0920a129835a6c1f0b0a59e42f9a4a1538e5109e35a014f5c58982b5b1aac9b769d42ce72caa6e05ad3ac4ecd540b5735d8f99dfa1c44058b8866f6d588c798144361035ad74bb3152885e94e8f35b24ccd941bd65e62c7085f8341f82de14b64f2fe565db17bdcade94a45436ee30598e5d4cdc95875108a73d5c", 0x82}], 0x2, &(0x7f0000003400)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r2, r4, r1, r0]}], 0x58, 0x4008000}, 0x4080) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x1c, r8, 0xb00, 0x70bd29, 0x25dfdbfc, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r9 = syz_open_dev$audion(&(0x7f00000030c0)='/dev/audio#\x00', 0x7fff, 0x400a01) ioctl$VT_ACTIVATE(r9, 0x5606, 0x7) 15:42:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 445.717073] IPVS: length: 134 != 8 [ 445.761204] IPVS: length: 134 != 8 [ 445.790589] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 445.790589] program syz-executor5 not setting count and/or reply_len properly 15:42:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:50 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x110) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @multicast1}, &(0x7f00000000c0)=0xc) syz_emit_ethernet(0x221, &(0x7f00000003c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x28, 0x6, "b4c95f", 0x25f, 0x67, 0x5f, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @loopback={0x0, 0x1}, {[@routing={0xbf, 0xc, 0x1, 0x1ce, 0x0, [@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}]}, @hopopts={0x0, 0x4, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x971b}, @hao={0xc9, 0x10}, @enc_lim={0x4, 0x1, 0x5af78007}]}, @fragment={0x7b, 0x0, 0x6, 0x9, 0x0, 0x900, 0x65}, @hopopts={0x6c, 0x4, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @hao={0xc9, 0x10}, @pad1={0x0, 0x1}, @ra={0x5, 0x2}]}, @hopopts={0x2f, 0x6, [], [@jumbo={0xc2, 0x4, 0xfffffffffffffffe}, @pad1={0x0, 0x1}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x1}, @pad1={0x0, 0x1}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffffffffadde}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x3f, 0x7, [], [@calipso={0x7, 0x20, {0x376, 0x6, 0x1, 0x1, [0x0, 0x9, 0x101]}}, @jumbo={0xc2, 0x4, 0xe7}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4}]}, @routing={0x0, 0xa, 0x2, 0x401, 0x0, [@empty, @dev={0xfe, 0x80, [], 0x19}, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}]}], @udp={0x4e20, 0x4e24, 0xaf, 0x0, [@guehdr={0x2, 0xc44c, 0x7fff, 0x0, 0x100, [0x80]}, @guehdr={0x1, 0x6000000, 0x800, 0xff, 0x100}, @guehdr={0x1, 0x5, 0x5, 0x1, 0x100}], "4ba75f1f878b90c8a285dc3697973d4c10c8e8bc9448057f225bcfdda38735c54da38cf6ef69e9a7a59f889e757bb6917e3e77fffde6835ed746642cf3bdc7850634cdea8a248e14875e906649ac26c9c2279af0d0e5b91d313e4d71075b38d2e5f5965c7bbe1c3a9cf4b609ab91a7ebc7959cbe5c8f8c52d70c45e7476aab3f2787a8b17ff312e1a93ac45002484e5ff4b46f870f7c93"}}}}}}, &(0x7f0000000040)={0x1, 0x0, [0xb9a, 0x69e, 0xa8d, 0xfffffffffffffffe]}) [ 446.070336] sd 0:0:1:0: tag#1993 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 446.078593] sd 0:0:1:0: tag#1993 CDB: Read(6) 08 00 00 00 00 00 15:42:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:42:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000002ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a00010000000000000a00000017924e3478896a312b97941ebdc6b55d6732fa59a04d481225badb59ce651d1a34b295f791a55b400ee09f605b29d3676bf5e8d63bafc0bd823a2db81237c83c4b", @ANYRES32=0x0, @ANYBLOB="000000001400020000000000000000000000ffffac1414bb"], 0x30}, 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 15:42:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = accept4(r1, 0x0, &(0x7f0000000180), 0x80800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000200)=0xe, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000780)=0x17, 0x4) sync_file_range(r1, 0x8000000000, 0xfffffffffffffffc, 0x4) eventfd2(0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x3302, &(0x7f00000001c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r4 = getgid() lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{0x4, 0x3, 0x8, 0xfffffffffffffff8}, {0x3f, 0x19b9aac2, 0xffff, 0x100}]}, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=0x0, &(0x7f00000005c0)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000600)=0xe5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000940)=0x0) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) getgroups(0x9, &(0x7f00000006c0)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01, 0xee01]) getgroups(0x2, &(0x7f0000000700)=[0xee00, 0xffffffffffffffff]) getgroups(0x9, &(0x7f0000000740)=[r4, r5, r6, r8, r9, r10, r11, r12, r13]) fremovexattr(r3, &(0x7f0000000000)=@known='security.capability\x00') getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000100)=0xfff, &(0x7f0000000140)=0x4) r14 = getgid() getgroups(0x1, &(0x7f0000000240)=[r14]) 15:42:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:51 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)) 15:42:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:51 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800002802400000000000000800320000ac1414aaac141400082c00f7dad93d18908b00000000000000007f00000100000000ffffac141400000000000000000000000000"], &(0x7f0000000000)) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x44001) shutdown(r0, 0x1) [ 446.465206] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 446.465206] program syz-executor5 not setting count and/or reply_len properly 15:42:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xffffffffffffffc4, 0x3, [0xff, 0x1112184c, 0x8001]}, &(0x7f0000000080)=0xe) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000100)=0x8) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000180)={{0x4cb4, 0x1}, {0x1, 0x5}, 0x7, 0xf38cf7603124916e, 0xffff}) 15:42:51 executing program 3: socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000080)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x408000, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000140)="69016c65e2afed76ace2331600a09935fcfd181ad08966a36be05cd6a75e19de01df7e9680041a0a17f67ce058fef7c7518312b08e7305086e6389ea38027d770a918c169cadc98a10f173528182c6c97369428fcf18b81fece48803f32eb3928441fecff40cd91e52c16ae3211652bbb65ad5f03fb0710fdd8a28926cfbd6a31cbc3e059d71327eb7908f825a48ff3b95726570429f5c8b667c190b5bbadee5104628c512", 0xa5) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/231, 0xe7}], 0x2) 15:42:51 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x8a40, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0x4) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x2dbb}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10002, 0x49013, r1, 0x0) utimes(&(0x7f00000000c0)='./file1\x00', &(0x7f0000002800)={{}, {0x0, 0x7530}}) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000040), 0xff, &(0x7f0000002000/0x2000)=nil, 0x3) 15:42:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 446.911080] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 446.911080] program syz-executor5 not setting count and/or reply_len properly 15:42:51 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)="c6") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r1, 0x6f, "e6f4a5f0136170dd836adc23cd361653ba292c95a7c90107746a2e029970ee3d5e5f4aa78b8c4c5293184cb1bea7f4a52282c178ff49711a3d8d0fb0772a215b465dc9d0d2dfbaaf50a78806002ea041cf20fe6e4afa8f3553d86e3015a96b248194939a27189ede687fd87374064b"}, &(0x7f0000000200)=0x77) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @empty, 'ifb0\x00'}}) futex(&(0x7f0000000000), 0x5, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x0) 15:42:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:52 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x100, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0xffffffffffffffa4) 15:42:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:42:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000040)=""/232) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x100000000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0x7, @loopback={0x0, 0x1}, 0x1ff}}, 0x7d315531, 0x185d}, 0x90) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:52 executing program 6: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) syz_open_pts(r2, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002f7000)) exit(0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f00000000c0), 0x8) 15:42:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa}, 0xb) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:52 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x81) mount(&(0x7f0000000080)='\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ext4\x00', 0x0, &(0x7f0000000180)) membarrier(0x0, 0x0) 15:42:52 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000140)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0xd4c, 0x8e, 0x1}], {0x8100, 0x5, 0x4, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x1]}) 15:42:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:52 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x9, 0x4}], {0x8100, 0x12, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0x2}) [ 447.488968] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 447.488968] program syz-executor5 not setting count and/or reply_len properly 15:42:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x99b1, 0x8000) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x7, 0x3ff, 0x100, 0x8000, 0x7, 0x0, 0x7}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x44ce9830ca5bdb6f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r3, 0x80000000}}, 0x18) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa}, 0xb) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:52 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0xffffffffffffff66) socketpair(0xf, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 15:42:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = dup(r1) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000000)=0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 447.927437] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 447.927437] program syz-executor5 not setting count and/or reply_len properly 15:42:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:42:53 executing program 3: r0 = gettid() get_robust_list(r0, &(0x7f0000000040)=&(0x7f00000000c0), &(0x7f0000000080)=0xffffffffffffff11) 15:42:53 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x600, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x1, 0x0, "76f293803ded5f7aa477cc58e1c80bad49eb9f5550191ade898880a512c7e1e971ecdbcf7669d2cbeb2f76f2c397754894fbeff304212eb766f5ad318fafd42650eef35217f383ded63a11b2903a481b"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x8, 0x0, "c02d040a11cba9a17a6446565875c38c0a4e90148170c8c1d5a29d3e0dceffd9ed0faf9f81481b1e3aae0063cdf19608980c4e8d0d0df6840f59640fef5d4cfe9291c2118522f0236b3d8c26e31c7508"}, 0xd8) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0xfdf0, 0x20020004, &(0x7f00000000c0)={0x2, 0x1}, 0x10) 15:42:53 executing program 3: syz_emit_ethernet(0xda, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff9100290081000e00000401ab8d4027829d60023bf890f58a0ac50da075b1e1447cf41e59eb2bcd8251d1aabb0d7571c2fce3f0d64c0252fca8528407e81afba330c0fa5ac6e8ccac26bfc06a18d4850c26b679d5c2211bda3db5321486de65acd8bc71dbc401d797bd1ee24e999d641f300150c68feebe50e834f2935d82286828036fe6288894b4e496d37ea31a6ff9004d8b1a2c9a0354ffd0c214ffe7632e434665ae08ade38ddda1ff39d95c984c4cbd92e7cbcd1bad94657b179b0103a8a7664a61978704ce8df8519cef7c"], &(0x7f0000000000)={0x0, 0x0, [0xfffffffffffffffd, 0x2, 0x0, 0x4]}) r0 = dup(0xffffffffffffffff) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/101) 15:42:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa}, 0xb) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") recvfrom$inet6(r0, &(0x7f0000000000), 0x0, 0x10021, &(0x7f0000000040)={0xa, 0x4e23, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffff88}, 0x1c) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240), &(0x7f0000000280)=0x8) 15:42:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 448.579448] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 448.579448] program syz-executor5 not setting count and/or reply_len properly 15:42:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fchdir(r1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:53 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff88, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500005c0000000000019078ac1414bbac144b110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007fffff00000000e000000100000000ac14140000000000"], &(0x7f0000000000)={0x800000, 0x200}) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) accept(r0, &(0x7f0000000040)=@in={0x0, 0x0, @dev}, &(0x7f0000000140)=0x80) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180), 0x2) 15:42:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000004c0)={@loopback={0x0, 0x1}, r2}, 0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3f}, &(0x7f0000000380)=0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001ac0)=0x0) perf_event_open(&(0x7f00000019c0)={0x4, 0x70, 0x8000, 0x0, 0x8001, 0x2, 0x0, 0x7fffffff, 0x1020, 0x1, 0x200, 0x2, 0x401, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x1, 0x2, 0xffffffff, 0x8cf0, 0x4, 0xc9d8, 0x6, 0x8001, 0x6, 0x1, 0x6, 0x0, 0x2, 0x100, 0x0, 0x1000, 0x800, 0xfffffffffffffff7, 0xffff, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1, 0x7}, 0x0, 0x4000, 0x400, 0x7, 0x4c2, 0x7, 0x20}, r4, 0x2, r1, 0x8) r5 = getpid() r6 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e1, 0x0, @perf_config_ext}, r5, 0x0, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) memfd_create(&(0x7f0000000300)='^!\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000680)="be68c9df11c3cfb7d38f820874dba2528686835948e07400eaef76233eef35dc3bab5cd934b95c42947481d04e4208996ebbf81a4ed2030d89bc194620a7e1efcf41f07a67a64c4ef4e42e7556fe667d8088f0b4317ce495fd3837b126f1a5701c9fba086f554616d9f0edfef3a90fb5e685a2c67ab1f76a1dd2d3214408abbf38983ce3d1e5f2c181a42652b4987d238b638571c1d4a87535a2", 0x9a}, {&(0x7f0000001780)="d963021950748c5314c22153e0a3d2e33084160d0739c16de6d4e75296a9a9811ee3c9fdf167ac619d28b3f27d757f550fed9f159a36b2c0de6808269545afcbac4d8b01cc079107be6a018aa301d4d936047fd2cb991caddb215956a015bd85c1d1be4dfc1e1b90a28835ff402636044f0eb22ab6aec5256811b364f15d4d232f5f822653656d980a9057a323c1636371a6ec49705fc3542c", 0x99}, {&(0x7f0000001940)="c8ab2347b75a96de61767da7159d1594615e644abaaa5685e6bb380cf07a6f8683bae4a5d0825ab3b2163e47e4daa661758b1ca5b44fb245fe57df510052f26efd27df25cf2619831e7e33bfcfae4d4548c16b33324c0cb58d8c1dba8edfa5b9d1d15efd16e3cb53cc5da08d1359bacf7c68102e0c", 0x75}], 0x3, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f0000001c40)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x37b54d3a, 0x4, 0x9, 0x2b, 0x0, 0x4, 0x2800, 0x2, 0xe49, 0x5, 0xffffffffffffe35e, 0x1, 0x2, 0xffff, 0x536b, 0xfffffffffffffffd, 0x6, 0xfffffffffffffffc, 0x7, 0xfffffffffffff795, 0x2, 0x9, 0x10001, 0x10, 0x9, 0x7cf, 0x3, 0x6, 0x7, 0x2, 0x93, 0x1, 0x8, 0x2, 0xba, 0x3, 0x0, 0x80000000, 0x0, @perf_config_ext={0x2, 0xffff}, 0x0, 0x0, 0x8, 0x7, 0xb1, 0x2, 0x7}, r5, 0xc, r6, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000500)={r3, 0x10000, 0xea7b, 0x10001, 0x10000, 0x9}, &(0x7f0000000540)=0x14) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0xd8e31abd63c7450b, 0x0) 15:42:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691"}, 0x1d) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:53 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) [ 448.944694] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 448.944694] program syz-executor5 not setting count and/or reply_len properly 15:42:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 15:42:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1000, 0x9, 0x2, 0x100000000, 0x5, 0x2, 0x3e, 0x6, 0x315, 0xfffffffffffffe3b, 0x2b9, 0x765, 0x2, 0x20, 0x2, 0x20, 0x7ff, 0x10d3}, [{0x0, 0x1, 0x7fffffff, 0x0, 0x3, 0x3f, 0x80, 