d317ce0765e72db4dee7144273135e312591f584a83676d288f9762919094305e7e6d058d412ff898bba5c2e8c0a"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "149265bb8129f1b940431aac5f94bdbd113d120c68c131495063d4e83d7f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd3, 0x3, "414791a332e38d649daae99cb3ef858fb001dc0e4e89c30fa2fcd990ae16e717f3b729d8d451b6ba26ddf81203807b443bd8c7136ab967d90ccd99f7512642704140b2da26a5d4bea97ffbf6c35d84f7cd91c21fae977d716f2380bee06b47c56f5b3950cc36643372270c86fbb1e4ed7949789c96eaeac1d11311af9c2b8a2afb1a2051319f1e075a0361823dc104f24d34a5ced4890230a8b7be73f28f93932749c10caa38a475b05e6f409a16d372f412b30c0ebd8939c1037fb989c43bcaec10496116f04aca00a333639fae62"}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ef}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe37}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x8, 0x5, @dev={0xfe, 0x80, [], 0x35}, 0x7b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x654}, 0x1, 0x0, 0x0, 0x2000c800}, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000780)) r6 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) syz_usb_connect(0x0, 0x3fe, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x81, 0xea, 0xc7, 0x8, 0x182d, 0x21c, 0x45ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ec, 0x3, 0x1f, 0x1, 0x10, 0x1, [{{0x9, 0x4, 0xbd, 0x0, 0x1, 0x59, 0x3c, 0x97, 0x7, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "b727f535909b"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0xe63, 0xfffc, 0x3, 0x1}, {0x6, 0x24, 0x1a, 0xff, 0x12}, [@acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x6c, 0x4, 0x10}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x4, 0x3, 0x1, 0x5, 0x2}]}], [{{0x9, 0x5, 0x3, 0xc, 0x40, 0x40, 0x0, 0xfc}}]}}, {{0x9, 0x4, 0xac, 0x0, 0xc, 0xe, 0x1, 0x0, 0x7, [], [{{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x3f, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x17}, @generic={0x40, 0x10, "c74e922d12536dc6fe878817b82b441c3bd95e39b2c4f23f8c3cd551cc9543c093306eb548b4de24f93ccad321ed062113d3b669565c1dac2d4d323c1ece"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0xb4, 0xae, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x800}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x5, 0x1, 0x7, [@generic={0x95, 0x2, "c66bc58ee2c6f916217dc7dba811192de2248e8eb594b4e3c459a62d71e1a9aa18565171dcba5d559a303f24bfb7df12288e014d6ef676262ab44cb8297e743e10495cecb8432c3de8a64216453ba81feb517548eb7e5ed8c17babd7393320846051ba3e58f04836054cc9d61b3429a65f11d6ff4db03c76fa79b0f569958acd292e9146722b3a71fd65e378c06a46f1543772"}, @generic={0xff, 0x22, "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"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x80, 0x8, 0x95}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x4, 0x69, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa6, 0xed9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x32, 0x20, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x46, 0xff}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x0, 0xac, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x80, 0x1}}, {{0x9, 0x5, 0x80, 0xb, 0x200, 0x1, 0xe3, 0xe}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x0, 0xfd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x6e47c86546d7f569, 0x0, 0xfffa}, @generic={0xba, 0x24, "ad3d8942796358e8c62eccc51148f1deb718606a2224a038cb2c34e1b16aff26e5db3370ca229404743724f11afb031324d478a2d2d86e2e3ec247c65cfdbcf575fd4e77635871e116beaf367e0c2ed49c368526f391190e86d28cf2162a2faaac2a746060872496e33610ca3240e1287a08d765987fa22bf330a99126e1a722e4dce67eea0acba1f650a2d3b8e14f7302d19982e5434378b6cb1e19f488e8c9b52d3f9afbc49ba0ddc41517b70790fe53273c45c39296e3"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x7f, 0x7, 0xbd, [@generic={0x2, 0x4}, @generic={0x58, 0x9, "5a2154005f05a6724bbc93afade05c95ba2ae88527cc2a0090c1d0b5812533f211314a1d2e254e34b29977df3067358bf344f99bcd89e1660dddb271a92f1ed045693d1c4e2ecdad78573ce93e6c4a52b5976fd74224"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x9, 0xd3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xe3}]}}]}}, {{0x9, 0x4, 0xa2, 0x6, 0x0, 0x50, 0xc6, 0xe4}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x7, 0x0, 0x0, 0x8, 0x1}, 0x2f, &(0x7f0000000640)={0x5, 0xf, 0x2f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "da40ddde0f0304af156f9ab9c0d19960"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x0, 0xf0f, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x81, 0x3}]}, 0x1, [{0xa6, &(0x7f0000000680)=@string={0xa6, 0x3, "b3a52754d2c267c70e35da6a9bed49bf028ed17ed570b56ba35fe5b68bb1164b5bf56bfd36b46d4616bcd90571544c9e459738d0a247bc80758c4f19daf6145f6e29e6a2e828f445594aa8a3b3323b82126673361440277eec97deca4ff4dea26bb0352695a51e178db3dc34c7d6ae0bd2830e18e0fe2ef4826d0df01465731164fafd36643b3a40bf0710baeb55a643bdfd64c630dbab5c4257b0266bc772b6700ded1c"}}]}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1683.510109][ T3019] usb 3-1: new high-speed USB device number 81 using dummy_hcd 17:20:46 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x1, 0x2000) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe2(&(0x7f0000000000), 0xd800) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:46 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) sched_setscheduler(r0, 0x0, &(0x7f0000000040)=0x5) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/414], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:46 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x8001, "49e6c1"}, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(r0, &(0x7f0000000640)="0f42623ff0913332dd612a53d18aa99b768a0de0bb85ae394cc9334413dc9cabc1ee9072125bc4d24e8ae984de32bab55a80ef83fe17e487d29cecde1b9e56bada8b676cae4e1f598f090ea1092087478c8286ec9019662ce7c13c57f2a7627270795718806c9a17034558fb4c400aae87955e256de0a7e26a1e3c2bb32b2d35651e5e2fc6be9574531bef22e4654c1e60503be3df7170c5a094f0bf4e02823f", 0xa0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x2f}}, {0xa, 0x4e22, 0x2, @local, 0xff}, 0x2, [0x0, 0x1, 0x0, 0x2, 0x20001, 0xe1, 0x0, 0x1]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:20:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r5, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) r8 = dup2(r0, r1) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="c3c6aad8687e3ec7d4d1a64692dda2d7d9ea9861cab6a44b83353cfc6e5dbf48b7cdfb8824b0fefac1a46bbe17e5cecb67249539f76a5dd66a0fffa4a4d14f6d6d909c214f4363d13a0000000000000000000000000064516c11575d60caf2007f60f22b53458c74c5150e0683d4daae808f9c5106553cafbe6122eaafa5ea33a4b6", @ANYRES64]) [ 1683.784226][ T3019] usb 3-1: Using ep0 maxpacket: 8 17:20:46 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x83, "61728e907ef6faffc6bbd3676c48f48b6a8e8f535f4b89e4da38fb01e5c8a5c56dea33ad4e4e44d9a106ecedce1a976cbc6b1cee7626dd5cb76baf839b6fdee0849ad94f32b07bad668ba97bfc38c0dda82e987aeb508b022dddf54729939c073cc390bd87b2e4a426b96d09de32655a6b71f4ea75186df2547c7dd3ec7cc733dd8b8c"}, &(0x7f0000000100)=0xa7) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:46 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) [ 1683.945054][T14114] FAT-fs (loop3): Unrecognized mount option "ÃƪØh~>ÇÔѦF’Ý¢×Ùê˜aʶ¤Kƒ5<ün]¿H·Íûˆ$°þúÁ¤k¾åÎËg$•9÷j]Öjÿ¤¤ÑOmmœ!OCcÑ:" or missing value [ 1683.972076][T14124] mmap: syz-executor.4 (14124) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 17:20:46 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000500)={{0x2, 0x4e23, @loopback}, {0x306, @local}, 0x10, {0x2, 0x4e24, @local}, 'batadv_slave_1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0xfffffff6) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:46 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474d7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8476155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5dd3c9af11c9d6bc5b073843c3144932de0c6055fa8a985262a5bf7e1a39070bc22202ac2431802bb4de2000000006540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c5683f00000000000000b174a11f387f8feb2c8dc8469518a9000000000000eaffffffcc9e1ad6db3acd952400000000000014b7c6573228e5c52b3be1c45e08f131a952435e758ceb853c60cc786e19e745394797f3efe44ea183438b359c29023b2fcfee0eed5c28f122969634b224722f01650de6859d22e6c8c48f87e318d5da95111b193ae6b3bfea94ddeaf3a7b25bf542482a706ee81a1502b608961d1885da95c28016a009db52e0e9b26c706518993e152b74bd8e2f7793b8fc4909ebb76855048f00"/554], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080000000000fedbdf2531000000080051e4", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db94", @ANYRES16, @ANYBLOB="08000100030000000800db00", @ANYRES32, @ANYBLOB="a76a13258fdf159735c36b2489760cb011dda3c205f54b8331d79678db146fc168a28c0f00685b377df6dd6186b348213e1f1d10246ea466a5625a6c6452d05f2dfa288ab24ef79cfd03c89c030751498cea", @ANYRES32=r0, @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x40}], 0x1, &(0x7f00000000c0)={r5, r6+10000000}, &(0x7f0000000180)={[0xffff]}, 0x8) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r8, 0x82000000}, 0x10) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x1, 0x4) 17:20:46 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfff, 0x0) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000000080)=0x400) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1684.045212][ T3019] usb 3-1: config 31 has an invalid interface number: 189 but max is 2 [ 1684.077620][ T3019] usb 3-1: config 31 has an invalid interface number: 172 but max is 2 [ 1684.121629][ T3019] usb 3-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 1684.160472][ T3019] usb 3-1: config 31 has an invalid interface descriptor of length 2, skipping [ 1684.191830][ T3019] usb 3-1: config 31 has an invalid interface number: 162 but max is 2 [ 1684.199892][T14142] FAT-fs (loop3): Unrecognized mount option "ÃƪØh~>ÇÔѦF’Ý¢×Ùê˜aʶ¤Kƒ5<ün]¿H·Íûˆ$°þúÁ¤k¾åÎËg$•9÷j]Öjÿ¤¤ÑOmmœ!OCcÑ:" or missing value [ 1684.222744][ T3019] usb 3-1: config 31 has no interface number 0 17:20:47 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x9, 0x2, 0xff, 0x4, 0x0, 0x2, 0x400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x1, 0x4}, 0x1, 0x5, 0x1, 0x7, 0xf28, 0x20000000, 0x8}, r0, 0x0, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x100000, 0xa9}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1684.243334][ T3019] usb 3-1: config 31 has no interface number 1 [ 1684.260237][ T3019] usb 3-1: config 31 has no interface number 2 [ 1684.284138][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1684.309553][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1684.343739][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1684.358790][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x4 has an invalid bInterval 128, changing to 11 [ 1684.371694][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1684.384332][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1684.399471][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1684.412658][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1684.428849][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1684.458232][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 1684.478883][ T3019] usb 3-1: config 31 interface 162 has no altsetting 0 [ 1684.654866][ T3019] usb 3-1: Dual-Role OTG device on HNP port [ 1684.674450][ T3019] usb 3-1: New USB device found, idVendor=182d, idProduct=021c, bcdDevice=45.ea [ 1684.686048][ T3019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.701455][ T3019] usb 3-1: Product: syz [ 1684.707495][ T3019] usb 3-1: Manufacturer: syz [ 1684.713258][ T3019] usb 3-1: SerialNumber: syz [ 1684.976451][T14101] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1685.011156][T14101] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1685.164475][ T3019] uvcvideo: Found UVC 0.00 device syz (182d:021c) [ 1685.171375][ T3019] uvcvideo: No valid video chain found. [ 1685.191251][ T3019] usb 3-1: USB disconnect, device number 81 [ 1685.804073][ T3019] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1686.044066][ T3019] usb 3-1: Using ep0 maxpacket: 8 [ 1686.244843][ T3019] usb 3-1: config 31 has an invalid interface number: 189 but max is 2 [ 1686.259225][ T3019] usb 3-1: config 31 has an invalid interface number: 172 but max is 2 [ 1686.273318][ T3019] usb 3-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 1686.292873][ T3019] usb 3-1: config 31 has an invalid interface descriptor of length 2, skipping [ 1686.310684][ T3019] usb 3-1: config 31 has an invalid interface number: 162 but max is 2 [ 1686.320428][ T3019] usb 3-1: config 31 has no interface number 0 [ 1686.334062][ T3019] usb 3-1: config 31 has no interface number 1 [ 1686.341731][ T3019] usb 3-1: config 31 has no interface number 2 [ 1686.358392][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1686.374771][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1686.387301][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1686.400248][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x4 has an invalid bInterval 128, changing to 11 [ 1686.414041][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1686.426068][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has an invalid endpoint with address 0x80, skipping 17:20:49 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xffffffffffff0001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = getpid() r2 = getpgid(0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r7, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x210800, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d00010000000000003d3078303030303030093030303030346532312c706f73697861636c2c753e", @ANYRESDEC=r5, @ANYBLOB=',dont_hash\x00pcr=00000000000000000016,fowner>', @ANYRESDEC=r7, @ANYBLOB=',context=system_u,smackfstransmute=./cgroup/syz1\x00,smackfshat=,appraise_type=imasig,\x00']) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616dacf4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc23002ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d434610fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@fat=@discard='discard'}, {@nodots='nodots'}, {@dots='dots'}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='-(\\\x00', &(0x7f00000000c0)=',^%\x00', 0x0) 17:20:49 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:49 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x4, 0xc) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x10, {0x2, 0x4e22, @multicast2}, 'team_slave_1\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x1, 0xdb, 0x9, 0x69c, 0x8, "106729902632de02b5d7b3c1872a3d75d24b39"}) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:49 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) read$eventfd(r1, &(0x7f0000000040), 0x8) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, '\x00', {0x9}, 0x7f}) [ 1686.456354][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1686.468679][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1686.533341][ T3019] usb 3-1: config 31 interface 172 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1686.548729][T14218] FAT-fs (loop3): bogus number of reserved sectors [ 1686.556510][T14218] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1686.618229][T14223] sg_write: process 5668 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. [ 1686.671724][ T3019] usb 3-1: config 31 interface 172 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 12 17:20:49 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1686.761170][T14219] sg_write: data in/out 168513381/94 bytes for SCSI command 0x86-- guessing data in; [ 1686.761170][T14219] program syz-executor.4 not setting count and/or reply_len properly [ 1686.835417][ T3019] usb 3-1: config 31 interface 162 has no altsetting 0 [ 1686.884485][ T3019] usb 3-1: string descriptor 0 read error: -71 [ 1686.912116][ T3019] usb 3-1: Dual-Role OTG device on HNP port [ 1686.915195][T14218] FAT-fs (loop3): bogus number of reserved sectors [ 1686.925972][T14218] FAT-fs (loop3): Can't find a valid FAT filesystem 17:20:49 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100], 0x0, 0x120000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8], 0x0, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c8520da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') close(0xffffffffffffffff) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x50}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x64, r7, 0x808, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {0x6}, {0x8, 0x11, 0x7f}}}, 0x24}, 0x1, 0x3a000000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1686.971668][T14219] sg_write: data in/out 168513381/94 bytes for SCSI command 0x86-- guessing data in; [ 1686.971668][T14219] program syz-executor.4 not setting count and/or reply_len properly [ 1686.975018][ T3019] usb 3-1: can't set HNP mode: -71 17:20:49 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@nodots='nodots'}]}) 17:20:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x100, 0x1}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5a55, 0x4}}]}, 0x58}}, 0x840) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r0, 0x800, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000380)={{0x6, 0x40}, 'port1\x00', 0x147, 0x10000, 0x1000, 0x9, 0x9, 0x5, 0x5, 0x0, 0x5}) 17:20:49 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000001c0)={r4, 0x1}) close(r1) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1687.120571][T14255] tipc: Started in network mode [ 1687.155006][T14255] tipc: Own node identity 7f, cluster identity 4711 [ 1687.186682][T14255] tipc: 32-bit node address hash set to 7f [ 1687.237746][T14258] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 17:20:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000340)=0x203, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) stat(0x0, 0x0) setuid(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240147ea, &(0x7f00000008c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000100)=0x7, 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 17:20:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x1, 0x18b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:50 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB="080053005749cf5b4fea295c6fc5563599bc1fa5", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES64=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db18", @ANYRES32=r2, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYRESDEC=r0], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) syncfs(r3) [ 1687.382616][T14271] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1687.382616][T14271] program syz-executor.0 not setting count and/or reply_len properly [ 1687.404431][T14270] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1687.516400][T14283] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1687.516400][T14283] program syz-executor.2 not setting count and/or reply_len properly [ 1687.561396][T14284] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:50 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x56440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100], 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x40010) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400201) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:50 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b84836d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcffe39bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449a974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x3], 0x2) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0xa00000, 0x7, 0x7fffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1000d, 0x6, [], @p_u16=&(0x7f0000000040)=0x57}}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000100)=r6) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:50 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x880, 0xd0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x3, 0x149ec2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x225, 0x4, 0x32, &(0x7f0000ffc000/0x4000)=nil, 0x9}) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1687.648027][T14283] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:50 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="570000000000000002004e2464010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e227f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d33000002004e227f0000010000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017ed7ae0759bd0000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/528], 0x210) [ 1687.726967][T14283] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:50 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x3, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x84, 0xffffffffffffffff, 0x2, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB="131e24e2d9283ca680fde9df81c3c8199eef4aeedfed329c2d16d1a254e31c032f1df3", @ANYRES32]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x400, 0x130) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x2000, 0x8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c001c40a191c69782c8c4ce9acdbf3138df58350df791d77f554e9c83b2656b5ec102696f634003d9a775918d8aa58821e9dc0da11b66dc315a5f04101bce727a522117cbdab912b5f4439c5859dda78725f9273e186161f32b8eaa4cd19b5ec956d00c7d5fdd77bc7caf1f"]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, r3, 0xb03, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x454, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa70}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @empty}, 0xdb}}}}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd47}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x356, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}}}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x72}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa4000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdcb2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x12}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x592bc931}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @loopback, 0xffffffa9}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xad69}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3bebd57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff08}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x454}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 17:20:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = accept(r1, 0x0, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@empty, @private, 0x0}, &(0x7f00000001c0)=0xc) r5 = socket(0x840000000002, 0x3, 0x200000000000ff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r5, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1f, 0x3}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) [ 1687.932452][T14303] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1687.932452][T14303] program syz-executor.5 not setting count and/or reply_len properly 17:20:50 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1687.993209][T14311] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1688.089836][T14314] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1688.119763][T14311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000040)='./file1\x00', 0xffc00003, 0x4, &(0x7f0000000280)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}, {&(0x7f00000000c0)="7d8b4e86e4d5a7ece197788d38d84f063304f66ceb0a8845b6de60d5b39d679bed4216243dfdbf9187f1f6edfb577c81b26d3f9e1a543bf593c83bed959b1c812d900b9a80f336a3b2335c81fc3c8845f8e6c2ca634d2be81c46861a8b91e0752e9ec85d1c9a00be802c641d0d", 0x6d, 0x2}, {&(0x7f0000000140)="9cb64120a9b459d1c1a1bcdef66ac0fcf650", 0x12, 0x2}, {&(0x7f00000001c0)="76a8e48ea7e5bd5028c18de09cc96741d0f295a21aeaa6224d3772c71113b189dd9800db3638206e944a8c4388ebd25a2205a18441f3fc1e36267ba1525f663b20b5bab748427c3739d799fc298cfdf916f05216d2345530a1465bcc038d233242b29ff125f105767d8a19d8db2eae6de94dfb929c921ce82ddea655feb487656fe2cb7fc778b0dd13bb5b843052176566304f89ae0d3d7f", 0x98, 0xdb58}], 0x0, &(0x7f0000000180)={[{@nodots='nodots'}]}) syz_open_dev$rtc(&(0x7f0000000300)='/dev/rtc#\x00', 0x9, 0x800) 17:20:51 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @private0}, 0x0, [0xfffffffe, 0x0, 0x0, 0x1]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0xfb, 0x5, 0x6, 0x0, 0x400000000020000, 0x1321, 0x0, 0x400000000000000, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1688.269287][T14303] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:51 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41bd, 0x81041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x625, 0x8}, 0x0, 0x0, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="78b7e09d03bec689f8f3a7229e6e4cb6331ce195c21513fc99871b85c08074da4bce02693c104877e3dc6d8d31745b9a78eadad87ae6664cc7", 0x39}, {&(0x7f0000000bc0)="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", 0x1000}], 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, r4, 0x1, 0x70bd29, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4, 0x11d}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080029bd7000ffdb67a10fe2d6a79b1f2003981847df270c000000280050801000040095b16dfa73f3ee6a6501725b000006000000030005ac0f000000030005ac0f00000001001cca3c16c50000000800090001ac0f0014006e80000001000100020004000200040001000800090005ac0f0011000700e57383"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40) close(r2) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000000)={0x1}) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1688.336118][T14303] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) dup(r0) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:51 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, r0, 0x9, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xfffffffffffffe72, &(0x7f0000000340)={&(0x7f0000000180)={0x54, 0x0, 0x20, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1688.452124][T14339] FAT-fs (loop3): invalid media value (0x6c) [ 1688.523392][T14339] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1688.526195][T14342] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1688.526195][T14342] program syz-executor.0 not setting count and/or reply_len properly [ 1688.601293][T14339] FAT-fs (loop3): invalid media value (0x6c) [ 1688.637414][T14339] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1688.724558][T14363] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1688.724558][T14363] program syz-executor.0 not setting count and/or reply_len properly 17:20:51 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000000)=[@enter_looper, @enter_looper, @acquire={0x40046305, 0x3}, @exit_looper, @request_death={0x400c630e, 0x1}, @increfs, @decrefs={0x40046307, 0x2}], 0x43, 0x0, &(0x7f0000000040)="3001323daae79daa19515648e8408f1ebf73d49dd7ddb1ea8b9f5e552117c32c71af7e303a482476b6c51f036aeef33774af484ea7e8fd3f378119fa6e5d5c703e2010"}) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00001979010000000100000000f9ffffff0025bd4286be9084baa5b5db0700000068006474c7a612ee291644309a0056897d2e00007c4b89c5c1f753858f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe100"/101], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) alarm(0x5) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r4, 0x0) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r6, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000240)="2403d1334dc13dbeebec80eb22a01cddbfbde8b9a3334bfd28fc5c8a929040a12f5d1d7c2d8e1d25ff50ce7819fde032f48fa0fa3c335fd774800673abb16e5359953889e5f910aa465a28f6b44d0375f4717ccec37cb7a15e351b67952cf4f56095f7fd82ab2b39beff3b09b9a3cee9700a6a112190255736037ee498c535194e286398083650b1b628d6ff1357e442bb3dc713ad68cdb3e1d2453c3db17bf8d59e50c083ee7c438c36e72075b8de28d40190fbfe94edffac0be276d44c1d6bd3fbbed6ea7d2b0bd9988a174929afb368b68ac18b9460db6905d1f7a5806616", 0xe0, 0x6}, {&(0x7f0000000340)="5b5a4fe75c2c8326656eec70288ff971402f98dc0493c567fdd4", 0x1a, 