0x80}], "c3424c6a00c149f3c679b0c2b759071b6c18a461add12dfa89906850b69b15eb44eb6a633ef69372a2bf8f1e34f25c0d68e53450a13217e6a5bdefbcb38751c2488db8f2a104cd29e250416c949e505e577b88da19971f6d28ce516269ec7d630354c04139e1cee61c6db72de2ac8ebff5e6b831aa320335c06ae96c88a0488afffafc10c150f100404a584d89e039180416a638b870d42d39c868b1559a961c0dc9b3ccd097a0776eb454d2988cf58866ac71a7be634fdad413724b8b56aa8dac49b24cb4c0e3f8c0db964d17c106272e994135ee8a7abc8b108b04037be3d8a43963ca9543ba17a7f319bca5a101b6eacf8cc9c814bb2133cbd9697bb8081d4ebfad53af079e2ee2fb96368545bc9184b5d67a9acc6fd9583d9c84bbb097002c41e380edd7c259ee08473cd633da5a06068cb64997fc95debdde34d80184ef2d45d868d5b3461b188f6179354dff042d608f3d08034795f8e2e5e3b6f9865daf62c188d753f24960bdffc93468cac6ac6c4332d9cc573ffa31592cb90d4791d3b7208eb01e089befad03438788b071029c553c7e2454f0b72e7a30a1200fac4390d5b5cd97cf84d57b390ee4d39115484d70c614b560d6f21866d2d4b2b5d460cb85cae8ff42bb3e4d344c83f5635b1fb21a54bf5c925b25a8757f9be13474f171c9cbe080d60816c0513ce627f06c20baf1f9ef66cd90ea5159b9070f3c5db815caec810380eabf6dd4b9a847ed8ee4f6e83ef147e1dd99360212b2d1870a0ddca32631b96af96f95074ca46a4f30559e563e7accfd63917d1db3954b7779dfe37c909d2240c361f2d4c69b4b43fd9c801d78731f4be617412c2a6a4968c24779cb8fff52f70d0ea8a59d3cbd15f37653c46f5a054d7bd9c80eb66549530fb117cf81286d3ffafe8a508d1e151baf760807c1c1c804ae59de69b7cad94af8febb8ef7404b4d3740f89a0ecef27f6628cb6aee4ded04f85226dda2fb6137946a088fa9a8e39b7d44aa46497f6371aaba19fd30fcec35032627babdedcb7f62561bc3dba5b15dd2a57ef5fe5fd4fa388b98aa813cb5ad10d17f72a7d77d43fe35d487c19190dd3c443e24f145fd97a20929bc884fd1de55fe32b8600f52d499d897439dffd53fa2b82f831ad4b8f9b5a44f1191b0ac76f50afb9a0ac88742f469b968ec8134e4a556aa39c355970162486bad44a55943738f3b5b507ea46892bc4ad4cd80114e2de2ae78b16f27dbed781ef3665c6e2c4f4baa2d604dd3bd413459d4b1461c5f3c842105e4e940a35a153ece191925031db7ddbe288ea30548f54f70dd7407e31d3eba589f04cadd77598df997fa88e0451926db5008554f2ec8ea5442413f3765b652f0110ac627e401ad3b6975002296ae9dd70057c6f44562daa7ae4f058724b0296b42469d3c82ffab574200f9a1140120ae971f6f813dc9604d78180b39838b0a8e567a68928b4ba59a9c76f167d055ab11f9a4fbd1f86e8ff4a588928c1ca3337e3c5573aef44cf2ec02fa9130644a2eaf1ffc082dea276d1bf21187b48cb65c378031b9f363af5bb358524fc4cff6b06441d291f4b97713572f48264303e163f403976b324d88a589c51461efe764e4c02a83f631e8c91b44251fc6689be552f7d1ca9d0313df8b974e7e447ff0baa1d49b2f61b9833d91ce6c3c5ae965108ca35974d2a0a2c913c7e4fcc0edfb5f6ae4c3e86d8d25f1251df8e9f196efeebfc3170e1d49c5828c59ae478fba112dc408565a5ed5d9fcd02f64d6b4fa2120fe2bf51572766a4d6a9b697653b3e0031ae1361b90963a3d8da2988d4d31e20c9b2f7d899ed5a908334f9b661d048baa68ac8ab8b2fdfc94db4f427f126eab7b9bf4905c16a58b116bbff191be95b2445df06b07d5d5040f0fce91b45764d5e3402d0ff4f641b982d1ef57a7bf97850b29030efd75b72937361c44e92f8c090d1ba2aa3e6a33fde3339ca700267b423599c304566c050ae4cb42899a5404a717e8fe95e37cabd638daadf4d295bc72967f5dbf580d916dcd4878198362e9d69bf364293231c302eeead674c57fcd78a06bdc21fddd645dec9de047f54beecfa9d71c53eac35a0643e58b79671541e1991b1f10ebcc5e7d1f563ea0caa6cc3f3233a8f297feb9ea17cbea4989dad2b2fede27ba991bbb6bbabe4710705971f19b5bbae500f908efc836259d206e934b08e8ec37d3d9cd9e935d7691da9d82badd9a7ab750df97feaacf44c442a2a81c49529b4c57515b0866b9190ef618e246dcaf9f36094457d4b06751ce8b556b65f591d74c7e75330a1ad04a0863e042239099807e77900103cfd2d293355000e1b51f1546a50f62a18cd7d825398d431e75b4d51977046051fdd0ce3d1bcbb84ed5c707fb9e1167d34353cdbe7b862273cece008f784c7040c881a0ca694831e086003537bb27ea3a15461a1e9a0983aedb946f748d302aed027663f5a9e43352b46a029f4a1cac2422880aaa40cfb1273490eceaadefe03e09b7a5bce44a9786e007cfd7535081f67ce53726a3723fe23ea2389b8d39bd857e81a244d15e55d05b7f1ea2538e1ffa15e52f0e8fb65d820acb00fb551c9f4f2bec0bbe2195afb07ee6f1d41625b894cfd9341b793dc4c81b7448b1becdbba97301228f62a9f9e561bde5bbc79f7f956252ffdf1cbc377801250f61eb541f3c3e696bb026676ced8c3c233831758d95de1e1452a5a4fb7b7daaaf725c4b9b740c4cc86ae3ce3f877c6620ddee4d097060cb61829480a19c8f03d6fbf1e0caeaa433aa747d130c2d9cd2dcfd043076a777e5c589faf5513ffb28aa74a1ef24ce6eb1ed1a44164bb9489f99c5e0923b0eb84500fe49ad8c4a3ab3ffe51cf6f2e4fecf7cdc40fd4247a7915045f83e5dad8681d0291fcd20327a45300108175370e1525afca670ebdf4e1bc33678f196aa225fc9988fbf2efea878d30866ad9462dfa05f9624d197f79e2adbebc7b499bea6698cd564eed4e1e426d888d3cf10cf5fb923bdf54cefc2a7422fe1cc7a397568ba1293e9d39b94411ba3e6b4d08f47cc88f01f4eb0073f61ee5ce23bb8f2b399b5fb454ea9214a8706f47417c874376523e357f44dc044cd19f606c3b854012d265abf82c5151c371b9d29214622b9d7b29aecd800e6972d674f557125ebe4baef3b0e55c0369cc71c50548d053345794978fbdafad7065e116f50840490b1a647d626a78735c16d1eb811ca41e338de87821bc902fc621241ae9df684c93537cb8df86362701015a720c891687f252e274b3a7151ada732b07dec28f35269b6fb71f405291fc774bd8f5067a2de99218654737dc211e269aa181e2412d1b6eae94ba066d5f8cc888b1589dba7f3a3754c26711ffc75b5e8b3fe2cd955c68db596dfc630342f2e65e0debc1b8affb8f70affe3f13ea4f7145fbef675d3caa42dfb977fd5ac33110b61e9b2feda081ea0a4731ddbfd59a03179db0b99d05d44119a3e5d95b816dbb916cab5d47e61c70350b5bc687cab76da1dd665c8a1db850cd692b6a80f79e7bc3cc83aaa91612a4e25a06175c2adc3d9eb5481ca1a9b12648e9c1ea0d57654b00e83cb9c1f799dfd6eb1b9f5e70fb1288dfba75fd4b14404400a169b6b9e8c65e83da07ec06e6e69e2400b0c6f900ce2f2a425f8070ff60bf4b14630c290a9d0dd241fdb4dc2c11aa316b50b51e267670d8370e3a2b197de21849d21090d4b966890351416f6d08567c68b9da81d9f5dd9d00dc8385579244675463e402feffb19b507432cc5a8e00f9385361b137d4a281757aeb2342217c1a38fa21f3c4c6fe76824a40936a9448d92bb506da4d13ce64db0679898af882d7ad80bb0df3ec70901aedbaaa0bcfd345733a9857bbe1ee8f7972f0df4c98215e39e900310ec917d048b3558e8a70efcf5e067af4fdad5181f03f39d44fbdf496bee0b970c35c9ce5f6c4a3e52013547e6906c601a436ea6154683f021a6c3582e347f0a0346ccc5b71ded828e89f79e2ce2178102cbf3b53eafc569a5285da4f195cc430c58293347322a2c4d894084f08b4107c9efba3f2da8236cfe6808f1cabd3d401350851f1f4eb1c7db8f1f603c4ea01e6c1f8d440686b9dd4c2e9c13602aee0eb933477ea16275475e84a17080e797ebe7619f7805ddfb96957ca4510499af56e3873bd9797ef98c4b55a86c352052b302a5f787058c3676c021938f2ef89149392c5c517028585a3b0efcae9e99d48065c7f1c536db04a1375553ddfa8867d8b4e09ffca512222fc5ecd481f9d4dc34fa244b4f74795f00fc16a3a57ccb8c9ac15a3bbfcb1edefcbbe4a0526647ec64383daea4d9f93da782639b74a57b49833cd459395ce9c5e5b724f7791496b02a81dd64a32a80bec9079a5f8955d5f19069be08bcefe8402793f34efd0667587906e5437eb4114dc63fb118dca29061b75c7afd3d0ac9c79c09fcd7baabc0a44cf13bdd81c67e23630bdfcf2977d8b93eaad108cbe48447274bb611dd1e6c997f1a9c25eca3996a853d697852b6b0a92794b73fc497e02bbd57b020ba0710eb91bd4a95be4a5c21ab2429762d0a572a5fff980e87bd1aa32d4746895a1bcba1aee897062d5e3861add35f5471f5dcd9037060e1a6cc7a07ca4a1765e66231a47b56fe09b65353c55651ddae78109bf419816a0cb374198295aa40a43560cc38306bfd41897032b676ac43111a2b72f7cca3ff47b053b5a3dd648097f3a74e01c4415bbc51d08bf6b9af393ada17a59ac116125b682f60d8a7701597556abc85416a3fd728c0e3868522723dbaec12fe64afcfb3a3eaff4f9fc775f9fe6c0ff17cfbca2112838eb9e943cd5405ef2bcaa893be01959eb400b1ec037efc0b8f59bc0a9e87477aaaeeec50a95b0272eaafa6d743cf6c1ecec6b80f7eed69def8b773174ff66c6cbb4c2a255fa2eb774450fee1436ab40dfc23fc3a448ab37caa75977f8ddd150e76f8f05ce459e98409d95ae13015a790d380bf3274cfd4588cc7c1650fd9e784c7109d46ee696a801287870291d883344de010acfa49e498624ff6bf79f21240ab9043b73dd0d22df215715dc84eb2b2c88cf284a8f2afb4fff25d9494c47d8b5857db33b85d927b0f27b5a5e1576164f2bbbca684bb33aff4d995e66262d0e18e60d4bd14bb1420f657479ca6fea2469ee0416ac3c5a401d87637a25e748d9c28a6d20263e99e7ab6922e5055037dfc4873710e3a47699ba0554b85f7612c155c7d084c4c8cd3d2fd1fc27a135a7630bbd181e09fa66269cb64b58b1bc1847e6c94056a275a90f940af14ed148c013634585626fc1a4eab1c91413abfc43132305f2fdc0a6d028b36e920698858c19a559e43a66ec178561e89f4f7071cb841fb59be29aac7868502b45c78a4d471c7af85674e67a8707a6ba345d1975022df56f8043a2328533bc3c24f8ecd01af2ce4d9d8894098eb9ecfa0fe0963f6adea13766052d919e78c8e0362bd753a91f89322a1f3999fc0c31f8a7db3ae97abb529490d9955fccbcfa40d5b00f316d7ea64240a1561491ce15927c344de2f6ed4fc158c857bddf016f9a41a36ea0ec7433f060b529a5691ed7b7ad4890da6d409f30223ab48155f0f36616c5ee160908cee03ee1ee4a2f690573f8a02513b1a5ab640f4f41d5a9274682f14853fbeac83cd0b5c7b6325c79feabcabde0e271090f01d9b247b01097975c424ff3c5462e533e14c325a077991e5f2f3bef0cfd26c8842efed0271346305c46138c7743b8707b3683c1713a57e3d76cbab6f11402c14d9aac7f1"}, 0x1058) fcntl$getown(r0, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xa60) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x92280, 0x0) 15:42:54 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) tkill(r0, 0x27) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = inotify_init1(0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$TIOCEXCL(r3, 0x540c) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_tgsigqueueinfo(r4, r4, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc}) ptrace$cont(0x7, r4, 0x0, 0x0) 15:42:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691"}, 0x1d) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:54 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:54 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}}}}}, &(0x7f0000000000)={0x0, 0x0, [0xde9]}) socketpair$inet6(0xa, 0x800, 0x1, &(0x7f0000000040)) [ 449.457762] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 449.457762] program syz-executor5 not setting count and/or reply_len properly 15:42:54 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000042000000000000000000000010000000100000003000000000000000000000000000000"], 0x28) 15:42:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x2, 0x400, 0x80000000000, 0x793, 0x18}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x7, 0x0, 0x6b4591ce5e919e67, 0x6, 0x534dbae1, 0x7f, 0x3, 0x1d00000000, r1}, 0x20) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0xfffffffffffffcf4) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="ffb3a86eabff00000000000086dd6006002600081100fe8000000000000000000000000000ffff0000000000000000000100000002001d90780000000000"], &(0x7f0000775000)) 15:42:54 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10100, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x4, 0x400, 0x6, 0x2, 0x7, 0x6, 0x2f6, 0xfffffe84, 0xda, 0x1, 0x7, 0x38, 0x2, 0x200, 0x2, 0x100000000}, [{0x70000000, 0x4, 0x403, 0x42, 0xa0, 0x7, 0x20, 0x3}], "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", [[], [], [], [], []]}, 0x1739) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:54 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000000, 0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) [ 449.711340] FAULT_INJECTION: forcing a failure. [ 449.711340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.723451] CPU: 0 PID: 23086 Comm: syz-executor2 Not tainted 4.18.0-rc5+ #28 [ 449.730755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.740140] Call Trace: [ 449.742785] dump_stack+0x185/0x1e0 [ 449.746463] ? __alloc_pages_nodemask+0x622/0x6320 [ 449.751442] should_fail+0x8a7/0xae0 [ 449.755210] __alloc_pages_nodemask+0x622/0x6320 [ 449.760004] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 449.765404] ? vmalloc_to_page+0x50b/0x630 [ 449.769683] ? vmalloc_to_page_or_null+0x3b/0xa0 [ 449.774506] ? kmsan_set_origin_inline+0x6b/0x120 [ 449.779395] ? kmsan_set_origin+0x9e/0x160 [ 449.783708] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 449.790074] ? fsnotify+0x490/0x1b30 [ 449.793830] ? __fsnotify_parent+0x7f/0x5a0 [ 449.798212] alloc_pages_current+0x6b1/0x970 [ 449.802716] kmalloc_order_trace+0xc9/0x3c0 [ 449.807081] ? __kmalloc+0x355/0x370 [ 449.810873] __kmalloc+0x355/0x370 [ 449.814482] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 449.819931] rw_copy_check_uvector+0x1ae/0x710 [ 449.824575] ? copy_msghdr_from_user+0x75e/0x8c0 [ 449.824814] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 449.824814] program syz-executor5 not setting count and/or reply_len properly [ 449.829372] import_iovec+0x1a2/0x640 [ 449.829455] copy_msghdr_from_user+0x75e/0x8c0 [ 449.829524] ___sys_recvmsg+0x213/0x850 [ 449.829576] ? __fdget+0x4e/0x60 15:42:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691"}, 0x1d) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 449.829622] ? __fget_light+0x67/0x760 [ 449.829665] ? __fdget+0x4e/0x60 [ 449.829714] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 449.829782] ? __fget_light+0x6e6/0x760 [ 449.878174] __x64_sys_recvmsg+0x3a4/0x510 [ 449.878243] ? ___sys_recvmsg+0x850/0x850 [ 449.878289] do_syscall_64+0x15b/0x230 15:42:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getpeername$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 449.878326] entry_SYSCALL_64_after_hwframe+0x63/0xe7 15:42:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x78, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x8}, @in6={0xa, 0x4e24, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @loopback=0x7f000001}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000380)={r2, 0x10001}, &(0x7f00000003c0)=0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) clock_gettime(0x3, &(0x7f0000000140)={0x0, 0x0}) futimesat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}, {r4, r5/1000+30000}}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0x8f, {&(0x7f0000000240)}}, 0x18) [ 449.878347] RIP: 0033:0x455ab9 [ 449.878354] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:42:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x8000000, @empty, 0x2}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}], 0x3c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) socket(0xa, 0x1, 0x0) connect$rds(r0, &(0x7f0000000380)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) set_robust_list(&(0x7f0000000200)={&(0x7f0000000140)={&(0x7f0000000100)}, 0x2, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x84000, 0x0) r1 = socket$inet6_sctp(0xa, 0x9, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0c56e47f20f95d889d9da565f39252f5081e7f9faadb6687d0b7f95f5b4f9536d0969956b64475e47006000000dfaa6dccccc12dd7a7140b8608cf55e7d969af000000000000000000000000"], &(0x7f0000426000)=0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x8) [ 449.878763] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 449.878791] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 449.878806] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 449.878822] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 449.878837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 449.878851] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000000 15:42:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) 15:42:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c"}, 0x26) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x100, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:55 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fffffff, 0x40000) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x78) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x0, @loopback=0x7f000001}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2}, 'veth0_to_team\x00'}) mount(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000001c0)) 15:42:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:55 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa08004500005c0000000000019000101414bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007fcef9ea5499ef336700000100000000ffffffff00000000e000000100000000ac14140000000000bf0912509782d690bedfe8514e47e0a1b84af596b2d2e0358b8a8a8b997642"], &(0x7f0000000000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080028bd7000fddbdf25030000005400020008000900010000000800080008000000080003000300000008000700090000000800060001000000080007000600000008000b000a0000000800040001000000080007000001000008000800008000009285612e02c47f83e1219bf7789a2e7f2c8a04a87c5efabf7966cafb1e3ee7238bc5a18a0399233fdedc0cff569f"], 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) 15:42:55 executing program 2 (fault-call:5 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 450.440564] 9pnet_virtio: no channels available for device ./file0/file0/file0 [ 450.499998] FAULT_INJECTION: forcing a failure. [ 450.499998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.511866] CPU: 0 PID: 23137 Comm: syz-executor2 Not tainted 4.18.0-rc5+ #28 [ 450.519148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.523345] 9pnet_virtio: no channels available for device ./file0/file0/file0 [ 450.528501] Call Trace: [ 450.528530] dump_stack+0x185/0x1e0 [ 450.528555] should_fail+0x8a7/0xae0 [ 450.528586] __alloc_pages_nodemask+0x622/0x6320 [ 450.528620] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 450.528636] ? get_page_from_freelist+0xb01f/0xbb50 [ 450.528655] ? task_kmsan_context_state+0x6b/0x120 [ 450.528690] ? __module_address+0x6a/0x600 [ 450.570274] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 450.575657] ? is_bpf_text_address+0x47e/0x4b0 [ 450.580259] ? __kernel_text_address+0x250/0x350 [ 450.585038] kmsan_internal_alloc_meta_for_pages+0x9f/0x730 [ 450.590788] ? kmsan_set_origin_inline+0x6b/0x120 [ 450.595663] kmsan_alloc_page+0x80/0xe0 [ 450.599659] __alloc_pages_nodemask+0x105b/0x6320 [ 450.604512] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 450.609894] ? vmalloc_to_page+0x50b/0x630 [ 450.614145] ? vmalloc_to_page_or_null+0x3b/0xa0 [ 450.618918] ? kmsan_set_origin_inline+0x6b/0x120 [ 450.623775] ? kmsan_set_origin+0x9e/0x160 [ 450.628030] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 450.633402] ? fsnotify+0x490/0x1b30 [ 450.637128] ? __fsnotify_parent+0x7f/0x5a0 [ 450.641473] alloc_pages_current+0x6b1/0x970 [ 450.645906] kmalloc_order_trace+0xc9/0x3c0 [ 450.650238] ? __kmalloc+0x355/0x370 [ 450.653972] __kmalloc+0x355/0x370 [ 450.657522] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 450.662911] rw_copy_check_uvector+0x1ae/0x710 [ 450.667511] ? copy_msghdr_from_user+0x75e/0x8c0 [ 450.672284] import_iovec+0x1a2/0x640 [ 450.676115] copy_msghdr_from_user+0x75e/0x8c0 [ 450.680724] ___sys_recvmsg+0x213/0x850 [ 450.684707] ? __fdget+0x4e/0x60 [ 450.688112] ? __fget_light+0x67/0x760 [ 450.692002] ? __fdget+0x4e/0x60 [ 450.695523] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 450.700896] ? __fget_light+0x6e6/0x760 [ 450.704894] __x64_sys_recvmsg+0x3a4/0x510 [ 450.709150] ? ___sys_recvmsg+0x850/0x850 [ 450.713305] do_syscall_64+0x15b/0x230 [ 450.717205] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 450.722393] RIP: 0033:0x455ab9 [ 450.725575] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:42:55 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="470517360d4ce64522db14fb5fc2728faaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac14141105049078000028024000000000b9cb00000000320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac140f00000000007e53da1dc06a971911a57f97ae311c8c3bb8bf864676e6677de533deb3205c6564"], &(0x7f0000000000)) 15:42:55 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) write$FUSE_LK(r0, &(0x7f0000000140)={0x28, 0x0, 0x3, {{0xfff, 0xdb, 0x1, r1}}}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) 15:42:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) lchown(&(0x7f0000000000)='./file0\x00', r2, r3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) syz_extract_tcp_res(&(0x7f0000000200), 0x31b, 0x67) 15:42:55 executing program 1: r0 = socket(0x10, 0x802, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x181000, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x6ff, 0x2]) r2 = socket$inet6(0xa, 0x8000000003, 0xfffffffffffffffd) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write(r0, &(0x7f0000000140)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb0800190005d70000", 0x24) [ 450.744887] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 450.752611] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 450.759895] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 450.767172] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 450.774447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 450.781721] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000001 [ 450.797336] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 450.797336] program syz-executor5 not setting count and/or reply_len properly [ 450.885879] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:42:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="3d79eb9eac26db7b4704aaf64d168997f8614fc80b09d06a3cb3c261da5019480f7a17919618c65a56e36429e1a445b165535fe03b03fd17fe287ae1da0c68a28426e3f0b5221620c28a9555ecc745e3fc4045419edfcdbc289dc7421dff4f1175468e2531b3278943cafba4809c5d9704fd4d8a397f2d0f9181fcb2b08eccb46501df312c56e66d1b42dd357c6c1d98d149b175c1839b640337013bc1d89a4c6d48f245ba5b59f9b08b6412c754eb593e7187b62e81fbe9701a27d2c7853343b809aae0b98268", 0xc7}, {&(0x7f0000000100)="e3651ce0c047616ae6c9005c0cd6ee44da82416cd18f2e691f", 0x19}, {&(0x7f0000000180)="1501152e5975bef8d9b3288e7e810c01bffe8ddefddf0d4b8f6ee48491b317b3812dadef92e18383b04b655b6afc247c310260d531c1d85b556dddb8ca8e0008ff5a39631d2c2365acbca619f2eb6fba5848a03144cdf08ddbe30e3cbaa023e2bc7cbc0e6cba9c94e09dbd3d44856a901b8298e344e870c5d9b556669b7ed55f06f918359111e39aeb9a4a7812506005bd787a17ac8dd108a4e36210f0d9623bf8ad890c845795ac7aef7f1eb2007933a20860548575854636b26754d0f5909f91b9395280d1", 0xc6}], 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000880)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffe, 0x10000) getsockname$unix(r2, &(0x7f00000008c0), &(0x7f0000000940)=0x6e) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 15:42:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c"}, 0x26) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:56 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = semget(0x3, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x327a, 0x1800}, {0x0, 0xffff, 0x1800}, {0x3, 0x6, 0x1800}, {0x0, 0x7fffffff, 0x1800}, {0x3, 0x400, 0x800}, {0x4, 0x4, 0x800}, {0x3, 0x2}, {0x0, 0x6, 0x1800}], 0x8, &(0x7f0000000140)={r1, r2+30000000}) 15:42:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000004c0)="7b79933d6a6ed57b687671c2c57b72b85eaec16bc354950a7555ebbd05ec59f2e12990df186d3aa1658b8b387ce6c63ae2edd28da1e0c1ba5ca6fa9d01c34eb57530e7aa22a09d5a2e8dd394d0bd7214f0cf", 0x52}, {&(0x7f0000000280)="7dccaada2a8763f9c1962405942b96c4b7971f97be4f8e9bb46c80a581a440c55e3c5e09881e9655e0b8a10c1ccdcaf7383f8e4b93f097bfa0d2d65fce034748777f32db25c4d48f512fdf57e27237c3d3d683f459234145a902204a9e286b9fc532b0f3148be6d01b4f72b0392800e1d50252d05d8df94227d0095555e64435e624b7313c55572843cbc5fe1af1effe5978619ac7a0913c511d5c29e61ef2bd11efac0d7db4a6dc68428c860b1ad9bcb4e025fcdd0e36a163a48a3329038af6b2ea7ba0e7f629f25ae3281d7f25b849f81e77b073d4decec4ab27d6b853bfdb14e811ce58e2190d6ee63a0ad0cd5c2ac75f", 0xf2}], 0x2, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) sendfile(r0, r1, &(0x7f0000000240)=0x4800, 0x20000102000007) [ 450.991783] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:42:56 executing program 2 (fault-call:5 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 451.193801] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 451.193801] program syz-executor5 not setting count and/or reply_len properly [ 451.276801] FAULT_INJECTION: forcing a failure. [ 451.276801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.288684] CPU: 0 PID: 23182 Comm: syz-executor2 Not tainted 4.18.0-rc5+ #28 [ 451.295949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.305288] Call Trace: [ 451.307871] dump_stack+0x185/0x1e0 [ 451.311498] should_fail+0x8a7/0xae0 [ 451.315210] __alloc_pages_nodemask+0x622/0x6320 [ 451.319970] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 451.325413] ? get_page_from_freelist+0xb01f/0xbb50 [ 451.330423] ? task_kmsan_context_state+0x6b/0x120 [ 451.335348] ? __module_address+0x6a/0x600 [ 451.339575] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 451.344931] ? is_bpf_text_address+0x47e/0x4b0 [ 451.349519] ? __kernel_text_address+0x250/0x350 [ 451.354270] kmsan_internal_alloc_meta_for_pages+0x10b/0x730 [ 451.360076] ? kmsan_set_origin_inline+0x6b/0x120 [ 451.364923] kmsan_alloc_page+0x80/0xe0 [ 451.368913] __alloc_pages_nodemask+0x105b/0x6320 [ 451.373748] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 451.379102] ? vmalloc_to_page+0x50b/0x630 [ 451.383331] ? vmalloc_to_page_or_null+0x3b/0xa0 [ 451.388080] ? kmsan_set_origin_inline+0x6b/0x120 [ 451.392923] ? kmsan_set_origin+0x9e/0x160 [ 451.397153] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 451.402503] ? fsnotify+0x490/0x1b30 [ 451.406231] ? __fsnotify_parent+0x7f/0x5a0 [ 451.410556] alloc_pages_current+0x6b1/0x970 [ 451.414962] kmalloc_order_trace+0xc9/0x3c0 [ 451.419302] ? __kmalloc+0x355/0x370 [ 451.423021] __kmalloc+0x355/0x370 [ 451.426553] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 451.431913] rw_copy_check_uvector+0x1ae/0x710 [ 451.436495] ? copy_msghdr_from_user+0x75e/0x8c0 [ 451.441251] import_iovec+0x1a2/0x640 [ 451.445052] copy_msghdr_from_user+0x75e/0x8c0 [ 451.449638] ___sys_recvmsg+0x213/0x850 [ 451.453607] ? __fdget+0x4e/0x60 [ 451.456963] ? __fget_light+0x67/0x760 [ 451.460847] ? __fdget+0x4e/0x60 [ 451.464215] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 451.469567] ? __fget_light+0x6e6/0x760 [ 451.473542] __x64_sys_recvmsg+0x3a4/0x510 [ 451.477776] ? ___sys_recvmsg+0x850/0x850 [ 451.481910] do_syscall_64+0x15b/0x230 [ 451.485794] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 451.490970] RIP: 0033:0x455ab9 [ 451.494160] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.513407] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 451.521105] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 451.528360] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 451.535616] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 451.542886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 451.550144] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000002 15:42:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) 15:42:56 executing program 6: r0 = memfd_create(&(0x7f0000000040)='dev ', 0x3) gettid() write$cgroup_pid(r0, &(0x7f0000000140), 0xffffff94) fcntl$addseals(r0, 0x409, 0x5) flistxattr(r0, &(0x7f0000000000)=""/37, 0x25) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) close(r1) 15:42:56 executing program 4: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '/dev/loop#\x00'}, &(0x7f0000000080)=""/1, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000000008912, &(0x7f0000000100)="f75bc83d6d345f8f762070") fcntl$setsig(r0, 0xa, 0x100003f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x80, 0x208080) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x8b, 0x20}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000480)={r3, 0x45, "48d54a9ee87bc039592c26b01cdc8c05ed65479c5060c2614c5ff7758bb19eb200d3e2569d869d9b3c12c027791cd4b97bcedfcd1b616095ad10dd1617ae63b568df4e3b67"}, &(0x7f0000000500)=0x4d) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000301ffff008f00003d88c000001018dd"], 0x14}, 0x1}, 0x0) r4 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000540)={0x2, r4}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4400, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xd7, "a21edc2bbadec3069a40c1b853f81afc6b399e12c22bd46003d5cd47584ee4e422179d6a565673e9a5872db5414d6b3eb582f862a77498fd27b70c46c1cbdeda7f16f5234c75352a0ec7073043d95ad8193340c0575e7ce57fe9a7fcb94aec98783d6afc9a0712c592cbf2ff45720df42afe71d16b8fbb2d1b2979804fccda11e52f4437fa63f9e0e7986b5c6246a53fde48b2db21fa6725cfd08ffc54250955f5941e5bb0fc9a9eed4031dacac53d35abe5e966e213c696340ef19e8f3f4583064d5a7b57a6145c0524ea5262334cb84b7024ef71ed4b"}, &(0x7f0000000140)=0xdf) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="7c0000005b00fabd9bc42dd9c8259b9fbf48feab4e0917db8d7531ea204ce7d50f12c54e1bb569c3e37a45c4a4ae7e2d61c390533298a4c7a1add02c7ef498c63401cb3100acbfaf2ec2d711a3a60d2e48ff1b50dddfa8e3c2a85d2dea190000000000000000af93d254598c89657d3bd2c75167a57c487887fe2192e8a97ab5"], &(0x7f0000000180)=0x84) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/175, 0xaf}}, {{&(0x7f0000000740)=@hci, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=""/227, 0xe3}}], 0x2, 0x0, &(0x7f0000000c40)={0x0, 0x989680}) 15:42:56 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff95ff08004500005c0000000000019078ac1414bbac1414110504907800002802400000000000ef0000320000ac1414aaac141400082c000000000000000000007f00000100d140b4f0475e000000ffffffff0000000000000100000000ac1414000000000000bd25726cc89eace556e9011f6e7d8587b9e7661670f1d2c1d80bc0912aaa1e183ea989f7aa28029a8bf2b226c9d7322d00d7b1de9d3b760c9443ee03a92bf84bee600d05278319e4b0476480bebca0ee935a3f419ebeb1e4ebdb4b5bea8dbbc284029c4115eb20fcb8"], &(0x7f0000000000)) 15:42:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c"}, 0x26) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:56 executing program 2 (fault-call:5 fault-nth:3): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 451.858720] FAULT_INJECTION: forcing a failure. [ 451.858720] name failslab, interval 1, probability 0, space 0, times 0 [ 451.870382] CPU: 1 PID: 23203 Comm: syz-executor2 Not tainted 4.18.0-rc5+ #28 [ 451.877711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.887112] Call Trace: [ 451.889768] dump_stack+0x185/0x1e0 [ 451.893476] ? __should_failslab+0x278/0x2a0 [ 451.897938] should_fail+0x8a7/0xae0 [ 451.901745] __should_failslab+0x278/0x2a0 [ 451.906048] should_failslab+0x29/0x70 [ 451.910010] __kmalloc+0xcb/0x370 [ 451.913517] ? __local_bh_enable_ip+0x48/0x170 [ 451.915428] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 451.915428] program syz-executor5 not setting count and/or reply_len properly [ 451.918159] ? local_bh_enable+0x36/0x40 [ 451.918203] ? sock_kmalloc+0x14e/0x270 [ 451.918246] sock_kmalloc+0x14e/0x270 [ 451.918307] af_alg_alloc_areq+0x85/0x320 [ 451.950384] skcipher_recvmsg+0x353/0x19b0 [ 451.954703] ? security_socket_recvmsg+0xa4/0x220 [ 451.959599] sock_recvmsg+0x1d6/0x230 [ 451.963435] ? skcipher_sendmsg+0x160/0x160 [ 451.967820] ___sys_recvmsg+0x41e/0x850 [ 451.971857] ? __fget_light+0x67/0x760 [ 451.975791] ? __fdget+0x4e/0x60 [ 451.979204] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 451.984615] ? __fget_light+0x6e6/0x760 [ 451.988670] __x64_sys_recvmsg+0x3a4/0x510 [ 451.992978] ? ___sys_recvmsg+0x850/0x850 [ 451.997179] do_syscall_64+0x15b/0x230 [ 452.001111] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 452.006346] RIP: 0033:0x455ab9 15:42:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04"}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 452.009576] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.029144] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 452.036906] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 452.044210] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 452.051514] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 452.058823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 452.066129] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000003 15:42:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) fcntl$setown(r0, 0x8, r2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:57 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000040)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @loopback={0x0, 0x1}, @empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:42:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:57 executing program 2 (fault-call:5 fault-nth:4): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 452.245845] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 452.245845] program syz-executor5 not setting count and/or reply_len properly 15:42:57 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) keyctl$join(0x1, 0x0) 15:42:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04"}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0xfffffffffffe, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x500, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x3f, 0x2, 0x9, 0x2430, 0x1ff, 0x3, 0x28d, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0xa490}, 0x8) fallocate(r1, 0x1, 0x4, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x76ba90e4, 0x4) [ 452.588322] FAULT_INJECTION: forcing a failure. [ 452.588322] name failslab, interval 1, probability 0, space 0, times 0 [ 452.599782] CPU: 0 PID: 23228 Comm: syz-executor2 Not tainted 4.18.0-rc5+ #28 [ 452.607111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.616502] Call Trace: [ 452.619160] dump_stack+0x185/0x1e0 [ 452.622868] ? __should_failslab+0x278/0x2a0 [ 452.627377] should_fail+0x8a7/0xae0 [ 452.631155] __should_failslab+0x278/0x2a0 [ 452.635451] should_failslab+0x29/0x70 [ 452.639428] __kmalloc+0xcb/0x370 [ 452.642925] ? sock_kmalloc+0x14e/0x270 [ 452.646944] sock_kmalloc+0x14e/0x270 [ 452.650816] af_alg_get_rsgl+0x427/0xe10 [ 452.654943] skcipher_recvmsg+0x555/0x19b0 [ 452.659242] sock_recvmsg+0x1d6/0x230 [ 452.663086] ? skcipher_sendmsg+0x160/0x160 [ 452.667496] ___sys_recvmsg+0x41e/0x850 [ 452.671579] ? __fget_light+0x67/0x760 [ 452.675538] ? __fdget+0x4e/0x60 [ 452.678974] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 452.684401] ? __fget_light+0x6e6/0x760 [ 452.688555] __x64_sys_recvmsg+0x3a4/0x510 [ 452.692881] ? ___sys_recvmsg+0x850/0x850 [ 452.697092] do_syscall_64+0x15b/0x230 [ 452.701033] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 452.706249] RIP: 0033:0x455ab9 [ 452.709448] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.729072] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 452.736850] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 452.744177] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 452.751485] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 452.758793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 452.766364] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000004 [ 452.793910] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 452.793910] program syz-executor5 not setting count and/or reply_len properly 15:42:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:58 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x552, @local={0xfe, 0x80, [], 0xaa}, 0x7}}, 0x36, 0x0, 0x5f, 0x7, 0xe}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e24, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, 0x6, 0x200}, 0x90) 15:42:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) 15:42:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04"}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0x40, 0x1200) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000080)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:58 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000340), 0xffffffffffffffad) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0182000605fd463170c50e65a917e7e704afd70d32fda9c01b0840582b2454796d7dd9e8687b273a25e28209276c06068230e8d98254f4fe33b60156dd5bf1bba1a5468e69692201809470f90db5d93804be", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000340)=@buf={0x4, &(0x7f0000000300)="18fabc2c"}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0xffff, 0x78, "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", 0x2, 0xfffffffffffffffd, 0xfffffffffffffc00, 0x5, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x3f, 0x1}, r3}}, 0x128) 15:42:58 executing program 1: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") modify_ldt$write2(0x11, &(0x7f0000000080)={0x1000}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x600100, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/120) clone(0x40000000, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000340)) 15:42:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:58 executing program 2 (fault-call:5 fault-nth:5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 453.236176] FAULT_INJECTION: forcing a failure. [ 453.236176] name failslab, interval 1, probability 0, space 0, times 0 [ 453.247687] CPU: 1 PID: 23265 Comm: syz-executor2 Not tainted 4.18.0-rc5+ #28 [ 453.254995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.264388] Call Trace: [ 453.267047] dump_stack+0x185/0x1e0 [ 453.270724] ? __should_failslab+0x278/0x2a0 [ 453.275181] should_fail+0x8a7/0xae0 [ 453.278956] __should_failslab+0x278/0x2a0 [ 453.283240] should_failslab+0x29/0x70 [ 453.287169] __kmalloc+0xcb/0x370 [ 453.290661] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 453.296100] ? af_alg_count_tsgl+0x3eb/0x480 [ 453.300549] ? sock_kmalloc+0x14e/0x270 [ 453.304558] sock_kmalloc+0x14e/0x270 [ 453.308402] skcipher_recvmsg+0x8b1/0x19b0 [ 453.312695] sock_recvmsg+0x1d6/0x230 [ 453.316527] ? skcipher_sendmsg+0x160/0x160 [ 453.320926] ___sys_recvmsg+0x41e/0x850 [ 453.324974] ? __fget_light+0x67/0x760 [ 453.328922] ? __fdget+0x4e/0x60 15:42:58 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac141411050490780000280240000000000000009b0bc0268b47c2e9ee9d781f4e757600320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff000000000100000000ac14140000000000"], &(0x7f0000000000)) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x20001) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x4, 0x6d, 0x1}, 0x7) [ 453.332349] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 453.337772] ? __fget_light+0x6e6/0x760 [ 453.341827] __x64_sys_recvmsg+0x3a4/0x510 [ 453.346149] ? ___sys_recvmsg+0x850/0x850 [ 453.350356] do_syscall_64+0x15b/0x230 [ 453.354298] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 453.359510] RIP: 0033:0x455ab9 [ 453.362706] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:42:58 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x4000) write$P9_RUNLINKAT(r0, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3, 0xfffffffffffffff9, 0x1, 0x8001, 0x100}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r2, 0x8, 0x10}, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0xff, &(0x7f0000000180)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0xa60) [ 453.382327] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 453.390089] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 453.397399] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 453.404697] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 453.411995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 453.419345] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000005 [ 453.519784] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 453.519784] program syz-executor5 not setting count and/or reply_len properly [ 453.528784] IPVS: ftp: loaded support on port[0] = 21 15:42:58 executing program 3: recvmmsg(0xffffffffffffff9c, &(0x7f00000065c0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/23, 0x17}, {&(0x7f0000001180)=""/22, 0x16}], 0x3, 0x0, 0x0, 0x8}, 0x7f}, {{&(0x7f0000001200)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/150, 0x96}, {&(0x7f0000001340)=""/96, 0x60}, {&(0x7f00000013c0)=""/253, 0xfd}], 0x3, &(0x7f0000001500)=""/243, 0xf3, 0x8}, 0x4}, {{&(0x7f0000001600)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003780)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/136, 0x88}, {&(0x7f0000002740)=""/19, 0x13}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x4, &(0x7f00000037c0)=""/99, 0x63, 