0x80000001}, {&(0x7f0000000380)="a5abba9df1fe52ef255db5e0f422ade925210835b26a90d0e5d837ac7d6fa33db573f76261153c8114d9787057eeed2dc789a9f8b6456e4c512e4523e63f7765e81dde873e4c76a4a0b134d22dbaeb5dd0d74c75d4fa72fb0f9aa6b80c703fb8a18057d5e094316696bdc2226c3eb558e777f0dcf67a901c52359e3540cb9104925b482a787ca1ffbda7d883dbfa122d38e59776ea3f141054e9a05360add73aa5a152557dd2d3e7faf7b65add2ac73d9a6708442470c5a16bc1be153f4ad28aef3697a4d1dc6d1e2a8244f5a67e261edf37317481079bc773ae1006", 0xdc, 0x2}, {&(0x7f0000000480)="cb0e2276eed9f7e313633cd67b1c3c4d057599a08f635207687f93cca4d362d1c6479a41ae84e6cdb20ff0fc1dc1dececfb1f99c595e84ab4c94889940859c43d5ad7a103a84e0a959780992a13013ab36ba9a903f0db31bc6d36da300d6524b30511d268311061ce8ae3c2ff4e3729f5d68635047d7ed73719018a66b48f377695394b85ab4b2cdf2b6356c", 0x8c, 0xa247}, {&(0x7f0000000540), 0x0, 0x2}, {&(0x7f0000000580)="0175d10eea0a30168e68fe0cb44b98783d0cb77ed212da88a2a0e82e22543a24ec339aecdeb191df176657f5bfe3f3a23acd474bde68cae57da3e2939b290346540ad72e957a2fb28c52e36c754e516e88fbcdbe1f04d0b632b995a75da7fd1df28f15b73c4463db2016ddb9b3d26eb131a808c3e3c0c6af5de66057f073be9c91f52c2d4a9a318b62e6f5672b9faf1ba8afee311a9600856e64f9bde88886350a087e821ab0261ae9180c27fd8e6b372b1ca9ec23fe27096a7fc3b5d2597afe5c97d29c298701689dac8d0603067f0469", 0xd1, 0x6a}], 0x402, &(0x7f0000000800)={[{@fsync_mode_posix='fsync_mode=posix'}, {@adaptive_mode='mode=adaptive'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@norecovery='norecovery'}], [{@uid_gt={'uid>', r4}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}, {@uid_lt={'uid<', r6}}, {@appraise_type='appraise_type=imasig'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8600000095090a782900"]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r0, &(0x7f00000020c0)=""/45, 0x2d) getitimer(0x2, &(0x7f0000000100)) 17:20:51 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 17:20:51 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e21, 0x0, @dev}, {0xa, 0x0, 0x200, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:51 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000240)=""/243) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000040)={{0x8}, 'port1\x00', 0x34, 0x50, 0x6, 0x3, 0x9, 0x1, 0x7, 0x0, 0x3, 0x9}) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf7fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69fb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc3f467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4def2346c7593cc50a92aba540aa4b51dd36f37c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b63b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524000000000000"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fcntl$getown(r5, 0x9) [ 1688.943717][T14374] FAT-fs (loop3): Unrecognized mount option "†" or missing value 17:20:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1689.054348][T14374] FAT-fs (loop3): Unrecognized mount option "†" or missing value 17:20:51 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$KDMKTONE(r0, 0x4b30, 0x2e4d) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1689.127083][T14388] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1689.127083][T14388] program syz-executor.0 not setting count and/or reply_len properly 17:20:51 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$getregset(0x4204, r1, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)=""/137, 0x89}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:52 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42193b42c2afd769df630b036345e3b2f80f44accaece89b37e62575f4fc5754a5e3a7f26a5a5294e7d5a173c027b2b5abf708", 0x34) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1689.223274][T14395] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1689.223274][T14395] program syz-executor.2 not setting count and/or reply_len properly [ 1689.280726][T14398] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1689.320576][T14398] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1689.353022][T14400] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:52 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x92) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x5, 0x100084) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000040)={r4, r0, 0x10001}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:52 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x7}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1690.622372][T14381] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1690.622372][T14381] program syz-executor.4 not setting count and/or reply_len properly 17:20:53 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x692c0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x147a82) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x82000000}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "c3"}]}]}, 0x20}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x6, 0x9, 0x4, 0x6, 0x19, @loopback, @dev={0xfe, 0x80, [], 0xa}, 0x8, 0x10, 0xbad, 0x6}}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xd4, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xa4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, "ab20c04c4307d1ea2812e2687e728a0b0771271ee133757525d22a077c458a9508fb6403cbbc23296ce3e7ebc58a6c84ea206596a19d4e71d29ab564891985cc570acd0ad2de59b531559240757d081e17d645a0fcc0419429389e31049411352ff7153b6d6c7cdbdb3089eb39ffbf9f3b1d06ed8d6c1a2694977407014c858b04abba10a7bbe4362a5431f08fdf627b0ba09ad521b7488351435659"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xe0d1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000180)=""/72, &(0x7f0000000240)=0x48) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:53 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, 0x8}, 0x18) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:20:53 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x400000, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a09000000476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x8, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1690.845268][T14447] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.873424][T14455] IPVS: length: 72 != 424 17:20:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x6, &(0x7f0000000300)=[{&(0x7f0000000040)="1400050900000a0e666174000404090a1000027400e801", 0x17}, {&(0x7f00000000c0)="f1c8130c6438882dee502abb01c83f7395b94118bce3f31afd056a2fb6b884d706b1278bf6e105ccd4062c93fcefaf0531e2c795f694150448238cf9e19b4f80ea45140fdf2dbbae7963fdd5a81ee18a715bba116f402772d156404ea0988ba1c9ebec4e96bfad127c7f9bd3b2bf140e495f72039d7208773064bf90a82fef3a38ccf9e1c5745d", 0x87, 0x4}, {&(0x7f00000001c0)="dd7d9ce51dabaf96c5e5cb9d36974fc87ef970c8ca099968ac3156d8eafecc409773a16c1d387332d5a79ecf768122130a533c81a3e12efab1e7d63037572fd96120c5849d2c1812314a0ff3521f41c0e8d3f64a69b70faaaaa9e885ba4ecf6f441903fd1e37f6111f5f3c76c43fe6fafd45699e5519e55fdd937dfc63be93a60b2d5717be43729b234373a961b4db956a57", 0x92, 0x4}, {&(0x7f0000000280)="89", 0x1, 0xffffffffffff8001}, {&(0x7f00000002c0)="28eae0126b435755281bcc72f1977687368a98ba7795b9", 0x17, 0x2cc0a44c}, {&(0x7f0000000400)="5ebdd8cebf6ce45d87a04274763b256db218922944d0246ad08e6d0a27dea01eed692f8d66ea79b6cec374a280d064b4a0afb7049ae10ccab477a9b71de148e6f0d72af4df7c83bb80515c7c291b4a1c3e01afa73a85a249dd0bb2f61d801eceb35bac8a19d58a4ebbae2915986099acc9a1ea69654d8cc2ca8a7c10ead450f659df86e5a59fb182fe59aad8dfba0ed75bbdf441763e5dd48b314a1e851f82801c1c196887f4acbc3231daf1fa1a02ca901f3b94ddd9abb97b769c5916b95fea311532ea4775d6c0a57934eadf7eaff0dbd2e5fc7ef5017eebb680e885c4ee", 0xdf, 0x80000001}], 0x0, &(0x7f0000000000)={[{@fat=@check_relaxed='check=relaxed'}]}) [ 1690.893287][T14447] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:53 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/494], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1690.949838][T14457] IPVS: length: 72 != 424 17:20:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000040)) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1691.028292][T14459] FAT-fs (loop3): bogus logical sector size 50582 [ 1691.035716][T14459] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1691.082343][T14459] FAT-fs (loop3): bogus logical sector size 50582 [ 1691.097299][T14459] FAT-fs (loop3): Can't find a valid FAT filesystem 17:20:53 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) socket$inet(0x2, 0x80001, 0x84) r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x200000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1691.147675][T14467] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1691.161020][T14467] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c005519448a219b1a46bf701fba4c2b4155b717e7eac71ee927e625c614d82db754e150a5328f2eafffda22556674bb4f699700f3360394927e76a67ec8a68447665a49b6b4002727daed6504f793fc31f12713ac85a357dc512cda61dccdd7e42cb95c667380fd7ad443e169ad7ce20aceb58d606e2909b5a93d0ed0bd72740b64361fd1191acd24de"]) creat(&(0x7f0000000180)='./file1\x00', 0x101) 17:20:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) [ 1691.327725][T14476] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x1, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1691.543409][T14483] FAT-fs (loop3): bogus number of reserved sectors [ 1691.550537][T14483] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1691.623726][T14483] FAT-fs (loop3): bogus number of reserved sectors [ 1691.631980][T14483] FAT-fs (loop3): Can't find a valid FAT filesystem 17:20:54 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:54 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x4a00, 0x100) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0x3, 0x7, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) r2 = socket(0x21, 0x3, 0xf3) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@local, 0x33, r4}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r7, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3584}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x921c502afd767bf2) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:54 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2, 0x1}, 0xfffd}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:54 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:54 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x0, 0x4}}, @NL80211_ATTR_IFINDEX={0xfffffffffffffdcd}, @NL80211_ATTR_PID={0x0, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x40, 0x0) read$dsp(r1, &(0x7f0000000380)=""/104, 0x68) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x8, 0x8008, 0x4, 0x7, 0x755a79c8, 0x100, 0x1, r3}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000480)={r4, 0xd1e7}, &(0x7f00000004c0)=0x8) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010b35", @ANYRES16=r5, @ANYBLOB="000025bd7000fd000000000000000200070073797374e59b7766666f626a6563745f723a63686b7077035f657865635f743a73300000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf250300000005000300010000001400060073797a69616c6c657230000000000000140006006361696630000000000000000000000014000600767863616e310000000000000000000014000200fe8000000000000000000000000000bb14000200fe8000000000000400000000000000bb2700070073797374676d5f753a6f626a6547745f723a6e756c6c5f64133dab8e655f743a73300000"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000000) 17:20:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f00000000c0)) [ 1691.925263][T14505] sg_write: 6 callbacks suppressed [ 1691.925279][T14505] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1691.925279][T14505] program syz-executor.0 not setting count and/or reply_len properly 17:20:54 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000080)={r9, 0x82000000}, 0x10) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x0, &(0x7f0000000040), 0x100040, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES64, @ANYRES16=r5, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRES64=r2, @ANYBLOB="a40b05876312608ac3184f69b856c9f2b14e5006b68aff7a", @ANYRESOCT=r10, @ANYRESOCT]) 17:20:54 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000004763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee05abf3e2e56a7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = fcntl$dupfd(r0, 0x0, r1) dup3(r2, r3, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1692.184323][T14508] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1692.222101][T14508] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:55 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0xfffffffd, 0x1, 0x3, 0x9f, &(0x7f0000000040)=""/159, 0x0, &(0x7f0000000180), 0x56, &(0x7f0000000240)=""/86}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x9, 0x400000000000000, 0x0, 0x1, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e1e, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x16) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d379f8517d36ce4c572d6323c87aaad66c4330517231484adc1736ee6bbbf4a5a10ecb70a5ed3bf126fed3065d8fd6c9b8b7e8386cb8fe81bf219b7b3c1ce7e977914e7106174b9e4496e702ec2556547d3a5b0d06f676b8914333ac28afe75e595d9beb43c5979ff374eab2ae8db7f5bdd3f2176f363090a4885762a7a23a2b7e5041ec032469ec17b4823bbae89ca1c6c28617b1ebe8c33fe2b14e8f2601fb724299c7e9ccae18caeb1552c80b87c975ad695d7a7171f266859d4ae82e551cf1d6078a16398865551b3fea629deb87e7c620275ac3ac903bfa574adb8093ec35b7a914684d3304f6ba4f31be416db1ba90f41af000cc0ad06ce8d75bad3274daa4c7d404a66974e5210366564ceb8cef335c6a5c15cea38a0fd84c17ef19d6ba751c01519ed7edcf4be1b42a05e85c662c08b40e9d1dc0f61a808369b73416362ae979d26492152a063a6368b137e42e5a6b98837053e0770b4852bcf01d681990a923f03a0b8fbad94b3d8233a83a557b25eae9f70fba4c5581e590e8573d9c0cca63d0c694da6f5075c29a7a59229e93af9dceb040a0cbd205337c8cef38467e794ded321ad4c2570ab4a9cb4298365a0cd4ba054567a0445de5ba630a1865d4f05173104ddd583903b2333b471498f7b1a71d7e16e560e8b02151126d216fe62692a9fe55a9b2da3502b3c714dcc192f60c94f36090126f8b4f07b8b069bab12d29439a57dc7b1ceaaf80e1a79b406d3ef4c26fb4cb22a960bf6a04a4459b249c6f308e7567402ce9e06ab30fb7dae965ab9ba347d89c2ad369088fc5efad2b1fb5979ba794694930c702665e4d0c8f5b6d53bc609b065d5988a6e3c50a5d26abe8ce51bcab0edb2f10cc67c689ac4ae21b553985e7a7f0c8b7f976d8494920ebcbd824e835b91f5cdf7466b20ff58544371bce4853fb0bccb1de8163d1b4ed05b5b5194f8436b2d5f258d3e16d72a28c804464ebac18f6033364912a9bf6d1464f9a51a438dc8bf60b727158c7ec58ec5f88a3a0f166af9baa546e67c565d9e3b5cc866b2d9ae2236a0aeeb433e3f6fed87e92c2948c6429c529b5c3871e5b59e0d8420b2b7b28c2545b8f812517230ea89ab48dbd621967d2ded5fe987148f8542d4bd50ae76193c25d568b8b0bbb4bf733dd1eb0619877c560fea0446e83fecdf9cfa83d92eb5c91ab75417f7fa14510b564a6780051218b7534da38f2d3635f14bc3045bc09c4afd49170b43eba9007fe9df447bae72746ffe63d80ffc84b33b92c26543388a5f3bde1d33e7551d5fa68f5e4df503aa3c696a97de939dffe179cade4725a356e34621665912c1f85882608fac7907e0591e2763bfbfd1cc57cbb4ff4a585633385660dcb7f171cbc2f47a90cf18e5e7086f4caaff5d3b6bbbc261c7e1042db713524ae9105591477b2650c2636ffa016a0f7f926fab25d44eb0a986684eb9719d2916b4df9e12a2f14e61eaaab6fd90d7cb865a8e7fa077581b8e791e5f665cb9b0e25ea969022ef15d3433136f29783e5d4ca77fb72324ef5f68887d18b979a2b8d75db62d7658f92c05a5fbbad1e3b644a5bdffb30adcb88ab0d402294ea01a16d1cd01ba630c826cfc88853ef1cc92eb479d70bd8da29c19673053573a4c792fa0f9d186a6574e7d70104c27f06f2ad8282d1816995066c9510894e288102a62cf4f68a78954c52d3fc48ead0b3bd14182820c3b8d70854d9e3b308a2bf8fd2f8a900e745df371bb640369b964e1b2dfc3e5614a002e7945430dfc611ea3de5eda6daa57a18eed68b6e70791b0e8d50b7888045f35eca2ccbb4915de9d4926e73d967999c3edd8850f5447e7aeeca7e63bb0644cb287ac9668b56863666e580ed112d943fe667fe2559d9f795920f1f0975eb4f7074d8bc9b3f71cb1816028dd389fe5bf2700acc87b81c1436b45dc3e050fcf9bd314668d4cc85dbe36f7397f3cb81f61f3e56653c38caa23bfcbddf776bb541639e85f671a4d36fb482df27844004e3c724d25c9eb52467cdeb6927919a540c9c68326db77f3e97aedc989d23c4025122aea6bcd03c888a9f4a0d77da072de95edcf5600f044205f4946392a688dc5e7e48df06f1ce2a6defc9068fb8362affb09113f147dc9569243c41d80fd07dcc6675fd508a380f3001b5b1d48e6b901484792f8a846fe0cbaf8943f0661d1aac6579e6f134c67c22dcee6675e4afd464b562bb98d8449acae2ae74308b2f3b1d608857c273737de4e4a7ecd94a9d06014bfaa28d1ba3691bd307c834ce9a7b4464e7263dc8c275706c2fb6fa87fa83b0b8365c1465ee3c07ab5087ef2e2e4ade24ed452d877f78f5b4f1eb2bfd9bb37bfe95c00e4cce1dc1070697cc056202456453b35839a3dac6073868b3f1fc3c7715151ac8e52686affe6817f79d6cfc2b722cfaf3c7163aecb5ea40e2f903bf32feed3651c9115e1d74a1ec7a94aa22d4192602c42997573122bec3170b7d94b539a80a757af6049e11b65c009f564f94652479eaf24c9e157016eac45be051e6626de29260138738b1035bdec885f508a9d1cb0386cd5ab17e6d9e5b1887e1d2846dcdc0d5e8cf1ee16bc05f1ee4961944ed7d71d80edf3118fedc716fe244db20471cabf253398ecf218cda802542811939d12dfc8b1d8429605880bc4ee06fa22e13f2f25a205e45ff9d29d3ef9320ef96bfac09aa6db7f675ceeaab357216069fb7acb8dd05af5c9971d93d2a2ff2616693e56825c5b3531726a141f0b172b93c0f4f97ab6ff3dc0ac63b3df0572ee71fe1a180013abd635c2bf8489965b95db995cfbf4df21e5b298133ae7af9df715453738994b49919328163e649ec85729e1c7469fd070cb301e5475810605bda0b05a92a9e5dd18a7bdeed9af362ebfd9792306931e44df108b40d885d317495082ab3cee99d2782be7b35e5f66e53e49f32da07c8d34f45e20044e4f5e55f1b6374be8fff55bee8e7fb799648e447ab57dfc54e6e78046d5ad7eb41ecaeaa511d97a7e401843b4380f61b451039c6fa49c3569ddc57cd0e6c51bf9dd7fa45e8892048b86e7cfc4dac7482d8a7534982ab2e97f0a4744f666aa65a1ae653d39e5e612a1f35c2ea564973bc76432c7bed03f4ae89d14199ba1c4bf43cbd34165adf7ad7120d1cdb2293044e35c0a0106543344790bd09e50dea4b5a2693788aa6a2e61c4e3743a70f46547ecf61f5f8753263a041a755bb9fb1fe86c6e88e51d926f7561744c30f441bb5d74494877570f4d3eacfb14d5c3aa1737b59971fd517f88a5947a41d9a3731ebae1048903062cc59f4c52c0612c86f390fe007ca887ae7645c725ffaf50d08fa0bc278aa1e0726d9efb5939e677544e89acfe5dd496c2441d112ed83e91a571e32cc92d3101734b0f8bb6c3a353e9e5ebea13a18e398c54c4a23f78ed63aadc86a467fa97eb3b549f530878d5e680d0b92676fc19837001d07a6d0d58d4e42db163c5ec2731abb0a537e59c4920ce323f3e2b8c445b4bf31f03aa7566afa139c08421c2cd6456ed26c32336b61dac0bdd73dc9e08fa625f03df1fd74ff5bdcd5f79099a97f295e4e9ffa54e69f40811f91a9ff53575e0918cbc5075aa9d2c6524076775b488de8768e018638a0190a57f2c79cc26f95529554eb0a6fb1b86699bb15bf507c8eacc74aa739c279c3b86599280a270285b53fe38879c620454ad21f58cc8d3d26975bce59796baef7f350521c22d3842a0ccf038d126528e35332828d31d1dbe1fe54ab03f63a74f2cf65a68ffe07681941e87fe15893bdf4bad443b5108efd82ca9f5313f646d3b83bf2ac5f2cdec5e22773d8f5864675466487a2db4cb76cef16c66b751fd443e7252e1c02ea091491b262ef550294081202ff68031b7ebe8f7715cecd917465d74bd23adf3d62146065b78bdbae2fb90e4f43967f9013633bd5bce0e2664ddb6a0136f0dee36d48dd8b896ed4bd3e3de9b43e96d5d57a415b52b7a19d07a015c61eba8ffdab8eb62707c0889b1d625b331e588db367ad28b0c9992611f5ef7d9c04c1c04e8e4af71f74c91682ebe0d2bf183734fa1e029d34e955808add3466d243d09808e71e66631ded72121d89afcaadca95e6a4984479fef79fb5db6f9fca56cf8c19ad07e8d36c579b4f209072a5dd7e76ee202e69347335adace86b5c2c2ec9b54b809809e5e62611b20dec54dcb247b4250a4be6ebbb16296c93eebcba2efe5687b995239031e8d858f808ef9a0657fbafd6fb214941aa1d5b9038d3a671c1a0a31cfe1684dbc238c65b67af129fb518b989bc15c9aa5ae713690d98c61ae1aa0540284b6358dd63b1b8f39b1d4517734ea0578703e7df07c7994f4a200ca7204e9a1b2e008c42f249f4719a286226fdac2a82d324fa74f2bb077f3d1cf0f6955694f7534da2078b2386f44a5971fb515af80d74556d13c36a688a2153dfaae0334e7661a64cb51b87e587072c25834710642fab4fdaaceff94bbda3ba219f9232a9132e960f52e3aa248c28056412e54c6a2995959bb6ffd51299532b0a77a7811622b41f7456be267208b0a6ff4e2282d9bdbfa040b4808b1ebbe3472d0463d7f88f75f3bbbfa43cd1bcd10fedb18c8858947721e5dcebcf936cfbbf00ace7f9b63f146231c08c76ee4d2d8d7bb576b1321a80e1232fd52f0d2f20ea044c1545984e9f3d3d834f6e59de53fc4ebcbdf6bdad18622ac3528285fbdbc14c621a5e58b5e83a65d735095ba1614d1f75aa3bcd59aaa6155b1084be5949e6fa9d063a0e3ee238dc8550a1ebc08e8c5f8675266af732290983e9f171615e4c9062d935c740eaffdedbe880a8a674d591757fb6ad90d2b45eee522228fb4d25e6b481f29e1a57b30f62480d5ba6f1c113ae53fadfd1c6f7303563d899a1292cc62561739662480a5fb139eab5e4596b623e72c684b3569d74f4e19c5bd8daf476985709a04021dd8eb3c79d15ce859011c3ea08703d0873ea5b747fab708728df79cb398f4167e379812b0c5f0512d83d769b082820738798df6c74e14b7a5b573000f74a3bff670835e2e21b610bd231b9711f917e3a5a5467efe35d159981faa444768ce03e494a021c4b8b7596e1194712f05979ff2ae48232c5422f48d30ec018c739e4dd86684e216bec6e6ce99b135690f724088c93c499b9ae8487a86e098cb64fb65b8b066d34a2e50c7fa46303b17a8c4f43d2dee6a381cff3c6807cb1c41ad1db905ef751374794c223b04ce360ab74723f5128011e4f8d98c3e2b7a905e7f1331e69ffbb58e9cde4fb9b28188059800ab8b61e221ba175d63739164372c03ce55aa352907cc62362040078bea9bb384b8ffb897dac125bb888a630a4f5931b9ed417c6ce05990cd376eb3bc4c5356324d7029a78563ea6b3311c50e4f7b12adc3fe8de5705df7d92f17aaa79b2dab40adc3f1c88c1009dfea839d795906aae0672f519f9a3c09f2f258632872c9c0b0301232536d1b0b88734968e0140c92f6edc30eb71f921136fbcc38885724be1bac501b53d7d2e9a0c597135b159efde9661460fe232f3980180d5642b0049636718854e59f0ba9dc1cdcb077e6209307589a9a913f0fe223140e6f627ed91737c82a5ba07d5f6a1dea91e4e521e6eea57aa1bd779a30a101b2522692dd070df245c28ece9adca4b2b308cfd024d489a6a0a979207a3c348e9acc9af95f91f500e99b891a5b3a5c17188ebb4f9b048d58fff9e5ed18b08b94c799c55839ed465e195044c29a69e3b36003c119c375b98ac2f36b3d3630b22001f935bc2aa7b65817a"]}, 0x1, 0x0, 0x0, 0x20004805}, 0x40c0044) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1692.321337][T14530] sg_write: data in/out 755237297/104 bytes for SCSI command 0x1-- guessing data in; [ 1692.321337][T14530] program syz-executor.0 not setting count and/or reply_len properly 17:20:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:55 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000040)={0x18}, 0x44) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x18, 0x0) close(0xffffffffffffffff) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'rose0\x00', {'veth1_to_bond\x00'}}) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:55 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x12) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17, 0x4}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6469733ade636172645a9d6a45283c1ede9c5b2f077b7469f5552ed9de9fa928462c41c67cf905b03b979901681c7cb87e0f483c012b7913172cf994f2e555a6d90cdc9281aa7a0f"]) 17:20:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a391c57de2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe10000000000000000"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="f5e361eea22e0fc2d8059740a8f92d48", 0x10) 17:20:55 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x450, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:55 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20044010) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) truncate(&(0x7f0000000040)='./file0\x00', 0x95) [ 1692.741168][T14564] FAT-fs (loop3): Unrecognized mount option "dis:ÞcardZjE(<Þœ[/{tiõU.ÙÞŸ©(F" or missing value [ 1692.781603][T14565] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1692.781603][T14565] program syz-executor.5 not setting count and/or reply_len properly 17:20:55 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x81002, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1692.831863][T14574] FAT-fs (loop3): Unrecognized mount option "dis:ÞcardZjE(<Þœ[/{tiõU.ÙÞŸ©(F" or missing value [ 1692.850160][T14576] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c928b97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000440)={0x2, 0x5e1e, @multicast2}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1692.948403][T14576] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) 17:20:55 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$VT_ACTIVATE(r2, 0x5606, 0xf1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x54, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x24, 0x2, {{}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket(0x10, 0x80002, 0x0) 17:20:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) timerfd_gettime(r1, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) sendmmsg$inet6(r1, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x2, @empty, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000240)="d64a6f0d2177abd180b9885f04c6f3af3f6aab12bb339ae254da401ac38406d5844ca270d73760afb1506fb4c11b4322c1534f08a7b9d692f0", 0x39}, {&(0x7f0000000280)="66d2f93b60a3dbf9d879c653e79af70ab691164ef0a43aeec0a8128740ccf6e446653bacf00e05fd38a9e48174d7a41d715b56f9f5245649568c8dd0d9d5a96c972e805a5f31a05047fda4753365286e5725541e198c4fd6172992e9e6c5dc5b838d7e258ff328e042db4df24fe87424591cb8bb3e541d65d2d16a82a284ea5e2e59945b83fda6d98a40a8c9920f379ba6b3eb64a26eb22b2caa1b3a8d915aabb996d3878736a87ba716ec8872dd37a2b33f8f28bb39be50a29e77a615f4f816eb11ff58f7575047650ff06700c3c830e6cd54d8f59c616f97f3abb954f79534628c3d9119ade39e", 0xe8}, {&(0x7f0000000380)="80b381", 0x3}, {&(0x7f00000003c0)="b300fa4a5f18b6650eed1f9fa1cf4cfce9bb49a8c2510a9b68770b87449166b4b43442cb44710523bc1be27ae6f0e22daedbd889577c5f5c7fc52ef07bf61d73712c6e7d61db9294f6fae1766ffd214149cd5cb94c81e1", 0x57}, {&(0x7f0000000440)="a6b165", 0x3}, {&(0x7f0000000480)="b13635c16fc8699d73aa5711ed9feee7bc263b846cba9dfc7a2aa3040c4bef208ea811571f2023bd9f7a476877f4b215fd3f94d331a35f5c4f57b75226b2b9ec4daf42de857ffdfaff25ee6eee76302733815db08caf959ad7d3aa6efce1fc90d1afdd556edd6f23f1d16b765c7971e6c0e32ce81b399804413f97aa4e0a8dac72d96ecfd1e00be1b0f0212a22d39504e852cacbc0447bacaa1e106cf109df3fc89a2e0e67210c4896757d7fd50f9b11b4c4c5eb0367024cf6454196a187e366dd47f3c1704c5c28a5cd8e09a1927fe508ed0b8c3a52927dce8e9b9c", 0xdc}, {&(0x7f0000000580)="a8215d1b4334693892f7611a083195baa27a46b1ba20d1b3caf5a6ab32e623bf3c856c8faf0954289a4b55f3362c4e5d0ad5ed96d99d68a0e264c692f108f85580fe0a17e0bf5a7a450e026a6ffbf091555b3a991f5d1d59cca120ee1e0c95660e6bf634b9297af9ebe920308cfb9249e76ca70e737ed6c7fa9f745854975dcd557c519aeaff63c7be2dc0b96f4b5764890ef63ed07e4f204b70e42154eb80d28d9e7c218106810b6a6ec3e21c95ac39e640ce5d6c76ab6b4b8a7a823161be7949f04cf4397eec7025c8e4aba1c69dc375134f2164b6e2c923341ee85bb677c3dba1dc80feaa540aa1c39c5b368fb873f566363e4b", 0xf5}, {&(0x7f0000000680)="6b190ccd52d2d1794c3ae0e3a8eda9ea862987e2933137a982e6b277c826d2551b9677149bbf66ed6da2759111d2d637c2b714464c02331fa8f8ce14520113f0901156dc38c79202113f18b8db4aa28b5cfe474179e2eb26035bd7936e5c1fb7fa0b3cf3e66618630381cab8fafbf0b150c683975e1b2dd6b0dbc8b0813a0befbcee8fd19683346ffb1da2687d3ce8743aa5f68646f38544897cb7d507a49d5f41e8d0c5c5ba3b77f332204d5ef1a10cc0c5", 0xb2}, {&(0x7f0000000800)="499d95cfcc334f522465de5ac2261609ce4e98869682ace3eb73a66a7178e971a792e6accb4dfc81e8138647f97253a882c22d9425f0a590412605baf5a09544d4275d83becec49c3743584be05b47a9411d65e5ced506102b1c99635c3a36f02567d6619e05aca3ec685694a439f3d49c1177711c14c1dee9331aeb9113f6eaab5b78a13267619478d5232e07f9abe8d3e59afdefec90859e", 0x99}], 0x9, &(0x7f0000000740)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @private0]}}}, @hopopts={{0x30, 0x29, 0x36, {0x73, 0x2, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x68}}, {{&(0x7f0000000980)={0xa, 0x4e20, 0x6ed3, @local}, 0x1c, &(0x7f0000001d80)=[{&(0x7f00000009c0)="05e5dccbd90038e88e3f49054394939795621ee36d445340c0b64c90d32ecc3faa7b4b6daee1b4d6582eafab01c601ec78cd1e51c77af2b3129b1836052da4f62bbab26e46dfc9cd80ce75e762fe6637fce4afd2b408b3e29fffe74c3c8a63c123df6271769f17f480c5a6b4fc00df4fca1e42adc70fc377dc557b", 0x7b}, {&(0x7f0000000a40)="2c417cbc966824ddde6c98ae9eb1c6ae933e2b905d8e1f7950daba715f878bc13e7978c0b2574f0a796eac616e361a7db3660be88276e6ca632f3aa147db00332e37a23c50c954a12bf1324f4492b3ece2f2919c186349e1cd2d167b68597afad83e419b2db0472670c1058b698e5d53db4457af047171ba3dbdb8b0a182622a30bd79ccc6f3b792ee1b8d91e7f17d5da18fc6a87139c92142b1cb79654d601a2702f4b41918eeaa3739a7d9194f129de6c63b9a", 0xb4}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="9ae42f234e04314b67c47028eedb5582afc1d230bdd37fdedc4bbab620ca9aa65a7e0a64ee", 0x25}, {&(0x7f0000001b40)="4e47091bb67e4e071891fd3678fe833255b32bb82e5c8774dfefb45d6d8bd5938fac", 0x22}, {&(0x7f0000001b80)="f14d156d6d6a83bedffe1f7168cff00ec40216cd82b921d0c6339af51c06004a770b01c8620d75cde6924557cc8c87e583d34d0ce9dd2e8745489ea5fe13e2f9c9439bba7d81edc2e893ccfe1fa1240e36cee7639d1df702bd129c8e220e5044983885e1ee7d5fa1397b1c37dc7a3a962d4b055e0b40a7c1135a77b77d0b52677de4c6f9c5e1ced23c33d40dfcdb80ff92ba060253fcd58f70359ac4cc742ed8", 0xa0}, {&(0x7f0000001c40)="40c7095966b6e199902e94e8a2cd8e0170b77f435f5e320c6dd8c8257029ee97fbae2129f5b32ef38b79bce5bfebe98feb9ffa0c39dd35ae60d85921664362f24b42c06ae1a0a46b82492ba40b2a8fafd325648c374b6300f9005a7effde97c2c3fb8fe95a3bcdcf3ab388be2f123bbef2c0ba95016124991bf2a9c3245aaf81008ca036a83292fba7c83c66defae2bcda2938e9300c6a75069a91f7fcca411f2fc205f717302c22c3", 0xa9}, {&(0x7f0000001d00)="2b0a3cb0ac99ef9e21909c5bf69ab5d094143f9b05f36ed22885a3aa63c27fcd4f6f06f99455d8c7142af67d7a1b50c7a3f24cef15c0a2fbfb96a089def1c0942dbce9ac43f5", 0x46}], 0x8, &(0x7f0000001e00)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2}}}, @rthdr={{0x48, 0x29, 0x39, {0x73, 0x6, 0x0, 0x6, 0x0, [@ipv4={[], [], @multicast1}, @dev={0xfe, 0x80, [], 0x10}, @rand_addr=' \x01\x00']}}}, @tclass={{0x14}}, @dstopts={{0x38, 0x29, 0x37, {0x3c, 0x3, [], [@hao={0xc9, 0x10, @remote}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0xfffffffa}]}}}], 0xc8}}], 0x2, 0x48000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1693.042056][T14576] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1693.042056][T14576] program syz-executor.5 not setting count and/or reply_len properly 17:20:55 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc000, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) prctl$PR_SET_FPEMU(0xa, 0x2) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd0300000000000000db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a90a6fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac622661e6b6356b80e197ddc37467d49eb5db0c9aff1c9d6bc5b073843c3144932de0c6055fa8e1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408f080000000000000000000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1693.109477][T14565] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1693.130763][T14565] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1693.197518][T14595] FAT-fs (loop3): Unrecognized mount option "disæ=͘Ž€ì [ 1693.197518][T14595] Éà<׸_ [ 1693.197518][T14595] ‚NYñ$qS[1 †G|e–d¿lÚ)pi:«!v[Lj¬§¹y¹$Rì=¯$Uež^õZ£óqI^y±qñŽ„ˆ‚»¤ñïMPjœœòÅŸ0RðUV¸Hš(3dbþØ JA¼žxÈþq-~ìñ«2DK¼UH uü‚ iúž…6å¤ ùí?"