0x4}}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003840)=""/156, 0x9c}, {&(0x7f0000003900)=""/85, 0x55}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/106, 0x6a}, {&(0x7f0000004a00)=""/156, 0x9c}, {&(0x7f0000004ac0)=""/146, 0x92}], 0x6, &(0x7f0000004c00)=""/234, 0xea, 0x3}, 0x101}, {{0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000004d00)=""/240, 0xf0}, {&(0x7f0000004e00)=""/137, 0x89}, {&(0x7f0000004ec0)=""/55, 0x37}, {&(0x7f0000004f00)=""/39, 0x27}, {&(0x7f0000004f40)=""/114, 0x72}], 0x5, &(0x7f0000005040)=""/241, 0xf1}}, {{&(0x7f0000005140)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000064c0)=[{&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/180, 0xb4}, {&(0x7f0000006280)=""/83, 0x53}, {&(0x7f0000006300)=""/134, 0x86}, {&(0x7f00000063c0)=""/234, 0xea}], 0x5, &(0x7f0000006540)=""/100, 0x64, 0x7fffffff}, 0x7}], 0x6, 0x10002, &(0x7f0000006740)={0x0, 0x989680}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:42:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x400000000000, 0x4, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:58 executing program 2 (fault-call:5 fault-nth:6): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:58 executing program 6: r0 = geteuid() r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000007200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) keyctl$get_security(0x11, r1, &(0x7f0000007240)=""/4096, 0x1000) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mknod(&(0x7f00000070c0)='./file0\x00', 0x1000000c084, 0x86e0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) r2 = creat(&(0x7f00000071c0)='./file0/file0\x00', 0x21) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r3 = socket(0x1f, 0x4, 0xf7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x400, 0x1, 0x1, 0x1, 0x9, 0x7fffffff, 0x56c}, &(0x7f0000000040)=0x20) rename(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)='./file0/file1/file0/file0\x00') r4 = getpgid(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r3, 0x10, &(0x7f0000003800)={0x0, 0x0}) sendmsg$kcm(r3, &(0x7f0000007080)={&(0x7f0000006680)=@ethernet={0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006700)="2aadfb4bb78d16109c02958253855fc04aefc305a3e5ab6689c0524f750bfe8537fbbe95b1371c1394f39151a37909ad820f4277bd7fc7041f5ed67b2fd77dcf15b49689d2311f16d93c2e825effe09327b5e4d3ac5f761a05ea33ff0f4d3dfab632a28e3702ec76baebaf5421945af4462dce40cb3fdb6d3391abba598de0ffa22094cf8b87444ad617ce98bfe143caec19a4661a2cc4f3b3ae9db0288c6ee27358d8b2ebb20df5ee9cee188c6f7fc9c42a35ec362325", 0xb7}, {&(0x7f00000067c0)="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", 0xfb}, {&(0x7f00000068c0)="f9b3f49d21e202279a934155f1ae756e8790f23091c9b6719993f1aebfa7", 0x1e}, {&(0x7f0000006900)="c052c487a8b09e63ded4c2ea1e3225f62e023866e6388108d5bee1fd3c880601bfeb3a70bcba43e68119e97048b97a10f02489ac0c1892b0d7bbab29e93cdc0f5b1838ce9150c978f90642c875b5b7e9a9f7b247abbc7ccd37850319", 0x5c}, {&(0x7f0000006980)="a40a599cb0ce04a45fdac63ee214daf99d2acd03144d5678ada180335deafe0e861e32330e29691d1756132878b78e4b3df86535c31c6d2d50b10369d7fd4ab774cb981ffa7e74fd668d2fa3d2d08ce5e12cc1702d4cc0f12c57254bd6342052b25676c5e6858406cd197aa3176025ff607a6e3718de87431e7ada9bd5b40eb73dd80f0f8029c59970582bde8f61b61f19fa95b49ea4f242775c1ce0c10f96bced50dbbb219eebea5697713cb4857e4a2f04a79669921f6792e22ecbee6750385eeaeae1b1d6160ec5efea4917b9af273b14f7ae8729884929c2b045441e5d7fdd9f16ebe80ebb88a4b01efcc79c91", 0xef}, {&(0x7f0000006a80)="9f0d740a782ce07407c62efae27dde20b859789838644ec3c36388224a132d3d68d2c9ac9f0da8580215ce5f702516baf84fa5242ced00d283b8efeb0266c91c34eb900aec988737a49040c7611ad7c70aed31e0aa5a75a4970e17a3a7f03193facd934d49a6dc303d924efa42becc42a62ed27d792673115595436e2c211db3a18e5c37b7912463cbe337e6aa100755f93bf622f1a9da863d6213e0e9422eead3123b3407845443dc2f3dd5c30bc6cdf5345023ec5740bb40220e895642252e94d88ac3f9958695e4f93bd8e1b3d9a38de0579b4eb1b9ae0602fd06f945b22d6880", 0xe2}], 0x6, &(0x7f00000082c0)=ANY=[@ANYBLOB="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"], 0x4f0, 0x24000001}, 0x80) lstat(&(0x7f0000003840)='./file0/file0\x00', &(0x7f0000008240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000006380)={0x0}, &(0x7f00000063c0)=0xc) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) ioctl(r9, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x1}, &(0x7f0000000000)) getsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000007140), &(0x7f0000007180)=0x4) exit(0x0) timer_delete(0x0) lstat(&(0x7f0000006400)='./file0/file1/file0\x00', &(0x7f0000006440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ndb(&(0x7f0000007100)='/dev/nbd#\x00', 0x0, 0x2000) r11 = fcntl$getown(r3, 0x9) getgroups(0x6, &(0x7f00000064c0)=[0xee00, 0xee01, 0xee00, 0xee00, 0x0, 0x0]) sendmmsg$unix(r3, &(0x7f0000006580)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="f06768fd0826b0ffb8c090b6dbb8760e36cfc540f9fd251b10a8adf261dfffcfc8869b857b25fb9cb51785f3a46f9b1408c6cc51471b742a18feb4708a5522e18dc02d7debbe22e08248eeeeadfe6836be1c05fb28fc645c4e1757a3eece9b6c68288db37de327476647b879a9fd339b72356191803fc15fe72eb68d03d3d4e9c989364c5114a674af247a7742e24b54fc745697dc899167a12c44214cca83", 0x9f}], 0x1, &(0x7f0000000380)=[@cred={0x20, 0x1, 0x2, r4, r0, r5}], 0x20, 0x4044}, {&(0x7f00000003c0)=@file={0x1, './file0/file1/file0/file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="c4f830055a338cce2b44e8747a9d602e264a4c33c8faf551d59a4ced3705a78be40ec16c70b5a80b4934386a4c77c95701d5dcb5671b252a0991bf3329890f1754687b821831b52c072d63e81db7efa744139d28528737abff70f8802ddc83cab481946141196cc748969aa7f0c566eaa903cc07de0db98f6e20066f85c4a68f5e26067d94e88a32dbef4ee125c9393314e3619b52e526ba94909f106903348cf49923490d91a84145f3944d15ea787358be25e7ffcea4058008f41d430d81b2cd8f69b4c513ccc8f2521cfa", 0xcc}, {&(0x7f0000002680)="13cc59bc78f3c6028d8c0e91913a5b3ab09d63bdf1463933471b7812041988cb795ea890b0e62aaec27ee725e9c925c297ccd12fbe5321bc5a9b5d3f4b1fcf29feaa5f02fc96d38ecb609a6de7f52c4670f11514cd85991895e4fd3cc25619f972a43147ee83794c42940626206340f8ddc871401264d5787417d8a7c89b9c44c132b5fc629af5adac75a2361ec2dd43ee30448c34ba2868a358a25bc64aed6d3754a2b648ab0cd9e4d4fad73dcc8e704fd07271f001db48d7460bb329fc03d9bbaa640a4f93367c80c6e4f0d2300edceac4a440792a63b3b9814b7a0f31ba", 0xdf}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000000440)="c41e97bb3c94c0b34d536d441bc05723c747309183714a637fa0a6be1d462cfcb3759afcfd0e54014d5b9ad77407ed5ab0712836b23ba83f111b047f3d24b3cea522fd615ccf5e3ca5a7b551cc39549de6052b857a0b3fe45feea93d8750de30db3d6ddee1d4804ed333e6839761b65ab001971f80ae4613e7acbab022c284d4ea54b1fd875f35818bf0a3065e44330e91ed2655aa2d70581491c130a3befdcae640cb6cb986dc98406f16be5a77e1f9833a8bc2b4", 0xb5}], 0x6, &(0x7f0000003900)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="200000000000000001001b000000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x4000}, {&(0x7f0000003980)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000003a00)="7fae1af88d14bca7fa62d599432521394c5890c614ae13b56c69bb27917ec2e0b3e3402387898ddcf247565ddea1cb02abba0136add3d2dd5a71148ae647cad628465da94ad88fc51674c657f989075d75d855", 0x53}, {&(0x7f0000003a80)="3be3f656fbd3093618850af6b7bc1e3ace2945c47951b7b99dd200c6df781d27e069", 0x22}, {&(0x7f0000003ac0)="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", 0xfd}, {&(0x7f0000003bc0)="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", 0x1000}, {&(0x7f0000004bc0)="4b87d3436d87636c06d4346cf6c5b491d948febba26b29fb7c116ed87471fb75a2834acb376efab684e4eaa4e42e42cc55122ae314b156e37807e0ac93e54938b94cba389f3c49e3b977c3e1c519f2a2612987da8effb6734d7111ff95ecacd1031dadf04598db569e", 0x69}, {&(0x7f0000004c40)="3e42f2041634fb8932d15a5f692ec1c23fbc5450c08a582f31fce3a6b8e9aa74c9d122a3f7ff20a338e2ac9e90237762aec1d1744bd961ed6cfdcd44c24afd30318112fb775adf35085138b558c723f6a54c430a462c37b93ef729fa4b9315c96ebf95815f0457f08670d0c8d7255baa837a63d0e5301164663ee38a7b79c7f6536ff3e18e1a8d98cf0fb79d32402d6b3b4c7af573fa2fec640426871429409a", 0xa0}, {&(0x7f0000004d00)="d59ee053cb348163114a9c069d2a7da9a6f73b1bc06909552bf46c19e7f6ed4c71a3b254a729984760865bcc59836dcc676bbecfee71e5485fbe0931d257d59b671d22f1e737d8d8907ceec448938c80dc712995fd5908a83609a611c09836cf65e5a5b93f7313bce93b6b20d9806e9ee29e1978e091d6289da04d7c968996a4443f8aa1e1342af95c653d1b379ff9a866fc6b2600a212627aebb22bfcc0a0f8ce02c602c9bee92fd0c96083", 0xac}], 0x7, &(0x7f0000004e40)=ANY=[@ANYBLOB="28000000000000000100400001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x811}, {&(0x7f0000004e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006300)=[{&(0x7f0000004f00)="5d07057b5255b241ddec94217bb555f0942b4666717517d1f4a69ad2a4d442dd8963a3b741b063bad25ab2e21960f96f17e24692c1e3cff4332a394a8cdf1b1f47f1914d8459e5c0bbb20a28411a787326b719cba7758299a752320b8c5b3413d8ca051128b5fd64b74c106a148abd3e50575c301d9d89d169a9c52aa4603bfd83c3f9b48951346e4b7194b9fb73d23286b880990da7cbda8728030aaa81b69fc04f0b7e649de0aff42ba3c4a6877e8118545d421d7bed7df9d65b1ad467423f1eb5de1864129a085e94aeda301218ee39233cfb568da59f05e3b0ba0382", 0xde}, {&(0x7f0000005000)="670024549561bff085dc877b44c13846dfe167a0a30af10f784136caf6e0fd0d54afff4e70a6", 0x26}, {&(0x7f0000005040)="4527c0e69de06a3402d46ab33d24c9fd1a3eda001e49f9183a925b77e883708f2bd4dba323dc8a9aa4ac5a480484baa9e60a14f0d9435b45022cabb55156642ef88b1bc0ba5da7f345a39b15c7e829cbf0cd16706625a5f3edeead6d3a9a5611b335ea021b43f966530636405da3aa705fe638756f3b12d16790f1ddddf23c6a2434de468eb6aad80321ed765e2f486f890cdb9e0e27683f4b6dae6ee67e4a7d2f2f529c520b08126c19d3794acc089f7ee29d880c064588b2ebac33de85990f6fe10e34f264e4310467", 0xca}, {&(0x7f0000005140)="984184c49d5bedb683671bbf00fabb73cbbb724a584556c376ecbe7647418193f378ffd869666d5ea4e16185c2756bfd44e8497bb1597661c352463b298b4ef8f6d6a256f145c9d24818cb1d60fe940aac0b269000e4fdc330ee12599b51e5ca32c2d4508d7546427b00", 0x6a}, {&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="e2f2557b9718919eabd0a074c6a1a33107cf8f5ea0f40b2e12a3f1fa416bcd5f6cca75baaf1ab836ab3a68e306645f2b02280ead84aff05513ab8c93062c25cd828374743b67fec43edebb0fe4a88523c1fd52efe02fe038a15694a48fd619bdcc05991f742fa9ab8de5fe775849617cb03371a046aa85a37071e1527335232d264cec2ddf19598267a171119d9cd0e41f06a51d5faa4b8636c3111f9c278f9b1d99164001088176d94c43b46204f856", 0xb0}, {&(0x7f0000006280)="fd6267644ea667ac41d5454be0510082caf90b9a8bcdd696662ece50018792dc054ef139fbdbddd10213db856a099aeddcb48f3e5b3347a5ffae84f3ea9a2a147791c7798838646aed34cc44a7f40c758389b3b557451a8ec56db5704014ba9774b42992708dc301c89746b3", 0x6c}], 0x7, &(0x7f0000006500)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="834e000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r12, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3], 0x58}], 0x4, 0x4000800) 15:42:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c1"}, 0x2c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:58 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000140)=""/252) [ 453.849176] capability: warning: `syz-executor6' uses deprecated v2 capabilities in a way that may be insecure 15:42:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc002, 0x0) read$FUSE(r2, &(0x7f00000002c0), 0x1000) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 453.971630] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 453.971630] program syz-executor5 not setting count and/or reply_len properly 15:42:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c1"}, 0x2c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:42:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:42:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/38, &(0x7f0000000100)=0x26) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x5, &(0x7f00000004c0)=""/161, 0xa1, 0x2}, 0x40010140) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:42:59 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='\x00'}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:42:59 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xbc67, 0x8002) writev(r0, &(0x7f0000000440)=[{&(0x7f00000004c0)="18090000000000000023f829ccf61661e9ed7f73e2df5b2762bec872188613285f013f23af4232a33f87", 0x2a}], 0x1) 15:42:59 executing program 7 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:42:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x10000) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x3, 0x0) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000000)=""/84) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:59 executing program 1: r0 = socket(0x0, 0x4, 0x1000000000000003) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") io_setup(0x1, &(0x7f0000000080)=0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000580)={'syz1'}, 0x4) io_getevents(r1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)={0x0, 0x1c9c380}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='D', 0x1}]) 15:42:59 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r0) syz_emit_ethernet(0xfffffffffffffeb3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) [ 454.426236] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 454.426236] program syz-executor5 not setting count and/or reply_len properly 15:42:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0xa, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7fff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e22, 0xd93, @remote={0xfe, 0x80, [], 0xbb}, 0x20}}}, 0x84) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:42:59 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@random="a55cbfbac87b", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) syz_emit_ethernet(0x1201, &(0x7f0000000140)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, [{[], {0x8100, 0x8, 0xb6d, 0x4}}], {@ipv4={0x800, {{0x1e, 0x4, 0x800, 0x3, 0x11ef, 0x68, 0x1, 0xfff, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1=0xe0000001, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x27, 0x1, [@local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001, @rand_addr=0x1, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, @multicast1=0xe0000001, @multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}]}, @lsrr={0x83, 0x1b, 0x80, [@remote={0xac, 0x14, 0x14, 0xbb}, @empty, @rand_addr=0x3b, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001, @rand_addr]}, @ra={0x94, 0x6, 0x1000}, @rr={0x7, 0x17, 0x100000000, [@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, @multicast1=0xe0000001, @empty, @broadcast=0xffffffff]}]}}, @gre={{0x0, 0x0, 0x1, 0x800, 0x0, 0x1000, 0x0, 0x1, 0x880b, 0x35, 0x3, [], "4435f31fb382650103ba7fddcc828779b2bdfca4a13f133fcc29c45cf2c1e4b995759814dcd1757cd3ccf66f9723ac9e2c90b8485e"}, {0x8000, 0x0, 0xffff, 0x13cc, 0x0, 0x0, 0x800, [], "f5db6336a76d1ce6c734a76a9aeaa07d6635867310ab72e2f286e611099d18cf48c34265ab45e603aa9375e464025da8823be52082eebdcd1a0f0ae9705a3be92076e093a4bcb065ed908142bbf0a90401a46aad4b10c88c823be0b3bf122c28d4d3eebde00ea0ce028b9c791c36900519acb880525cbc961b9e245c9ca047e2db7086f460375f0beae11e03366cdefb27565f2ac2c203a58928c8601b"}, {0x7, 0x0, 0x5, 0x8, 0x0, 0x0, 0x86dd, [], "47ec560b93ed38896fad4f12b7e2db0df29c01bedb7830167b7d66c897e9f5fd57a71921ff6f76e4ccbdab8b1018996780b0ec578bd951c0207ebf03fb1cce84bdb3fe7d96200938126a413820245c69842ebb158b2b5abea876ebb4e355fb6571"}, {0x8, 0x88be, 0x4, {{0x100, 0x1, 0x4, 0x8, 0x9, 0x6, 0xb9, 0x7}, 0x1, 0x1ff}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x2, 0x2, 0x4, 0x1, 0x10, 0x4}, 0x2, 0x4, 0x2, 0x7, 0x0, 0x7, 0x6, 0x7, 0x4, 0x3}}, {0x8, 0x6558, 0x0, "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"}}}}}}, 0x0) 15:42:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c1"}, 0x2c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 454.954499] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 454.954499] program syz-executor5 not setting count and/or reply_len properly 15:43:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) socketpair$inet6(0xa, 0x80000, 0x13, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x1b, "9216b50ae11f94bd52130c731c47b8448203a48d7a051f6c1b4519"}, &(0x7f0000000140)=0x23) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x4f32}, &(0x7f0000000240)=0x8) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:00 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x8000, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000002c0)=""/12) r2 = getpid() getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000300), &(0x7f0000000340)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x42) r3 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2, 0x6}) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xffff, 0x80) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000240)={{0x3b, @rand_addr=0x9, 0x4e23, 0x3, 'lc\x00', 0xc, 0x3, 0x42}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x0, 0x793f909, 0x0, 0x5c22b788}}, 0x44) r5 = fcntl$dupfd(r0, 0x4, r3) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000140)=""/108) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) close(r0) socket$inet6_udplite(0xa, 0x2, 0x88) 15:43:00 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x400, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac14141105049078000028024000000000000000006031c2dddf369c91141400082c000000000000000000007f00000100ffffffff00000000e00000010742f3f4ac14140000000000"], &(0x7f0000000000)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x10000, 0x0) write$eventfd(r1, &(0x7f00000002c0)=0x1000, 0x8) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x300, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x600140, 0x11c) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000340)={0x4, 0x3f}, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x400}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={r3, 0x7}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r4, 0x9}, &(0x7f0000000240)=0x8) sync() ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 15:43:00 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000028a000/0x3000)=nil, 0x3000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x7ffff000}], 0x85, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x32, 0xffffffffffffffff, 0x0) close(r0) 15:43:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 455.140225] FAULT_INJECTION: forcing a failure. [ 455.140225] name failslab, interval 1, probability 0, space 0, times 0 [ 455.151657] CPU: 1 PID: 23381 Comm: syz-executor7 Not tainted 4.18.0-rc5+ #28 [ 455.158962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.168347] Call Trace: [ 455.170991] dump_stack+0x185/0x1e0 [ 455.174655] ? __should_failslab+0x278/0x2a0 [ 455.179160] should_fail+0x8a7/0xae0 [ 455.182893] __should_failslab+0x278/0x2a0 [ 455.187152] should_failslab+0x29/0x70 [ 455.191046] __kmalloc+0xcb/0x370 [ 455.194504] ? sg_scsi_ioctl+0x45c/0x14c0 [ 455.198671] sg_scsi_ioctl+0x45c/0x14c0 [ 455.202655] ? security_capable+0x1db/0x200 [ 455.206990] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 455.212374] sg_ioctl+0x3a1e/0x4ea0 [ 455.216046] ? do_vfs_ioctl+0x16a/0x2740 [ 455.220128] ? __x64_sys_ioctl+0x280/0x320 [ 455.224380] ? sg_poll+0x630/0x630 [ 455.227925] do_vfs_ioctl+0xdef/0x2740 [ 455.231823] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 455.237193] ? __fget_light+0x6e6/0x760 [ 455.241204] ? security_file_ioctl+0x92/0x200 [ 455.245729] __x64_sys_ioctl+0x280/0x320 [ 455.249817] ? ksys_ioctl+0x260/0x260 [ 455.253635] do_syscall_64+0x15b/0x230 [ 455.257538] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 455.262732] RIP: 0033:0x455ab9 [ 455.265915] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.285471] RSP: 002b:00007fdb3b64dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.293194] RAX: ffffffffffffffda RBX: 00007fdb3b64e6d4 RCX: 0000000000455ab9 [ 455.300466] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000014 [ 455.307737] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 455.315012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 455.322289] R13: 00000000004be54e R14: 00000000004cd1c8 R15: 0000000000000000 15:43:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x8001}}, 0x18) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xfff, 0x101100) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00000002c0)=""/133) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130"}, 0x2d) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x801) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 15:43:00 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40800, 0x5) syz_emit_ethernet(0x3d, &(0x7f0000000140)={@random="ae25a502a022", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100, 0x9c, 0x7fff}}], {@arp={0x806, @generic={0x0, 0x883e, 0x6, 0x7, 0x8, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, "37de1bba28e609", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}, "03a8bb31f5f4f21d70693fcade586188"}}}}, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x5, 0x81, 0x5, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x6, 0x1, 0x5, 0x5}) [ 455.670983] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 455.670983] program syz-executor5 not setting count and/or reply_len properly 15:43:01 executing program 7 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="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", 0x1000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x1, 0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x8) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) 15:43:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:01 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="343810d8a6ceffffffffffff08004500005c0000000000019078ac1415bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c00000000000000ffffffff00000000e000000100000000165bac141400000000000000000000000000000000"], &(0x7f0000000000)={0x0, 0xfffffffffffffffc, [0x966]}) r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), 0x4) 15:43:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130"}, 0x2d) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:01 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000014d400300000000006506000001ed000071181400000000005d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f00000001c0)="00f1290d2abb7a4c8e379eaab379b9fa21ad21b4d494a086cf1223b4d36e2485066bb2f9d522fe8620087fe88acf899bba525df57b4a8415f929f3c8d560e6e69e4902ce1f49a877c323baf5e9ea3ec7ab322ca08474ce045466c5fe60279be24d4825930238cb0fdb16e26c80e6cdce570153532d6f6058f6a4c17cbec4f0ac317a70c989ef2ea491b4f328"}, 0x48) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)) [ 456.254637] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 456.254637] program syz-executor5 not setting count and/or reply_len properly 15:43:01 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x82000, 0xf9161c07bf9670f2) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040), 0x1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80f, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xa60) 15:43:01 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101001, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 15:43:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x2, 0x400) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getgroups(0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xee00, 0x0, 0xee00, 0x0]) write$FUSE_ENTRY(r1, &(0x7f00000003c0)={0x90, 0xffffffffffffffda, 0x2, {0x5, 0x1, 0x8, 0x0, 0x5, 0x8, {0x2, 0x3ff, 0x40, 0x7ff, 0x8, 0x4, 0x80000000, 0x0, 0x3ff, 0x81, 0xf4, r2, r3, 0x3, 0xa549}}}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(aegis256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x3, 0x40000) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f0000000240)={0x5c, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0x4, 'lc\x00', 0x14, 0x8, 0x9}, 0x2c) accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', r6}) mknodat(r5, &(0x7f0000000280)='./file0\x00', 0x48, 0x5e9) 15:43:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130"}, 0x2d) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x103d}, 0x2c) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x800) read$FUSE(r2, &(0x7f00000013c0), 0x1000) sched_getscheduler(r1) 15:43:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") fsetxattr(r1, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='}\x00', 0x2, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x3c9000) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:01 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='system,$wlan1!bdev.!\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) [ 456.716767] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 456.716767] program syz-executor5 not setting count and/or reply_len properly 15:43:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x801) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 15:43:01 executing program 6: unshare(0x24020400) r0 = memfd_create(&(0x7f0000000040)='/dev/dsp#\x00', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000140)={0xb0, 0x0, 0x3, [{0x6, 0x9, 0x5, 0x9, '(user'}, {0x4, 0x7f, 0x0, 0x1}, {0x2, 0x21d, 0xa, 0x100000001, '/dev/dsp#\x00'}, {0x1, 0x6, 0xa, 0x7fff, '/dev/dsp#\x00'}, {0x0, 0x4, 0x0, 0x100000001}]}, 0xb0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) [ 457.019206] FAULT_INJECTION: forcing a failure. [ 457.019206] name failslab, interval 1, probability 0, space 0, times 0 [ 457.030554] CPU: 0 PID: 23474 Comm: syz-executor7 Not tainted 4.18.0-rc5+ #28 [ 457.037860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.047249] Call Trace: [ 457.049877] dump_stack+0x185/0x1e0 [ 457.053514] should_fail+0x8a7/0xae0 [ 457.057242] __should_failslab+0x278/0x2a0 [ 457.061488] should_failslab+0x29/0x70 [ 457.065388] __kmalloc+0xcb/0x370 [ 457.068878] ? bio_alloc_bioset+0x54d/0xc90 [ 457.073231] ? bio_alloc_bioset+0x77/0xc90 [ 457.077488] bio_alloc_bioset+0x54d/0xc90 [ 457.081659] ? kmsan_set_origin_inline+0x6b/0x120 [ 457.086509] ? __msan_poison_alloca+0x183/0x220 [ 457.091185] ? blk_mq_alloc_request+0x1b3/0x2a0 [ 457.095871] bio_copy_kern+0x151/0x8a0 [ 457.099784] ? __msan_poison_alloca+0x183/0x220 [ 457.104464] ? sg_scsi_ioctl+0xea6/0x14c0 [ 457.108623] blk_rq_map_kern+0x380/0x7f0 [ 457.112721] sg_scsi_ioctl+0xea6/0x14c0 [ 457.116729] sg_ioctl+0x3a1e/0x4ea0 [ 457.120404] ? do_vfs_ioctl+0x16a/0x2740 [ 457.124666] ? __x64_sys_ioctl+0x280/0x320 [ 457.128922] ? sg_poll+0x630/0x630 [ 457.132469] do_vfs_ioctl+0xdef/0x2740 [ 457.136369] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 457.141740] ? __fget_light+0x6e6/0x760 [ 457.145753] ? security_file_ioctl+0x92/0x200 [ 457.150279] __x64_sys_ioctl+0x280/0x320 [ 457.154384] ? ksys_ioctl+0x260/0x260 [ 457.158203] do_syscall_64+0x15b/0x230 [ 457.162102] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 457.167292] RIP: 0033:0x455ab9 [ 457.170470] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.189928] RSP: 002b:00007fdb3b64dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.197651] RAX: ffffffffffffffda RBX: 00007fdb3b64e6d4 RCX: 0000000000455ab9 [ 457.204920] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000014 [ 457.212206] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 457.219476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 457.226756] R13: 00000000004be54e R14: 00000000004cd1c8 R15: 0000000000000001 15:43:02 executing program 7 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)="1546d577873c1e9870d4864e6593c32624a7663e5d7ee51c517c4b3ce8afb517453ce1236616a20d25b0b3e244e86d02c6c6c020b526e33603840344b8d184882805248634b541b0c8ef348435f61d7879cec617ddf5b3") r1 = memfd_create(&(0x7f0000000000)='cgroupeth0trusted\x00', 0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x4000, 0x1}) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x845, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0x2}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xae0) 15:43:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:02 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x65c]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) 15:43:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) prctl$setmm(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:02 executing program 6: mq_unlink(&(0x7f0000000080)='nodevvmnet1}}\x00') r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0xb) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x4440) accept4(r0, &(0x7f0000000180)=@generic, &(0x7f0000000000)=0x80, 0x80000) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, &(0x7f00000000c0)={0x2, 0x4e21}, 0x10) 15:43:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:02 executing program 3: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x24801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x48}) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000100)=0xfb7) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYPTR], &(0x7f0000000000)={0x0, 0x0, [0x0, 0xfffffffffffffffd, 0xfffffffffffffffe]}) accept4(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000140)=0x80, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000180)={'\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) 15:43:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0x11, "ae2d50ab9c55bf7a6cd8f40034fa15ca88"}, @iv={0x90, 0x117, 0x2, 0x7c, "25ac829344613b7e9ebc2532dc4a911b5b47cb095ffc5bcebc1ae8f299181edcf597e36b08e72b433d70e4f0b6a2fad52b3378379c056e4398dbbedc6e1a8c7bbdbb5db3ff70810fa2bccf2d74721484c27eacae1657901c3220669908830f0240d7a6f85ee607a26202ad0ac4276dbb491b93a9e91b07287c4f7eef"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x800}], 0x148}, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x5, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/ip_tables_targets\x00') recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:02 executing program 6: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="2400000020000300075f0165ff72fc2281000000001000220ee1000c08000f0000001700", 0x24) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 15:43:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$FUSE_STATFS(r1, &(0x7f0000000000)={0x60, 0x0, 0x4, {{0x2, 0x7272, 0x7ff, 0x7b, 0x633b1d97, 0x36ef9462, 0x4, 0x200}}}, 0x60) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f00000000c0)={0x7}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 457.825398] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 457.825398] program syz-executor5 not setting count and/or reply_len properly 15:43:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x801) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 15:43:03 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1=0xe0000001, @broadcast=0xffffffff}, 0x8) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0xbdf]}) 15:43:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0xfffffffffffa, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8040, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001740)={0xa, 0x0, [{0x5000, 0x1000, &(0x7f00000002c0)=""/4096}, {0x5000, 0xf2, &(0x7f0000000180)=""/242}, {0x17001, 0x12, &(0x7f00000000c0)=""/18}, {0x104000, 0xf4, &(0x7f00000012c0)=""/244}, {0x104000, 0xaf, &(0x7f00000013c0)=""/175}, {0x1000, 0xa3, &(0x7f0000001480)=""/163}, {0xd000, 0xa3, &(0x7f0000001540)=""/163}, {0x0, 0x53, &(0x7f0000001600)=""/83}, {0x4, 0x8b, &(0x7f0000001680)=""/139}, {0xf000, 0x3c, &(0x7f0000000100)=""/60}]}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000040)=0x800) io_setup(0x1, &(0x7f00000018c0)=0x0) io_submit(r4, 0x3, &(0x7f0000001c00)=[&(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f0000001900)="3e128362eaba793fada1fb26710d4bfa2e98c6a67704d845fa56d2474bcf4c211a8c9ba264b4aefdcad9ff9c71eb02ec37ea8e6e60c23ec2d27e1a747da2f9b2e187e308f819286314ad37ac3a883075a03ee7ac8eee313bf3e13deb493230ed95582c5b9181ac648ffc1828eed8f35a312061b9dc05d67585182afe1030", 0x7e, 0x8, 0x0, 0x0, r3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f00000019c0)="4e12f6ce3d3fa7148c2f95ce6b55cf67827eaa80edb0e1e699ed1ea3b57164bb8cd507d41c534e52820f09833b576da88e92af9b7d3dbe2dab9568f727a2f3c839b670de0b771eeeff3260c71c92a691feac216f850d1173d8c32131a2514ea77de72f72d1f9b6fd4016ad09948e6c6e47d1512a1c6b9e50c7076717a7e81e6fbaef769030aaa7", 0x87, 0x400, 0x0, 0x0, r3}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0xb, 0x5, r0, &(0x7f0000001ac0)="d6b73fb30cd43c6c830dbefc4c25cb018ae64ee19c172b09eb264cdf78118909f82dcdf5bcdab0e4a4233b19b0aaa80ae1a72692d912fedf56bd2458771644144dc82b4cf8e598a3fcae3db3afe0f8895c3bcded23096ddf1c3350df8c9253f6885139d30b33f7a342da73cd59299ad115a1cbc866604da48a2e1cf9c63733a57de6f95084af3204eface7c7d203486496a386b5d9d87aae7498879c9878ae0a699ba397446f89530b0414bdb6409408ddad664075f784af2b0d1351015d37777d756c34728606bbc49c", 0xca, 0x4a, 0x0, 0x0, r0}]) 15:43:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xb6, 0x40) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000100)={0x3ff, 0x2, 0x6, 0x80000001}, 0x10) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:03 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x9, 0x1}) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x4001, 0x8, 0x800000001, 0x1, 0x0, {}, [@typed={0x8, 0x0, @uid}]}, 0x1c}, 0x1}, 0x0) [ 458.239358] Unknown ioctl 8705 [ 458.298128] Unknown ioctl 8705 [ 458.432310] FAULT_INJECTION: forcing a failure. [ 458.432310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 458.444318] CPU: 1 PID: 23543 Comm: syz-executor7 Not tainted 4.18.0-rc5+ #28 [ 458.451629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.461006] Call Trace: [ 458.463633] dump_stack+0x185/0x1e0 [ 458.467270] ? __alloc_pages_nodemask+0x622/0x6320 [ 458.472212] should_fail+0x8a7/0xae0 [ 458.475948] __alloc_pages_nodemask+0x622/0x6320 [ 458.480719] ? __msan_poison_alloca+0x183/0x220 [ 458.485405] ? kmsan_set_origin_inline+0x6b/0x120 [ 458.490257] ? __msan_poison_alloca+0x183/0x220 [ 458.494938] ? __kmalloc+0x117/0x370 [ 458.498683] ? trace_kmalloc+0xb3/0x2e0 [ 458.502687] ? trace_kmalloc+0xc6/0x2e0 [ 458.506685] ? kmsan_set_origin+0x9e/0x160 [ 458.510945] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 458.516406] alloc_pages_current+0x6b1/0x970 [ 458.520829] bio_copy_kern+0x2f6/0x8a0 [ 458.524733] blk_rq_map_kern+0x380/0x7f0 [ 458.528832] sg_scsi_ioctl+0xea6/0x14c0 [ 458.532830] sg_ioctl+0x3a1e/0x4ea0 [ 458.536506] ? do_vfs_ioctl+0x16a/0x2740 [ 458.540761] ? __x64_sys_ioctl+0x280/0x320 [ 458.545093] ? sg_poll+0x630/0x630 [ 458.548647] do_vfs_ioctl+0xdef/0x2740 [ 458.552545] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 458.557912] ? __fget_light+0x6e6/0x760 [ 458.561927] ? security_file_ioctl+0x92/0x200 [ 458.566470] __x64_sys_ioctl+0x280/0x320 [ 458.570566] ? ksys_ioctl+0x260/0x260 [ 458.574393] do_syscall_64+0x15b/0x230 [ 458.578296] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 458.583485] RIP: 0033:0x455ab9 [ 458.586664] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.606115] RSP: 002b:00007fdb3b64dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.613836] RAX: ffffffffffffffda RBX: 00007fdb3b64e6d4 RCX: 0000000000455ab9 [ 458.621119] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000014 [ 458.628388] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 458.635659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 458.642929] R13: 00000000004be54e R14: 00000000004cd1c8 R15: 0000000000000002 15:43:03 executing program 7 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:03 executing program 3: r0 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0xe5e]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x88b5}, @val={0x1, 0x80, 0x9, 0xfffffffeffffffff, 0x1, 0xc07}, @x25={0x2, 0x8, 0xf1, "4dddd9884a095e95f5ff0d1a45e17595d1816352dbefc6cde6793dcd8901e7a746ccc35bd848fd17cfa6cad60dc5d35748cc1965472ad5d92c9177d668fb8070585761ada41c8116c5c5bd619c955684cba743929ffcd004e6fea39254c3bf867a1fe7feb7e9076f65fd3aaa4b7562abcb"}}, 0x82) 15:43:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x46, 0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e22, @rand_addr=0xfffffffffffffbff}}, 0x4, 0x81}, &(0x7f00000001c0)=0x90) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000063fc9000000050000008c0100000400000000b5928fbd0065750ede823b45a90f876e6d0cd4e191a1f989377007009523b12ed909205c7333bb937dee28d4b2921ea4c8fa062041c421ed425291540dc38b518cdf6282f179ae62096413183e692d538fd052b835cebb98b7559414d05501b53517cdf5276294339315"], 0x7f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000002000)={0x41cb, 0xffffffffffffffff}) 15:43:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3ff, 0x0) sysfs$3(0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r3}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa5f) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 15:43:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:03 