¶îINä¿+t12meúôlYêRì¾'TžX²´`ý]’PdkoncÈ®ÖAÒ:BO³Ù`TÓ3àŽòÞ6jøÔ†OEõì" or missing value [ 1693.241040][T14600] sg_write: data in/out 808464396/104 bytes for SCSI command 0x0-- guessing data in; [ 1693.241040][T14600] program syz-executor.2 not setting count and/or reply_len properly [ 1693.254736][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:20:56 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800011c0300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1693.292247][T14604] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x7, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x10000000006, 0xffffffffffffffff, 0x400000000000000, 0x0, 0x4000000080000000, 0x0, 0xfd], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0xfffffffffffffff9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1693.355756][T14595] FAT-fs (loop3): Unrecognized mount option "disæ=͘Ž€ì [ 1693.355756][T14595] Éà<׸_ [ 1693.355756][T14595] ‚NYñ$qS[1 †G|e–d¿lÚ)pi:«!v[Lj¬§¹y¹$Rì=¯$Uež^õZ£óqI^y±qñŽ„ˆ‚»¤ñïMPjœœòÅŸ0RðUV¸Hš(3dbþØ JA¼žxÈþq-~ìñ«2DK¼UH uü‚ iúž…6å¤ ùí?"¶îINä¿+t12meúôlYêRì¾'TžX²´`ý]’PdkoncÈ®ÖAÒ:BO³Ù`TÓ3àŽòÞ6jøÔ†OEõì" or missing value [ 1693.377143][T14604] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, 0x1405, 0x100, 0x70bd2d, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x801) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000080)={0x1, 0x70, 0x8, 0x4, 0x9, 0x81, 0x0, 0x7, 0x8800, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x10802, 0x4, 0x0, 0x4, 0x8000, 0xfffffffd, 0x1}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x8, 0x9, 0x1ff}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1693.471461][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:20:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000fb800000"]) 17:20:56 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000d50104000000000100000000c5f17768803f01e4d6a9ca8d000025bd4286be9084baa5b5db0700000068000a01000020763f0362391cd7bc2475cc640fd4ad709af873359c92ad97786d224561902660535492c0003a730a7c4b89b25980290000cd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:56 executing program 3: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1693.714738][T14624] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1693.714738][T14624] program syz-executor.0 not setting count and/or reply_len properly 17:20:56 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:56 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r4 = getpid() r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, 0xffffffffffffffff, 0x0) tkill(r4, 0xe) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1693.909339][T14624] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1693.909339][T14624] program syz-executor.0 not setting count and/or reply_len properly 17:20:56 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1c1041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f00000002c0)=0x8f) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x2, 0x0, @dev}, {0xa, 0x2, 0x0, @local, 0x6}, 0x0, [0x7]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x200048c0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) fcntl$setflags(r0, 0x2, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1694.007451][T14649] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) close(0xffffffffffffffff) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x58) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x1, 0xdf) ioctl$TIOCCONS(r0, 0x541d) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000180)=[0x9, 0x2]) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1694.112908][T14654] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1694.112908][T14654] program syz-executor.4 not setting count and/or reply_len properly 17:20:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00023, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00') 17:20:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25, 0x4) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "c3"}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbf5000000000000000b00"], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x40) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:57 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/117, &(0x7f00000002c0)=0x75) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x100000, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x8001}, &(0x7f0000000340)=0x8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x4000000000000006, 0x0, 0x400000000000000, 0x0, 0x0, 0x8000000000, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x597400, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x2, 0x0, 0x8, 0x4, 0xfffffffffffffffd], 0x2002}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1694.471006][T14679] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:57 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x141c00, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000240)={{0x7, 0x0, @descriptor="09fff44f799c923e"}, 0x2d, 0x0, [], "a3a12872f98af6a44c29bab341ea9544a9925c0e5b8e5a61a19ad9e3fd06ac8e61fd2f4744701b5fb054a17983"}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000001c0)) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41bd, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x9}, 0x0, 0x3, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0xfc, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20001}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0xffe4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 17:20:57 executing program 3: r0 = getuid() syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='discard,fowner=', @ANYRESDEC=r0, @ANYBLOB='<\x00']) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000100)='./file1\x00', 0x6, 0x4, &(0x7f0000000340)=[{&(0x7f00000001c0)="7ba5507b65bc827c4c5104c4ed83a2cf0e330f84a7c178a19fabca3487cc1edafeb0f45757d0911d6d8c3fd43c00bde001ab3e5d96b95a6f8b4397509b624f11f84741ed00333e02dbfb8c08bb610cb617df7a9bb1179b453b13e1b73c546314ae7880ccc8d27347851077ac605531f95f30621c19ca92fe9fc1", 0x7a, 0x7ff}, {&(0x7f0000000240)="89240d6a981834cfa536feb2b6c31e17a51d220249e6c5fa4a770b5bfd485b3684ca645f53457cac5a47e6457869e353a0575ee91b56edf4c3d62c8065f6445d20d133f68589d2e324b38498909b219da5d7a9441cd51548091efd7faa0d2f8da14041da6af08fd92d4609918b0c26a8e4df901cea89c507ef2ebaff5909289edc749c7b7abb4b47fa1c2b0832410351f8961fcbfc3570a4f0029da8f734ad9204df4ab4e9eafe257ba68abeac5f87b67613fcc1806bbdf7dc702ec55c10549b94b44f02f497bfa8f94f746b9a53b5e6ba", 0xd1, 0x8001}, {&(0x7f0000000400)="a85215624a24c558075fa8ba3896eac5a5735eb234af657058f36d35c41199624e9e80dd1f5bd74d4c37f7f9942d74af61a2f022220025287cc01ff8169261f59b6921463181e054f463d563210749fe5122bc511b8e1613bc4296bd5a7480e1c7358b875ed070f35192940e17ca1d9c5693a6f42be418868c2bb2c2aa661145ef5afe0e3ed6a2", 0x87, 0x7}, {&(0x7f00000004c0)="28eb075ab8440c0af89cc8a94339e6052eb2599a2de0438c90a4ec24a775642e735d5147c949fc55f32a6b047c36d63abda2ff9bbb2c408c7455752648b6bf0ba6a2eb8e1158da92e03c84e257b94e64f1367836dad2f40c556e8b322a56ba666a5f64a05d962eb6cb34059ae401e6bb5df325eee63fa4304c7638997e77ae335a3d2977614871cecb87d0", 0x8b, 0x3f}], 0x2000, &(0x7f0000000140)='discard') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000180)={0xa03, 0x100, 0x3, 0x7, 0x1, 0x8}) [ 1694.658293][T14654] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1694.658293][T14654] program syz-executor.4 not setting count and/or reply_len properly 17:20:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[], 0x92) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000180)=0x5, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f00000001c0)=0x9b, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) accept4$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) [ 1694.725057][T14704] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1694.725057][T14704] program syz-executor.5 not setting count and/or reply_len properly [ 1694.763147][T14704] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1694.782939][T14704] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1694.818841][T14708] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1694.838652][T14708] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:57 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x10b001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "c3"}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xaa34}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004081}, 0x40000) 17:20:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3b9) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:57 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xb5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x40}]}}]}, 0x44}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x8, 0x163882) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) [ 1694.879976][T14711] FAT-fs (loop3): Unrecognized mount option "fowner=00000000000000000000<" or missing value 17:20:57 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r0, @ANYBLOB="08000300", @ANYBLOB="1bf33436182340e9e235617b9af404c5d58c3175c3e08da32cb90f66dbfcf6a3b83440cc81a3cd921a8f351cf5b2129b950ae9fe601dd1211a7f107a928c68f8ad92eb7411d67d82b910803f6e9aedd4771f80d171af6bf07541e47e86aa5110b12f6fee81d2bf3d397be2664790df99025c9f0ea03172e2aa34d7bec8e08a4d2702b067909228a168875ce6819a2f61561b8137b61b023b0f8a75d40fc8b3a80378a3ab4c3674b59caf0e842c95349ba80d2c029fb0b1c98f7f06bc422aee0c", @ANYBLOB="0d73817ead1a4a8a4f911e2912626ba56d4e8463919be109f3c725238c80477a1ee8bbd09f0754889b394f31f584557287e25979d384b74eb1e03910513eb2b61199816a60b1739bb389ec31237895ca85f4aa7c57d7edaba54e6d68cb402a6a521d0c7177c69047bb673617dc0cfeadaa06ab01bb9340cb86f56ac791deaa65f5f1a8b3fc5b7d6a3df131a8ef602dbfe6c2378986a106ee1cedb7d3b75d1dff5ad218db15fb7bbe4f048b4fcbe001135b321d91f191908f83c3656b021df82d", @ANYRESOCT=r4, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800d650", @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}}, 0xfff9, [0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x2]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1695.032968][T14717] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1695.047179][T14717] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1695.084454][T14711] FAT-fs (loop3): Unrecognized mount option "fowner=00000000000000000000<" or missing value 17:20:57 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x12) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:57 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = add_key$fscrypt_provisioning(&(0x7f0000000040)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)={0x3, 0x0, "f40d9b100a543d0eb3f5fd3d3ce711b7d237e42e983de38a444ba54b35f2"}, 0x26, 0xfffffffffffffff9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000240)={{0x2, 0x0, @reserved="31c9009a6f2e7fca52a5e6abadd1eb3562ac41e59a6249abfd2c6dc07a48be1c"}, 0x82, r1, [], "d13c9552729c023181e1ebfbd209df6928c50c1ee38360dd2e036bcc98c94913bcc030f28b0a8b6de188a938c858dee0cce9e324a6add471e4290d566becaa50b7d381ada18719dd3dc8a4c70baf5654dcccf753256b4da81a49657d5cffe3e10943c864ca0f38d688d89e4bf3daa78d7323a2d8767e75d7899234b5a93398d80a39"}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1695.164554][T14724] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1695.189905][T14724] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:58 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, 0x0) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000100)={0x0, 0x407}) setresuid(0x0, r4, 0x0) r8 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r9, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000140)={[{@fat=@discard='discard'}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@fowner_lt={'fowner<', r0}}, {@uid_eq={'uid', 0x3d, r4}}, {@dont_appraise='dont_appraise'}]}) [ 1695.287843][T14740] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1695.319489][T14740] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:58 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x92) socket(0x840000000002, 0x3, 0x200000000000ff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) getpeername$qrtr(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:58 executing program 2: r0 = getpid() r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, r0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000d511040000000001c3620047450025bd4286be9084a5b5db0700000068040a01000020e33f0362391c57bc2475cc6474c7012fc95823d25945415f014b9f01003a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85e6da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = socket$inet(0x2, 0x80001, 0x84) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000040)={@remote, @empty}, 0x8) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="646973636172642c0083f5ab2db164e5e1575c1655b287db18a656b80b04bdd9e690a45e2e009f35ef12439888d208bd2ccf19f86627cbe3a442e2eb52223779e73c00e6f143b5ec9c8a1466c955c478ea19b955f3975dac01adce5be70b3e22663685122f812a"]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000, 0x0, 0x1089}, 0x10) keyctl$update(0x2, 0x0, &(0x7f0000000700)="fff3e0aaf33180947cd8f04bc6b55f371c8141b9538e9e432b4eb68db1cb5a9a3f30922276bf36cca5d8c191a960d0b2976b1ea6f0ca79664724f5613cec6dfb76dc0d53cd39735604b5e5be6ef9e17146c31d2032ca509162c5c6283ffffe70821a742263d31622319e4ee2fdbc695fed3ebe6525db74d1eb92ea880a57b7a2824647f91d79e909f3e6d8817f78", 0x8e) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f00000006c0)={0x1, &(0x7f0000000140)=[{@fixed}]}) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000540)='./file1\x00', 0x800, 0x7, &(0x7f0000000580)=[{&(0x7f0000000140), 0x0, 0xffffffffffffffd1}, {&(0x7f00000001c0)="ebac0fa803b6ca20fdbdc82d8343d7b563befa87442634b03950fa5d09d3baf5879ef937b78799ae5062b9dc5b6a6f9f2852f7caf1b87f1061b439d004bbdaa7a38e55f7b5eb3574762709b7dd1dd17f53b946bec1cc1c82bc19d865454b896d3749da5f50cd7034a93201675446302ae51fbf3931ce77cc74f79b9dc00687be31f3698fc6d99ec768e2dabc11b150c959cf5b502c82df4fce89868e43602f9842164fdbe8f8679011d393987d822f11d84fbc4a6043c9a3e1f6167e349cf1a471b1b1b7b0ddd9a322719935829e2d97bbd8d5fda0f58b4ed106934755a13b439ab1fa48bb1c6233b404898a42b350c87e16ec", 0xf3, 0x3fff8000000}, {&(0x7f00000002c0)="6d4146d3d1e2ea29cfbc6aa5aff74d8d3f4ba06c2c27e71c5af385a2b0431b843d323de3dc9065d7bf3cc5f491a3203ebe5708533d1e53c1d498b4e6282cac06978b0079b197c0a524f22a29d4d4db5eb9b858837e41542a931615b0bb399aec1c7e68a219a73cb22f9c66c5a01fbeed0f5fc2b6a67c", 0x76, 0x7b0}, {&(0x7f0000000400)="67b4c980c8fb20457677b12a58cba2f3e66f33e784c5ba92575bf354a3585d039a2df6862028a251e4804cb40c476dad154dbc2e03a0ece293f01b907f982c4072631693349edb2b744b3cf4f75dece4cb9dd081450e4451007c14347e0d3fd7ef284240a7065767ef47583c983529f4dbbfb2761f5ad189880add75f2e58aa33bf45eed0a68bc111b", 0x89, 0x3}, {&(0x7f0000000340)="72781aedcf75584bd8b91f3f1895ae0905883da3b69463f7e80a896894139d7bd3cdb16320b1df06dceeb96407e3452ca3063ca1a8858440c55aefb441cd2cabebcbd09787d8a4c226f8e2f27880736252a464682c81f71e4b90d4ddde3f7d71a2803c632a5ecd706368ed6123aaf379e396febbed", 0x75, 0x9}, {&(0x7f00000004c0)="2f96c838288f06c14ab9b4a056d82bebfa5c877d9a8afe89de3ab0f007ce83fd0c81762e82eee63d45e1f5bed4a199251a5292f71a4d97968d536d5d163c231cf7d4df5d6b5883d5cc656d52f8e942d891b86473a3fc903a110ce7e319685eeef190bf8fa149f89d90d48836b7bdd1dfcadb96598d1dd602", 0x78, 0x7fffffff}, {&(0x7f0000000180)="7068b9b513431a376bac86b4fc", 0xd, 0xff}], 0x300c800, &(0x7f0000000840)={[{@conv='conv'}, {@usrquota='usrquota'}, {@noacl='noacl'}, {@data_journal='data=journal'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@audit='audit'}, {@pcr={'pcr', 0x3d, 0x16}}, {@dont_measure='dont_measure'}, {@smackfshat={'smackfshat', 0x3d, '*\x95^-\''}}]}) 17:20:58 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x7f, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r4, 0x1, 0x8}, 0xc) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:58 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) fcntl$notify(r1, 0x402, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = getpid() r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000003c0)={{0x3, 0x4, 0x0, 0x100, '\x00', 0x1}, 0x1, 0x2, 0x2, r4, 0x8, 0x8001, 'syz1\x00', &(0x7f0000000100)=['/dev/sg#\x00', ' \xd6\x81}@:[:(*%@:(\x00', '%^\x00', '/dev/vcsa\x00', '/dev/vcsa\x00', ']\x00', '/dev/vcsa\x00', '$-\x00'], 0x3e, [], [0x3ff, 0x79a, 0x9, 0x7ff]}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) write$nbd(r2, &(0x7f0000000000)={0x67446698, 0x1, 0x2, 0x2, 0x4, "b003180893f2861d19d6a898ea40323eb41db09a71480e4ec45b27b815b3fa06853cc2281e7893013db9817436e20c41567de1a171a623f5116adf99c95561eea03aa6e79c3de93c5ecb6ba99c0f30cd0a9f36564dfb36cf83f4be8301c1cd543430fb4eb107adff45724da44cbd32b8cc6d5cca40170f594532f6212663c8544a7698ba1e68c1a3b609c7f4a0c5aef0e32497eab25e96d340897b8d86874c034180a59061"}, 0xb5) [ 1695.648985][T14761] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1695.662245][T14761] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1695.679111][T14769] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:20:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:58 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) sendmsg$AUDIT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x10, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1695.740810][T14764] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1695.755314][T14764] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:58 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = dup(0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x11}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:20:58 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3fa, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sched_setparam(r0, &(0x7f0000000040)=0x9) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:58 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x40, 0x208102) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="ff"]) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045730, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1696.008747][T14787] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:20:58 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e24, 0x0, @dev}, {0xa, 0xfffc, 0x0, @mcast2, 0x20}, 0x0, [0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40010003, &(0x7f00000002c0)={0x2, 0x5e22, @multicast1}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1696.056263][T14787] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:58 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB="187554a2", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = fcntl$dupfd(r2, 0x0, r3) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000080)=0x5) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x9, 0x2a, 0x8, 0xe4dd, 0x2}) [ 1696.402264][T14812] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1696.469495][T14812] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@loopback, @loopback, 0x1, 0x5, [@empty, @multicast2, @local, @loopback, @private=0xa010102]}, 0x24) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:59 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1696.561012][T14812] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1696.600662][T14812] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:20:59 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) 17:20:59 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x200000000000, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:20:59 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:20:59 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x4100, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/402], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1696.895908][T14833] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1696.970368][T14833] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1697.104143][T14846] sg_write: 12 callbacks suppressed [ 1697.104167][T14846] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1697.104167][T14846] program syz-executor.0 not setting count and/or reply_len properly 17:21:01 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x25}}, 0x0, [0x5, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x7]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x4, 0x100000001, 0x400000000000000, 0x0, 0x0, 0x0, 0x100], 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x880}, 0x4000c400) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:21:01 executing program 3: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)=0x0) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r7, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x2000ffc00007, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x4, &(0x7f0000000100)={[{@fat=@discard='discard'}], [{@permit_directio='permit_directio'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@seclabel='seclabel'}, {@hash='hash'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, r7}}, {@subj_user={'subj_user', 0x3d, '$@{^^'}}, {@euid_lt={'euid<', r5}}, {@measure='measure'}]}) 17:21:01 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:01 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x632}, {0xa, 0x4e22, 0x100, @private0={0xfc, 0x0, [], 0x1}, 0x9}, 0x80fa, [0x1, 0x7, 0x2, 0x62e2, 0x1, 0x3, 0xc, 0x1]}, 0x5c) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/767], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:01 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x92) r2 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[], 0x1e, r2) r3 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="f937cb01f73a5301199929348f4a9a50d5876aa010ec7e5ca3be8e4018ca1ac54a2d40e2", 0x24, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[], 0x1e, r4) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$caif_stream(0x25, 0x1, 0x400402) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:01 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x8100000000000000, 0x10000, 0x1ff80, 0x8, 0x3}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x9, 0x6, 0x40, 0x8e}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1698.399918][T14878] FAT-fs (loop3): Unrecognized mount option "permit_directio" or missing value [ 1698.409441][T14873] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1698.475425][T14873] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:01 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a99ad6154000404090a1000027400f801", 0x17}], 0x10, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:01 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB="f4ff5134", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:01 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$RAW_CHAR_CTRL_GETBIND(r0, 0xac01, &(0x7f0000000100)={0x0, 0x7, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x9, 0x0, 0x0, 0x41bd, 0x121c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffff}, 0x1049, 0x8, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$LOOP_CLR_FD(r3, 0x4c01) r6 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:01 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x96, 0x800, 0x2, 0xffffffffffffffff, 0x2, 0x4000000000102], 0xf000, 0x20ec04}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1698.770278][T14901] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1698.882477][T14904] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:01 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = openat2(r0, &(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000100)={0x44200, 0x108, 0x1}, 0x18) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140), &(0x7f00000001c0)=0x4) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f00000002c0)={0x2, 0x5e22, @multicast1}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1698.928874][T14904] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:01 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/402], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:01 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ptrace$peekuser(0x3, r0, 0x21) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:01 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) [ 1699.139427][T14918] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1699.164140][T14926] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1699.164140][T14926] program syz-executor.0 not setting count and/or reply_len properly 17:21:02 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x34, &(0x7f0000000580)=""/117, &(0x7f0000000340)=0x75) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x80, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1699.209178][T14875] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1699.209178][T14875] program syz-executor.4 not setting count and/or reply_len properly 17:21:02 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x10001, 0x367181) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:02 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x220042, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20088100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x50, 0x0, 0x40, "444311e3c8ccdc3f68c72fe038666c37f4e3ba1c7a7171cf4ef5097353448885b4e126691f9800e465353b8683cd6ee0afa7ea5f1d76e915a3863d6ebad55d3506ada2e5365f7af3ced3b104d09573bc"}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1564}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56c89729}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7db901f2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5a7d20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x336721a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc22}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='$iscard,\x00']) 17:21:02 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc8bffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4ad2e00000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x0, 0xb03, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004c00040000001d8005000800"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x8c, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x7, 