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:04 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYRES16], &(0x7f00000000c0)={0x0, 0x1, [0x4000, 0x891, 0x0, 0x296]}) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x80500) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) [ 458.991761] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 458.991761] program syz-executor5 not setting count and/or reply_len properly 15:43:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x3, 0x2, 0x6}) r4 = getpgid(0xffffffffffffffff) kcmp(r3, r4, 0x0, r2, r1) 15:43:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x24040) write$FUSE_BMAP(r2, &(0x7f0000000400)={0x18, 0x0, 0x1, {0x5}}, 0x18) write$P9_RRENAME(r2, &(0x7f0000000640)={0x7, 0x15, 0x2}, 0x7) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x200) pwrite64(r0, &(0x7f0000000300)="4921557c8ec7855deed8532cfd4e30eea875a5aea36d8319dcfd9c12194f7840190f934c8f15a7ed2ff9f4c16cb3160903fbd2a00222f8418e4c9df7daa9e36c541bdb6dae3cb5daf8d8a9f477d814854f66d44d223edc5aa95c900fa5b27197e8fb5cd66756d92fe810d69a0e626568d604d61b2f397c731c6e18f22c18dea5475180164484eb52c74fdac61f2401ff389dcde9bd3481b4e5127b5238d4c883091160c0c8b5664a59fdd1007f92ad341417229cac48826a1f850322ff80e29bd17cd51842c34320ac2f0e31d6ac7e358bbc343db453da98fe9686cad5342027585b956c5be5dc", 0xe7, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000100)={0x1, {0x77359400}, 0x81, 0xba9}) sysinfo(&(0x7f0000000240)=""/132) dup2(r1, r0) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)=""/18, 0x12}], 0x4, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x801) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) 15:43:04 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:04 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r0, &(0x7f00000027c0)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000001380)=""/231, 0xe7}, {&(0x7f0000001480)=""/178, 0xb2}], 0x6, &(0x7f00000015c0)=""/70, 0x46, 0x1}, 0x8}, {{&(0x7f0000001640)=@un=@abs, 0x80, &(0x7f0000000240)=[{&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2, &(0x7f0000002780)=""/2, 0x2, 0x3ff}, 0x80}], 0x2, 0x10000, &(0x7f0000002840)={0x0, 0x1c9c380}) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa60) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000000)) 15:43:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:04 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007f00000100000000fffbffff00000000e000000100000000ac14140000000000"], &(0x7f0000000000)) 15:43:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpid() r3 = getpid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000140)={r4, r0, 0x101}) getpid() [ 459.591225] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 459.591225] program syz-executor5 not setting count and/or reply_len properly [ 459.741292] FAULT_INJECTION: forcing a failure. [ 459.741292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.753160] CPU: 0 PID: 23608 Comm: syz-executor7 Not tainted 4.18.0-rc5+ #28 [ 459.760457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.769906] Call Trace: [ 459.772500] dump_stack+0x185/0x1e0 [ 459.776127] should_fail+0x8a7/0xae0 [ 459.779843] __alloc_pages_nodemask+0x622/0x6320 [ 459.784606] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 459.790816] ? get_page_from_freelist+0xb01f/0xbb50 [ 459.795827] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 459.801190] ? task_kmsan_context_state+0x6b/0x120 [ 459.806130] ? __module_address+0x6a/0x600 [ 459.810357] ? task_kmsan_context_state+0x6b/0x120 [ 459.815289] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 459.820647] kmsan_internal_alloc_meta_for_pages+0x9f/0x730 [ 459.826353] ? __save_stack_trace+0xa45/0xca0 [ 459.830846] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 459.836209] ? kmsan_set_origin_inline+0x6b/0x120 [ 459.841048] ? __alloc_pages_nodemask+0xb24/0x6320 [ 459.845974] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 459.851329] kmsan_alloc_page+0x80/0xe0 [ 459.855297] __alloc_pages_nodemask+0x105b/0x6320 [ 459.860132] ? __msan_poison_alloca+0x183/0x220 [ 459.864792] ? kmsan_set_origin_inline+0x6b/0x120 [ 459.869627] ? __msan_poison_alloca+0x183/0x220 [ 459.874288] ? __kmalloc+0x117/0x370 [ 459.877995] ? trace_kmalloc+0xb3/0x2e0 [ 459.881967] ? trace_kmalloc+0xc6/0x2e0 [ 459.885942] ? rtnetlink_init+0x80/0xe10 [ 459.890015] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 459.895464] alloc_pages_current+0x6b1/0x970 [ 459.899872] bio_copy_kern+0x2f6/0x8a0 [ 459.903761] blk_rq_map_kern+0x380/0x7f0 [ 459.907823] sg_scsi_ioctl+0xea6/0x14c0 [ 459.911802] sg_ioctl+0x3a1e/0x4ea0 [ 459.915449] ? do_vfs_ioctl+0x16a/0x2740 [ 459.919500] ? __x64_sys_ioctl+0x280/0x320 [ 459.923727] ? sg_poll+0x630/0x630 [ 459.927272] do_vfs_ioctl+0xdef/0x2740 [ 459.931154] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 459.936516] ? __fget_light+0x6e6/0x760 [ 459.940487] ? security_file_ioctl+0x92/0x200 [ 459.944975] __x64_sys_ioctl+0x280/0x320 [ 459.949040] ? ksys_ioctl+0x260/0x260 [ 459.952834] do_syscall_64+0x15b/0x230 [ 459.956730] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 459.961908] RIP: 0033:0x455ab9 [ 459.965082] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 459.984414] RSP: 002b:00007fdb3b64dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.992215] RAX: ffffffffffffffda RBX: 00007fdb3b64e6d4 RCX: 0000000000455ab9 [ 459.999473] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000014 [ 460.006904] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 460.014184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 460.021441] R13: 00000000004be54e R14: 00000000004cd1c8 R15: 0000000000000003 15:43:05 executing program 7 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:05 executing program 6: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/sequencer2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x121001) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65300a9cdc7bc9842c01800000000000002e5b040cb0ecf7b368cf3cc27cf8f66a38a7460127ac570ad932f9634b"], 0x36) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000c80)="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", 0x1000, 0x4000, &(0x7f0000000080)={0x11, 0x1d, r2, 0x1, 0x100000000, 0x6}, 0x14) socket$netlink(0x10, 0x3, 0x1) 15:43:05 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000040)=""/86) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x1c1540) 15:43:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x801) 15:43:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) 15:43:05 executing program 3: syz_emit_ethernet(0xa0, &(0x7f0000000140)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}, [], {@mpls_mc={0x8848, {[{0x8, 0xfff, 0x12000000000000, 0x5}, {0x3b70, 0xa8e0, 0xf0b, 0x100}, {0x0, 0x5, 0xfffffffffffffffa, 0x40}, {0x6, 0x2, 0x796bfabc}, {0x4e, 0x6, 0x6, 0x3}, {0x4, 0x2, 0x80000000, 0x100000000}, {0x795, 0x7, 0x4, 0x2}, {0x4640, 0xebe9, 0x6, 0x6}, {0x5bf7, 0x2, 0x9, 0xffffffff}], @llc={@snap={0xab, 0x1, "6d7f", "614fe0", 0x8863, "90282c7f5998e883f93778e53caed3e02f7de8f3091fc0ae5869b30aa7aea690cd60346835afa5c68fba8aa00b792f132a054dae62659de8dd5c00aad6e8314e00dedf315f2adf2b33b5cd8035ba74953aaabc073443773a85ce374d4464aea68fc1c3888f"}}}}}}, &(0x7f0000000000)) 15:43:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100), 0x81}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 460.459292] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 460.459292] program syz-executor5 not setting count and/or reply_len properly 15:43:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:05 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0xfffffffffffffffd, [0xc1, 0x0, 0x0, 0x4001]}) 15:43:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:05 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80080, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xfffffffffffffffa, 0x1, 0x10001, 0x7f, 0x3f, 0x9, 0x0, 0x40, 0x6, 0x0, 0x100000000, 0x4}) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa60) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) [ 460.900548] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 460.900548] program syz-executor5 not setting count and/or reply_len properly [ 461.211712] FAULT_INJECTION: forcing a failure. [ 461.211712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.223580] CPU: 1 PID: 23672 Comm: syz-executor7 Not tainted 4.18.0-rc5+ #28 [ 461.230862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.240217] Call Trace: [ 461.242792] dump_stack+0x185/0x1e0 [ 461.246403] should_fail+0x8a7/0xae0 [ 461.250107] __alloc_pages_nodemask+0x622/0x6320 [ 461.254853] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 461.260286] ? get_page_from_freelist+0xb01f/0xbb50 [ 461.265284] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 461.270637] ? task_kmsan_context_state+0x6b/0x120 [ 461.275559] kmsan_internal_alloc_meta_for_pages+0x10b/0x730 [ 461.281343] ? __save_stack_trace+0xa45/0xca0 [ 461.285874] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 461.291224] ? kmsan_set_origin_inline+0x6b/0x120 [ 461.296060] ? __alloc_pages_nodemask+0xb24/0x6320 [ 461.300973] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 461.306322] kmsan_alloc_page+0x80/0xe0 [ 461.310283] __alloc_pages_nodemask+0x105b/0x6320 [ 461.315111] ? __msan_poison_alloca+0x183/0x220 [ 461.319763] ? kmsan_set_origin_inline+0x6b/0x120 [ 461.324584] ? __msan_poison_alloca+0x183/0x220 [ 461.329232] ? __kmalloc+0x117/0x370 [ 461.332928] ? trace_kmalloc+0xb3/0x2e0 [ 461.336887] ? trace_kmalloc+0xc6/0x2e0 [ 461.340882] ? rtnetlink_init+0x80/0xe10 [ 461.344935] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 461.350374] alloc_pages_current+0x6b1/0x970 [ 461.354773] bio_copy_kern+0x2f6/0x8a0 [ 461.358663] blk_rq_map_kern+0x380/0x7f0 [ 461.362712] sg_scsi_ioctl+0xea6/0x14c0 [ 461.366682] sg_ioctl+0x3a1e/0x4ea0 [ 461.370311] ? do_vfs_ioctl+0x16a/0x2740 [ 461.374358] ? __x64_sys_ioctl+0x280/0x320 [ 461.378584] ? sg_poll+0x630/0x630 [ 461.382105] do_vfs_ioctl+0xdef/0x2740 [ 461.385976] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 461.391325] ? __fget_light+0x6e6/0x760 [ 461.395287] ? security_file_ioctl+0x92/0x200 [ 461.399766] __x64_sys_ioctl+0x280/0x320 [ 461.403812] ? ksys_ioctl+0x260/0x260 [ 461.407591] do_syscall_64+0x15b/0x230 [ 461.411463] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 461.416633] RIP: 0033:0x455ab9 [ 461.419801] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.438972] RSP: 002b:00007fdb3b64dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.446665] RAX: ffffffffffffffda RBX: 00007fdb3b64e6d4 RCX: 0000000000455ab9 [ 461.453915] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000014 [ 461.461173] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 461.468425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 461.475684] R13: 00000000004be54e R14: 00000000004cd1c8 R15: 0000000000000004 15:43:06 executing program 7 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={r3, 0xed9}, &(0x7f0000000180)=0x8) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:06 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c0000000000000000e3007f00000100000004ffffffff00000000e000000100000000ac14140000000000269e6b731dcb9911f98cac01b6d42d946fc505cce147c78a79e6673bc18a269a60225a18f8925b43de50da3040053f92b4783897bd62e432"], &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') write$P9_RWALK(r0, &(0x7f0000000080)={0x30, 0x6f, 0x2, {0x3, [{0xc, 0x0, 0x1}, {0x0, 0x3}, {0xc2, 0x1, 0x7}]}}, 0x30) 15:43:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept(r1, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) getpeername$netlink(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) 15:43:06 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1, 0x13, "af60e07bf737b90a3b883fa3e0de626ea9418a"}, &(0x7f0000000140)=0x1b) 15:43:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) [ 461.758084] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 461.758084] program syz-executor5 not setting count and/or reply_len properly 15:43:06 executing program 3: 15:43:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10880, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0xffffffffffffffa4) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980)="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", 0xfffffd24) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) socketpair$inet(0x2, 0x80800, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x23c4, 0x1}, &(0x7f0000000140)=0xc) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b00)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) r5 = socket(0x1d, 0xb, 0x8) recvmsg$kcm(r5, &(0x7f00000008c0)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/62, 0x3e}], 0x5, &(0x7f00000007c0)=""/253, 0xfd, 0x8001}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r3, 0x55, "3ed2cd892a22f4c9c59aa2b880bf9088482a6cec46cfe285eef4865534da9519e05b0109257e59aa43cb7a7e74db5f136f83017db8537e6e7bdb2f0e0b042537a09fbd1a020e222c661c1926d54fbff1d34da0d9af"}, &(0x7f0000000180)=0x5d) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) unshare(0x400) close(r1) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = dup2(r3, r3) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x0, &(0x7f0000000580)) read(r2, &(0x7f0000000100)=""/223, 0xdf) io_submit(r5, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080), 0x121}]) 15:43:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:07 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl(r0, 0x3, &(0x7f0000000200)="b251fedc149a14bc71abb091ba11a98016e435fd0c8d1b1a382d19da6feae4061ecae1b680b99fb20d687ddc61015647cc8022a96223040b49179cc7883e0cbd520eae7a7bbb8e1211d0b493794c39ab7c7a587d1e69c6b4826139df1a270ca7a920b9f71af184efd755db1ecb48c31fe31f84e5ad76e00fb7f1eb9b57df1ade5f74a33e497443be1ac823cf45aeb7e7d5e4457b729dc9bccb33625f640e429141212b7f4a7ab9fb67ff4b1bb0322a0f2b5d41") syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:43:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0xff, 0x340) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = memfd_create(&(0x7f0000000000)='wlan0eth1\x00', 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1b, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="ad01f9c3e5e382397bcf090365e53cc9c38539b2d9cf2c7b972f6ac2033be132e3e9e93549d055393488c1b75eec9cd1d8da303f779343fb29cab20200654c7eb02cbd59668cff14e093b38915a3b5efbdcb0641069d58c0ab7056934ce0c63e12055ce3a43df07a3cdfa3978f7a9b0ce214ed68bd7a7f911d0e958eb43f34c06e24034ac7ff1d5e945ebea7a93938439d26360fcfcc66dd03abc94e20daa81f08a584beeafc7d95f577ecf2ce0c9ab48a11fde7c921978aa91ee008733855b7", 0xc0, 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 462.248591] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 462.248591] program syz-executor5 not setting count and/or reply_len properly [ 462.538323] FAULT_INJECTION: forcing a failure. [ 462.538323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 462.550403] CPU: 1 PID: 23732 Comm: syz-executor7 Not tainted 4.18.0-rc5+ #28 [ 462.557704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.567077] Call Trace: [ 462.569706] dump_stack+0x185/0x1e0 [ 462.573359] should_fail+0x8a7/0xae0 [ 462.577089] __alloc_pages_nodemask+0x622/0x6320 [ 462.581862] ? task_kmsan_context_state+0x6b/0x120 [ 462.587002] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 462.592380] ? vmalloc_to_page+0x50b/0x630 [ 462.596631] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 462.602092] ? update_cfs_rq_load_avg+0xe4a/0x1aa0 [ 462.607043] ? kmsan_set_origin_inline+0x6b/0x120 [ 462.611917] ? __msan_poison_alloca+0x183/0x220 [ 462.616634] ? alloc_pages_vma+0x113/0x1830 [ 462.620967] alloc_pages_vma+0x1591/0x1830 [ 462.625226] do_huge_pmd_anonymous_page+0xc45/0x2870 [ 462.630384] ? kmsan_set_origin_inline+0x6b/0x120 [ 462.635277] handle_mm_fault+0x47a4/0x85e0 [ 462.639518] ? kmsan_set_origin+0x9e/0x160 [ 462.643800] __do_page_fault+0xa76/0x1810 [ 462.648002] do_page_fault+0x98/0xd0 [ 462.651736] page_fault+0x1e/0x30 [ 462.655200] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 462.660815] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 462.680277] RSP: 0018:ffff88011002fa88 EFLAGS: 00010203 [ 462.685662] RAX: ffffffff8413270b RBX: 0000000020000000 RCX: 0000000000000007 [ 462.692952] RDX: 0000000000000007 RSI: ffff8800aaf73600 RDI: 0000000020000088 [ 462.700234] RBP: ffff88011002faf0 R08: 0000000000000000 R09: 0000000000000000 [ 462.707525] R10: 0000000000000000 R11: ffffffff8134ca10 R12: 0000000000000000 [ 462.714815] R13: ffff88011002fa90 R14: 0000000000000000 R15: ffff8800b4408900 [ 462.722135] ? pick_next_task_idle+0x220/0x220 [ 462.726730] ? _copy_to_user+0xbb/0x180 [ 462.730741] ? _copy_to_user+0xed/0x180 [ 462.734748] sg_scsi_ioctl+0x12b4/0x14c0 [ 462.739273] sg_ioctl+0x3a1e/0x4ea0 [ 462.742947] ? do_vfs_ioctl+0x16a/0x2740 [ 462.747047] ? __x64_sys_ioctl+0x280/0x320 [ 462.751292] ? sg_poll+0x630/0x630 [ 462.754839] do_vfs_ioctl+0xdef/0x2740 [ 462.758758] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 462.764130] ? __fget_light+0x6e6/0x760 [ 462.768147] ? security_file_ioctl+0x92/0x200 [ 462.772682] __x64_sys_ioctl+0x280/0x320 [ 462.776801] ? ksys_ioctl+0x260/0x260 [ 462.780624] do_syscall_64+0x15b/0x230 [ 462.784530] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 462.789722] RIP: 0033:0x455ab9 [ 462.792908] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.812402] RSP: 002b:00007fdb3b64dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.820125] RAX: ffffffffffffffda RBX: 00007fdb3b64e6d4 RCX: 0000000000455ab9 [ 462.827396] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 0000000000000014 [ 462.834669] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 462.841950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 462.849233] R13: 00000000004be54e R14: 00000000004cd1c8 R15: 0000000000000005 15:43:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8}, 0x10) 15:43:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001d40)={0x0, 0x0}, &(0x7f0000001d80)=0xffffffffffffff17) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000017c0)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001800)=0x0) sendmsg$netlink(r3, &(0x7f0000001d00)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x101}, 0xc, &(0x7f0000001c80)=[{&(0x7f00000002c0)={0x13d0, 