0x4, "24f003"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2545c0adcc518d1f001863f78f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "93e1259734f55d1bbd570f65d0"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4a5aec1bdf4a4ae425178299db"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4000141) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:02 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x3fffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:21:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101080, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x6, 0x7, 0x5a0, 0xff, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x673, 0x100, 0x4, 0x0, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, r2, 0xb03, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="a4050000", @ANYRES16=r2, @ANYBLOB="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"], 0x5a4}, 0x1, 0x0, 0x0, 0x8000}, 0x884) [ 1699.944158][T14960] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1699.944158][T14960] program syz-executor.5 not setting count and/or reply_len properly [ 1700.018121][T14964] FAT-fs (loop3): Unrecognized mount option "$iscard" or missing value [ 1700.018628][T14969] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1700.092242][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 17:21:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d1f730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1700.162021][T14964] FAT-fs (loop3): Unrecognized mount option "$iscard" or missing value [ 1700.191925][T14969] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:03 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x42, &(0x7f00000002c0)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0xc1}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x9], 0x0, 0x200000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1700.224953][T14960] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1700.224953][T14960] program syz-executor.5 not setting count and/or reply_len properly [ 1700.247842][T14969] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1700.265789][T14969] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:03 executing program 3: r0 = dup(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x100000, &(0x7f00000000c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)={0x2, 0x9}) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x1, 0x1, 0xc, 0x4}, 0x2e, [0x1, 0x4, 0x4, 0x44, 0x0, 0x2cb4964, 0xd1, 0x8, 0x81, 0x0, 0xfffffff9, 0xfffff17e, 0xbc9d, 0x0, 0x9, 0x9, 0x3, 0x2, 0x400, 0x8000, 0xfff, 0x0, 0x10000, 0x0, 0xbbb7, 0x8, 0xa67, 0x40, 0x9, 0x40, 0x4, 0x0, 0x5, 0x1, 0x2, 0x9, 0x80, 0x80000000, 0x0, 0x7, 0xffff0dcc, 0x1, 0x20, 0x1, 0xffffffff, 0xa903, 0x30c, 0x1000, 0xffffffff, 0x81, 0x3, 0x9, 0x4, 0x5, 0x0, 0x9, 0x5, 0x800, 0x3, 0xff, 0x0, 0x5, 0xc58], [0x8, 0x10001, 0x9, 0x2d3, 0x20, 0x4, 0x7d, 0x0, 0x7f, 0x39b2, 0x7f, 0x3ca, 0x6, 0x7, 0x8000, 0x6, 0x0, 0x2, 0x3, 0x4, 0x401, 0x3, 0x1ff, 0x9, 0xffffffe4, 0x1, 0x8, 0x7, 0x5, 0x9, 0x642, 0x2, 0x9, 0x5, 0x40, 0x57e1, 0x2, 0x43, 0x8, 0x3, 0x8, 0x8, 0xfffffffa, 0x7fffffff, 0x1, 0x3, 0x4, 0x3, 0x8, 0x7, 0x7, 0x4, 0x0, 0x0, 0x2, 0x5, 0xffff9352, 0xf69, 0x1000, 0x8, 0x401, 0x6, 0x0, 0x7fff], [0x10001, 0xd3, 0x6, 0x5, 0x3, 0x80000001, 0xc, 0xfff, 0x99da, 0x8001, 0x2, 0x3f, 0x81, 0x1, 0x0, 0xfb, 0x0, 0x7f, 0x2, 0x4000, 0x7, 0x1000, 0x10001, 0x1f, 0x4, 0x6, 0x9, 0x0, 0x80000001, 0x3, 0x3, 0x5, 0x7, 0x100, 0x7, 0x10000, 0x80000000, 0x2, 0x7fffffff, 0x1000, 0x800, 0x80000000, 0x6, 0xffff, 0x81, 0xfcc4, 0xfffff738, 0x555a, 0x5, 0x9, 0x7, 0x0, 0x8, 0x4, 0x4e, 0x2, 0x7, 0xf92, 0x100, 0x1, 0x140000, 0x400, 0x20, 0x2], [0x1, 0x8, 0x7, 0x98, 0x6, 0x641, 0x3, 0x7fff, 0xffffffff, 0x5, 0x6, 0x7fffffff, 0xfffffff9, 0x4, 0xbef3, 0x1000, 0x4, 0x1, 0x0, 0x5, 0x5c5e, 0x8001, 0xe0, 0x93, 0xfff, 0x7, 0x2, 0x80000000, 0x3, 0x20, 0x5494, 0x10000, 0x7, 0x6, 0x100, 0x100, 0xffff8001, 0x100, 0x8000, 0x61ddded9, 0x6, 0x5, 0x4, 0x1, 0x8, 0x8000, 0x4, 0xd371, 0xfffffffe, 0x6, 0x2, 0x500, 0x7, 0x7, 0x9, 0x8, 0x2, 0x4e6, 0x9be, 0x1000000, 0xff, 0xffff575e, 0x8, 0x6]}, 0x45c) [ 1700.277811][T14978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 17:21:03 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8c457205ae72b5614f9a77bcd447bf042f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4bf2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b13bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a9000000"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1700.354436][T14987] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1700.354436][T14987] program syz-executor.2 not setting count and/or reply_len properly 17:21:03 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "c3"}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1700.409473][T14993] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x460000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1700.487109][T14993] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1700.571917][T14993] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1700.571917][T14993] program syz-executor.2 not setting count and/or reply_len properly 17:21:03 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0xf05dc0cb0f4e2e4e, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000000)={0x3, 0x1, 0x0, 0x3, 0x10001}) 17:21:03 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/402], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/115) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)={0x133c, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x10fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x57, 0x3, "1d75a363673d205e63d4e718d69f296bb463141f3d43d3a83541e3eb975f003ba4b56fec6a4740199451c40ebd1cd925eb57f465e3b3ab58fc47aaba873b0a0ab50dc71e34123df7b4564c1b21981170941373"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "970fca0804fcc5945bd69eb1c1112db2016bd4150a9e260edac41310a16dcc6dd4"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "5bb4242f8703a0cf0b84450c9be6609406958769985248a78b383d37"}}]}, @TIPC_NLA_NODE={0x20c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8b, 0x3, "9038a6f85f16a89e07ec5b546a94970e4e89c4e02d64b66088aa7a1440b61e6136e37983e6886ad1b5035694795e3120b54edf701ec4d4b64e9fdb18ce34ed3a2f65320909f1558b203b3b49d69b74bd7bb61da0470d6f9030b24db5c97b0d01d4e231135a20d9cd6a2b0e02a63c90ea8b9688a8baab49ef36633ac2091525203906c51cd2f621"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7845f870165584e69624cf785e6c9c030a45ecadfe"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xda, 0x3, "eea4cf024af2c21ff477ef8f2f537272d731f02d342218ddf003fb7af9063bc2246d2a9d15e9954535885f12092602ada332a399636c20667d0c9aaaf71e19d3b2498fa7476f41df5cefd011d431aa376601a25aec0ab2ecdd0ff30cf487ea5585618fb067eac5f28b9fc207cce75a1d0a92f5d18f6ddbe9e8e759f061b94151386713336d819d5ebf6623cd7d306d1c47dfe6b098f172f50b898203cc278d49c3937382cbf4a84d85a0610757cc4bc92c17569bd96620d24d42fdace7e8ed42cf6dce010325da6311d253cb6c4c87260b5ef5617c05"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e6d6b4a2988609a4c81df4461ca735bb1e3bbd3f88af0c27b2fb53608bc22d7771451004"}}]}]}, 0x133c}, 0x1, 0x0, 0x0, 0x200540d4}, 0xc800) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 17:21:03 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x88, r4, 0xb03, 0x0, 0x0, {0x8}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x594973b3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67af2cdb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200002}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x88}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="c40a0000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x42d8fa29bdcbf95f}, 0x1) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x82000000}, 0x10) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180)=0x1, 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) 17:21:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x1000) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616d05f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:03 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:21:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffbfffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1700.936514][T15029] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1700.936514][T15029] program syz-executor.5 not setting count and/or reply_len properly 17:21:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000080)=0x1) 17:21:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000000080000000000003f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x2, 0x1, 0x401}, 0x2, 0xec2}) 17:21:03 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x44000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x4, 0x4) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1701.035228][T15020] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1701.072439][T15020] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1701.159109][T15042] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1701.182778][T15037] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1701.182778][T15037] program syz-executor.5 not setting count and/or reply_len properly [ 1701.208512][T15037] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:04 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x49c}, 0x0, 0x0, r1, 0x2) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000, 0xfffffff8, 0x1000}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) [ 1701.323216][T15037] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:04 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000000c0)=0x10000) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:04 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x82000000}, 0x10) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = getpid() r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) r5 = getpgid(r3) write$cgroup_pid(r0, &(0x7f0000000040)=r5, 0x12) r6 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:04 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x58, 0x0, 0x4, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0xfffffeda}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff, 0x0, 0x800, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1701.452885][T15063] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1701.509317][T15063] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0111}, 0x24004000) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', r1, 0x20, 0x700, 0x9, 0x3f, {{0x15, 0x4, 0x3, 0x38, 0x54, 0x68, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x89, 0x11, "cfa3677130a7a01f5a25605acd08c0"}, @timestamp_addr={0x44, 0x24, 0xbb, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x7fff}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x75e}, {@empty, 0x1}]}, @lsrr={0x83, 0xb, 0xe4, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}]}]}}}}}) r3 = socket(0x840000000002, 0x3, 0x200000000000ff) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r3, &(0x7f0000000800), 0x0, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf2508000000480001801400020076657468300000000000000000000000140002006261746164763000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800030000000000202f8140", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x724}, 0x1, 0x0, 0x0, 0x48014}, 0x4008804) [ 1701.627324][T15075] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1701.627324][T15075] program syz-executor.5 not setting count and/or reply_len properly [ 1701.689305][T15074] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:21:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1701.790269][T15088] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1701.886194][T15088] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0x6}, 0x1c) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1701.956040][T15088] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:04 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7461fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc4d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f37b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd952400"/402], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1702.020910][T15088] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1702.137955][T15108] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1702.137955][T15108] program syz-executor.2 not setting count and/or reply_len properly 17:21:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r1 = getpid() syz_open_pts(r0, 0x2041) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) read(r3, &(0x7f0000000000), 0x0) 17:21:05 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) readahead(r0, 0xb6d3, 0x2) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1702.181344][T15109] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1702.184740][T15108] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1702.205098][T15108] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:05 executing program 3: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r1, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x400000ffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@discard='discard'}], [{@smackfsroot={'smackfsroot', 0x3d, 'msdos\x00'}}, {@dont_hash='dont_hash'}, {@euid_eq={'euid', 0x3d, r1}}]}) setsockopt(r0, 0x5, 0x478, &(0x7f0000000100)="255e6d79ac8e6707405a4f25741d3e03b13e417d3f28423f23f30319713861d8c14bb64438f4ca8534a8a47195dd5c248de65cfba28d0adc8fb379c542", 0x3d) 17:21:05 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x61, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES32=r3], 0x92) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x11d000, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0xffa8, 0x1, 0x2}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 17:21:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a40)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x0, r0}, 0x8) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1004c800) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2b45615223c4ff4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) [ 1702.513619][T15131] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xba, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100f95, 0xfffffffffffff3c2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0x1419}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1702.553955][T15131] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1702.614555][T15142] sg_write: data in/out 1717991436/104 bytes for SCSI command 0x0-- guessing data in; [ 1702.614555][T15142] program syz-executor.0 not setting count and/or reply_len properly 17:21:05 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto(r1, &(0x7f0000000040)="6fd4c01d1b4d9217ccb75f83ece3b97015a5673663b88da0723547b4b26c0897af21b0f0cfa3f1f5b25fc81e9e858e6e4dd8de09d833e1f3dce97f50c044cc5f8c1ad916fd11d9e4d2c403b2604b30cda5e6d35d2761b5a19da0972279a29af95b5befa288779f84f0f08605ffbde5e415e7f0d25e6a1edd5b02a6e7eb7b0ed000af5e25ab7ee11120", 0x89, 0x0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x2, 0x2, 0x0, {0xa, 0x4e22, 0x2fe74130, @private1, 0xfa}}}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000240)=0x3) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/289], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000000) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:05 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de200000413357431eb113948c086c0006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a100000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1702.796722][T15146] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1702.822069][T15152] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1702.822069][T15152] program syz-executor.5 not setting count and/or reply_len properly [ 1702.894462][T15160] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1702.953030][T15160] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:05 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1703.027012][T15160] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1703.027012][T15160] program syz-executor.5 not setting count and/or reply_len properly 17:21:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1ffffffffc, 0x0, 0x6, 0x400, 0x9, 0xfb, 0x0, 0x6, 0x0, 0x400000000000004, 0x5, 0xfffffffffffffffd, 0x0, 0x122], 0x6000, 0x1cd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:21:05 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="b0ef0f9fd97512483d53bb2be2305505", 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x216}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) copy_file_range(0xffffffffffffffff, &(0x7f0000000180)=0x9, 0xffffffffffffffff, 0x0, 0x3, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000400)={{0x6, 0x7f}, 'port0\x00', 0x17, 0x800, 0x7f, 0x5f3, 0xff, 0x2, 0x2, 0x0, 0x1, 0x4}) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) [ 1703.097970][T15152] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1703.119009][T15152] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1703.225504][T15171] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1703.225504][T15171] program syz-executor.0 not setting count and/or reply_len properly [ 1703.319471][T15181] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1703.319471][T15181] program syz-executor.0 not setting count and/or reply_len properly 17:21:06 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x1, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r5 = socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r7], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0725030ab86a"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x852}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x48004}, 0x4000810) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x53d002, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) 17:21:06 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x30000000000000, 0x8, &(0x7f0000000580)=[{&(0x7f0000000180)="016a6325d2754d8b62a49c3876a80711a8471aecda9b369b53dec272798051cabf73add9050230efbfc16496660a44a5d245d545d9f5eab1ba6014a0b2d519f0dbf68e32054cf5c7ee024e7fbb18080a6aca3801e0f352168894478259038dee46f0cf8f5aee9b5aaa972b145e27cdaefa952f94ef", 0x75, 0x92b9}, {&(0x7f00000000c0)="f36738653ea877ec8c3778874efa3ca6e83828d3d05612bf11e885b7286af0e4a1fb0d25e5ff8b04799a6fc1f7b4011db6250a662667746d1fd2e17d", 0x3c, 0x8001}, {&(0x7f0000000240)="57da505f1159b9ee4c95df16b0c13e5dd27b9edfff4c2de9403fb4e1dd5738294f75615b2cee69acc1cd059106ca884140e25f5431b0d0ca5224c4c890ee9abee9657c22761e5a1da13575a49406f30a396bdcf6451bc5d2ba0fccb7589b186b6cbfd7921486c91b6b5e88da62", 0x6d, 0x101}, {&(0x7f0000000380)="3ee210665bab42397d182d17f9157fe0f4f4078865e6000bde7144c0f9976930ccca2e24a0006056db0723a9efdfed4cb890c34999ef4185add523566e9d8aa8cf64d0351b43dc7b07c32ca67d25030234977f33e9d472477bfdb6b2a667630211553208a866f7fb9139923922af4fa365a6371353ba58d5a29b8a087313be5c7ea3c368056786a4b59377bdc8b59a994b0a2c9d5ea4422f71bb1414ba322d42241047606ed858739e9c27fa2a70ad106de86c43678fcdb44c9fa263400c441f171309217e886bf9dd259207ba", 0xcd, 0x101}, {&(0x7f00000002c0)="999a3eacec6a571e7424e95b5df15aea52bce9", 0x13, 0x80000001}, {&(0x7f0000000bc0)="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", 0x1000, 0xffffffff}, {&(0x7f0000000480)="162f79874239e5ab9d064a35c18a456d29fa0a38a7757d4de504add5c487ed03ecd353aa0bd9414e89d1ed96fa6c853c71ac6667da20437fed0db832c69f198264fac5b8b34d9315adc1ebc97a654d8ae3b3f48966754173f3c816339320b6a92c88bc06302939dc8166528b7519c188a1d6f50a6792599b819eecfb7eebd217", 0x80, 0x80}, {&(0x7f0000000500)="c9eea91922a5a068bacdd6881d9fcb550d1b456564f3cd42fb872416402baa28685accdcf3080f8a49f6c33a8384b893829bdefbe4bdebefd57c847c0dd2368f21498681a8677426291f7b52f074e54fd5a3ff27bb0c2c28228112db42f26b96", 0x60, 0x466e}], 0x12000, &(0x7f0000000300)={[{@meta='meta'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '/dev/sg#\x00'}}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/meminfo\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x14, 0x5, "258cc566f68b833174e203f78ed40e494b66a49e6a5b98b92d06721b00b6f892b6b0555af6e10ae3db3a0f0f057c3a4f365b3bcd402a0afb75fc47a22a39e499", "ce82df5256d85c92cf2677fee3263353b1f2c55b11decbae1e417af092cf6ad35df4006db5269ac0145d4aa031e623513407ed98451ab006a4f84e1f8f11dc28", "8615514edc4e9e52c1e207244b4b2efcb529fcebfe9a32d8990f577ae5020b3b", [0x7ff, 0x80000001]}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:06 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2000000000004) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:21:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x3) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "c3"}]}]}, 0x20}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x200000000000ff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r2, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x7c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x1c}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) r8 = openat2(r5, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r10, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r10, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @rand_addr=0x64010102}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x50}}, 0xc1) 17:21:06 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000240)={0x18, 0x0, {0x0, @multicast, 'veth0_virt_wifi\x00'}}) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x92) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r4, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xdd73, 0xa1d6}]}, 0xc, 0x0) close(r1) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000, 0x0, 0x2}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'syzkaller0\x00', @multicast}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1704.021416][T15198] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1704.021416][T15198] program syz-executor.5 not setting count and/or reply_len properly [ 1704.055139][T15199] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1704.083885][T15209] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x1, 0x8, 0x71a3, 0x100, 0x6}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x2, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2000804) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00a6f58364000000fe"]) [ 1704.253119][T15209] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:07 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xae2d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x9], 0x5000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1704.340015][T15209] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1704.340015][T15209] program syz-executor.5 not setting count and/or reply_len properly [ 1704.384953][T15198] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1704.408260][T15198] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:07 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x3, 0x1ff, 0x1, 0x0, 0x5}) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x7, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:07 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "c3"}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, r2, 0x10, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:07 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0x9c, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:07 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1704.592016][T15233] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1704.648766][T15233] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1704.712175][T15233] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e20, 0x0, @dev}, {0xa, 0x0, 0x100000, @private1={0xfc, 0x1, [], 0x21}}, 0x0, [0x40, 0x7, 0x0, 0x41, 0x0, 0x0, 0x80, 0x1000005]}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1704.765327][T15233] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="e74b0bc8c462ec81fe65d52c0ebc2db31e0304b49f1908fd13bad8908707f42bb86a3a4f59cd48d1a429442ee284d3e4960c25e4e12a05e3551f36893046062c0fce7ec0fb9917607dc55a76c6dc74ab5c4c1274c4cefcf3248a3e9f94cc48dd714eb71151fde77706bbc16ee288b5642dc96ffcb373f8b0ab84ace1b8906ac7e6ab8f2207a407edcb2977f5c87e6a77ccfe3358ea35f2fcaedce65ed201ca39501afb8b17ca573555797c3c1eccc3aa868168eb10fc14824dfa06d734f8b0bfd4bf39cd487ae809f5d80463e2af0fe9cb69a06c8682", 0xd6, 0xfffffffffffffffd) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:07 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1841}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x80, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r7, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="84020000", @ANYRES16=r7, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x20000000}, 0x480c0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1704.814337][T15258] FAT-fs (loop3): bogus number of reserved sectors [ 1704.846007][T15258] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1704.873316][T15260] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1704.892479][T15263] FAT-fs (loop3): bogus number of reserved sectors [ 1704.934959][T15260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1704.957852][T15263] FAT-fs (loop3): Can't find a valid FAT filesystem 17:21:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xa3, 0x713801) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000001c0)={0x10000, 0x3000, 0x80000001, 0xeed, 0x4}) close(r1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) sendto$isdn(r1, &(0x7f0000000040)={0x0, 0x3ff, "39d04887ea998fdc2df237b9b18bea5e325228d87d0a6a4c31"}, 0x21, 0x8000, &(0x7f0000000080)={0x22, 0x2, 0x4, 0x3, 0x5}, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:07 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000051}, 0x40) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:07 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000001e00)={0x0, &(0x7f0000001dc0)=[&(0x7f0000000bc0)="fbde4c43e118073cb24653fd42aaad67c397b042987631664ab1493b09b1031c87acb7f3ca", &(0x7f0000000c00)="d38fc9b76072e661fe58805580f06971bfffbf331f47db0350ab41b937f25955a8bbefa0fe5cda40f66cb9bf66fa4c5799", &(0x7f0000000c40)="62c42e97adebd6c50c6985fa7e9d57ed5d208eefd1f9b09f8d45e461702b772ab6941d3a9160636c5f5d3dffd4ecc7f3d5fd1915a325cbe8b6f1f3324696707c9c", &(0x7f0000000cc0)="ba4c3a549b772c6141151ea69a34d5f48e34001bb4ba0c26d1b97e939d6146437261dbe419a11a06b1fa610621cf07aea45f9eeadd1676e93c56ceb750e40fda210e77973c5b02a9880f2a66cf79a814a4a28076d44f91729afa19dce6dc0f76b22fbc5f932ad104ccab1fa4ed24be4c9dccafb9dd9c69643b2eda63e263f102c9cc346fd8d7dea43acc53da87cbe1ec30e075cbdf667ffa3b9565f141930fdda5a1461c48db5d286c8c28c4b8ca5261f4ab028e28c01c9b62541b5f897f3926aa4b406804041a4fd0b2af49b73e40633c1195b762d857beecb7bcf073f33027fd67123b463c91d058dd7c12151ff6", &(0x7f0000000dc0)="b5f57fea00f4499611f3d65944a00ffd9b8aecaea163229e005963c4aa2defe5b9a8fd5707b5110d2c754d41d28152aedeff902c15d8b4bd0d30ef991afb1082e49712c9ca982243bc7cd66e74086fb3ed90dd7798aa23304d428501168487e8a2be411dc4df33eba13a2d3488fc8e0091de4df00ab6044e1dc29e04478c59f97bddfe641ecbc0c12cafdf380d700d6af81f50562640a910d9cef406493c3f118ecec54299b164ee4f677ebbba7c7aeab6475b6801ac236b46f4d488455d73de6f422757597d0c920b8c1e71f04e3f41eee3a62ffdcee2b6525e0936e7fcbe5a8dd9de356b64011aeeb9fbbb5bc80ff40560c4c7092a4db56f1d635a542e7f7ebd922cb0ae51d017119c5af12347d0ae50ede8d83fa8af39360f50b0993b0cc8bc018438063a27c4df621d925b5718c6abc6128252855368fb8a95dc31a47a034e6b45758e86042be7c3c50cd4ab5b74ef43f44fc99e85e9379279ef84172d3b9ba482d1a9de4094ade9bd38f0d1d1c13c3d366e7e06f551913b6f032917318f1b46995a16db6f82e1bb23e448b9ee35de947e196acfc622c84e7fe7e7b2d0ab55d536c640629777c729b203e06b4ab7a9ca29c8eb22c08f551ee126cf5f1efb608b97ecda9ba73d472cd1e3fff78d2f3d026cf95c26282b37f9b0dcbe8d1beffacc80109338fdbd1935c2fb38b0c9f2ca66b0bcdaa53154f57684dca88ba884c0e4c644c245c0b3a6b0b07338fad0c69b056e8ad91addf8dbc966ac5218f2d23c78ad0474a2fccb98c08f89d743864d31c0069f87d7edd70e97a15ef59869ae7d0d9f69413e3d0f596f7dc6032e0b8c3f94a7d746e663803efde3bc314142116a6f2df444123496dd0debbe909314c8c687522335cc7c40ed11ae6765e0b78a6a39953e24901421c7df7d42847bc60f8eab72af33cb997db3d0553de0583cd2ccf05e49b28c13839f9ebcf3ef5665bd3c324cce716393e4ba4c2ac8886753ed76ebe8eda71f0e62c982536a235d5fb0daae7ca1a2deeac5ffe631187058f1080d3c668bc51de855da1631be4dcbf8130e4a22a6513c48d78b0e3b0b3778c258c08fa84a6e3f9480bc73313f5922755ecc1b4cc8f1e5b007a87a38f6d1abd93f08c35cc807e5ade985fa3b57fb9259e1b5e3a7abd356584e2aa2f77686959e13260ff6710389f1dc900a52fc26058c6e0f42d5a8948ff4ac2dbdcad2f583adc81f6b45552816fd741c98ee070301f093fe52476d9cf44c6ba62ebd84f99d5cd0ca4abf595e5c905ca20aa30abf7ea662517cbce8c377f90fac5dbbaee6fe7e147bd321013537f7804079dd2ae93ccd2c16c14027e837764a15198e410a1d920062be04f6adb1f740ce77841b9a5929902aad5966f49c719f9e38857c8155ec7bf77308927d1261cc8123cb79d25e8ecf9c8c56d05a8c3fb0a359fd19701d774de844116308e8b40f003d111b7782306b23e958946c2ecee99e9e9a019f781dd5ea640827649822f834795d37ee5edb174175bcb8ee3011e4e335d7f9e4168153ad35f43be3d1147283ec9d2f265087687ad6ccd11634dde75214e6fb87ce894d53d58697ee54429a5dde3102cdc54949cd8ef51e70060ed93e8345411ff5d42d0bac57bc0f99bfe52c35b795c87fea8d91d0e947304b339ff4446999a2282c2470f0e6fd270187527f2923bfddf18bbea923aa67e799b7357e24350f6b2c4e379b44b6853a1dcd545700d71ed41fe65888b5e139c32af2e5517cdfeafc51e493c9c0eb7ef608be387e1b7b09f847647b2669223b5d168f149cd661abd20e315bc0fbd5085d6e0fdf4e5f4ded70d5dbb380351382c69bcd6f5c2b069983ca6fa6570bd7ffb37a91986bf108be5fff29f8846606ab064e5d22de6592ce90e066e853a80082d6d685ecfb15f325c4dd298f9ed0dc46782ca89f80bff8d5a8e9a847f822213a10aab59a5b8453401dfd2d5668a09e777d9f5ceb1596d502ada604510d2a56fd041ef093d37ada40d378d78a10b3572b1367e8ea8723ab3e2a6693119d8841edd12127c3a947408f9e2f973b6745997a8c1baeb5104afc19438bbaab29ee79d27de50ed4cd6d2b38115bbf4c8ae3b15379868874821584d0bb31f0b0a3480e4096538695eff5869f68a3b4361085a9aff5ef186a953aca6107775ce04e486a58725597d08e7a004ae89f3a481c0122bd3fd4b925f8dca0570b02d53d71852cc134bedc9be7e047a1f3ad5b9a53b171cb9b251a2fd1f06e8a134c7a206b8cf983bd671ade46a9de642c1faf0374aa795b0e16862846f92e64433c2b12d4af33e42e2c3ca9dd91db6f57d955cb3150b68d69df945338f585f2b83bd317ba71c7020fa097906473cdc36089bd46c7c9e3452d1502d3c9ab73bf5754cc84c005ee3bfc27d96cd62553d28eb2ce0de86a595822ae087ad89042c85d287cea11eddd87cfcfb60b93414cc9de8cd588391f0dead98cbe4d5712ae4a2ee588caf9e19fc1ec396bb5a939ab4d4fa6be81818d8f3e8bcaf37bd9588e29c794c82427f683d0b07c429794b9faa85393350503f8af52f22a8a16f5c3896c7736d6d58cd3865cda0d281125cffb7577f15a5df253bfefeb26a32e18c6ca44f2d741245a3f2f68d4595d994b4cf966d178c7a18a8ec8579a4d7cb7b5a755b0735e7a70fe49b2d7c91ef5d58893e69e391eefab48e831fa80fb9c98d4e42b5e3ac680acd6094f6a08fb77ff4540b4e5f2e133577ec01ccd506dc276f5f7415ea3c77111efc74cb91bb301fee8bdd0389c81e46a549c4b6767a5c6592bcffafbbb36fac72f09a56a03d74963fe2cd05fc58b7fe58aaf655a262bbacca16844fa70e3dee2b2901c1108c91f92c7315382c3056f997e500db228d523f3d85578d5b3e3b75b0ac27b605fb38d9cc219e82d595ed02f6ac0700fec5f3153e290d23e340d3e5ef37dcb2c3700fe578320fc9ac7368361b83d26ffe36382aa26aaa0b6a667a2fea50093554371bb93239f6532e7a70d51aa04ee2457ecc4f3d316ad01dd2d5815e9f5e73bac311e0a31b6f23e50ada697722007f2ab8343edb229ebf2a00f5c613174a965b85d9783781c851e0b9561d35d47d5eb8f232a48efb3cac7316c029fe37744da346a4c0820d35b6e7d53cae5bb68225acfa2db47f716211374c793b91a88817a94a44ea4eb063e52d510012b17e6970e49972b8159841e899b98a2395651b175fabebb1f3f6f2ca4832d2aa6ac95d54a270b9ce93d3bf0aad6908a2f9f6d8c09d90241fa182b27068782f09fc6641b9d0f682e662d04e14655d549e21d474840dea36ac5942f5ab1cb0995787e0167a4b8f54d5569326b2a804f017c4258ff13394e182be4d2f7f05c65e9238b353e1f1f36ec94ecb2c82dc7b0cb34472dd49ea19a8458adcebe019512335c0d9847d965364713cdbb2269752683326af87de200d39468bdad9e62e3fb6d4fb4f064948c5c8baf49436078f54db9bc138cb0a945edbc7595e91a9c3ff80d8c2daccede27b02201b07684cfcdf8c4c92f6e3fec79c47764dbdeb45b326473dba24c820176303c22881665781955bdd8356750a009c19670c20d69106acff020fa731f02e2bd35b01681cecf6bf53e196df84ff0fd290985a70d738d2bbbfbdfccead4f3aea05c6dc91327e33d814920a96bce1e7558cc2d92fd64a7d1d4bad39182a16f6b996f0c2ed829ca94aaeb48089b136f6dd8871587bcb42e30efe97fcd500a28e85c42f0815ca7aad314c1f3e606969ed3add3afaed4df218c98df35f5b83cc1fdd3ed66e9800cf20ed37126d9d8c57fda648dcb33c955e99ff9883c7090f86045827dbb135e6445ca86fa134f4845a70647efae4eaf76481f039e64c001b0089609e1908c42ebf8ca970df78115e77a1046bb53b7a2b4d47d738f36ea3660eb6fbcb2298dc6d0556a8ec5a4504bb23a5f0db3b53f0d34710e7a291a200a52e0c3340a86248dd59a7d6d6ed3983f4d536d2fc6558472ef4b2336dafa8290531e92d970009cc820e855bf7415674d656897fd4548730866fcf43fad6106407a18b5a0da25b1b1860040740e112543f79b2e27b8af7c5a7dadf7bf5097dedee53a7b0ac2c45078678bbfba1f88ed595ae42a2a575b1ba8632f2dc3b4875801a4a606021301b3901a34f7d57afc7d3ef81b65689882954331d7fba44cf028407c7e7527baf7fd9ff4d639a075cb9470a331af5eae618d0a4ec1aab3aa85488e6864def3dcdb6117dd3ef8ea38e691959f52a21a618f5e4a43800afdf41b8fc9ee4db05859880fda0b29fb00a6fa2e671861be032570d72c28b351d7dd7994b4e03e97eabcfdf89f852abec7363ca6d0b498ce7faa9f703e2a14938bf99c7f661e75048f3176cb0841bd44e7ff0a68c27ccce30a3d4cde5123524cc89a1761ea4fdb99d420cd5ed9807f51b117e2c857e183da4c119c331bc2f1cf309509844445da5963d8cf304a2ae9a236d8bd8f2dcfe363848f69d2c3069246ba9aeb73c24d09858797206e428ca1b177e35df2262019ffd32fa5fe1837eb09b2a90c7f1eae64b4d474c65bbf0ec681e7ed558b3bb0ea57fd3d42b4b2ce24c52220431b9f988c8ef24f2fbe34b521d56ba7908cdf2d3b12b2a28ab040386ad6d8202e9ece569d2590804a0f6b3d52547c24cdf45548c8b13e248d5264c3ab22833d178b27c85ee33cbf38ce3b71f23a4bea2dc2da5be78586990bad6fe7a42e5c2cf63d57d84aa1af0f36e15c37f4aca1827bb167e02fbbc0e3e91880ddbe30d41de940c9adec899633ca12aea68ee1116dea621324aee84c895fdb934a8ef97acb37ed1b38a4b8e4d3352a08b63f5e3d042d48d198b3091fb95c4120964d207d305b4de34c61bcd4852c32f2ac5b51bbcf0138d82be506cacf0b29d43f80e05ed8ea9e6c3fd6b9d9f8e1568518776017c3cf5077badd8b6c84f021d96d0585d27ecb3371752bf419c28dba1b3d8ddfe5aa0e9c7583c3b6e64d6bd82164e3e58af3ff923186343d25b3561aca74303f51d59e6d97eabb06bd13168e404339f7a16d4c0e71d3bdf06c36222c463bfd4b984ed2872f5978bd929d4c431cfd1ca6e4d133bc2a3f3ada6262fa228aaddf8f6642be8bddaa7b64023e6e8125dd41f2a0bc1244a0b491881449f2c324aad8bfd7ce4c51592a6cefae060bf73a62f865bf8b019e4352bc98a54982fe60be085630b67207a2b3062362834374541d49ca58da849366469d423b95856583ddda341f87981dcaaf2f6cf920637d5645f824ecd231eb87b3c4b926972ee4a9549031f741a1427ff01922ca762cfc1877e7a8f520471496511341643bb53b4bc2103c5e8f0ef90254d9b084829451c0ae844779d11dd0ea7e094a4d06bcae64c2155ac9e8e526b24a85076dcbb26e52b67de2e95e54bc1bfc9e907b846ed59c07c520e5f6f888be5b2aba2daeead4fa6b001f6cdb69711fbbe76a0cc25b81f83ed3884e755e13e96651ec7dec123a5bf484b7b095e18ce27bcf0be54d4edabe7832be166eb1678c6865d0aca29b5787cfcd5bfcee5a741ab70ea8aee6d447692d9d4350ed4ddcfa2ad74332b0f7f1e605ec658226f3cae0ec55b6339965a0ab49caea4cd38beb7496025d2524ae0642410eae5209c861cbb638c59fc4321224e4270a91d6354510369c10428572c22e384d0afd2f2fbd7a24a8fdf500a135b358d625ac226819ac495b33fac07dd6d198e28d6dbaddf1456410ad35b1b487fd1bff3f177b0af6fbcf84d31a593090ede4a37432b387526688045fff4e213886ca1695a5b9ae"], 0x4}) syncfs(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000009c0)={0x3, 0x200}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmmsg$sock(r4, &(0x7f0000000980)=[{{&(0x7f0000000040)=@isdn={0x22, 0x8, 0x3, 0xfa, 0x30}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000000c0)="88b4e4fed9ad48d9feb116ad90", 0xd}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000380)="a55621f4842d84244b5290569e77c4f4b8c588277103ba0ce35b8faf6ba16345b0df5a20e1e35912095588422b9a766e6faba6a53757c66fe3748b6e34014dc9477e1c4a37c9882ed726b29826093cecdd7220d50e3bc8e0fbe6d9979b264138ff9f3ee4627af24d2efa90797faa89f3858927b6fa652a7d9e404d21baec1d3fede1f40ff9c351aff3625a556ca7fe95e922d87f562ad31a8741477d0ed46a384bb8bc4e8306e7a9ec754a589c5fcc08475fe1a74a0a701b308d255d62f285db127d7532082d1e41aa9f64ca5f4a49255a50efe32dba956257b305ce85fc28952e28a942618b94753996fd27", 0xec}, {&(0x7f0000000180)="7230b72a0fe5d29cf5c4ece0001d62850b540ba84b379dd7ddf356a463973f210193b275907041c7a2f2c3d7142c8de1d0d4cf774310cb59f9640dc1d4c0536e7cac1d717633cd98db091978ea4b7d7f7d51e20fa3e1e3239fa2d551d38cb10ed67d2c7cf6f87fa386e0edd34223dc06913d895e39eee627ca", 0x79}, {&(0x7f0000000480)="9e19f733f678e44b151e8ec7c62f38575624a7caae5628d51e1d41dd2a53c233d555a9a2f34d29e22f0682d863a6f951b2806993ecfd48ae0a399a00a8f6706cca7e2343035c4426200caef9057402f9218a6ec86c40735c8d27f193f593c38a7f2f90cc6847850096e0e83412d4e1a1f88bb8343614d71a", 0x78}, {&(0x7f0000000500)="6aa2", 0x2}, {&(0x7f0000000540)="a868b4d3f1eb20c45c521380d0ef814b61c0f3d64fa6c06e22d94e7ad7fb37041f3103a3363eabe41a2638937f33ed28c0b2b64f32c07fed5741895b553ba6d35fb5d0306e4536799a9d76701fa474d3a9ecf756b17ddf4bbc4c6a5c5fc796a1620c7f56f220b37a2e9618f8585ae4861f02ce9db32c9f2000237ca4eed9704472b9e8d1be56c5b1d03ca9f30b268ab3e3407d3de3d6d3042df978a0d01bb87a82f19a153959fcce0c76e3b0c19edf3167d6a373ea716a7419f98eb0af8a599278bbbd56705e1d1ebc46027afc8fd00807f1bf5b42a3", 0xd6}, {&(0x7f0000000640)="9afffc27ff047c79cb13624ef5672956f2526f3235e0e4456b4dcfb9493b95fa5a319727742e360e9f894e1d58ec5770ba071cf2e4c812e57cd2ec1faaa76e486239bd6c453ad9e7c08dfb1dae8767b82d496aab6420946612b7deb5b4b3dded4845793e1e98b7880afcdbaa82af631b12d7ebb2094175595cdd665f97ee78da2531eba9b5a29c611f", 0x89}, {&(0x7f0000000800)="69a7ef308ee85f214ba897bec4928aabfdc8ffb2cc6ef6ebaeff471e5e24d03065a22f9042eb1f96b2b18571009ab9a58dce08c29c96a25718e75f7437affaea00484938fb9153aaea94a3c6007017661c69a0afef99825397efb2bd18e579f016ee606c999c14909d5e9cb554c14e93fabd570da36dcc7500076e22ff24b6d426efb0471762c5", 0x87}], 0x9, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x30}}], 0x1, 0x44000) [ 1705.082437][T15252] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1705.082437][T15252] program syz-executor.4 not setting count and/or reply_len properly 17:21:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x282443, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0x8f) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0xfffe, 0x2000004, @dev={0xfe, 0x80, [], 0x3}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x1fd, 0x2, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x2400c804}, 0x40880) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x8, 0xd3, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x400, 0x6, 0x7, 0x0, 0x4, 0x0, 0x0, 0x1ffd, 0x0, 0xfffffffffffffffb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:21:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:08 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x117002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:21:08 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:08 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:08 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x5, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0x58) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={r6, 0x10000}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5b70700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49ebc9af11c9d6bc5b073843c3144932de0c6075fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab55346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408ffb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524000004a45fc27b16beebb8162858319d73b8203160"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x7f03ea0f) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0x5, 0x4) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1705.392731][T15295] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1705.517881][T15307] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1705.517881][T15307] program syz-executor.5 not setting count and/or reply_len properly 17:21:08 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x82000000, 0xffffffff, 0xc6f}, 0x25) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000100)={0x31, "629a7795d73f2b45789decb79a3e50f21b7b1d1246e8ca9433b994942ac2008795e4e7f55836e56b6d02d0a714a66d2b1bc4d25dc2ce292dc2bf6bb93908a66ec0b4ae61092fb700ccd3fda5289d8a7c93194e14b96c4a27e25e65ae025cc52a71e118b5bd3a35bebb9da7f15889c377ebae6c9ca697d6222e75dfe52da97c7a"}) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x10, 0x2, 0x8}}, 0x14) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0xc0, 0x2, "d52991327ab939b358c3cde69e2238325a6a9f3fced73c2fdd62d98d0526bcefc22059f421eee865b2a0c5a47842dd612f9d6c31c1cca16ebb4054885ae33e", 0xa}, {&(0x7f0000000200)=""/172, 0xac}, &(0x7f0000000080), 0x40}, 0xa0) [ 1705.575313][T15314] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:08 executing program 2: r0 = getpid() r1 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1705.672223][T15314] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1705.737245][T15307] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:08 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1705.794023][T15307] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1705.822513][T15329] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000002c0)={@pptp={0x18, 0x2, {0x0, @broadcast}}, {&(0x7f00000001c0)=""/195, 0xc3}, &(0x7f0000000100), 0x2a}, 0xa0) [ 1705.892206][T15329] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:08 executing program 2: clock_adjtime(0x1, &(0x7f0000000240)={0x1, 0x9fcb, 0x80000001, 0x4010000000000, 0xa8, 0x9, 0x1f, 0x1, 0x1ff, 0xfe6, 0x6, 0xfff, 0x9, 0x7, 0x2, 0x3, 0x9, 0x8, 0xffffffffffffffff, 0x100000001, 0x7, 0x0, 0x6, 0x100000000, 0x8, 0x4000000000007fff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000025bd4286d41d84baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a253bf95f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x4002, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1706.032429][T15333] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:21:09 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x600800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) [ 1706.221591][T15340] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1706.258530][T15340] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:09 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x100000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:21:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x10040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, r2, 0xb03, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x16c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x45d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9a}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) [ 1706.442468][T15354] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1706.531865][T15362] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1706.631531][T15362] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1706.692055][T15362] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1706.716761][T15362] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:09 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xcc, 0x0, 0x4, 0x10001}, r2, 0x200000000, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x98, &(0x7f0000000240)='veth1\x00', 0x49428de7, 0x5, 0x3}) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) fcntl$getownex(r5, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$getsig(0x4202, r6, 0x1, &(0x7f00000002c0)) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6456c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:09 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000040)={0x3, 0x7, 0x5}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000, 0x3, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0x101, @rand_addr=' \x01\x00', 0x1}}, [0x7fff, 0x7, 0x7, 0x5, 0x9, 0x3, 0x8000, 0x70, 0x4, 0x4, 0x1, 0x3e, 0x0, 0x1ff, 0x3ff]}, &(0x7f0000000100)=0x100) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[], [{@fsname={'fsname', 0x3d, 'msdos\x00'}}, {@hash='hash'}]}) open(&(0x7f0000000100)='./file1\x00', 0x2000, 0x8) 17:21:09 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000001e00)={0x0, &(0x7f0000001dc0)=[&(0x7f0000000bc0)="fbde4c43e118073cb24653fd42aaad67c397b042987631664ab1493b09b1031c87acb7f3ca", &(0x7f0000000c00)="d38fc9b76072e661fe58805580f06971bfffbf331f47db0350ab41b937f25955a8bbefa0fe5cda40f66cb9bf66fa4c5799", &(0x7f0000000c40)="62c42e97adebd6c50c6985fa7e9d57ed5d208eefd1f9b09f8d45e461702b772ab6941d3a9160636c5f5d3dffd4ecc7f3d5fd1915a325cbe8b6f1f3324696707c9c", &(0x7f0000000cc0)="ba4c3a549b772c6141151ea69a34d5f48e34001bb4ba0c26d1b97e939d6146437261dbe419a11a06b1fa610621cf07aea45f9eeadd1676e93c56ceb750e40fda210e77973c5b02a9880f2a66cf79a814a4a28076d44f91729afa19dce6dc0f76b22fbc5f932ad104ccab1fa4ed24be4c9dccafb9dd9c69643b2eda63e263f102c9cc346fd8d7dea43acc53da87cbe1ec30e075cbdf667ffa3b9565f141930fdda5a1461c48db5d286c8c28c4b8ca5261f4ab028e28c01c9b62541b5f897f3926aa4b406804041a4fd0b2af49b73e40633c1195b762d857beecb7bcf073f33027fd67123b463c91d058dd7c12151ff6", &(0x7f0000000dc0)="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"], 0x4}) syncfs(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000009c0)={0x3, 0x200}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmmsg$sock(r4, &(0x7f0000000980)=[{{&(0x7f0000000040)=@isdn={0x22, 0x8, 0x3, 0xfa, 0x30}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000000c0)="88b4e4fed9ad48d9feb116ad90", 0xd}, {&(0x7f0000000240)="5550acec1819d7eb021a0991c4825b0cb540e5acd63a2b4dd4e20a5dc6aa27202463a34bf7664678ffd623f28833efb5d50e3c003bf6881412f705ef572bfdecee675f8c31b944d6d5dce82a8200156f9924f96e64be2af21dcb1683d631d2699f372cfdac80a789857792fd5ad22ed9e26c738321addf06f392360293c059eaecee7cc9a050d4af0c1e3d22a2992ed6c955f19cb20fb2f43c7a48b463986660d5338fb6f7c969a83a0672173f31e641b13356d972da00f5a855f9d21b4e1e0f10beec3be2b118198e98b31087a0a4a38d7461aa225a65a5c5ab10c6e81837024200322e4ad5368ec6ec8d87e92133d872a261981ff2361535bb41b0cd", 0xfd}, {&(0x7f0000000380)="a55621f4842d84244b5290569e77c4f4b8c588277103ba0ce35b8faf6ba16345b0df5a20e1e35912095588422b9a766e6faba6a53757c66fe3748b6e34014dc9477e1c4a37c9882ed726b29826093cecdd7220d50e3bc8e0fbe6d9979b264138ff9f3ee4627af24d2efa90797faa89f3858927b6fa652a7d9e404d21baec1d3fede1f40ff9c351aff3625a556ca7fe95e922d87f562ad31a8741477d0ed46a384bb8bc4e8306e7a9ec754a589c5fcc08475fe1a74a0a701b308d255d62f285db127d7532082d1e41aa9f64ca5f4a49255a50efe32dba956257b305ce85fc28952e28a942618b94753996fd27", 0xec}, {&(0x7f0000000180)="7230b72a0fe5d29cf5c4ece0001d62850b540ba84b379dd7ddf356a463973f210193b275907041c7a2f2c3d7142c8de1d0d4cf774310cb59f9640dc1d4c0536e7cac1d717633cd98db091978ea4b7d7f7d51e20fa3e1e3239fa2d551d38cb10ed67d2c7cf6f87fa386e0edd34223dc06913d895e39eee627ca", 0x79}, {&(0x7f0000000480)="9e19f733f678e44b151e8ec7c62f38575624a7caae5628d51e1d41dd2a53c233d555a9a2f34d29e22f0682d863a6f951b2806993ecfd48ae0a399a00a8f6706cca7e2343035c4426200caef9057402f9218a6ec86c40735c8d27f193f593c38a7f2f90cc6847850096e0e83412d4e1a1f88bb8343614d71a", 0x78}, {&(0x7f0000000500)="6aa2", 0x2}, {&(0x7f0000000540)="a868b4d3f1eb20c45c521380d0ef814b61c0f3d64fa6c06e22d94e7ad7fb37041f3103a3363eabe41a2638937f33ed28c0b2b64f32c07fed5741895b553ba6d35fb5d0306e4536799a9d76701fa474d3a9ecf756b17ddf4bbc4c6a5c5fc796a1620c7f56f220b37a2e9618f8585ae4861f02ce9db32c9f2000237ca4eed9704472b9e8d1be56c5b1d03ca9f30b268ab3e3407d3de3d6d3042df978a0d01bb87a82f19a153959fcce0c76e3b0c19edf3167d6a373ea716a7419f98eb0af8a599278bbbd56705e1d1ebc46027afc8fd00807f1bf5b42a3", 0xd6}, {&(0x7f0000000640)="9afffc27ff047c79cb13624ef5672956f2526f3235e0e4456b4dcfb9493b95fa5a319727742e360e9f894e1d58ec5770ba071cf2e4c812e57cd2ec1faaa76e486239bd6c453ad9e7c08dfb1dae8767b82d496aab6420946612b7deb5b4b3dded4845793e1e98b7880afcdbaa82af631b12d7ebb2094175595cdd665f97ee78da2531eba9b5a29c611f", 0x89}, {&(0x7f0000000800)="69a7ef308ee85f214ba897bec4928aabfdc8ffb2cc6ef6ebaeff471e5e24d03065a22f9042eb1f96b2b18571009ab9a58dce08c29c96a25718e75f7437affaea00484938fb9153aaea94a3c6007017661c69a0afef99825397efb2bd18e579f016ee606c999c14909d5e9cb554c14e93fabd570da36dcc7500076e22ff24b6d426efb0471762c5", 0x87}], 0x9, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x30}}], 0x1, 0x44000) [ 1707.060929][T15382] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1707.078792][T15381] FAT-fs (loop3): Unrecognized mount option "fsname=msdos" or missing value [ 1707.086534][T15382] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2010790}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x70d6e1c288c69635) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) write$dsp(r5, &(0x7f0000000040)="b3a3250c", 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:09 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1841}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x80, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r7, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="84020000", @ANYRES16=r7, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x20000000}, 0x480c0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:10 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1707.245115][T15381] FAT-fs (loop3): Unrecognized mount option "fsname=msdos" or missing value [ 1707.257607][T15392] sg_write: 8 callbacks suppressed [ 1707.257621][T15392] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1707.257621][T15392] program syz-executor.2 not setting count and/or reply_len properly 17:21:10 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x1) 17:21:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000200)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="646973636172642c646d6173843d30303008303030303030303030303030303030200030342c00d34d86fe9a0a010d470b07d0541dac8f221387de4dce82b4224388d0e808cd98c6f32a0ee4e523db3e0ee3313b814fe36bf3543ff62041d2631b93f8b21806d7067db09aef1cd0c6c6f33cef86924c054f284bb7b0dacc705edecb8ca4630e19dd8f0856b4616aa8333836b35f30b42c49b256363ce451d509"]) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) fallocate(r0, 0x4e, 0x5, 0x480000642e39cc) 17:21:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x40000, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) ptrace$getsig(0x4202, r5, 0x8000, &(0x7f0000000080)) [ 1707.517946][T15403] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 17:21:10 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) [ 1707.560510][T15409] FAT-fs (loop3): Unrecognized mount option "dmas„=000000000000000000 " or missing value [ 1707.580369][T15403] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1707.742087][T15409] FAT-fs (loop3): Unrecognized mount option "dmas„=000000000000000000 " or missing value [ 1707.761660][T15388] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1707.761660][T15388] program syz-executor.4 not setting count and/or reply_len properly 17:21:10 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d5010400000000010000000000000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c92000453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab00"/300], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000)=0x7, 0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:10 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000040)={0x3, 0x7, 0x5}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000, 0x3, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0x101, @rand_addr=' \x01\x00', 0x1}}, [0x7fff, 0x7, 0x7, 0x5, 0x9, 0x3, 0x8000, 0x70, 0x4, 0x4, 0x1, 0x3e, 0x0, 0x1ff, 0x3ff]}, &(0x7f0000000100)=0x100) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:10 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:10 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0xacf9, 0x4000) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000700)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf2531000000eaff5100", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="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"/274, @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1707.795168][T15388] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1707.795168][T15388] program syz-executor.4 not setting count and/or reply_len properly 17:21:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="666973636172dfc85aa0c80fb2a409f2d8a4d0acbd31642c081a5712eccd42722289bdf654991876f64dec8b14034140fdb6eee49300"]) r0 = socket(0x10, 0x8000a, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000001c0)=0x8, 0x4) close(r1) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x40}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x7f0, 0x939}, 0xc) 17:21:10 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1407, 0x10, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x9c0}, 0x24000800) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$VT_DISALLOCATE(r1, 0x5608) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9525, 0xfffffffffffff800}, 0x41840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:10 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffff000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x6, 0x4e25c1) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:10 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:10 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) [ 1708.133021][T15442] FAT-fs (loop3): Unrecognized mount option "fiscarßÈZ È²¤ òؤЬ½1d" or missing value [ 1708.163048][T15438] sg_write: data in/out 262577/100 bytes for SCSI command 0xcc-- guessing data in; [ 1708.163048][T15438] program syz-executor.4 not setting count and/or reply_len properly 17:21:11 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x3c, r6, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x80, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1708.234604][T15442] FAT-fs (loop3): Unrecognized mount option "fiscarßÈZ È²¤ òؤЬ½1d" or missing value 17:21:11 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4090, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:11 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1708.563087][T15473] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1708.563087][T15473] program syz-executor.2 not setting count and/or reply_len properly 17:21:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2400, 0x4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) syz_open_pts(r0, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), 0x0, r0}, 0x68) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80a00, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:11 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000400)={[0x1000, 0xfffffffc, 0x1ff, 0x5b, 0x7fff, 0xfffffffc, 0xf767, 0x6, 0x6, 0x70d, 0x4, 0x88dc, 0xa1, 0x6a, 0x1010000, 0x1000, 0xffffffff, 0x1f, 0xfff, 0x6, 0x1ff, 0x40, 0x7, 0x2, 0x8, 0x1ff, 0x101, 0x9bb, 0xfffffff8, 0x101, 0x1, 0x1ff, 0x80, 0x0, 0x8, 0x100, 0x2e, 0x6, 0xcc, 0x3, 0xffffffff, 0x8, 0x7, 0x4, 0x5, 0x0, 0x4, 0x4, 0x8, 0x6f, 0x3, 0x7ff, 0x20, 0x101, 0x1, 0x3, 0x4, 0x1586, 0x800, 0x8, 0x80000000, 0x9e, 0x5, 0x80000000, 0x7ff, 0x6, 0x6, 0xfffffffe, 0x4, 0x8, 0x3f, 0x8000, 0x9, 0x2, 0x8001, 0x6b, 0x80000000, 0x2, 0x3ff, 0x0, 0x9, 0x4, 0x7f, 0x3, 0x3, 0x7, 0x7d25, 0x8, 0x8000, 0x4, 0x400, 0x401, 0x1, 0x3, 0x3, 0x1, 0xfffffffd, 0x467d, 0x6, 0x0, 0x2, 0x9, 0x9, 0x7, 0xfff, 0x8, 0x0, 0x4, 0x0, 0x800, 0x7, 0x1e, 0x77f, 0x5, 0x17, 0x9, 0x8, 0x0, 0x817c, 0x1000, 0x7, 0x8001, 0x2, 0x8, 0x1, 0x4, 0x100, 0x20, 0x2, 0x7ff, 0x28000000, 0x7f, 0x1, 0x7, 0xfffffff9, 0x8, 0x3, 0x1, 0x2, 0xb27, 0x633b, 0x6, 0x8, 0x7, 0x7, 0x4, 0x8000, 0x3, 0x40, 0x0, 0x7, 0xfff, 0x6, 0xffffffff, 0x10001, 0x9, 0x2, 0x7fff, 0xb8, 0x9, 0x1, 0x55bd, 0x5, 0x40, 0x8000, 0x7, 0x100, 0x4, 0x2d7d, 0x7, 0xff, 0x7d86, 0xfffffffa, 0x9, 0xffff, 0x8, 0x9, 0x2, 0x5, 0xcc1, 0x5, 0x81, 0x3, 0x200, 0x7e2, 0x1, 0x80, 0x9, 0x3, 0x6, 0xfff, 0xd7fa, 0xdfc, 0x6, 0x40, 0xfffffffb, 0x9, 0x6, 0x7, 0x1ff, 0x8, 0x7601, 0x2, 0x0, 0x40, 0x10001, 0x8, 0x2, 0x28, 0xaeb0, 0xf61, 0x0, 0x9bcd, 0x4, 0x5, 0x0, 0x2, 0x5, 0x8, 0x6, 0x7, 0x9, 0x6, 0x0, 0x3f, 0x4, 0x1, 0x20, 0x6, 0x8000, 0x800, 0x0, 0x59, 0x4, 0xffffffff, 0x8, 0x1, 0x9, 0xfffffffa, 0x2, 0x1, 0x1ff, 0x5, 0xe0, 0x6, 0x7ff, 0x401, 