0x25, 0x520, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x78, @fd=r0}, @typed={0x10, 0x5b, @str='/dev/loop#\x00'}, @nested={0x11b0, 0x1e, [@generic="6b4522847192bab8a56e5b40c1c14f0db4d89592bfc5baab7097e6953108155899b615cca7ca0e1e760b9e19333371a53fd3bd0d443fafb221714e75a4b9d9b65ce5ad7c8945025a74b20a3003f2b16331a6a882d1ca17296cb03ed9", @generic="4fe3ce55e991699f6768ff4fdd3570ad0601e5bb1799321b54e7f3dd57f3ea4f91623b794869402c93752d7a266aed24d16cdcfb6d953ab50b037bd9c9d72cc76ccff1f4321c37456a0aeb71b15bc2293000bb11fb743d39a4930f75ed264b3fc465944f61468b9a0f0d80226388d774354fe72a030db12e6f36c5600f74356b12f29fb6b83bcb8e320b5912364def9b9441a54d104e25d93863ed90a404774f3ae8e6a9dc1863493fa9de53d9d72af39a22", @typed={0x8, 0x34, @uid=r4}, @generic="25aaf674331c20480ad741d430e67f8fab05f0515af5874f7c03c6de745c7ec4a22c4c84f94c7fb41c4c1cb185b05f7f89aa4ed925dfc789697fb07812395b0be66ecc192a7c441b1fb30b0f8e3eac7cde4966a57a04acc0d9ae9e803dc45faf29adb660ca08cabfb165ce227f490fd71d7f6154e4517d7032ed422f013bb9143e73ee4ea0a110d9a7f92e49d29cbd813c12ed891391", @generic="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"]}, @nested={0x1d8, 0x32, [@typed={0x8, 0x65, @str='\x00'}, @generic="83e4f74dab609717d32f996d8e8cdc2372b5500d3b7e353870ebd6f72897d5fb64c960cb12b47beb127b0c29d4bb5b224cafdfb1e606f694e91c24496c173beafa0b6f41bccb56956a1600659ead45e01573a48c7a60b96bc92da1d43c942da35feeb5e643d9968842fe80846889c575672b1b3121e5c6a00a748e31ea47d11e5614be07d85fc090833c810d9bf4f9356d2c60368bd251d728d820d40118bfbdb282b1b25ae6b0ac6bf3696938d7260d77b09608dbf2b93ea0eee6c854ad39683cbd85c5a5ae9718b50871694f136e5a98e4d4e617b184", @typed={0xc, 0x56, @u64=0xfffffffffffff001}, @generic="41a5db59f16747a1baebd5e8960c1ddcbe50e1de97096740abe2bd858e265288d0ba1af7095de65315e273737436abb54ed1555d7cc7b73d9d42234c6c57cad7dd956303fd3799a9bcfe42dd9f8f6b6b0003b29f6e388967d11ebc30c37f103c1fbc82f8d73f77e40ccb040b8b81276563474d3d4fad1b6d7713d0b2141ec47496dea80b798bb617ef4be549d39a901b7f33029d1af57e5cd439840a7a7fc47dea167f788ff687418feaaa617e4283b406dbc5f61d71a65a30d2", @generic="863f7e84d9ee97c56eaec3413811cef0b8d2897dd2654e6cc387a99767575c1d4d123ca88c", @typed={0x8, 0xd, @pid=r5}]}, @typed={0x10, 0x6b, @str='/dev/loop#\x00'}, @typed={0x8, 0x49, @u32=0x800}, @typed={0x8, 0x1, @uid=r6}]}, 0x13d0}, {&(0x7f0000000240)={0x30, 0x34, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@generic, @typed={0x10, 0x29, @str=',@trusted\x00'}, @nested={0x10, 0x2b, [@typed={0xc, 0x21, @u64=0x4}]}]}, 0x30}, {&(0x7f0000001840)={0x338, 0x25, 0x0, 0x70bd2d, 0x25dfdbfd, "", [@generic="4d8faf4b8d063fe174ef8078bb5d99c5bfad0c28a807bef83d412d3c851f8b000e69e0a1348297b47af093b0d1a676b714ad99b56c7a723bfd8619febd4da61990506d20581683c468ce9d78287beb6578fbd009013bee14e12bb3c5c8883d23bd5787cad9779ef9a082cecc0283653b7214b6588acf626bb5dc4725b343ffbc5b2f92c482b7d64f4d5c90b2e04cf1b603e2913794fdadc611d889e75ca9921e2404bb79ea8b27ebc572a38dee164f8873a157f1e99f97144b2f68c1afdd148fc46454d55b11e52f01ff343ef7d4048b713c8cf8e9ce8b451e2ffaa052d984202fdaae0635f0e3e2", @generic="c3b95d49292e309ed3da8296e03d03d73f50cdeb9b4e58a328532d52a1d1b0bd12e0d1bba6b2246c45ae9104777b1eac7ebb98fd29302aae0fda4876f7", @typed={0x8, 0x90, @uid=r7}, @generic="6afe2dcf6f62c5dd05e64bc8648f0e7b80bde85d724f85f5947a030c9f55e4923e00ec49d202bce83b419e4a52079581e112b9776401a7be271b921d81ecd3120f0c1a6b136886fbdab46cb3197d45fe109dc9c4ae3d", @generic="5f649de269714eba6ff03eb9c7df3160ac47d0120d54a5d36d4e9368f8e0024a1f8b5f5a1f052f10ac1fed19611b4968120b93eba18e3d022d2749fd2b7a29406751cd88d1ec1e6e84c841b7bfe9edc3fde480e64c19c8078cae64a9b83578aeb0ed5780732d642acc9da15b027ba707dca43ff825790df6c33bd611c03df00533e1df8c6892b6309b9e6ccfaa", @typed={0x8, 0x46, @pid=r8}, @nested={0x30, 0x2, [@typed={0x14, 0x4c, @ipv6}, @typed={0x10, 0x5a, @str='&}proc/{\x00'}, @typed={0x8, 0x3d, @str='\x00'}]}, @generic="7520e20681851492e360ed1c165457dc870c90bcea5a2c0ec967122cf9d668fb0c8236dee6139b89c645af14b6a55996609f8bf74b9c017f38797cdd8437b82b86be6f0caed7749f70d1f8a36bf5b8a3aa5ac1c5d5e176355f63edd5bd4bdb2c95c26a3beeeaceb40d733ab32e5dbb77fc4e7b4fe2c4a755e172d3d5e3eda93ce770a7d2128b6b957bc4b3322bd7cfa09a8cef94bf5ccdeb7b7ab5eac6e0fbdd38b6242726794234bb10da9c32797dfd1cb06ad286c2b0d0ee78f1f0dad5c8ecb3b03d94e0fdc7275a474f26c2bc76fee597c088c10d70c78c24c2b5ce"]}, 0x338}, {&(0x7f0000001b80)={0xd8, 0x40, 0x300, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc8, 0x40, @binary="1a38390b743cefe0e45caf6601a27ab832e0827347c092e5fb8f6538df31d7b113545859de39c9d70afebcb4c37111445966d184e7399434094a205da3fff57089899ceec90a7c39c5c0795676d8c5048d90e92d16d4d29f6193104ac12b4794d8e5ee90a173cb73d198ff48e0ae40af39fe889778bcb0e43cbbbc1f14dfb8ec9d9c3498949b39b307449af00dfa7dfc77e5f9b928e3bd943476f65bfff4acf4c3cf08ecd995dcd0342ef306712357b26529a6697eb83c55c672e1cecba58156f0f5"}]}, 0xd8}], 0x4, &(0x7f0000001cc0)=[@rights={0x20, 0x1, 0x1, [r2, r0, r2, r1]}], 0x20, 0x8000}, 0x800) 15:43:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:07 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:43:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x4) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:07 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'security.', '^\x00'}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) socketpair$inet6(0xa, 0x6, 0x3, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x3f, 0xffffffffffffffff, 0x0) 15:43:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000003580)=0xfffffffffffff801, 0x4) r3 = socket(0x2, 0xa, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/124, 0x7c}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r3}) [ 463.062882] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 463.062882] program syz-executor5 not setting count and/or reply_len properly 15:43:08 executing program 3: syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@can={0xc, {{0x3, 0x7, 0x2, 0x7}, 0x7, 0x3, 0x0, 0x0, "b3e0f1f888d15f43"}}}}, &(0x7f0000000000)) 15:43:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='!posix_acl_access\x00', 0xfffffffffffffff9) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="a16b484c1b4c7eda241270cf7ab90f67c490a9268452ba1cd94a61406832320846efbdf514f13a7ddbd6fd91782c984e3107ccb61642545e49cade71a2680b0644696e978996490522fb9edd8d5f8e9dee7758de478aa222cd8d03f1e9f4b96f985752e731ef04f4b8f8b39fc4493a930cca168c26c3d5874fdc27d0668a95521dbfa0d603889f1c6c121078beeabf7021af7c072cd4ec856a8a20872989ed1aa0b6c0ba81d63a04684fc66b9a1b105b88c9db5f459d33", 0xb7, 0xfffffffffffffff9) r4 = add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000300)={r2, r3, r4}, &(0x7f0000000340)=""/152, 0x98, &(0x7f00000004c0)={&(0x7f0000000400)={'sha3-512-generic\x00'}, &(0x7f0000000440)="1bc886daba1d146c0fe2c77d053a3f362c5d6e1107f145faca49bad755881ed2ed1e58b3424bc3ec5afccfbf6c4aebb746ef330d23531d5df4aae6c1adc1d8729714033b6a51a9dd2d1813a6346c62969136300d4d5b5032e891c282a8fe0c160e962291d454f83c8a02ef74872e0fc39b4dee6b4d375d4b7738edce", 0x7c}) write$binfmt_elf64(r1, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x200, 0x1, 0x0, 0x9, 0x20, 0x3, 0x6, 0x3, 0xf, 0x40, 0x331, 0xb91, 0x4, 0x38, 0x2, 0x1, 0x1f, 0x2}, [{0x7, 0x1, 0x6, 0x676, 0x4, 0x7, 0xc5, 0x4}], "6ea1ffbdd53392015031dfc4239983606377e7b59b11e4f5dc81a5e8f8d36ba253c910fc9d3abd", [[], [], [], [], [], [], [], []]}, 0x89f) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:08 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x107c83, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000240)=""/211, &(0x7f0000000100)=0xd3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r2, 0x4) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:08 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) 15:43:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x41, 0x8000000000000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0x119980) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x6, 0x5, 0x10001}, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:08 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) socketpair(0x1, 0x80007, 0xc234, &(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x50002000}) getsockopt$inet_int(r1, 0x10d, 0xa0, &(0x7f0000000100), &(0x7f0000000080)=0x4) [ 463.512402] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 463.512402] program syz-executor5 not setting count and/or reply_len properly 15:43:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8}, 0x10) 15:43:08 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x3, 0x9}) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x8, 0x100000001, 0x20000001}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000240)={0x80000001, 0x2, 'client0\x00', 0xffffffff80000000, "f14eb49753bc8627", "4f8bcf632c2e74ccc7bde810ab9a3606df63675d44e755a245634c61be0fd72c", 0x3, 0x1}) 15:43:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:08 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x12000) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000100)=""/51, &(0x7f0000000140)=0x33) 15:43:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0xffff, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 463.999738] Unknown ioctl -1061399727 [ 464.035245] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 464.035245] program syz-executor5 not setting count and/or reply_len properly 15:43:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$getflags(r0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:09 executing program 6: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="2400000058001f0014b2f407000904000200071008000100ffffffff0800830000000000", 0x24) personality(0x4100001) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xc00000, 0x30, 0x8, 0xff}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x200}, &(0x7f00000000c0)=0x8) 15:43:09 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mq_timedsend(r0, &(0x7f0000000040)="7517f1b734bfddd7cfc906c4072dead5072b0e9d629e68fb4cdd1bbdb3e079e3a96c6994163cdeede08a2af398382f0f3ddade2f15d2e883d1ed687917a00ca88b7b93c99c5572b1ad81d9", 0x4b, 0xc079, &(0x7f0000000140)={0x77359400}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000400)=[0xee01]) r4 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001240)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001340)=0xe8) fstat(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001400)=0x0) getresuid(&(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=0x0) r9 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001500)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001540)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000001640)=0xe8) r12 = getgid() r13 = getpgid(0x0) fstat(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001700), &(0x7f0000001740)=0x0, &(0x7f0000001780)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000017c0)=0x0) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, &(0x7f0000001900)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001940)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001980)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000001a80)=0xe8) r21 = getgid() r22 = getpgid(0x0) stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = getegid() r25 = getpgrp(0xffffffffffffffff) r26 = getuid() r27 = getgid() r28 = openat$ppp(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/ppp\x00', 0x101080, 0x0) r29 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002700)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000002800)=0xe8) r31 = getegid() r32 = getpgrp(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) r34 = getgid() fcntl$getownex(r0, 0x10, &(0x7f00000028c0)={0x0, 0x0}) r36 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002900)={0x0, 0x0, 0x0}, &(0x7f0000002940)=0xc) r38 = getpgid(0xffffffffffffffff) getresuid(&(0x7f0000002980), &(0x7f00000029c0), &(0x7f0000002a00)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002a40)={0x0, 0x0, 0x0}, &(0x7f0000002a80)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002ac0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b00)={0x0, 0x0}, &(0x7f0000002b40)=0xc) getgroups(0x2, &(0x7f0000002b80)=[0xffffffffffffffff, 0xee00]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002bc0)=0x0) getresuid(&(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)=0x0) getresgid(&(0x7f0000002cc0)=0x0, &(0x7f0000002d00), &(0x7f0000002d40)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d80)={0x0}, &(0x7f0000002dc0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002e00)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000002f00)=0xe8) getgroups(0x1, &(0x7f0000002f40)=[0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003240)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003280)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000003380)=0xe8) getresgid(&(0x7f00000033c0)=0x0, &(0x7f0000003400), &(0x7f0000003440)) r53 = fcntl$getown(r0, 0x9) stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003540)='./file0\x00', &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003600)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003640)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@multicast1}}, &(0x7f0000003740)=0xe8) getresgid(&(0x7f0000003780), &(0x7f00000037c0), &(0x7f0000003800)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003840)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003880)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000003980)=0xe8) stat(&(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003a80)=0x0) r63 = getuid() r64 = getgid() r65 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003ac0)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000003bc0)=0xe8) r67 = getgid() sendmmsg$unix(r0, &(0x7f0000003d40)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)="e52f5ff7ad202212d07dc77172ebe2a57eaaaa4fe321aa3c9831605a1ff0df2c03f44363a8846fea9e", 0x29}, {&(0x7f0000000240)="aada80144cbc136fca1692a53f30f5ff894f950e24b784934941eb3d969d4003aaf5513eb5b9eab6599fa3044737fbb83c5c99e4abcf067657ed9d28a1658a4ca3ac040b0ef48644f83175", 0x4b}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="6dfb14d000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x8000}, {&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000540)="42e9db05645935a8b9419c2b0e7f7044243f27a66eab0a23a9f0c53554658f6a1200810ba02bc8d9032efd0816d59ffa1f3966d9ce608752f8b2c3928256a4157f5fce97e79ce30f2935ca29a1f24aa424df91036fd320b827cf28d55c1a49ff14c7d3d2027728b4d599e9dc55b99d3f9559a6e2ca6459e282dfce06a7349c04b50ed279fddd28c8223c9d050ab7bfa569c407e7d66c7e62c3eadf607e964bde52f6dd40bf390546444d57a8de3a71a4f146c905a4ad57b500ec12bda0b44545f2894b62a0b348e866337f39eee372", 0xcf}, {&(0x7f0000000640)="8187969c6156323d64df8e095426b506355d7e929761f34f7ba0cb155eb9b680e7e439ccdce410fc3c01fd1bfc88f84bd9937ec7c7fffbffae596f0729adafe61fcb3f3ee01e715fba67ed0f7d975877e037023dbe17998e81f633b2a1e85c8ed6da43280266e94db320565ec5bf052fcc6fee25447879092d71a16a521fabda878cb96ceec7f1ad8cd43325eed06662d8c00ae719408a4c3e0b06c33da574f3adff02e23f5207e3ea6cd15f27a606b9acfab28a55", 0xb5}, {&(0x7f0000000700)="ac1e3441b755b676cfd3dac1096f5995d713ad9e2b5d039b1abad89fc8968448779f0be503f4bf300db1ee8a61e24cd6c40cbfca93c0dfef4f9c95ad264ee9efe7614631ad80e0483935ecf4e70f9ee741b1dd59ba032f2f42254b9d2841a086283cee2f241779dd3a997e9f6ad02dff345326951d531373a0374084ddd0231b0cb4785e9600a757fec231801bf06964864b5205741238a1362a18fdb5e3d6ab64e93b0db5f4511f845729b7eeaf63f60e8e2c832bfa1bf65bdea2d58f174b36adb96cc22a026aad78b59cef18a4b3c5eb00765cab01226295b58cf112a297813349b8e2b29532f4a5897e2e", 0xec}, {&(0x7f0000000800)="3dea7b1274606b52a7b77474b89f2eaa195535e0f282a7fe21c53f1f86c81312a8d89f70b0b7975c6a35d59e6ac15eec7f83cba13d4f907502287babbe4873e84fac17a07567004df3d4f7e184f0018a96216fade8148331007549f57e601180316bceb668ee66498495570cafead10fd8c023dfb7e81179a999f34a0d2209a7a46471089c6cc56ff6cbd417d93dd86f17714c8bfb04d08ef805b9693ce431358624081f711912db4699e04a25d23464d8cf98058540e8e741ee23bdc0b45e0b16131044774562dca95755e2d6bc4e4fa3b372af5a42e2e4b09cdd40186eb273274872afb688beb3fbb6870c3364b718a0b3", 0xf2}, {&(0x7f0000000900)="707d8559b0088160f5cbd13114f63c9a37c85f4aeeaad5dc8cbbecce8bcb6b7145260254ae368d4fb8e0a1959367095637514766045191af0eab0d8c8bb20511111b09b708", 0x45}, {&(0x7f0000000980)="6257d7b026dd2d0f9fd4623d61db64013bb6a662b4729beb23a739a5a5c1e781f6e366305391790cdb7f483c2937b92243a808b6f26ddd8a03f820431dc0546831ceb85a2ba4afd4d17de2451515c354ccead5b98ef01c047ced9f6085a0047cc2a13a1f2445db7e0c558fc5b07e48a24f1663331a246e864e501f99f22480cfcd3e0ce1d24b1980765f3f44181684136f5be9f6ff923e4ffe739b5ddbb9e4f0d381408c7b4ed80698447796f55750d31ec4f53fd68f33fceb0d4d88", 0xbc}, {&(0x7f0000000a40)="f978b98d4f54207c26ffc6", 0xb}, {&(0x7f0000000a80)="90bdfbe733995eaaafa7dc79df77a8ecbcb1697201fe937a6b50c49a5998f571201d4b0a14302447f7edcb412075186253b1147d062e9f2750c05277b27b6ebd1c2b199dfa49536a7a48a71077c88286f8705680ed7f696d989f9eeead5f83128c4d5c355c3996121149a9c75aff5d26465eef77d9a80cbc1a5eca0c4e3bba8f7cae5396f2d3f32ca4d9ae6f5012200e57483e906e13155dbe083b07bc79e4edec545998e501b3a3c4b646b5886621d8c0c625c73e20af28e36586f324ee3db7691e887c8c7eb7101cb9936ef9385e71b9edb20ace209164919b640346ec6b390b53a78e", 0xe4}, {&(0x7f0000000b80)="1159afa3ed9b63029c15068ffb11ba1002f52ac6fb98536e041f29ceffec449d8bc1b32cef152c850733cbd1ab1ea4f44ebcb5c5bbecbd57bc0ac96608bf55d7bae1ca0e033749b3dbd755d1ba294a2c9fd7bb1f353df0d7fed7154e679c893a92563ff074c6bc22f9f316cd349bfeef15259b8e3fe3abae90e2d0e61a2b5d793b553b236a0a5ff38685673a83ea84141a38a7a4b1b21d9150a58d4baf8026e7541949a611d01e5f56c34685f210f84aaba3528206be0f24755e6f33ac3fcc25b9771231a3262a63b389", 0xca}], 0x9, 0x0, 0x0, 0x20004010}, {&(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="651a504310f71c0e80d52972f1ad5b36113bc0696840761aa486cfb107d6b9f64af381b7687f338bcc", 0x29}], 0x1, 0x0, 0x0, 0x10}, {&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="81e6a38d9e124e4ecfb983aa6d94fe46708b8bc54c4ce256bf8d00de44bc48040bea31f31ae6834af992d618475d19e60acf8e2b", 0x34}, {&(0x7f0000000f00)="ad218d470f22deae4b533228fe24863d2148e055168ae676bc16738d070789b111b468345c99c4cd77071e5b539b4c933a591b2af0f4a6a500bec3a35464a7a3b345981aa95b122572e5d12836f4a357a2c8b6aec60ea4da9b1dc34c8c1d72ef6022ed594cb425ebfa937d8691ab6dcec5b49abf35925216b01f5086ae763fd6efe3981525dc792d9f1e8952ee2ef6bbf16f59f017a344c4e55d914bb1ac8b2e28bf65c4a087dbebe930b97a608472ecc4601f1beb17b4522e8974e16421782018443d250440c9e7c5aa07d2c8", 