0xe27, 0x4, 0x20000000, 0x6, 0xd97d, 0xfffffff7, 0x2, 0x7, 0x8, 0x7fffffff, 0x36, 0x2, 0x5, 0x2, 0x401, 0x8, 0x48, 0x2, 0x7fff, 0x3, 0x6, 0x5b4, 0x4, 0xff, 0x1000, 0xffff, 0xffffffff, 0x68, 0xfffff466, 0xff, 0x401, 0x3f, 0x5b, 0x10001, 0x1, 0x1594, 0x4, 0x5, 0x1, 0x81, 0x2, 0x3, 0x8, 0x2, 0x0, 0x6, 0x5, 0x2c8, 0x0, 0x3, 0x6, 0x8, 0x2, 0x5, 0x8, 0x8, 0x3, 0x1, 0x7, 0x1, 0x1ce, 0x8, 0xd93, 0x0, 0x7fff, 0x2, 0x8, 0x7ff, 0x4, 0x2, 0x7, 0xfffffffc, 0x200, 0x8, 0x80000001, 0x3, 0x80000000, 0x2, 0x5, 0x693, 0x9, 0x80000000, 0x8, 0x1, 0x1, 0x8000, 0x8d, 0xec0, 0x1000, 0x80000001, 0x3, 0x5, 0x3f, 0x1, 0x9, 0x200, 0x4, 0x3, 0x81, 0x0, 0x988, 0x8c, 0x9, 0x800, 0x9, 0xfffffffd, 0x40, 0x5, 0x3, 0x3, 0x1, 0x5, 0x9, 0x3, 0x0, 0x100, 0x1f, 0x9, 0x8, 0x1f, 0x7, 0x8, 0x3ff, 0x8, 0x4ed7660e, 0x4, 0x4, 0x1, 0x3f, 0x40, 0x6, 0xaa2, 0x4, 0x7, 0xfffffc00, 0x0, 0xffff, 0x1000, 0x81, 0x6, 0x3, 0xa83, 0xfff, 0x2, 0x6, 0x3, 0x8, 0x80000000, 0x1000, 0x4, 0x7ff, 0xffffffff, 0xe74, 0x3, 0xfffffff7, 0x8542, 0x9, 0xc000000, 0x7, 0xfffffeff, 0x9060, 0xcc, 0x8, 0x0, 0x8, 0x6, 0x1000, 0x7fffffff, 0xe0, 0x3ff, 0x80000001, 0x9, 0x8000, 0xffffffc0, 0x1ff, 0x4, 0x9, 0x10000, 0xfffffffd, 0x7, 0x3f, 0x93, 0x5, 0xffffff48, 0x4bc3, 0xfffffffb, 0x9, 0x80000000, 0x6, 0xab4, 0x3, 0x4, 0x2, 0x9, 0x1, 0x6, 0x6b8, 0x0, 0x1f, 0x101, 0x63, 0xffff, 0x0, 0xb781, 0x2, 0x6, 0x0, 0x800, 0xfff, 0x2, 0xffffffff, 0x4, 0x1, 0x9, 0x6, 0x1, 0x6, 0x1, 0x65ec4d91, 0x7f, 0x7, 0x1, 0xb33, 0x1, 0x9, 0x1, 0x3, 0x10001, 0x7fffffff, 0x2, 0x57eae993, 0x4, 0x401, 0x80000000, 0x7a, 0xffffffff, 0x6f, 0x5af15451, 0x0, 0x5, 0x7f, 0x6, 0x2000000, 0x7, 0x6, 0x0, 0x3, 0x1, 0xfff, 0xa0c6, 0x1000, 0xf0000000, 0x15, 0x6, 0x7, 0x200, 0x1, 0x1, 0x0, 0x8, 0x3ff, 0x9, 0x1067, 0x1, 0x5, 0x3, 0x3ff, 0x9, 0x5, 0x9, 0x401, 0x5, 0xfff, 0x7, 0x2, 0x7, 0x9, 0x7f, 0x8, 0xfff, 0x7f, 0x4, 0x0, 0x6, 0x4, 0x2, 0x7fffffff, 0xbc8, 0xfffffff8, 0x3, 0x20, 0x10000, 0x2, 0x2, 0x8, 0x8, 0x787a, 0xbd, 0x80000000, 0xa29a, 0xf5, 0x7, 0x8001, 0x7ff, 0x200, 0xe9, 0x0, 0x8, 0xffffffff, 0x1000, 0x1, 0x21, 0x8, 0x1ff, 0x9, 0x9e12, 0x3f, 0x3ff, 0x3f, 0x80000001, 0xed, 0xfffffffc, 0x1, 0xffff, 0xffff8000, 0x10, 0x2, 0x9, 0xffff, 0x4, 0x5, 0x3, 0x9, 0x5, 0x6, 0x91, 0x400, 0x80, 0x6, 0x7fffffff, 0x7, 0x9, 0x2, 0x0, 0xdf0, 0x4, 0x4, 0x8, 0x3, 0x6, 0x0, 0x9, 0xffffff49, 0x1, 0x4, 0x3, 0x8, 0x7, 0xfffff001, 0xffffff30, 0x401, 0x401, 0x3, 0x6, 0x4, 0x3, 0x7ff, 0x500, 0xa7f, 0x101, 0x7, 0x81, 0x3, 0xed, 0x8, 0x3, 0x80, 0x80000001, 0x8000000, 0x6, 0x4, 0xfffffe01, 0x4, 0x5, 0x401, 0xfffffeff, 0x81, 0xfffff001, 0x7, 0x4, 0x1, 0x0, 0x1, 0xa2, 0x33, 0x7, 0x7, 0x5, 0x80000001, 0x80, 0x8000, 0x6, 0xfffffffe, 0x4, 0x7fff, 0x0, 0x26, 0x80, 0xffff, 0x4, 0x7f, 0xd7d800, 0x10000000, 0x0, 0x4, 0x7, 0x9, 0x2d, 0x86, 0x1, 0x3, 0x5, 0x200, 0x7fff, 0xc4, 0x4, 0x337, 0x20, 0x6, 0x200, 0x7fffffff, 0x100, 0xc90, 0x22de, 0x9, 0x5, 0x9, 0x9, 0x7, 0x101, 0x9, 0x5, 0x7fff, 0x80, 0x7f, 0x40, 0x101, 0x401, 0x7fff, 0x9, 0x0, 0xffffffff, 0x1000, 0xffffffff, 0x400000, 0x88, 0x4, 0x4, 0x3f000, 0xaa0, 0xa9f, 0x9, 0x9, 0x1, 0x6, 0x8, 0x2, 0xfff, 0x1, 0x5, 0x1f, 0x5, 0x6, 0x1, 0x800, 0x6, 0x401, 0x5, 0x3, 0x4730, 0x7b3a95df, 0x3ff, 0xfffffff7, 0x40, 0x4c, 0x1, 0x1f, 0x7, 0x7, 0x2, 0x80000, 0x7f, 0x8, 0xf8, 0x101, 0x200, 0x8, 0x3ff, 0x2b, 0x5, 0x5, 0x0, 0x8, 0x0, 0x5, 0x8, 0x4, 0x7, 0x1, 0x100, 0x3, 0xff, 0x9, 0x9, 0xffffffc1, 0x7, 0xff, 0x9, 0x0, 0xffff, 0x6, 0xfff, 0x0, 0xb6c, 0x80, 0x3, 0x100, 0xfff, 0x40, 0x7b, 0xffffffff, 0x5, 0x1, 0x0, 0xff, 0x8, 0x4, 0x2, 0x3, 0x1, 0x81b, 0x9, 0x1, 0x40, 0x1, 0x1, 0x10001, 0x2, 0x9, 0x2, 0x4, 0x80, 0x8, 0x80000000, 0x7ff, 0x3f, 0xf617, 0xffffffff, 0x2, 0x400, 0x0, 0x9, 0x95d9, 0x9, 0x10000, 0x2, 0x50d7, 0x6, 0x6, 0x3, 0x4, 0x1, 0xffff8000, 0x34a, 0x9, 0x4, 0x2, 0x400, 0x80000001, 0xf2a, 0x4, 0x7ff, 0x20, 0x8000, 0x1ff, 0x3, 0x1, 0x0, 0x5, 0x1b, 0xffffffff, 0x8, 0x429b, 0x1ff, 0x2, 0x80000001, 0x6, 0xc6e, 0x9, 0x1ff, 0x3, 0x1, 0x400, 0x1000, 0x1, 0xeb6, 0x9, 0x8, 0x400, 0x401, 0x3, 0x3, 0x1ff, 0x5, 0x4, 0xfff, 0x3ff, 0x44f7, 0x3f, 0x3, 0xffffffff, 0x3e4, 0xfff, 0xff, 0x1, 0x0, 0x8001, 0x7, 0x10001, 0xfffffff7, 0xdd5, 0x5, 0x5, 0x2, 0x4, 0x2, 0x10000, 0x98e, 0xe1, 0x53, 0x9, 0xcd, 0x6, 0x8c, 0x381, 0x0, 0x1, 0x2, 0x3, 0x0, 0x5, 0x3, 0x81, 0x1f, 0x4, 0x7, 0x6, 0x1b79834, 0x0, 0x81, 0x6, 0x7fff, 0x6, 0x69, 0x6, 0x4, 0x0, 0x6, 0x7fffffff, 0x1f, 0x0, 0x53c9, 0x6, 0x7, 0x8, 0xfffffff9, 0x80000000, 0x1f, 0x2, 0x3, 0x2, 0x42c, 0xff, 0x4, 0x8, 0x3, 0xdd74, 0x80000001, 0x6, 0x2, 0x8, 0x5, 0x1, 0xd6b, 0xa4, 0x6, 0x40, 0x7, 0x3, 0x1, 0xcf63d15b, 0x1ff, 0x4, 0x0, 0x2, 0x2, 0x4, 0x3, 0x1, 0x800000, 0x0, 0x1f, 0x401, 0x2, 0x80, 0x3f, 0x9, 0x92f, 0x7, 0x0, 0x3, 0x7f, 0x6, 0x2, 0x954, 0x20, 0x2, 0x2, 0x3, 0x5, 0x8, 0x40, 0x8, 0x7bf, 0x1, 0x7, 0x4, 0x8, 0x8, 0x0, 0xe3440ac, 0x6, 0x10000, 0x9, 0x6, 0x8, 0x10000, 0x40, 0x88, 0xdb5, 0x81, 0x20, 0xd54a, 0x9, 0x6, 0x3, 0xfff, 0x3da8, 0x3f, 0x8a, 0xd8a1, 0x7fffffff, 0x8000, 0x4, 0x0, 0x9, 0x200, 0x2, 0x7fff, 0xef9a, 0x3ff, 0x6, 0x0, 0x1, 0x8001, 0x0, 0xffffff80]}) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x8, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:11 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0xfc, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a40)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r0}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x0, r0}, 0x8) close(0xffffffffffffffff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1004c800) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2b45615223c4ff4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) 17:21:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000000080000000000003f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0476c85f3da616da2f4b8c2ee7aafe1"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x1, 0x3, 0x2, 0x1, 0x401}, 0x2, 0xec2}) [ 1708.723733][T15481] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1708.723733][T15481] program syz-executor.0 not setting count and/or reply_len properly 17:21:11 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc8bffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4ad2e00000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x0, 0xb03, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004c00040000001d8005000800"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x8c, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x7, 0x4, "24f003"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2545c0adcc518d1f001863f78f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "93e1259734f55d1bbd570f65d0"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4a5aec1bdf4a4ae425178299db"}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4000141) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1708.814519][T15484] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1708.853531][T15492] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; 17:21:11 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) [ 1708.853531][T15492] program syz-executor.0 not setting count and/or reply_len properly 17:21:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0), 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r7, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000006671cf6cb62367b92e54a5e420fcd9e48a45052edfad38155874da613fed84095e21b793035ecba7089c371b103606f9deb72c3b18e6a365b39ae127492c0cea717ba4855f82704266f318fe9a6abb4f092757c1b37ab12ee854fee216952e7a06003c8da8031a43e6eb22b464f05d27c399998562caa9e59b34d10c703d2378dce530c2fd84b46e7953c8d8385536057d291dbfaee2a2cc4feae692bce3452f530e544c0a", @ANYRES16=0x0, @ANYBLOB="1d0000000000fedbff253100000008005200", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="38b60100", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="afc0e38a", @ANYRES32, @ANYBLOB="089adb00", @ANYRESDEC=r5, @ANYBLOB="080001000300000008005200", @ANYRESHEX=r0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) pipe(&(0x7f00000000c0)) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000000140)={0xa, 0x4}, 0xffe3) 17:21:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x204000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}, {&(0x7f00000001c0)="7faf74a2dd668a404e7385b68183c5e7cb0e44e9ed2d4760648c5b859135e345dcd315b8ea68f5ed30bf8c23cb3358e3cb3328f2d1d0288f69ed507af6aae8acf1a529936e81e8ef2108d96368a1551d1a2b2716106c8a5376852adc863d13da5297d312771134a9fc837f27c46c60e957ec39dd1e702951f6efa163343ddf2b171dd7a38f9461daa25f67b1f8f763eec48c8f3c2bc1d091861d6b410ad7ad0afbdf5a85ed226ab3e03a583d7963e75b724e6bcbc5596f99a0f2070ea33757137ad47e", 0xc3, 0x3}, {&(0x7f0000000400)="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", 0x1000, 0x100000001}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1709.056433][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:21:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = fcntl$dupfd(r2, 0x0, r3) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000080)=0x5) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d5741e01fe7a120104000000000100000000000025bd4286be9080baa5b5db0700000068000a01000020763f0362763855b69b5dd18f74c7469feed2ec839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39010bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1a"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x9, 0x2a, 0x8, 0xe4dd, 0x2}) [ 1709.249803][T15508] FAT-fs (loop3): invalid media value (0x44) [ 1709.271396][T15506] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1709.292900][T15508] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1709.371917][T15506] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1709.428721][T15517] FAT-fs (loop3): invalid media value (0x44) [ 1709.463597][T15517] FAT-fs (loop3): Can't find a valid FAT filesystem 17:21:12 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462ab"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) 17:21:12 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) 17:21:12 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x42200, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:12 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x10b001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "c3"}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xaa34}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004081}, 0x40000) 17:21:12 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="646973008000002c00"]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000ff9000/0x4000)=nil}) 17:21:12 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r4 = getpid() r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, 0xffffffffffffffff, 0x0) tkill(r4, 0xe) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:12 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) [ 1709.745496][T15526] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1709.746179][T15536] FAT-fs (loop3): Unrecognized mount option "dis" or missing value [ 1709.781726][T15526] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:12 executing program 4: r0 = msgget(0x3, 0x300) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000040)=""/150, &(0x7f0000000100)=0x96) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 17:21:12 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1709.834029][T15536] FAT-fs (loop3): Unrecognized mount option "dis" or missing value [ 1709.840755][T15543] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1709.840755][T15543] program syz-executor.5 not setting count and/or reply_len properly 17:21:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, r0, 0xb03, 0x0, 0x0, {0x8}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb9}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4094}, 0x40000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20c902, 0x0) r3 = getpid() r4 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) mq_notify(r2, &(0x7f0000000280)={0x0, 0x2d, 0x0, @tid=r4}) [ 1709.885351][T15546] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1709.942772][T15546] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:21:12 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)={0x13a4, 0x15, 0x400, 0x70bd27, 0x25dfdbfc, {0x22, 0x80}, [@INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "69d5ea9c28107729bac914b76400da9857e63eafe287d20e5edf425d7d9dbefbf78d34a11c797f2b72e06988da6883c4c587681b90c77d1e7dd854650dd844588f54ead47e13b4c41f3352831d34d9875b8d3255267722e12ee6468f7ba6eef1ead33be4317adeb2ff438dc4543bf32c7b0a4c97a7b1abe24bfd84d8e3d7dbee5c0e2946b27c4b0a779cde3ce344fc1da10bd4e6ebadc8a80dd11fc1e7ca2061ba4faf65244776939d145db239a8bf29a3c7cfca7a6ab0423321e85a43972f845afc1f1ca51647fbe853ee3e6ce85c0615"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "156b03ff3bd010b051ba73d8f47521d5128a203d3ac7e8cfa363b4f8c37d2e6f8219aedf0a88a59233a5dd353f08e0fc797148ff747c7666d42e673072b5ea5e114a76024ea4cf3fc51fe36b813034bef8878ff32e2808be94a474a3167d77c13b7205514bb93462512da8c7be1d95cafdd0f26eb691482f0d2457f3e2630039beb9f2ac07761cf2a133479c4d30f5b69fa52577308616f18ae4638d44b7b46ca6a088f676861b5c201cdbfc09615b493a0a054742e87f0d44fc10f61eb621c54c68fa4838ca3eb831cb196378c16841180490138151b255d009f0b61009f31be235e56d838a89bb01dd4d2f8b"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "63d1331acc58bdc0738d0fcc7474593cba7b8d072da430e1ae418622a1c599d7f1e940638a5ae7f08ef9e5142abb34d1a15495ed"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "5272099c23e2c6a5b685c085cfbafa10484b5b3b03ff33c9edb54118"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "c8b4cb216d79ab913747d1155dc42bdad28f685695d9b7a0447c1cb0a6168ed0969b4f3516e35820a33fdd1d256eb1eba84222e2ae95cc2e1999e30ef41cf3db2af388cda9110750b5498771f77ed50203147ee782f5cd4411e8181805a9be36dfde870910d0de09df21a884f78dd1de79c7125f6a551b2dd89d99e7e475326be5e57fba7e656da4c613befe6f8aefe44a70fe4b1f8f283fa33fa345d5e88ae8a51a26c2aac2be7db6360c29e5d63c042525c9e40d46a80e082866e60625095a"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "c08925cfb005c79aee4fcaaf96b999d8b461c444aa9755b2415ba7c8cf9184dafc551786e784d6a08602b43cbd0b3c093de6091a82efd6a0268f47438ef13ea0b24abc576b1e5b1af610d534b7cb5d3d8a5ce3f1bba90ad2e501ec5cb0a6905cc28744a73115732445fd53b0492f409e88eb53481c135c2d4fae64198a22562b0c330248001380a90651ec756a8b1c4ee04616d42cf2f327b293fa8ba3"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x13a4}, 0x1, 0x0, 0x0, 0x8000}, 0x48884) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:12 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41bd, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:12 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:12 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000000)=0x1) write$binfmt_aout(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r6 = socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r8, 0x0) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc, &(0x7f0000000880)=[{&(0x7f0000000b40)={0x115c, 0x3e, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@generic="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", @generic="46e2debbd39b91d1057eacf3725aae5f046a0625742da1c97fdc6a165cea069a03b690226107ae83e5175b91db3a7585ff62185a94dbf0e5424b5a05392d0e735aba33fb0d9f4e5afcfaf187237a71ebd85b0fd49c0d3c59eea76d3e79623a1a9193dffbcfb3f017990075ece6f3edb6b3c72d5b3780059a826550d083fc636aded700932b95bd614d5f36b4", @nested={0xbf, 0x28, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @fd}, @generic="f89a1275f0220608990ffcf4e962daa3fdb4a4080b0c95e485e7ee1e0914ae135050ffed4a30e698d9da59cae817c5615a406a393c24ccb4c167932a3e8f1909157529e7bd919383e44f7a3365f8c5c12bccc5fe4e1ac119e2a545c27996bc05a74dc9886cd197fd4793172700f8f3f81d85fdac46df2e8d66b8bec6581f4730a7cec382446b0bac93a98c4ffbc9356eb805d8c1c001b1a67d00d7e23429311446e597854b13f5b9a818d7", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x115c}, {&(0x7f0000001cc0)={0x73c, 0x13, 0x300, 0x70bd25, 0x25dfdbfb, "", [@generic="3404e2105300eb6b3ae439d85f1015fb868b76537bdc39d3d9e183fd6c00ba4c6c54b4122c922cc47a37df68404652fe128adcf19de22aa4843fd242c70b32987e585f6e8bb6b846e5ec144be52bbad806128ea21376c9118949ada0e65d25a28603597f7aaf960ac6c80ee8be6c15b25d4638655102893fd096870ef44e86c05ffc2eb9902e80e104434b4801ad4588433a41d9826f3861dd1b2c874254c56615bd87fa20", @typed={0x8, 0x2, 0x0, 0x0, @uid}, @generic="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", @nested={0xdf, 0x84, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @uid}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @generic="1cd9fbb13669c7f3bcc371ff956481e78fd9ba4e5fd307040837e342167468f9dd4e396634792b544800c98fb131de65a3d0290db14875772176efb71cce5a90660a41a600e0e25dfd3a9b46516f585ff10f315765912ef0d8cbb3119481b95258bc6d767deccf4fc4afb351f11ae7ac0d6af34eb1a2676428d7f06978dac0b57eb70875943e86d91413753cc912b7ed4833c76d2ff769baf18f868c954ed5387b143909b9a81a10cc9193"]}, @typed={0x8, 0x95, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x1af, 0x77, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64=0x4}, @typed={0xd6, 0x7, 0x0, 0x0, @binary="56e384c9fad70f8e28270d51c5e7a73a3519763198830474da1cffdd77a849d5763dc3fe073d6a37891a7c092c39762ea2ddef4dfc690ca23f9d31b588e599c368dae004bf88f174c6a89152a4acab4852d81229bdf7dbb55881c2b6d653159aafb0e798ee44b3f466dfbc687a4f245c7453e0032d9b2e42731c5f3e8e8cee55a49479fbee99ea26eeef1df69bac257e91546440ace5fb45b7ee127d9c7e6870e900fd75858edd05ac15f8a92d822929cf601f8a8d42b986142668571eaac37ef912e854726d430b777c4a64fd65774583d5"}, @generic="5d2fa30c67d5bb3f340dd2adc03d7ee843eb6736ee2ca2d345faa614c0751e748cb1a32561ae86943e1e2ff1515cc53a6f924b60885e2060d92f7d179c6746216d66a08125e350f8826618c8bffa0c6ec205010670c91d29d798cb097e3423238a7dccbaa262f957f22a0993450e58a677b0eda2ab10eb23c2b6e5118f49366d3db3c8a1095d217e3eea3b1ca6413ec595157f327e5688809aae9b9e610b3cf6737276e3593037d0784e4f", @typed={0x12, 0x40, 0x0, 0x0, @binary="d5e57e4ec75ac2a0ef2f26d3600d"}, @typed={0x8, 0x5f, 0x0, 0x0, @fd}]}, @nested={0x231, 0x2d, 0x0, 0x1, [@generic="3fba039b33e4422f5cf87e1ec99e3f43c8fa50ff1c700ce3f5fe81bc674d9f01215f62a4e2111bdbd1afc9ed5851fd021ca8fefbf8889f26e0ef746574dd71e59c2049", @typed={0xa, 0x25, 0x0, 0x0, @str='\xed@:]\'\x00'}, @generic="70076cd4daa0a9507d459a43c48dd7a3f7f085f7a5ebcf230bc73c3412a21e08288dccc653b95867e242074680dfe99ed85e954b058e89b1975698b51cd49fabb619e295f3f6dbc72cfebe5daca2dccb43c511ef7ca2", @typed={0x8, 0x3, 0x0, 0x0, @uid}, @generic="dac4f7f49ef8669eee74f5138a6c4dc5a38989e2344612b3ab6f5dba9cfd38259ea7da6d912fd45b73ccccb33e6e3441d6671bc2091b53d5eb63c8eb9b0d52233c65cf39818a594bf5ef01ed4855fb75a7a0934d6cdbb2daee5b017f633285094128028b8409e8d23270a402c646d3bb9aa3f4e8387d1018cfb8bed37fa6114e3b4367f9772ae73b6a4aae27129c0bfbe215884c4d8494", @generic="504ba32189626d0352f5210c77059808b7ebd4a72f4fea21e93939365fe09fdaf8a6ec47c96aee53417df620271d994d63ae21dd1964499f843e38f4e30f9e21e9e8b403c9c11761bf4c09ba9389e659ef9488166de80501629601a50b11ec12bc25131f4c0adb047419d2e01d4dc05eaa14e6f0feb0fcac850357472f4ab9e34346b6479837125250a8690ad6465a71fa2b9d743e0bf65e71f74d7b71668b96c6c193f0fd70aae304951268451edd6915550e32e54cac772391a9b618f7a1a7e5c197faa8656e1a6a796b847f9e90c9fe3063696e88136ecb180cde18519e763b", @typed={0x8, 0x7f, 0x0, 0x0, @fd=r3}]}, @typed={0xaf, 0x94, 0x0, 0x0, @binary="eae53a8d153881655cd86b0163260efa73bb9efd5d44eb5dcdde0e8d7502c6affae9a5513fa41c62083cd9f5a2788ab80cdcd511a5159d38dd9031d4f8446d3d4f76af1ac371f83eb3b8200d854c3cba8b8584ae11be7403386900209b592527e447434517b85e4e6110fe5e5e5b2c4fc933a30be38771fd58c270584a390db3bc20cbd47a32b490c805a3fabf7d8387246f54cd9b9afcd4f662843b20f1908eff31bb9412f28e83e83c0c"}, @nested={0x4, 0x49}]}, 0x73c}, {&(0x7f00000002c0)={0x90, 0x3a, 0x8, 0x70bd2c, 0x25dfdbfd, "", [@generic="382b0eed849a2e9b8f0d30eedb5c47e1398b1e6a2a7ada606d75ff2448c25c76e8a93dd16d787af89d27c697d981528efc4006db6b01dea7608ddb2163a55c1836c7c602e289407f7cfcc700e8c9f4459f107e3277c80d82b584484528dc9a72210c92b376f731c95b1719799e8cc71f19fb7c8220570a484b58c5a210be"]}, 0x90}, {&(0x7f0000000180)={0x10, 0x25, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x10}, {&(0x7f00000001c0)={0x18, 0x3a, 0x216cc22120463dc1, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x2a, 0x0, 0x0, @u32=0x20}]}, 0x18}, {&(0x7f0000002400)={0x1200, 0x31, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1139, 0x73, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x200}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x10001}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}, @generic="8efc611652f9bc7ca53322c79da71a8462c0c8c1ca622af8fba9b1abed358563b58abd9890fa62066a51c9bb048f456ccd25c7e03ebef1b49abe3e64c1e09cdc33f8768c6610329455576e6c0322fae6357ac1bebca306e97a287f56005d9167c1fb2692031da84ee8d04b5a978078d3", @generic="5d8b9b6d7670d06e6c56530d908b4a8db5c3df20acd0c4e98ab4f144292fc8622565ba67ed5c65533a9f5b3ce3e80f76dcb3d8b5150f54537594e65e6d4b2c871bff9046e5c65158f55f84489aac96994a2023d309039a4c444e4fb454fa44501bf76e62be5dbc26730fa1eeed5e5e369042a17541d903d8972edb52549a1753142701fed303c61842f7639d0ad0c559e4facd85748ab53bef6900ab3108fb235b49d4d5ff652aa9bb3908c51626c272f7db46653086a950eafb9daf12c6aa5e5869af89f44b6ad7feb8e8b6bdbbace640e1574ce5b373342cd14aa86eaa6e56feae8654de83621c2bcf91117026d297ec7aee6d9769f6073aad3e3834c1e20c1a070e129b1675db9736a0623aaeba63068185a5665a3b19f336926d4f27e77b9b799d34b54256156fc28814a1f6852b023cb1c6122ef98c633107301266d59ae1807ae632611d958edaf97de0e425956b90dd3c8ae24dbfd1a4860312bfba0105c38a8818996317bd56bab2fab657a921f49ebe094d9f0235a2022992da3251ac27d71ab5e6e690a396589879e98b9daaa6ae13a48ff4a4e2735a0e16c636cebc3c94d28c13c0550cde90b4447526b7ec66b2b1425cb2b631cf8b1eea324b226320719008a97bdd4bb32e3880fe4d4f3b7e3052cbe1ab873e7fcf541538d4f64eea32b4220f28d19a9d52ba366a0c85a9f86b03fa12a529b9d3e9167330ef93614fa4e669401aa1f56f32a1edbf7f7b9d1569147cede030e0277c0c3060769aa2c57339402598a0dbd4d36fa0479d74e2abac31890db0c31891bd6f4a1bb844e8a5439b403aad508dc1c26ff20d8d679efe28c9cf03ac782d0e52cd8ab349822107fd53ac5b50ba1624b1168f5d4c70c5e5e43659dd82eecbaf9be3e2c3187c0edb5c8b1b6ea0d9a291dfe512a2500f0584ddec290a395b258af4c5e3a570a79c3aed94d9f6e8e90467bcf5baac5f80efe00f9dd5275f04a35b92e5ae89c542ae5ac8700eff8326c6d3be797c4869db640495b2690b82130b270683d3975261773d7c035691f9ee7ea11dda25da91b8f11c70a63ed84a173b9b4884c3318d67ce7ecd6a6825bc6163c299ff3c36a3e66fa7b4d46d1290049d921e4567981dd8e44c9e5e5fe7c4dee8c8de39c7dd46b67cf91159edb359c572257c411a0f9e9c2369008bb5ec2adc93aaa32d951cb3a5bed613db043642e8fdccfaf731d51aa86fac11c3df45df44aecd718d7b44164f04a6ac64aee87544f1a991013e76d8e7e962199a79b0f2f1b154c33dda67ee1bb9bfa16eb915fb040baac1f14ce73c318f7f6b104d479fc8361f07d4aa093bdb387a77787727b5b98d8b6bcfb474ae65447a682836393e1d5b5e0e8c9c0532e7374c19d2bead01b8c9c9fd5153af9a16033b1f4b99509c25a964c07f6c5e35fc08265020924a36dc62d9af34a05ba94df485eefcbaff2d56f6cc4f8cfaeae87acd812f10c71bdced31eee0833287580607e138bc7ee8efdcb8cbcb9f44b5e75956159f6a400b6e025eb71df3719bd495a1aeae34681685f462c4dfb2ac269448948e6cfa9d5b15e3b07cc1175e85b015f563bd7c1c1fd83757306ee8b7b150b7bdd8c08db0bf76bf6b2adaa2edf2dfb81578e0ed8947895018c4193249dcebbb939594a3a72a730b836ec30e5893acd6c0fd5be2a9676589c6cd19b3ffd94fdb30b7483b13fabfccd689ec9187f48c5ce335ce24d4c7e1ccde3fa2fa2c01e5734a29b0c106b8280accf742f050b58240c293d834415f87a449a8af0ff3a4bea09ae0284955d3abc2af9d29a424dc06d237f6ba29167b333b441ecf6ae0ffdc992e0422c4241903d0b288b2fe16bf2c97d596f23e0f4a41a2c0f0685dcc9b63bd0b9c94a2c800fcfb03be4e9e3796175f96d318f5fb39f9eda47b9242ce0254c5b11155ec0cb32dc08faa48a3e43a8e63c662f8d52059bd79a6497cfe4d026b1fbca9372a8fad2475c97676d580d48935045c362075759e5f884a63a27f33a85bb226d1cda0e30cfb7595063341e8780e2493214a8fd10706b6269c592a0c386badd4d96019eb4f6355c0c54b881981be87427a2880f23f6e9a481668d69e4490038f9a7c0c490cd2757041e07104e8ced663c32a72f9aad95e90341c583ed03c006402924a3c63924e0b99fbf630d64d2006f17590f59be2e1b772d4ad60b83e4cae6e3150cc34c1c6b0ed83df8f652013972d59fd63375f2ec0154e0348a764e3ee68b0eb11030a6bbe41bb0c67b166f82ae82df26525a560c33dbafd6d932085e7f4ab4032165bc753af329e7750484b9f0e0fec390a248ddf37428dccb45ce4f572c0f0fc47ef6786cdaf86a6097200f566b6137f89dc419516ba8b682ee04aa3c6762be478fc17a63dd43d53c84a0a605a3ae325d76ec05447b25ad5300c9c918dbea6a4b5b783783dfbdedb212dce6b51f57ff122a793c3a87cfcd9d13f9747d02ae7f7b2ab9974ea045ab5575909e37c23c3969924968ea28abc5cbf7b646b066b54e5052d47229f8db0041591395c47acf9afc6296068bf99d5460b07046942047050c1726bce49fac839bc9b741bd242f93299120168aa1985c403af4ac3593311266d045670b16503868969f8bc23a90f73b54db31acd3460ca074c4721733e009e28d54389676296033fca163f100b26746d5b7a96be90327a107e4d6e633329ef09bcac3fdd4d02ba6389f2d733810a329f08dfd0e4994ae964140f94982fb60f7b8c9b8f334e50a2c7c5b36399c2b024d11c78a9e80bd79219795b5f4d66ed11e6671809f82bede839f76f9566ae18631d5c0100768bfd4afaded70696e0a2a367ec1e09992851850ed69cce6745a085563bf5fd166a3703100980dab11d06d0910eb99dc2e472356ae40f85b5963d5cecbb54e37bca99e86fc36513bc609749121bea26b348b2570592497f91c2f7afbf5bba82361f980ccac02b0e98df8c05040e8342491c1e6d92d9130deecb2cbcffcc948a8d09a4d3c28acefa4e6de6730603584d16c36536182753389604339c810a8db65e14c34e428c79857161d75b35330b681a9d20979b23157ac76196604e387dc28de196a91e47785b871f920e3c0ac6208cf000fc4f5d3ef8c28b95dcb5db50d94a31bbe3c24caca80ed9f4c780997028db868327da65196a6f399ff7357347504b86f8a2441dede15656aa605285e2ceaffc3206bcfbd33ebca9602c80a88134c42490806659796344932918826de133d254be004d1b6ada149543de3e5163014f1cbaa34107759d445b3af3136f3491de59a5ba163e2eb7083b52baf0a6de92a2b02184969cda19aa78b9aa5a58cfa58691d4ef66d3a4a7325c75252a9b9d25cd0678dee9f7441a7943b031e946ee33173d0eba65fce715a6481dac9d666b18e6eb0a703d1c90953d0755f40eedd8d6b0264e7fe9b6a84cc86a94706e379cb6819f612347e5e76fadd9880465a4a92e279167201316039c049793475bf0259355ecbb0849977eb236c329bdb2f965b83ce035fbaed88cbdb3354d6222fb302eb80d0193a628d37d9d9829a9b4e2b3249d4e405c2c36f52163608949693156c668fae6961bcc8f6b6e72b9dcb91b38b58314c658451abc1325f5b8fb34fa16c93fa9e6d77aa87ab84102a72946575b5b2d3c04f39bb19ddb4b5cbf584f1470aa1cdca39f98ee44c498abdfbaa60eb078bbf436305a336a425e4afe0fe55056e60fbe94e5f8e6ae55c5392c0733e4385f0a3f3be3c2f97df9b0b69f9ded3e2a69fdb1267e7dca0fa3763e912fc8878c1f6099420f03879b225835b71450c96f0ff54833184014c4402b546f997ff179e6d2a00df4fc5bf3d53ada9687d1f92f3738cc652aabe1115209eb0b994bb33d3c57ba22d3309dcf14b6695fabc73fafc3cdff2f7788285efd1f8b9083962e634acbd8a59cb7bca29bdf34f978e231a4400634f85fa4a4917d40f66ec6542f52e2b769f636f35ac551f7034f6fb709f482e63ef889a4f1c2caec1abc3895a422f150c2d1c13c9313e9f2e1f9dc9d8da7a7e125de49118893f332f5bd11de32e31fa74ee3609a6c2c006ef8d75f622843749c4c749c89d496afd58862817dc683283acdbee10063c1c2eb08176a5997e5887cc4e37deb3796c155ebaab30d21cf09c3a36b3dbcab8118dec8f882d6a71a2fcf821dd9abdda0459b12df126d206ef6a0ca3899ece4bcf79ca07999341d1746ec4a7ef7ec40756c19eb0b80cec02d47754686ca2792f7b89a2697a800b7cc2327622b60f0c1320c1c0b5e6d989f1660ea1b7f192e30742667b3fcfeba33e4e4ea2dfbec819f2b4f7567395e1d8c5fccd26e550c76a8409614d43ecab67ac3a7ce737140cd710cfb1421c001681dc230631b3aa76230af75ff3a7cdf34c5d3dbff515677e91011b0821b8badbf50b245f522820a8006a9f654bb3f264334f94b198de5fe2d2ad89b7328d4907b9bddc68963a4b9b646e7bba48d83977c938fc2d220a538897b1b03c592325ec2b4f212c581b77f2e8813e11e1444f9c87dccece56642042b00701ac3be829f91861fd62305b3780c1620ff909a22c462c3067db434af317f9a3a8230c9a8ad7d6d7d2186282e40f0693a2623b888f9bef8292bf89bc4039537356df72c5660308dd62cbd6a712ee78ce38b42d320ae3707af0ba81e34bf2ef3709f7bd64c7cef3419b685f721f847757465290bee0a584cc39898379800ed88fa4a81206d897df4b61b62f146a1dd9d86c36474cc884018e08f309293c2cfc02dce0190be130d97109fb4a4ee0d338babf0e57b936edf6391b87aee8226af1283eaedc38193559517b0b410c4d858f27ccf9ec2978c9a701dc40581ec48ab7810d4d661c6183c9f84e085a3e1e2cc9d640de4be6fcfeb695bd438a4cac907c17c45d6db26232bab9c733bc8c7dd705801de129a1ee5c8d5fbbc2297a13c4da2c5f687f21b9f8ae6ec404a7215b094415d258b4833014463f6f9e66aa51977862a9012cd6c951a8e02edce63d880af174f1435efae2c074bbca5afdb441d0c88d27e9d21e58dcea5fe4fd6e1b820a3ebea0d40f4708199077b060103ef0d39bde18e50358bbdca869339de1f01c093e440947119c86d404a18de7d8d51376210aaa2cfc2e264285778cbaaafacc1f243e79482fd8e7946f27cfaccb09070ac5edb21581edab1fa3f306326cffaf8ceefa898be2c8d380d193de5232651914965ed90f05fc400a95ca180e040284e795aee100f5341fade0f7a8431db1acbf2dd4de729706c2e209daf50f7baae4acfb1b8d1011601695825f7b60120c7f40848f37506e72b9980a69b8420c7515882355e6a840b8997321aa8be61f0ab9f2baf4422b8bda6f6b53776bb7a9de9d4a28a6749a456c73412e77be85311680381203112d3b88f40b32621e0ab625450332c876218bfe54851d522b284851238bade6d1ad6e9a2eeef1628022f2f43df7774e30546d92f49b5f4b18cd4a32296f7c85138c1c779f9fa1776d548eebb39c3469bec76ef71196cd76221e9df6edab463e3626bce797ead60a901f2eea8d8e521c4052c472832fdbed7c89bbfd0e880c83a2ab82cb50b2cc4349fd66ac82e2ecf285204bce805188aebd1137302f80fa628efa1cd664f92eeae2f2820e94e569ece3263bcde4c92b156293f79e05e5c539ba69483a957ff6fd5acc6c5f820e6841892389e73c50a9e6aa1060c10fcd1930a34cb4a23c536b7fa2d6143d2773c90bd28e1278d915f100cae5f4467f1961ed03e24cb7af3e0af5ab6b11befd85c83", @generic="f19e5715aee344784d9fa1f3f9230f54335e6f2e3d166d259a36a6791703f8620aeae651e50f0e6cd548bb65a104f5d2b36f4ad7b8e180f0ad24d2ae47dd87276ff48144b7bd26b08c0cc8c195c4390d5c7d3fbe6a273902a2ff12c59f702456dc5013852967aa04e1fce195c7af153bb704f2b891f7b6e79c7f63cdc15dab448199f65544a2b22d28a12a3fd871f814e721105c90559680bf35f43cf63babed2f46ac410ee87bdfb89096ac32"]}, @nested={0xb3, 0x6, 0x0, 0x1, [@generic="4e05eb5ad221bbb7713d55f9d217574285d41508f1fc9e1d21ab1e4be12f5b8957bfa419870c4501d5b13b2c097c0ec4558a77e6994e56ad2f0f6103690e8e36a24eefd2542634d218d7655cd7780ff7214ff8052bd88b1ffdb132030bc9a521d75163a71adecb9189d7fb775dd1396156bd39bcb608009f1ec8a18aac56a9eb46cdeba94c9ae7813152a0359158b1a6f2df59b040b7afa7a76597688804dd3ff549f7dcf8f2a4ce15e11dabbf14da"]}]}, 0x1200}, {&(0x7f00000003c0)={0x1b0, 0x20, 0x2, 0x70bd26, 0x25dfdbfb, "", [@typed={0xe, 0x44, 0x0, 0x0, @str='/dev/vcsa\x00'}, @nested={0xc7, 0x4d, 0x0, 0x1, [@generic="58a77967aef30dea0fdb69879075b87137eb6d79706b98638bb03cc922f278", @generic="86882de87ba6dc2b639b468611ae261ac5da01b6a70d7d31bee3276b3080af45e6ed5cd8f083e0644cf2ca656323bddaa3789ae85f8639a07c4a6ceb893ef48455fe7e3442ee842c21d098f67b3ae130a39f9e95bd6852390f1cc676b5e1852ef23da3024984055dba304876f114e61ae3439a60b02a7600ce13473f09170c0f74c68dc7318b09515081310d29f12307a2de0ec5568aaa0fb527a6d03818584c105762d3"]}, @typed={0x8, 0x2d, 0x0, 0x0, @fd=r6}, @nested={0xc0, 0x25, 0x0, 0x1, [@generic="d872c9eb0d7a7edde2be0aa7218e663fbe4ccbf2ca77adb123fa3514d24465c5bef80ff8b4e175015e89c844af84ca7b341d749514bc6669263d688672a3716c29fd9019734dbc2df0b4d6337425207f822d1d58095405c5855f82a63a01e6ea5d47fda3fef0f4d863616c2b9d752d9a9de6d8ffbf1cdd887797224a0e18115126ab740332daedf9bbf07598c7a611b5ef7197e7564479121dca9142d32c41bcbf41dbb334686ba51d365afb0d3b383f79b384b0", @typed={0x7, 0x49, 0x0, 0x0, @str='@-\x00'}]}]}, 0x1b0}, {&(0x7f0000000580)={0x2c8, 0x35, 0x20, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x13, 0x0, 0x0, @pid}, @nested={0xb3, 0x40, 0x0, 0x1, [@generic="b3412761097b5543979c31cbbd4f827565ffafef566095ad9f4925f705c1febe7b705a3a294624f94596d9a2f1652ec2f74011a843c8edf0974ad0c8a84827bc28873bbc482b95807cdc009f15591db16c308f0808ab76bcf8c1dbda64ca7dffb57da0ee1677ee224006ef7ebf542eedec786b98ccd0458ac73d757b9e0d35e474479239b2590a487d034d0d69c746145d8bbcc239c7acfa5bf3a2", @typed={0x8, 0x34, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x2}]}, @generic="a7", @generic="5558a254c6486e445867fa29a830d3859e8610dff3aeec2e352165863a66a7cb17689ad1e76a7fc5a6251f7ef643293ba0c4a164eaa4f05f4b467d9a2653bb613aa6718b9a08ae63405c735459162ee68eb74345ba53adbda84c41bc93907dd2a1ee0bc151454b91cd", @nested={0x187, 0x30, 0x0, 0x1, [@typed={0xc, 0x48, 0x0, 0x0, @u64=0x81}, @generic="57a7224ba79d435c084d582fb19aa17550e6bce7cf202e7e31c6190ebb112cbac9a86926472f81bbadaa62a9ea72030851559d", @generic="aadac0d12d8d5cf73ef5862f7e278b6a6747fe15839eee6efa51023066f55a21007f07bf44cdc2031ad0b68698c5c66a4ff275bb800ae5e7d7803fa6290ae60d6fc415444823ac34495cb8b06e889d3c81", @generic="5a627a01a0fb02287efbd6", @typed={0x8, 0x8c, 0x0, 0x0, @uid=r8}, @typed={0x4c, 0x8, 0x0, 0x0, @binary="2e2ce4bd37574a67cffadf6ade17087bd5ce1c90d837930c51b76cccbde9d3b71e47382b2f354d7794cb4659ce592212c68884e5e027a91a3444defdaa302918baca395aa5de1258"}, @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@local}, @generic="ecfb80c60fc83c29642526e4a8bcc748b69f0761423b90ff4057c5c66d8ff02e1bf92d4622d3f7e15b600be06eb94190703da81ac9659e5eb5796ee413efefdb51ef1eddd85dfbd704672465f6aba496b0f271d06c3c263eee550cc782351b96dfada74989b20fd1e4a10aae6f97820be3fb36cec58c59d419220a01b5a4a6b94c311e90ae74baa43c3991e1"]}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@loopback}]}, 0x2c8}], 0x8, 0x0, 0x0, 0x4441}, 0x10) [ 1710.200760][T15561] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard 17:21:13 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:13 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:13 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:13 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r4 = getpid() r5 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, 0xffffffffffffffff, 0x0) tkill(r4, 0xe) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00002, 0xaaaaaaaaaaaab4d, &(0x7f0000000040)=[{&(0x7f00000001c0)="998d96bd0447aefcd0162d6f7bf939b9257877d18d6db781840c2e5624a493de0e6e75af52c3943d7e62056ea8471b6cef5c1fad152b374232ed8f109505aa", 0x3f, 0x7}], 0x40028, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f646f74731b00"]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x14200, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40900, 0x0) write$FUSE_LSEEK(r4, &(0x7f0000000100)={0x18, 0x0, 0x5, {0x520}}, 0x18) 17:21:13 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) r1 = socket(0x840000000002, 0x3, 0x200000000000ff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000040), 0x10, &(0x7f0000004440)=[{&(0x7f00000002c0)="acb3ae1e15e25b6df492e65750eb1eafb118c65b2e6a82d07ab7434586ae69ecc2b17f8b68cada91df92819fc5336dee", 0x30}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1710.604507][T15589] sg_write: data in/out 2163121/104 bytes for SCSI command 0x1-- guessing data in; [ 1710.604507][T15589] program syz-executor.0 not setting count and/or reply_len properly 17:21:13 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x4, 0xc) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x10, {0x2, 0x4e22, @multicast2}, 'team_slave_1\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x1, 0xdb, 0x9, 0x69c, 0x8, "106729902632de02b5d7b3c1872a3d75d24b39"}) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000894f0b0a0bf62e6c37fcdbcbd368fad50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb197b01cd52af359ab4ff7b3a8b8bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145cd23d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac24"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:13 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:13 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x140b, 0x620, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40810) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = getpid() r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={[], 0x7f, 0x8, 0x8, 0x1, 0x9, r2}) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000000000fedbdf253100000008005200", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="083e00d980", @ANYRES32, @ANYBLOB="080001000300000008005200", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) 17:21:13 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xffffffffffff0001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = getpid() r2 = getpgid(0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) r6 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r7, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x210800, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d00010000000000003d3078303030303030093030303030346532312c706f73697861636c2c753e", @ANYRESDEC=r5, @ANYBLOB=',dont_hash\x00pcr=00000000000000000016,fowner>', @ANYRESDEC=r7, @ANYBLOB=',context=system_u,smackfstransmute=./cgroup/syz1\x00,smackfshat=,appraise_type=imasig,\x00']) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) ptrace(0x10, r1) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1710.970133][T15604] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1710.970133][T15604] program syz-executor.0 not setting count and/or reply_len properly 17:21:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x98a, 0x4) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) close(r0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r5 = pidfd_getfd(r0, r4, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f00000000c0)={0x23, 0x3, 0x0, {0x6, 0x2, 0x0, ':%'}}, 0x23) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) [ 1711.106604][T15610] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1711.169937][T15610] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1711.436414][T15616] FAT-fs (loop2): mounting with "discard" option, but the device does not support discard 17:21:14 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x92) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f00000000c0)=0x1c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:14 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000500)={0x18, 0xf, 0x2, {{0x0, 0x2, 0x7}, 0x2}}, 0x18) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0xffffffffffffff83) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x5, 0x86) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xffffffff, 0x7ff}) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000100)) 17:21:14 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x38) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@dots='dots'}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000140)={0x66, &(0x7f00000000c0)=""/102}) 17:21:14 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x54, 0x0, 0x20, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_PID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x88100}, 0x4000010) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) tkill(r2, 0x1) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0xfffffff7, 0x5, 0xc418, 0x0, 0x4, 0x6}) socket$inet6_mptcp(0xa, 0x1, 0x106) 17:21:14 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb}) 17:21:14 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffff, 0x8}, {0x200, 0xfffffc00}], r2}, 0x18, 0x2fc9e90620911e39) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x8, 0x1) [ 1711.993843][T15641] FAULT_INJECTION: forcing a failure. [ 1711.993843][T15641] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.076448][T15641] CPU: 0 PID: 15641 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1712.085175][T15641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.095941][T15641] Call Trace: [ 1712.099854][T15641] dump_stack+0x18f/0x20d [ 1712.104205][T15641] should_fail.cold+0x5/0x14 [ 1712.108814][T15641] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1712.114553][T15641] should_failslab+0x5/0xf [ 1712.119938][T15641] __kmalloc+0x27d/0x340 [ 1712.124204][T15641] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 1712.129862][T15641] tomoyo_realpath_from_path+0xc3/0x620 [ 1712.135436][T15641] ? tomoyo_profile+0x42/0x50 [ 1712.141468][T15641] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1712.141487][T15641] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1712.141507][T15641] ? tomoyo_execute_permission+0x470/0x470 [ 1712.141524][T15641] ? lock_acquire+0x1f1/0xad0 [ 1712.141539][T15641] ? delayed_put_pid+0x30/0x30 [ 1712.141566][T15641] ? lock_is_held_type+0xb0/0xe0 [ 1712.141604][T15641] ? selinux_inode_getsecctx+0x90/0x90 [ 1712.141625][T15641] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1712.141639][T15641] ? lock_is_held_type+0xb0/0xe0 [ 1712.141661][T15641] ? __fget_files+0x294/0x400 [ 1712.141695][T15641] security_file_ioctl+0x50/0xb0 [ 1712.141714][T15641] ksys_ioctl+0x50/0x180 [ 1712.141733][T15641] __x64_sys_ioctl+0x6f/0xb0 [ 1712.141746][T15641] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1712.141764][T15641] do_syscall_64+0x60/0xe0 [ 1712.141783][T15641] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1712.141795][T15641] RIP: 0033:0x45c429 [ 1712.141812][T15641] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1712.141820][T15641] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.141836][T15641] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1712.141845][T15641] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1712.141855][T15641] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1712.141864][T15641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.141874][T15641] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c [ 1712.290121][T15641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1712.317139][T15655] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1712.839685][T15668] sg_write: 4 callbacks suppressed [ 1712.839701][T15668] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1712.839701][T15668] program syz-executor.4 not setting count and/or reply_len properly 17:21:15 executing program 1 (fault-call:4 fault-nth:0): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf"], 0x92) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:15 executing program 5 (fault-call:3 fault-nth:0): openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:15 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x214140, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000180)={'raw\x00'}, &(0x7f0000000100)=0x54) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2c) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:15 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb}) 17:21:15 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000b40)=""/4096, 0x1000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) 17:21:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="6469739062776301000000000228b226ff35bd9cb82f6eaaa103a876ba25dd78b7e25e5a73bdfd46342da0bf4e45ecc7f7a606627823404594c465529ddc7bf581846ac86c7960410980969936d43372f1eb1acd35c12e17e0f98386d60119d42476c94a6d3739ca1ec971351345b93485181e1545d2aa8f1bb65aab57b3898a4d0564ef5a82e67ea93e2a4fef51266cfa112cfec379530293def3c3862af69b7afc51885c77c7cbe1a9f26f931a0d6dd30f24916d66e52d2580e15b592d24ffb2c48fec4aed8aed189c4ce5f235059b6048d797c7ad709be59d7cee3376899f50788cb6f7a72af000e5"]) r0 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000402505a8a440000102032e314a0283b316df30d2090400050207010180090501022000d50406"], &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x1, 0x22, 0xc3, 0x40, 0x5}, 0x9e, &(0x7f00000001c0)={0x5, 0xf, 0x9e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x88, 0x8000}, @generic={0x75, 0x10, 0x1, "76ccffa80f657dc152b87057d25533ec0cf444b6546d51ec3ad60e1a5a104c1a22d0a8ed6d0126a872799c9faf62799231b10ecd7b4fa64ed5f591f56ae1b2b8f5bb816c8df2f50363cd4cd25829644e1d6464c03e656ad17d7626cff18180d8f494782a09f57e3d81b5714f14eb84f3f732"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x20, 0x80, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x6c, 0x1, 0x2, 0xff00, 0x9, [0xff3f0f]}]}, 0x2, [{0xc7, &(0x7f0000000280)=@string={0xc7, 0x3, "0369f502bab97e76106e6eb1482467248e8511757f18e98f780a2d3813ecf1ea83da9b28ba681b8044e72ed006df349559ec2363a1372516ae276bf45b51d82cfc5991f711cc088fa6cd299c333ba9cdf04428b139847082302aa5ca6a47a60fee40252a5fab11663c5ea13b202976baffa8f5cd0651703bd0b933263aea6a678216cef0f12d7f4d1d9612dca17ba02b62d016309184a7486e001023b4f7536609bbf806949650dda747bc567476cbe4af61f0b79a14b2e2a28c473b74d63f73b5f4725503"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="402298000000980a0e0ec53cd65b1744c2646cc3f207d0da3864f01a1a58e35d0a93265a2793d2824898a00a69f45afc2ce9fceddd7eb8f02be3036ea247cd10c5a0aa2e762d8a1e3e0c33f3230008ba7cd3f3d5e6699580b4f1ab5078c234746b1b13170e3e64f97cde30d39915e5618ed9a2a18bf5d4189207daeef700000000a324143512add114c79313a348f97cf2909c79"], &(0x7f0000000500)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "062eda858a8040a4a011f84fca8878081da0410349d56344bf738b54dd0c00a12ecfbf3ff602689b267067f60a2a3f72feffaf5b02e73c187e55d6b084c2e5077f09dd259b3a5b551b29e6ead64fd1a567033fd05394d495791ec475f36a8800136cf2b3f9e2cf470c594dd8148207ff418aa199552be08b3b63a64d98c59b59013b1d11c65976e5a68b6a6dcee2fd8a58c6f0b9de648c70ef722ef453060952bc954dec840e092dbc07074c858c1548d653f3d72280f875618be9df0791ab64a8f62450e2c5fa61dd34de75dae2647df040460a38e4f8d356b7cb9659209105013083111c1346cffc8beac6f31a63"}}, &(0x7f0000000600)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb4, "fd30abb0f04e7cbfc93d642160a258dd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0xff, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xa, 0x9, 0x7f}, @generic={0xc8, 0x10, 0xa, "d60b15894263d1553ed2e87458f46d50a0b26ba855bf40151ecc591643fe765a4150d0572f0e442b7a8cc3f7481e38e932d3274792d81c187d74fc49b9d631c3a9fc032de10040ac4198f2fdadcade409ee7193ff984e5c45e5ef4d9e29b3ab8684c16a83bf22505676a3b293143b5e63146354bbca22da26bfd6f57afc7ff8946b6157b35183c7f6e08bea48412c853d185033c4a12c7c3431d7ee37fe8733c0016b4724358fb8b93c59115d1067845ed2b1ece48e3f2befbf005921986cf31b0748edde4"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "89d10202247b70d7c502b19af0b34d42"}, @ptm_cap={0x3}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x8, 0x80, "2ee013ac", "e95bb437"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x89, 0x3, 0x40, 0x15, 0x7, 0x1}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000e00)=ANY=[@ANYBLOB="20075a0000005cdffe84f405de716c1efe172c14ccd7907ee7e3473d7e1d7215346038046f786f4c5e7161cb96951d88af5970f51306a70c67acc5cbca98e1c6bc8199f1093bf3dc8a6d9874c08d58002c5da0e5a2e61e02f96185953ef12c71388cd8a8ed3ff305f823bb7b552f2c556f12e0a24b38eefa0691330f59dd4d2c9e81d03e2d07533b6f2be067f0632a93e1578b781f4c59c8a48b0e394792111395ef29bcc8a13296842e4934e02fa8df0a220e81aa872e5e4febaba7cc6ffea98eb2790bdf332dd6b06db14a4ec1364db1d87653ca8a35"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x4, 0x2}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x3f}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "ad87"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x13, 0x6}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "883d"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xf6}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x7f}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f0000000d40)=0x1ff) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000180)=0x8, 0x4) [ 1713.187551][T15685] FAT-fs (loop3): Unrecognized mount option "disbwc" or missing value [ 1713.191956][T15684] FAULT_INJECTION: forcing a failure. [ 1713.191956][T15684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1713.211309][T15684] CPU: 0 PID: 15684 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1713.220960][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.232510][T15684] Call Trace: [ 1713.235820][T15684] dump_stack+0x18f/0x20d [ 1713.240266][T15684] should_fail.cold+0x5/0x14 [ 1713.244884][T15684] __alloc_pages_nodemask+0x1a3/0x930 [ 1713.250291][T15684] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 1713.258562][T15684] ? lock_downgrade+0x820/0x820 [ 1713.263440][T15684] cache_grow_begin+0x8c/0xb20 [ 1713.268249][T15684] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1713.274429][T15684] cache_alloc_refill+0x27b/0x340 [ 1713.280889][T15684] ? lockdep_hardirqs_off+0x66/0xa0 [ 1713.280920][T15684] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1713.280939][T15684] __kmalloc+0x319/0x340 [ 1713.280962][T15684] tomoyo_realpath_from_path+0xc3/0x620 [ 1713.280980][T15684] ? tomoyo_profile+0x42/0x50 [ 1713.281001][T15684] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1713.281018][T15684] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1713.281038][T15684] ? tomoyo_execute_permission+0x470/0x470 17:21:16 executing program 5 (fault-call:3 fault-nth:1): openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:16 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb}) [ 1713.281056][T15684] ? lock_acquire+0x1f1/0xad0 [ 1713.281072][T15684] ? delayed_put_pid+0x30/0x30 [ 1713.281093][T15684] ? lock_is_held_type+0xb0/0xe0 [ 1713.281127][T15684] ? selinux_inode_getsecctx+0x90/0x90 [ 1713.281147][T15684] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1713.281160][T15684] ? lock_is_held_type+0xb0/0xe0 [ 1713.281182][T15684] ? __fget_files+0x294/0x400 [ 1713.281206][T15684] security_file_ioctl+0x50/0xb0 [ 1713.281224][T15684] ksys_ioctl+0x50/0x180 [ 1713.281243][T15684] __x64_sys_ioctl+0x6f/0xb0 [ 1713.281256][T15684] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1713.281274][T15684] do_syscall_64+0x60/0xe0 [ 1713.281291][T15684] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1713.281302][T15684] RIP: 0033:0x45c429 [ 1713.281319][T15684] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1713.281328][T15684] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1713.281344][T15684] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1713.281353][T15684] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1713.281363][T15684] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.281373][T15684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.281382][T15684] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c [ 1713.281839][T15681] FAULT_INJECTION: forcing a failure. [ 1713.281839][T15681] name failslab, interval 1, probability 0, space 0, times 0 17:21:16 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395010000009a8cb0e290476c85f3da04000000b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58fbc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf00000000"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x7, 0x6, 0x1, 0x7, 0x7, 0x17, 0x13, "bb78d291c031589682fef4d212edba259a5fe6fe", "d3771db4dd30dcc1a3a60bb91cb94be97a005f09"}) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x0) [ 1713.281889][T15681] CPU: 1 PID: 15681 Comm: syz-executor.5 Not tainted 5.8.0-rc7-syzkaller #0 [ 1713.281899][T15681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.281903][T15681] Call Trace: [ 1713.281923][T15681] dump_stack+0x18f/0x20d [ 1713.281944][T15681] should_fail.cold+0x5/0x14 [ 1713.281965][T15681] should_failslab+0x5/0xf [ 1713.281981][T15681] kmem_cache_alloc+0x2a9/0x3b0 [ 1713.282002][T15681] getname_flags.part.0+0x50/0x4f0 [ 1713.282020][T15681] getname+0x8e/0xd0 [ 1713.282034][T15681] do_sys_openat2+0xf7/0x3b0 [ 1713.282051][T15681] ? lapic_next_event+0x4d/0x80 [ 1713.282065][T15681] ? build_open_flags+0x650/0x650 [ 1713.282102][T15681] ? hrtimer_interrupt+0x6ea/0x930 [ 1713.282121][T15681] __x64_sys_open+0x119/0x1c0 [ 1713.282135][T15681] ? do_sys_open+0x140/0x140 [ 1713.282157][T15681] ? do_syscall_64+0x1c/0xe0 [ 1713.282174][T15681] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1713.282194][T15681] do_syscall_64+0x60/0xe0 [ 1713.282211][T15681] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1713.282222][T15681] RIP: 0033:0x4161a1 [ 1713.282238][T15681] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1713.282246][T15681] RSP: 002b:00007f392d1c0820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1713.282259][T15681] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004161a1 [ 1713.282266][T15681] RDX: 0000000000000000 RSI: 0000000000163882 RDI: 00007f392d1c0850 [ 1713.282273][T15681] RBP: 00007f392d1c0ca0 R08: 000000000000000f R09: 0000000000000000 [ 1713.282280][T15681] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 1713.282288][T15681] R13: 00007ffd97d756cf R14: 00007f392d1c19c0 R15: 000000000078bf0c [ 1713.295413][T15689] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1713.295413][T15689] program syz-executor.0 not setting count and/or reply_len properly 17:21:16 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x92) r2 = getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x200006, 0x5d6d, 0x100b7}, 0x10) read$char_usb(r4, &(0x7f0000000040)=""/47, 0x2f) r6 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r6, r2, 0x7, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) [ 1713.623330][T28230] usb 4-1: new high-speed USB device number 125 using dummy_hcd 17:21:16 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1713.791743][T15705] FAULT_INJECTION: forcing a failure. [ 1713.791743][T15705] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.825035][T15705] CPU: 0 PID: 15705 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1713.834456][T15705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.845416][T15705] Call Trace: [ 1713.848727][T15705] dump_stack+0x18f/0x20d [ 1713.853080][T15705] should_fail.cold+0x5/0x14 [ 1713.857695][T15705] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1713.863273][T15705] should_failslab+0x5/0xf [ 1713.864353][T15709] FAULT_INJECTION: forcing a failure. [ 1713.864353][T15709] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.867704][T15705] __kmalloc+0x27d/0x340 [ 1713.867728][T15705] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1713.867749][T15705] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1713.867776][T15705] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1713.902473][T15705] tomoyo_encode+0x28/0x50 [ 1713.906912][T15705] tomoyo_realpath_from_path+0x186/0x620 [ 1713.912580][T15705] tomoyo_path_number_perm+0x1cb/0x4d0 [ 1713.918050][T15705] ? tomoyo_path_number_perm+0x183/0x4d0 [ 1713.924666][T15705] ? tomoyo_execute_permission+0x470/0x470 [ 1713.930494][T15705] ? lock_acquire+0x1f1/0xad0 [ 1713.935188][T15705] ? delayed_put_pid+0x30/0x30 [ 1713.939976][T15705] ? lock_is_held_type+0xb0/0xe0 [ 1713.945038][T15705] ? selinux_inode_getsecctx+0x90/0x90 [ 1713.950522][T15705] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1713.956077][T15705] ? lock_is_held_type+0xb0/0xe0 [ 1713.961032][T15705] ? __fget_files+0x294/0x400 [ 1713.965728][T15705] security_file_ioctl+0x50/0xb0 [ 1713.970678][T15705] ksys_ioctl+0x50/0x180 [ 1713.974938][T15705] __x64_sys_ioctl+0x6f/0xb0 [ 1713.979628][T15705] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1713.984836][T15705] do_syscall_64+0x60/0xe0 [ 1713.989329][T15705] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1713.995224][T15705] RIP: 0033:0x45c429 [ 1713.999132][T15705] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1714.021777][T15705] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1714.032114][T15705] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1714.040098][T15705] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1714.048083][T15705] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1714.056250][T15705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1714.064237][T15705] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c [ 1714.075585][T15709] CPU: 1 PID: 15709 Comm: syz-executor.5 Not tainted 5.8.0-rc7-syzkaller #0 [ 1714.084273][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.095028][T15709] Call Trace: [ 1714.095471][T15708] sg_write: data in/out 262577/94 bytes for SCSI command 0x86-- guessing data in; [ 1714.095471][T15708] program syz-executor.4 not setting count and/or reply_len properly [ 1714.098758][T15709] dump_stack+0x18f/0x20d [ 1714.098780][T15709] should_fail.cold+0x5/0x14 [ 1714.125645][T15709] should_failslab+0x5/0xf [ 1714.130072][T15709] kmem_cache_alloc+0x2a9/0x3b0 [ 1714.134937][T15709] __alloc_file+0x21/0x350 17:21:16 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb}) [ 1714.135268][T15705] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1714.140250][T15709] alloc_empty_file+0x6d/0x170 [ 1714.140270][T15709] path_openat+0xe3/0x2750 [ 1714.140288][T15709] ? mark_held_locks+0x9f/0xe0 [ 1714.140309][T15709] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1714.168173][T15709] ? path_lookupat+0x830/0x830 [ 1714.174081][T15709] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1714.179382][T15709] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1714.186608][T15709] do_filp_open+0x17e/0x3c0 [ 1714.191829][T15709] ? may_open_dev+0xf0/0xf0 [ 1714.196348][T15709] ? kvm_sched_clock_read+0x14/0x40 [ 1714.201649][T15709] ? sched_clock+0x2a/0x40 [ 1714.202533][T15717] FAULT_INJECTION: forcing a failure. [ 1714.202533][T15717] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.206066][T15709] ? sched_clock_cpu+0x18/0x1b0 [ 1714.206081][T15709] ? sched_clock_cpu+0x18/0x1b0 [ 1714.206105][T15709] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1714.206120][T15709] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1714.206136][T15709] ? trace_hardirqs_on+0x5f/0x220 [ 1714.206148][T15709] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1714.206177][T15709] do_sys_openat2+0x16f/0x3b0 [ 1714.206194][T15709] ? lapic_next_event+0x4d/0x80 [ 1714.263712][T15709] ? build_open_flags+0x650/0x650 [ 1714.268737][T15709] ? hrtimer_interrupt+0x6ea/0x930 [ 1714.275008][T15709] __x64_sys_open+0x119/0x1c0 [ 1714.279953][T15709] ? do_sys_open+0x140/0x140 [ 1714.284642][T15709] ? do_syscall_64+0x1c/0xe0 [ 1714.289220][T15709] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1714.295194][T15709] do_syscall_64+0x60/0xe0 [ 1714.299605][T15709] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1714.305479][T15709] RIP: 0033:0x4161a1 [ 1714.309367][T15709] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1714.328964][T15709] RSP: 002b:00007f392d1c0820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1714.337496][T15709] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004161a1 [ 1714.345722][T15709] RDX: 0000000000000000 RSI: 0000000000163882 RDI: 00007f392d1c0850 [ 1714.353778][T15709] RBP: 00007f392d1c0ca0 R08: 000000000000000f R09: 0000000000000000 [ 1714.361836][T15709] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 1714.370317][T15709] R13: 00007ffd97d756cf R14: 00007f392d1c19c0 R15: 000000000078bf0c [ 1714.379003][T15717] CPU: 0 PID: 15717 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1714.387685][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.398443][T15717] Call Trace: [ 1714.401746][T15717] dump_stack+0x18f/0x20d [ 1714.406095][T15717] should_fail.cold+0x5/0x14 [ 1714.410709][T15717] ? dma_buf_export+0x274/0xb00 [ 1714.415576][T15717] should_failslab+0x5/0xf [ 1714.420013][T15717] __kmalloc+0x27d/0x340 [ 1714.424635][T15717] dma_buf_export+0x274/0xb00 [ 1714.429406][T15717] vb2_vmalloc_get_dmabuf+0x104/0x220 [ 1714.434799][T15717] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1714.440900][T15717] vb2_core_expbuf+0x2e0/0x590 [ 1714.445681][T15717] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1714.451765][T15717] vb2_ioctl_expbuf+0x175/0x210 [ 1714.456727][T15717] ? v4l_stub_expbuf+0x17/0x60 [ 1714.461596][T15717] __video_do_ioctl+0xa86/0xc70 [ 1714.466725][T15717] ? v4l_reqbufs+0xd0/0xd0 [ 1714.471164][T15717] video_usercopy+0x207/0xf30 [ 1714.475857][T15717] ? v4l_reqbufs+0xd0/0xd0 [ 1714.480283][T15717] ? v4l_enumstd+0x60/0x60 [ 1714.484743][T15717] ? generic_block_fiemap+0x20/0x60 [ 1714.489969][T15717] ? lock_is_held_type+0xb0/0xe0 [ 1714.495537][T15717] ? __fget_files+0x294/0x400 [ 1714.500227][T15717] v4l2_ioctl+0x1a2/0x220 [ 1714.504567][T15717] ? v4l2_prio_init+0x20/0x20 [ 1714.509261][T15717] ksys_ioctl+0x11a/0x180 [ 1714.514125][T15717] __x64_sys_ioctl+0x6f/0xb0 [ 1714.518717][T15717] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1714.524101][T15717] do_syscall_64+0x60/0xe0 [ 1714.529057][T15717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1714.534970][T15717] RIP: 0033:0x45c429 [ 1714.538876][T15717] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1714.558918][T15717] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1714.567345][T15717] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1714.576810][T15717] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1714.584793][T15717] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 17:21:17 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x5, 0x0, 0x300b, 0x800, 0x1000, {0x5, 0x7}, 0x1}) [ 1714.593119][T15717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1714.601105][T15717] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c 17:21:17 executing program 2 (fault-call:2 fault-nth:4): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb}) 17:21:17 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$VT_WAITACTIVE(r1, 0x5607) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1714.755436][T15725] FAULT_INJECTION: forcing a failure. [ 1714.755436][T15725] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.793327][T28230] usb 4-1: too many configurations: 46, using maximum allowed: 8 17:21:17 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, [], 0xd}}]}, &(0x7f0000000180)=0x10) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r2], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) [ 1714.834510][T15725] CPU: 1 PID: 15725 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1714.843651][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1714.855474][T15725] Call Trace: [ 1714.855502][T15725] dump_stack+0x18f/0x20d [ 1714.855523][T15725] should_fail.cold+0x5/0x14 [ 1714.855545][T15725] should_failslab+0x5/0xf [ 1714.872147][T15725] kmem_cache_alloc+0x2a9/0x3b0 [ 1714.878064][T15725] security_inode_alloc+0x34/0x160 [ 1714.883454][T15725] inode_init_always+0x5a7/0xd10 [ 1714.888911][T15725] alloc_inode+0x82/0x230 [ 1714.893259][T15725] new_inode_pseudo+0x14/0xe0 [ 1714.897947][T15725] alloc_anon_inode+0x22/0x3c0 [ 1714.902728][T15725] dma_buf_export+0x567/0xb00 [ 1714.907424][T15725] vb2_vmalloc_get_dmabuf+0x104/0x220 [ 1714.913252][T15725] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1714.914349][T15731] sg_write: data in/out 808464396/104 bytes for SCSI command 0x0-- guessing data in; 17:21:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) r3 = getpgid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) rt_tgsigqueueinfo(r3, r4, 0x27, &(0x7f0000000180)={0x20, 0x7, 0x7}) r5 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x6, 0x83, 0x8001, 0x0, 0x1b, "602dbe852686892c"}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1714.914349][T15731] program syz-executor.4 not setting count and/or reply_len properly [ 1714.920228][T15725] vb2_core_expbuf+0x2e0/0x590 [ 1714.920253][T15725] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1714.956470][T15725] vb2_ioctl_expbuf+0x175/0x210 [ 1714.956491][T15725] ? v4l_stub_expbuf+0x17/0x60 [ 1714.956506][T15725] __video_do_ioctl+0xa86/0xc70 [ 1714.956528][T15725] ? v4l_reqbufs+0xd0/0xd0 [ 1714.956555][T15725] video_usercopy+0x207/0xf30 [ 1714.956570][T15725] ? v4l_reqbufs+0xd0/0xd0 [ 1714.956586][T15725] ? v4l_enumstd+0x60/0x60 [ 1714.956602][T15725] ? generic_block_fiemap+0x20/0x60 [ 1714.956623][T15725] ? lock_is_held_type+0xb0/0xe0 [ 1714.956644][T15725] ? __fget_files+0x294/0x400 [ 1714.956666][T15725] v4l2_ioctl+0x1a2/0x220 [ 1714.956683][T15725] ? v4l2_prio_init+0x20/0x20 [ 1714.956697][T15725] ksys_ioctl+0x11a/0x180 [ 1714.956715][T15725] __x64_sys_ioctl+0x6f/0xb0 [ 1714.956728][T15725] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1714.956744][T15725] do_syscall_64+0x60/0xe0 [ 1714.956762][T15725] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1714.956775][T15725] RIP: 0033:0x45c429 [ 1714.956791][T15725] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1714.956799][T15725] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1714.956814][T15725] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1714.956823][T15725] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1714.956832][T15725] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1714.956841][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1714.956851][T15725] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c [ 1715.024596][T28230] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1715.024617][T28230] usb 4-1: can't read configurations, error -61 [ 1715.173244][T28230] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1715.453744][T15731] sg_write: data in/out 808464396/104 bytes for SCSI command 0x0-- guessing data in; [ 1715.453744][T15731] program syz-executor.4 not setting count and/or reply_len properly [ 1715.583434][T28230] usb 4-1: too many configurations: 46, using maximum allowed: 8 [ 1715.713350][T28230] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1715.723359][T28230] usb 4-1: can't read configurations, error -61 [ 1715.734702][T28230] usb usb4-port1: attempt power cycle 17:21:18 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0), &(0x7f0000000100)=""/12, 0xc}) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)={[{@fat=@discard='discard'}]}) 17:21:18 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x23ab, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x1, 0xa, "8b6e4a7761847223000c58c0b08d6bf8588e5b"}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:18 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f07f1c6231a3ee47c1d38bf3c0bfe1e7c"], 0x92) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet(0x2, 0x5, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000340)=0x401, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={r8, 0x82000000}, 0x10) execveat(r6, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000280)=[&(0x7f0000000180)='/dev/sg#\x00', &(0x7f00000001c0)='$\\&,[\x00', &(0x7f0000000240)='/dev/sg#\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='\xb1+-\x00'], 0x1000) 17:21:18 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) getpeername$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:18 executing program 2 (fault-call:2 fault-nth:5): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb}) 17:21:18 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x2000, 0x101, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1020000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=tcp,0ltgid=\x00'/30, @ANYRESHEX=0xee00, @ANYBLOB="2c706f73697861ebf22c64656275673d3078303030303030303030303030303366352c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63616368653d6e6f6e652c64666c747569643dd9ab87f654e7f9eb53ae7c28d4611b10d59638b84c8ef8705c3fe75643f0965815264ab85f9e61aaa679d9c8953d783cf0f10901f21f1146334748551e54f086264832c89fa7c21d4a714a9ba8bae297f1fe762b63e1285860896d1b8411d5074efa3f", @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000.L,cache=none,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c76657273696f6e3d3970323030302e752c61756469742c686173682c64656601006e746578743d726f6f742c0086a3387c1336cbf8a981b254399afc9a789ea4c990cdc871a3b75ffe83"]) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x25e182279dad636f) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r7, 0x82000000}, 0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_aout(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/300], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) [ 1716.213738][T15757] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1716.213738][T15757] program syz-executor.5 not setting count and/or reply_len properly 17:21:19 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r5, 0x82000000}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x3f, 0x7, r3, 0x0, &(0x7f0000000040)={0x9909d2, 0x4, [], @p_u16=&(0x7f0000000000)=0x2}}) ioctl$RTC_EPOCH_READ(r6, 0x8008700d, &(0x7f00000000c0)) r7 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x92) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @local}, 0xc) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1716.287559][T15766] FAULT_INJECTION: forcing a failure. [ 1716.287559][T15766] name failslab, interval 1, probability 0, space 0, times 0 17:21:19 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) socket$netlink(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x181, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x10, 0x7fffffff, {0x0, 0x2710}, {0x4, 0x1, 0xfd, 0x0, 0x5f, 0xb1, "38cfbb42"}, 0x3, 0x2, @offset=0x3, 0x6}) [ 1716.331038][T15760] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1716.331038][T15760] program syz-executor.1 not setting count and/or reply_len properly [ 1716.395961][T15768] FAT-fs (loop3): mounting with "discard" option, but the device does not support discard [ 1716.416658][T15766] CPU: 0 PID: 15766 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1716.421169][T15760] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1716.421169][T15760] program syz-executor.1 not setting count and/or reply_len properly [ 1716.425355][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1716.425361][T15766] Call Trace: [ 1716.425384][T15766] dump_stack+0x18f/0x20d [ 1716.425407][T15766] should_fail.cold+0x5/0x14 [ 1716.425428][T15766] should_failslab+0x5/0xf [ 1716.425444][T15766] kmem_cache_alloc+0x2a9/0x3b0 [ 1716.425464][T15766] security_inode_alloc+0x34/0x160 [ 1716.425483][T15766] inode_init_always+0x5a7/0xd10 [ 1716.425502][T15766] alloc_inode+0x82/0x230 [ 1716.425517][T15766] new_inode_pseudo+0x14/0xe0 [ 1716.425534][T15766] alloc_anon_inode+0x22/0x3c0 [ 1716.425553][T15766] dma_buf_export+0x567/0xb00 [ 1716.425577][T15766] vb2_vmalloc_get_dmabuf+0x104/0x220 [ 1716.425597][T15766] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1716.425627][T15766] vb2_core_expbuf+0x2e0/0x590 [ 1716.425642][T15766] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1716.425659][T15766] vb2_ioctl_expbuf+0x175/0x210 [ 1716.425674][T15766] ? v4l_stub_expbuf+0x17/0x60 [ 1716.425689][T15766] __video_do_ioctl+0xa86/0xc70 [ 1716.425712][T15766] ? v4l_reqbufs+0xd0/0xd0 [ 1716.556190][T15766] video_usercopy+0x207/0xf30 [ 1716.556210][T15766] ? v4l_reqbufs+0xd0/0xd0 [ 1716.565639][T15766] ? v4l_enumstd+0x60/0x60 [ 1716.570862][T15766] ? generic_block_fiemap+0x20/0x60 [ 1716.576083][T15766] ? lock_is_held_type+0xb0/0xe0 [ 1716.581043][T15766] ? __fget_files+0x294/0x400 [ 1716.585874][T15766] v4l2_ioctl+0x1a2/0x220 [ 1716.590241][T15766] ? v4l2_prio_init+0x20/0x20 [ 1716.595106][T15766] ksys_ioctl+0x11a/0x180 [ 1716.599455][T15766] __x64_sys_ioctl+0x6f/0xb0 [ 1716.604057][T15766] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1716.609186][T15766] do_syscall_64+0x60/0xe0 [ 1716.613624][T15766] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1716.619523][T15766] RIP: 0033:0x45c429 [ 1716.624213][T15766] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:21:19 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1716.644262][T15766] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.654256][T15766] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1716.662282][T15766] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1716.671129][T15766] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.680631][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1716.689049][T15766] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c 17:21:19 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r4, 0x82000000}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xe8, 0x3, 0x1, 0x101, 0x0, 0x0, {0x9, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x2, 0x2, 0x10000, 0x3ff, 0x1000000]}, @CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000008}, 0x8815) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000340)=""/152) 17:21:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400050900000acf3733950c9a06f00e666174000404090a1000027400f801", 0x1f}], 0x0, &(0x7f0000000180)={[{@nodots='nodots'}]}) 17:21:19 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf"], 0x92) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r3}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3}, 0xc) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x725a, r3}, 0x8) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1716.819631][T15791] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1716.819631][T15791] program syz-executor.0 not setting count and/or reply_len properly [ 1716.894604][T15797] sg_write: data in/out 262577/104 bytes for SCSI command 0x1-- guessing data in; [ 1716.894604][T15797] program syz-executor.0 not setting count and/or reply_len properly 17:21:19 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000d50104000000000100000000000025bd4286be9084baa5b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f701076749d57ddc37ca91ff06e0f9f0f8d14f69eb80dc87145c723d5ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b4789462abf2346c7593cc50a92aba540aa4b51dd36f52c2a6f4b11bba9a26f074024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd28e57b6316c56861a22e1fb26ad126b174a11f38408feb2c8dc8469518a900000000000000000000cd9e1ad6db3acd9524"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:19 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000000007f657d907b9a7c3d77d50104000000000100000000009c608f2d0025bd4286be9084bab1b5db0700000068000a01000020763f0362391c57bc2475cc6474c7469fee863a839c92ad97786d22730a7c4b891a5f9b1395cacd8f2a9a8cb0e290476c85f3da616da2f4b8c2ee7aafe1b27231c2a9996fae2b8483a09844916d76155f008ad58f03cf8fb1bc78ffb92fb476f782226749d57ddc37ca91ff06e0f9f0f8d15ecbe556bb39ad383c83dedcff639bb9a84e70ab0e2f075fe8f6333ee4e7e980b7fc8dbb7dcf9cc40c9428a2120f2330f74791a20cde9f37d4068616b45d55666449c974cb453fe350fac63b661e6b6356b80e197ddc37467d49eb5db0c9af11c9d6bc5b073843c3144932de0c6055fa8a1a39860bc22202ac2431802bb4de2000000006b47811b50442346c7593cc50a92aba540aa474024b27adb7f67c3d43464604c6ea90f36b0500e7b948a510fd285f7b6316c56861a22e1fb26ad126b174a11f38407eeb2c8dc8469518a900000000000000000000cd9e1ad6dbff3c64adc282b45055ed9c35bfadd8b03f98473b4905c62d0c9af6f51abf4d97b294db194e4b9022af10e779529c64f7164ef6c3ae1ae6de0820aa09244665642cab1fdc719241d40b0acde8c48ec21075596db96a923f55c9d6a960ea27cbf12247288930ece21cb71872191d33580194dfde2cb5bf3085954b8ff0534ccd3f401a1eeaa92577607ab57e189af783117c6f6fc4a35fd32403f5919f04b3f7c0c09563a45747da89d7b489ffbd509b2335c54da418b3eb45507d460ea4ff525842d847762da760487088c8b381402712"], 0x92) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:19 executing program 2 (fault-call:2 fault-nth:6): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x8e}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0xb}) [ 1717.000901][T15802] FAT-fs (loop3): invalid media value (0x04) [ 1717.035492][T15802] FAT-fs (loop3): Can't find a valid FAT filesystem 17:21:19 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000040)) [ 1717.120114][T15802] FAT-fs (loop3): invalid media value (0x04) [ 1717.153607][T15802] FAT-fs (loop3): Can't find a valid FAT filesystem 17:21:20 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x82000000}, 0x10) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) [ 1717.236717][T15819] FAULT_INJECTION: forcing a failure. [ 1717.236717][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.300853][T15819] CPU: 0 PID: 15819 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1717.309559][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.321440][T15819] Call Trace: [ 1717.324764][T15819] dump_stack+0x18f/0x20d [ 1717.329115][T15819] should_fail.cold+0x5/0x14 [ 1717.333735][T15819] should_failslab+0x5/0xf [ 1717.338181][T15819] kmem_cache_alloc+0x2a9/0x3b0 [ 1717.343051][T15819] __alloc_file+0x21/0x350 [ 1717.347486][T15819] alloc_empty_file+0x6d/0x170 [ 1717.352273][T15819] alloc_file+0x5e/0x5a0 [ 1717.356536][T15819] alloc_file_pseudo+0x165/0x250 [ 1717.361494][T15819] ? alloc_file+0x5a0/0x5a0 [ 1717.366216][T15819] dma_buf_export+0x5f7/0xb00 [ 1717.372072][T15819] vb2_vmalloc_get_dmabuf+0x104/0x220 [ 1717.377471][T15819] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1717.383570][T15819] vb2_core_expbuf+0x2e0/0x590 [ 1717.388349][T15819] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1717.394607][T15819] vb2_ioctl_expbuf+0x175/0x210 [ 1717.399478][T15819] ? v4l_stub_expbuf+0x17/0x60 [ 1717.404255][T15819] __video_do_ioctl+0xa86/0xc70 [ 1717.409226][T15819] ? v4l_reqbufs+0xd0/0xd0 [ 1717.413672][T15819] video_usercopy+0x207/0xf30 [ 1717.418363][T15819] ? v4l_reqbufs+0xd0/0xd0 [ 1717.422799][T15819] ? v4l_enumstd+0x60/0x60 [ 1717.427231][T15819] ? generic_block_fiemap+0x20/0x60 [ 1717.432448][T15819] ? lock_is_held_type+0xb0/0xe0 [ 1717.437665][T15819] ? __fget_files+0x294/0x400 [ 1717.442358][T15819] v4l2_ioctl+0x1a2/0x220 [ 1717.446711][T15819] ? v4l2_prio_init+0x20/0x20 [ 1717.451829][T15819] ksys_ioctl+0x11a/0x180 [ 1717.456166][T15819] __x64_sys_ioctl+0x6f/0xb0 [ 1717.461283][T15819] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1717.466923][T15819] do_syscall_64+0x60/0xe0 [ 1717.471348][T15819] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1717.477937][T15819] RIP: 0033:0x45c429 17:21:20 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x14340, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100000000, 0x1a1100) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x92) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x82000000}, 0x10) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/165, 0xa5}], 0x1}, 0x6}], 0x1, 0x0, &(0x7f0000000280)={0x77359400}) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r6, 0x82000000}, 0x10) setsockopt$inet6_dccp_int(r4, 0x21, 0x6, &(0x7f0000000040)=0x80000000, 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) 17:21:20 executing program 3: r0 = socket$kcm(0x29, 0x4, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffc00003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="1400050900000a0e666174000404090a1000027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="5c525e0230370b7d00"]) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000240)=[{}], 0x0, [{}, {}, {}]}, 0xa8) fcntl$setlease(r0, 0x400, 0x2) setxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@random={'system.', 'discard'}, &(0x7f0000000140)='$\\,#*\'\x00', 0x7, 0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000400)="737adb3a8c43b8e18dfde7676698f8f66c53682c4c3436d0289cfafb979e75713a37e1c970b66268d3bf8892e3177c8a738ae7fecbe8303da61bcaa397236aa931d388ec9416d055aa4443f4d5844e87c4778aba118595b10dce9f7f2a86e11912d0a99007017220da22ac6a66f6fa36b65b5747d19bd54ff919805b3997990687a9f3de58097a4a40608b6b3c2427714f301a8291163c7b6a29c18c9949c572fe56c5ab27f2d47622e36fde") fsetxattr$security_selinux(r0, &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:ksm_device_t:s0\x00', 0x22, 0x3) [ 1717.487227][T15819] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1717.506840][T15819] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.515620][T15819] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1717.523598][T15819] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1717.531643][T15819] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.531653][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1717.531662][T15819] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c [ 1717.573410][T15819] general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] PREEMPT SMP KASAN [ 1717.588957][T15819] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 1717.597351][T15819] CPU: 0 PID: 15819 Comm: syz-executor.2 Not tainted 5.8.0-rc7-syzkaller #0 [ 1717.606173][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.616422][T15819] RIP: 0010:dma_buf_release+0x51/0x3f0 [ 1717.621879][T15819] Code: 03 80 3c 02 00 0f 85 30 03 00 00 48 8b ad e8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bd b8 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e3 02 00 00 8b 9d b8 00 00 00 [ 1717.641810][T15819] RSP: 0018:ffffc90007e1f8f8 EFLAGS: 00010206 [ 1717.648031][T15819] RAX: dffffc0000000000 RBX: ffffffff847bf9e0 RCX: ffffc9000d9ea000 [ 1717.656169][T15819] RDX: 0000000000000017 RSI: ffffffff847bf9f0 RDI: 00000000000000b8 [ 1717.664121][T15819] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff888047f3634b [ 1717.672091][T15819] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880887e2df0 [ 1717.680052][T15819] R13: ffff8880887e2d78 R14: ffff8880887e2dc0 R15: 0000000000000000 [ 1717.688125][T15819] FS: 00007f2ac9658700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1717.700544][T15819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1717.707290][T15819] CR2: 000000c01899f198 CR3: 00000000a25fa000 CR4: 00000000001406f0 [ 1717.715518][T15819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1717.723478][T15819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1717.731422][T15819] Call Trace: [ 1717.735040][T15819] ? dma_buf_mmap+0x370/0x370 [ 1717.739698][T15819] __dentry_kill+0x42b/0x640 [ 1717.744268][T15819] ? dput+0x35/0xbc0 [ 1717.748148][T15819] ? dput+0x35/0xbc0 [ 1717.752019][T15819] dput+0x725/0xbc0 [ 1717.755807][T15819] ? alloc_file+0x3c9/0x5a0 [ 1717.760287][T15819] path_put+0x2d/0x60 [ 1717.764248][T15819] alloc_file_pseudo+0x20d/0x250 [ 1717.769164][T15819] ? alloc_file+0x5a0/0x5a0 [ 1717.774266][T15819] dma_buf_export+0x5f7/0xb00 [ 1717.779638][T15819] vb2_vmalloc_get_dmabuf+0x104/0x220 [ 1717.784991][T15819] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1717.791052][T15819] vb2_core_expbuf+0x2e0/0x590 [ 1717.795795][T15819] ? vb2_vmalloc_dmabuf_ops_release+0x40/0x40 [ 1717.802275][T15819] vb2_ioctl_expbuf+0x175/0x210 [ 1717.807192][T15819] ? v4l_stub_expbuf+0x17/0x60 [ 1717.811942][T15819] __video_do_ioctl+0xa86/0xc70 [ 1717.816786][T15819] ? v4l_reqbufs+0xd0/0xd0 [ 1717.822167][T15819] video_usercopy+0x207/0xf30 [ 1717.826824][T15819] ? v4l_reqbufs+0xd0/0xd0 [ 1717.831217][T15819] ? v4l_enumstd+0x60/0x60 [ 1717.836048][T15819] ? generic_block_fiemap+0x20/0x60 [ 1717.841246][T15819] ? lock_is_held_type+0xb0/0xe0 [ 1717.846176][T15819] ? __fget_files+0x294/0x400 [ 1717.850831][T15819] v4l2_ioctl+0x1a2/0x220 [ 1717.855167][T15819] ? v4l2_prio_init+0x20/0x20 [ 1717.861270][T15819] ksys_ioctl+0x11a/0x180 [ 1717.865613][T15819] __x64_sys_ioctl+0x6f/0xb0 [ 1717.870190][T15819] ? lockdep_hardirqs_on+0x6a/0xe0 [ 1717.875458][T15819] do_syscall_64+0x60/0xe0 [ 1717.880035][T15819] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1717.886458][T15819] RIP: 0033:0x45c429 [ 1717.890348][T15819] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1717.911899][T15819] RSP: 002b:00007f2ac9657c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.920405][T15819] RAX: ffffffffffffffda RBX: 000000000001ad40 RCX: 000000000045c429 [ 1717.930305][T15819] RDX: 0000000020000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 1717.938365][T15819] RBP: 00007f2ac9657ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.946322][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1717.954301][T15819] R13: 00007fff6885500f R14: 00007f2ac96589c0 R15: 000000000078bf0c [ 1717.963219][T15819] Modules linked in: [ 1717.969878][T15819] ---[ end trace 62beb05901428e20 ]--- [ 1717.986942][T15819] RIP: 0010:dma_buf_release+0x51/0x3f0 [ 1717.999752][T15819] Code: 03 80 3c 02 00 0f 85 30 03 00 00 48 8b ad e8 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bd b8 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e3 02 00 00 8b 9d b8 00 00 00 [ 1718.064352][T15819] RSP: 0018:ffffc90007e1f8f8 EFLAGS: 00010206 [ 1718.076479][T15836] FAT-fs (loop3): Unrecognized mount option "\R^07 }" or missing value [ 1718.093721][T15819] RAX: dffffc0000000000 RBX: ffffffff847bf9e0 RCX: ffffc9000d9ea000 [ 1718.121551][T15819] RDX: 0000000000000017 RSI: ffffffff847bf9f0 RDI: 00000000000000b8 [ 1718.135171][T15819] RBP: 0000000000000000 R08: 0000000000000001 R09: ffff888047f3634b [ 1718.144608][T15819] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880887e2df0 [ 1718.158301][T15819] R13: ffff8880887e2d78 R14: ffff8880887e2dc0 R15: 0000000000000000 [ 1718.167386][T15819] FS: 00007f2ac9658700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1718.177622][T15819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1718.184938][T15819] CR2: 00007fd49cb7f018 CR3: 00000000a25fa000 CR4: 00000000001406e0 [ 1718.196394][T15819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1718.205632][T15819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1718.218568][T15836] FAT-fs (loop3): Unrecognized mount option "\R^07 }" or missing value [ 1718.228805][T15819] Kernel panic - not syncing: Fatal exception [ 1718.236249][T15819] Kernel Offset: disabled [ 1718.241036][T15819] Rebooting in 86400 seconds..