0xcd}, {&(0x7f0000001000)="28eb4c15be0ffa569b96435970235bf6bc9acadb4e7193c626286d3fa8e9fc7e39ffec25e01f6470df214b4af7566aff6d8d1145c3a430c8ea4ab54a0d6ba33101c8bfdc9d49044ca4a9e3a6a12d1e4e553d", 0x52}, {&(0x7f0000001080)="7de1d83d1366d142f9953ad25b5d2f595c83194f8a8864c576185e64b39cf9aef3e5d2bfb5a93707777e2bba785ddc8fc4b98117325bb0d6a9260e0af2be3e52f0411d4d954f62dae64580333f24fb21dc6f7250b32bde3e2c16737c54e8f01114fb8bce7580bb7e440c33de7a5ad968ad305d831ede523b1ba293bc416a7296414531ecead5b57cf1a275f3", 0x8c}, {&(0x7f0000001140)="38b8b06f44da5df2a840deefbef4a599042c45d56229e5f655b4d794eeb3265cf3", 0x21}, {&(0x7f0000001180)="8de7362017183b", 0x7}], 0x6, &(0x7f0000001b80)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}], 0x128}, {&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001d40)="46ea5e0920215c4fea0c8808990108", 0xf}, {&(0x7f0000001d80)="6553330e9204649530d4f0702ed18a5c8cb95933", 0x14}, {&(0x7f0000001dc0)="d72779da0546db624ed4c5a30af508f9e30715d63ea16b293d77e186b901246fa02b3afa056ff2eb2209d259df955018be606eb8b7490a0e3a357a48ae0a22aef58bbc867b0b6a2f9ffc4241f003d7672292bd746870892597f1f65502ef242fa867", 0x62}, {&(0x7f0000001e40)="df329beea62589cc667f5b38a3ee7595a9997f45cb3d1b86a1d7fedcbdaba7f7e3d98ba56169a0d2f8435931b5d3167a8ee7c17338d5f3c12776886da3333cd9452c2e06f31c028939c71d7641b83bfadbeebc851bc02a8f744de9b397c6bdc82c80c052f02b16a3b15cf8ffd5c857db063bbcddff622b346d4fb7ad932075dea6da59a1801a38a99c5c11627a9d7f5bebe28047894154894e54eb0176b5485bb32f9c454507b175aa6b47", 0xab}, {&(0x7f0000001f00)="a59df995838ae8962c4e1f7c72a238576725f3297abd0ebcf9b94bf94f4269a08d160faf81609461151af4919745c05d98be6061f728f9cd2eda134cdb50f7111e71b2db2fe3ff1d53229f35c30b654f59b2d58ca37f0b4b2c3b9e8859ec0ba5bc0ffa5219a81a92d745b858deb6e0bb72750526574f42d34e8b068d64b5d546159d3f80ae570fc78a1466845c26220763918031eaec6041a28bcc28472499edb8cf160410775dd224b9a69600d745c5aef596d137bd7a67a275dcad32a6247a6d5d4c5c7b762a85341214393ee1032c05a1f48f0dd05fcff8cac61f91ee9d46c382fb6c7faf274ecc45734831c4", 0xee}, {&(0x7f0000002000)="0ea72b1edbc36d16bb8648157ed26135b67d03a5edc163a94cbe5f79c56e50612074d13ef457339c6ebe0d127184ab7bdb5d29a3a4eccc54a757c36c1aac9253ad151ea9b18a6fa9c6694d03239caa558e6dafd08fc9b35659e83446113e271e8af976f9b79232d4e2f62c953dbdef6c6430f076f8ccbc832cb3f59facc88c37dfb7146a4405cb24653024", 0x8b}], 0x6, 0x0, 0x0, 0x4000}, {&(0x7f0000002140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002440)=[{&(0x7f00000021c0)="4e963a11af13aa61039c184bebdef70b0acc046a5cc349b4c4d7f9f0ba10835137f78ebb4c76cc010964ae48a0fe1e835cf02026f1387a333b449f2f517d88b8832917b3ac0f64cf22644125e821d89325070b58926f96d7437f2fdc50800935c2baf13ca8fe91d1839cc8289b86a24451567e3a66a706", 0x77}, {&(0x7f0000002240)="098219da61df2e404bfb95fe316927f37eaa83663fb18ec0ef70bc71c54319b9fb7b0cfad25696c8a22c5cc91e18cbf0b90304fd456de68d51f41f7d7d262fd208000129f813b0fd4fb8a2ee25125f9ee920de6cd50eba08cf92a08ed02ccdbb848efa849f295e2202739f387615569257596a330689b63c78ad45e21669194def6695cbd966e13e5ac2bc9369550cfe898b24782a32b95261e31561a724c9d3b678482eebfb4b2daa01c875c212a36699649d70c55bb08cd57fe7a7581c891004b6c8f1ba90f5", 0xc7}, {&(0x7f0000002340)="48fedcd2f3eca8406af67f9351d64489b67c6981", 0x14}, {&(0x7f0000002380)="6c61e5ef7cf7e863a78c8c677eb476fa68c3b11ac8b0c1abc08ee2396141ec4aa099a0d8a0f859c7fdf8ec7e11ab6cb53a5ddbbad755c982a41df82d3c23acd6853fda26fa90c5e5a0d428ae9d75f148bbad8a89dc5aa14e608ec2bd4a6765db4eec2683b32594392c009a26e40a0835d7fd26dbc5970ece3746", 0x7a}, {&(0x7f0000002400)="74505ac9dda18f0d9fcf7f5b786749570edf324c428cc28351b83b971d3014e424e3f2f0b3bbfbfd57005a310effe4c7f17469162e6c98", 0x37}], 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="00000000216cb789d9603309e900000002000000", @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r28, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xd0, 0x1}, {&(0x7f0000002600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002680)="acf6e92ac7693bd262b46b2b4c02f9a24f4a2fb02e43f6af4fe241d6be7cb5b71d1edeb78cdea7fad98d2c385f0d4c", 0x2f}], 0x1, &(0x7f0000002f80)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @cred={0x20, 0x1, 0x2, r44, r45, r46}, @cred={0x20, 0x1, 0x2, r47, r48, r49}], 0x110}, {&(0x7f00000030c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003140)="c9bf309c30746cab3d6ad0d537ff243186fd8fce2236f287ccb753fa6518d3fb67b345ca001cfab0ab7987e864cf0cc0893651d662383a26931a5f3020b6e1ba2f35cb777a13ab70942fb5f77905528ccb9050f2eb8b2caca727d98119eeb4ba631d67de7c294cab3aa0892c1914ef560627696c1260188715b4fe8d22ae20861236fe137397c1300d99b499d2467517f7f6ae92fc06d7456818fdcfd03b731dd7fe13e81c28036c4d4d7b3a450b32591e0123c7e13aa39c65347b", 0xbb}], 0x1, &(0x7f0000003c00)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r50, @ANYRES32=r51, @ANYRES32=r52, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r53, @ANYRES32=r54, @ANYRES32=r55, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r56, @ANYRES32=r57, @ANYRES32=r58, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r59, @ANYRES32=r60, @ANYRES32=r61, @ANYBLOB="0000699129372607f9cfd5269fd4000000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r62, @ANYRES32=r63, @ANYRES32=r64, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r65, @ANYRES32=r66, @ANYRES32=r67, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x80}], 0x8, 0x4) 15:43:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000080002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000f492833417f75f7a688c2b00000008000000"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = dup2(r0, r0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:09 executing program 6: r0 = userfaultfd(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = getpgid(r1) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x0) r4 = getpgrp(r2) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)=r4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1}) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 15:43:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x6, 0x7fffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @dev}]}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000940)={'nat\x00', 0x0, 0x3, 0x4b, [], 0x1, &(0x7f0000000880)=[{}], &(0x7f00000008c0)=""/75}, &(0x7f00000009c0)=0x78) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 464.452251] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 464.452251] program syz-executor5 not setting count and/or reply_len properly 15:43:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x818e9c77f95274f4, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x20000, 0x0, 0x0, 0x5, 0x8000000000, @perf_bp={&(0x7f0000abe000)}, 0x80, 0x7, 0x2}, 0x0, 0x0, r2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x200) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000000c0)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x6, 0x4, 0x6, 0x2, 0x7fffffff, 0xfffffffffffffe01, 0x50000000000, 0x0, 0x1, 0x80000000}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8}, 0x10) 15:43:09 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:09 executing program 3: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)={0x8, 0x400}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:43:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000300)=ANY=[@ANYBLOB="80fd9ddda22e15474ecd0ac095000000020005660f0000000000000000000000000000000000000071cf08941221ec132ef9774a191bc5b9b3e8627f5029e201ec6cf6ff344bde5a44e59bce326deaae3e5c6019dc5eac6e3102f95b1206b3bf6073f703f5ea18488fcf16fe41d39005c487e657cebb9b28afefb2781ccfb62bf34b4e57b9a3bea666b2a65d882b2e23ec793948d0a709c7cc53872de01176de4d41b4c93c1c95bd89"], 0x1c}, 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x0, 0xb916, 0x1, 0x8, 0x5, 0xfff, 0x1, 0x7, 0x2, 0x4}, 0xb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x4c, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x401, @remote={0xfe, 0x80, [], 0xbb}, 0x101}]}, &(0x7f0000000180)=0x10) r4 = getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f00000026c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f00000003c0)={0x2294, 0x37, 0x110, 0x70bd2a, 0x25dfdbfe, {0xc}, [@generic="aedd20797405866466c35f0c32b7d3217df3e84e1ae8a9c4c6d81c0ff864eed6c0d000343dc0a507cb39ba012be56f4e72453060844863eef9cf023b44d0bad4f9c5a014c0ced975ad27b599d75393fa6e8841fa8a166cc2bd12544ad732e81d083d1a68396515fae043fa181458de75564af81ab9dc23298ddec275089b93fb9e6075d1329a32dbc7032b3ab7077b819c5c36", @nested={0x134, 0x4d, [@typed={0x8, 0x93, @ipv4=@loopback=0x7f000001}, @typed={0x8, 0x63, @pid=r4}, @typed={0x8, 0x80, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @typed={0x14, 0x75, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x104, 0x93, @binary="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"}]}, @generic="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", @generic="7f999014621193046e2e73ff60c97adf61cef8d9e3466babe3c5e08b094cb864cfd3144ab7db54933a", @generic="9d5265b4527105c73afde311c8b3155e502900a8ab4d82446896dfb49a3c589d6cf888610f4686e2a5741e915ed61729afcaa52acbbd1f7c9794062b310b431e2b2c6775674fe281f8af3a7fa402eae2f2f24e1b65a8cb21407d519c885c59e7f68d4a388904b6558987e75345f7f84808c4c052", @typed={0xc, 0x5, @u64=0xfffffffffffffff8}, @nested={0x1010, 0x2c, [@generic="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", @typed={0xc, 0xf, @u64=0x6}]}]}, 0x2294}, 0x1, 0x0, 0x0, 0x20004081}, 0x4008801) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x0, 0x4, 0x9, 0x7, 0x100}, &(0x7f0000000240)=0x14) 15:43:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x2000000008912, &(0x7f00000002c0)="4d09d420736f598975adb978e53b3699f1682aa4f88c07ae613e65fd3d31c229df9f2ed57ba008254eebe56ce2dd1e3db055f4da494946e4a98a5144931f88a6ad5f6f536fab2b8a08fd3a324d0000002b7700000067ff77fe0ca673041606b7c1bce48050e9e3184d4919c8891dbf0e947bfcbd328eb48cf42d7085e525a38a651ea4feada9bde4c73afd18db1aa400000000b19233266eb4d1328b5e2b384fb8c5a3943a1862a1a36cf5534f3adf1814de6d535475df4ef65669cd5553bf823990bd45db3b986d24a723e36acbda825baabdf9682f7b2abd49a569d6681ad31146f9b0d74346af9341baaf8583e3c7fef8f14057e348ee0d028c31fc3fc21b0a09cdb2b6c33ffe425295129b7373f5397b0bb655c2bff5e1ee7d55135efa0d2e2c94c90dcbdc38cb38159af11422c1bd92518088fe83fa89389c4e13999b6c65f7d5d83de8588a46059cf7b3b526ffad15e751a43c40ae7688bc0127e3b8af29fef3c09d67b4c35a42d8f14be4a9c3eb88f82c") r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x80}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x352}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0xf696, 0x8000}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000600)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f000001}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="632e93b6b6af3afd0a2a1fc873ab6be0e054879f12f33508fa4d91069562dacbf6adf6360597bc7892ee0243ffcf0f81589c5b041b50d7974663755b1230b325ce068eff01dfa333f98cecf55e42f4636a9679d300bd047ea71652bd0e8c7c5bc96fe908d7eba3d7e7f4cfb3fff43e6cb8fd11b8c807bc2ff2e9bcca73eb14fdd36ae07b7865f75a", 0x88}, {&(0x7f0000000180)="84ebffc79a761f344e43de1e1f215ba2f8d47461cdad331b809d861e3eba84551e066faf8b593fc7b94a9a00e1c6648138bafac56ea5716ccc2f789673a6c8f8b91b813c00d90312e519f8c570e2ec96a250d206470b8d43016d92134844141433aeb2841cd6eca6fe1ed6cd1caf01ae62d46bc552d09a06cfbc8c9ff39b08391f6846403a09d6ad485c40d36e49928627dcfa2160f8d50ec40d843796c06d18f290b43f20bf9331ab0f121f3b90a9029717f4f336f1405bcf2c3f95b0bff1fde1114164b55610e58cf7855bbe9ac4924c691ca8c8ca27b02d8c8492f02bed5be784496cb7b5aa82348c9c", 0xeb}, {&(0x7f0000000100)="05788b61", 0x4}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="30000000000000008400000001000000ff070400088000000200000002000000000000007f00000001000000", @ANYRES32=r3, @ANYBLOB="3000000000000000840000000100000000001f000a820000080000000000008007000000ffa6000001000100", @ANYRES32=r4, @ANYBLOB="3000000000000000840000000100000000100000088200000100000001000000080000000010000000000000", @ANYRES32=r5, @ANYBLOB="300002000000000000040000000900000002000000fcffffff0300000030a70000", @ANYRES32=r6], 0xc0}, 0x20000050) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 465.002574] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 465.002574] program syz-executor5 not setting count and/or reply_len properly 15:43:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x90000, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000040)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:10 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x4040) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:10 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac1414000000f4b29f0000"], &(0x7f0000000000)) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x8000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x400, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) write$cgroup_pid(r0, &(0x7f0000000200)=r1, 0x12) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x4) dup(r0) 15:43:10 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x80000001, 0xfffffffffffffffc, 0x9, 0x4, 0x8, 0x45]}, 0x10) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) getpeername$packet(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0x14) r2 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001240)={{{@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001, 0x4e22, 0x7, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x33, r1, r2}, {0x2, 0xa65a, 0xb890, 0x2, 0x9, 0x9a2c, 0xfff, 0x2}, {0x4, 0x71c, 0x8e54, 0x8}, 0x800, 0x6e6bb3, 0x2, 0x1, 0x3, 0x1}, {{@in=@rand_addr=0xfffffffffffff886, 0x4d6, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x34ff, 0x0, 0x3, 0x8, 0x1, 0xffff, 0x6}}, 0xe8) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x7, 0x2ec, &(0x7f00000000c0)="d2c2725e0e031ecd9f055e54b6e776e0ddf15da5fc45c8b42515d554bd663c4dd73793abc001df2717782d64b791bfa237b3197549fa9cfeb6d31fc7eea5348be0af344037032f2654f8980f06d80aac53a08e2783b4f497e1c368449da1ca9c832d88f5cdcbbe8bf56365a28208b99895f16432e23e2ea605e2a1ac72542e636f5e33c2e7", 0x0, 0x7, 0xb45, 0x0, 0x5, 0x400, 0x8, "1b69bf0e400c25b434ae509307a88fc8e1a2b8ad58a2ee1e22e02a9c96dad150babc1615e5612ed347a5da1942b07e1a1bb60fe6327eb536b6604d4488e789d4a60c702c1d1b960080545437b2689dd485a7bf22e959200237810a2175a9f6df39f29aa7042cda40988e0a7f3eaea29b601f0ededb3ac19ec50541620040424ced50d1a0f92013d43dbef50a01aeca24a95878561cad34a709dc7974a04a7cfd2649a4660f9a4e35f8486e8c90996b07cdd1c3ca25e5b93c76eb8eea830920f81352006b1f799543ecd230410029bad11590592970827ca05f0c516bbdb67730c35e5f67b52312626c32fadedb2bc0bc3164544bf17ed868443b05191933c8e739cb7b8f9e86631373cc1b9903206d93d131466c16c12a5abf35b583ce45a0268baf0f36ce0abff2b644fcfbc01bcc6beb7cda94425667162b433946016da2f55f76f6111f23cf140cdb65163710c953c8d1160d928112c94f89dd116709cdf2e76536fc9cd57669ea1dd2dab6b59269a11b53d600840962d138dfe433a308dc0665e2bdd3bc8486ced9df11c9a6bb26c998865569578cd36a20703987cd4bdc5a8f807b93f3e7fc0a2df7aff3429e760a1322ff0d5f2021f86ba77d90af660a0d2b2579b29bc5962ed4908a304cbe450ee9a6bdd25bc76d7b807df143df50d24942f510bb3024b35378819b6659b42d03e3254e0de9aff212a17332e10b5214b5ca745b23fb2b2c08d26388cd0dcba9aaa11018316822e741fcc2e965c2ab62f637d3c974cf5abf4c246798c1fdeca6092c5b828bfd6e2f50ea07e416ee0686da33c56a49db6d25cf502d9ced6f3661881d94fe13abddbd8fe8b7c8fa0cc0e5bd87df5719b83546779f1de4b9f6d2ae959f128f9e8bf4984a15b969b588064d25b83039372f585008ac512294b1be2393164c143c89f23ae61c1d68f8527a613339c4a470ff570c27bf5723a225a1d0841ab26ad5b4f61e7d144e6d58e922d868a4bb272ce79fb8b002eae52c324bc72a1c0900b373398b9b703691cb7298ab96df89a0dde530042b718b7fa00e03fa2bc29911beefd72e90cded21e5e356db77a74a35e95c1fa83b802e04cb4d1320e678949940dd38a21796bde692ee06defcab0d2f91c6ac0fb9723ec2121f94c0f35061434bf06fb9cb9d90254f392daf05699411a59d5fdb614bc8e30fd6aa37eb2f7eb6e92243b261d46947d0b556702d03ad328477be518aab81bbe9679f921604f4f5194413f47c2d22eb2a5a1d5d5ea4d6e19a5e7dabdd46107a8482f3f2c9004c73909e45839341f3539037a61d9a89286c380c9dfe154b335578c2a643334a46572582c8a79605d0bf2d6f178935ba174e3f4c1de13b4fef0522eb52c3f3bc7abcac364a71f18fe71d88340f522d0cdaddbc38f908647b820037869961431c34f2f86ab99b249caa134cebea5e89ab3d2c05a5ebe15b887ce063845960ef9aa75795097d1713e2febeb33258204b0cf2463506746776a721ee32503314c7a368df8a5833288f376381a163f2de03e9601c7370a4c3324d39f67e046730932bb7a2fb5590717cd57daaee62eb6001608aa2b2144e4c85c45d37549b5f01113d1bde9ba75eff4d4c94e67e94ca96c9e9cd68c573035f19e3c6e3e81601278aba2661de088dcd95e42a27688a08ce258f6b964ffdc414d4c1dee0c2c7992e3a2f873b1716c92de6cd142d6139a764cb12a1600f5ac94046b3ea8ab6ff1ead28484ab5d934e467f6f5b9a58d2838787c24f5b2eb0486521d42b27cce4758a2687a211667af73e02581e47b52b2e8cc9b08c0a5f24f76e15a7cbf4c38eebb6e793b1513e0fcc469f6aaf5d4c9855cc105abc2d43e35c12d1afec82af1fef9823d550ca6b96f9110d7ad38ec60cbfccaf3514346c5bb5d5f991bb6038fa55d1da09cfb1f0c4b9f35901f6f1edad5dfded8dd61a0fe1afdccf2aad949f70182d2d895facb80eab665e342abef255a795cac1e6cada548b618728b0ea6061355bde62a2d1959352dcffda909151d16c606901fcbccff3de4ee195ec83afe13c1f4fda44654b893af25e83d08ae961937c632e7610cb2d66754d86889fd9401cbbe68bf08baa4234e456e689e14e5d35d7c52ff29e41357dfc2ae076f3d27811a0278c997855031881a94109642b37564f32c90e65a2304ae882b58d65d3ef9f51b16e15fe528bbf60ce62b3bedbc5077f129908a555ffedd00b9e6af17c01b494f7d7f676e0a88a6b3bd021b515e0050268e1733c9deb377f58b59ad6f73f92d3fe628443bb07f5681fb442e03ee7a03e7c8dec900c4f72dfbbd0d00d3a23336cf797f35f6a97c3211aef0698c7b4f22cedecbdc2fd1f4512d0c0430de40596e41ff15fef706d870464fd50db00af8f158a74747a18afef95f1c36a0871984465a3147c1c62190af60c49708b69de973c2548847f86907df34e945755d49f61a48034dc6fdb411d6b5a06c4e08925f9794a73528ce2ea8826829344c872be6fbe837796107eda12574a7d92ed8c8304f4091e35fe78314455cdc72f158094ca49f22b4ccfe70ec31955640863896e55dc02eb8426e3ff1fc3dbfd1b6f1eddafda039734664894366d3f5728c3d40f893c6737331527390dbc4f56f7fea98b7a3b9a1b02e9a7951939d7770d400215bc6c847a7cd378b2760b0febb9166f1aae97c23def1aafc896124a5b2e2c959fef53b7a3b53742b6baa4d0f761a5a8b75d25f24ea71969f630429da45f191a93c236293435bc4b263370a6206d99d55681592f4a26653ed29338a7f8b557a5df9631e3892e8c0e01f5ca10b9de000b820bb4c584e54c7e3206cc37795359ab8c352c76770fb6b456a294841af13551be71d7ebfd54f81045b7780113249699df2ec8b0702456045d18f3ed26f132ceb89244de5d738187a323a2e9ae42088714113d68784c07fd4d74109fddf3d1b3961a4c57f3673e6918e366aa55ee59bc54a57509f62575abb680614db65b0b4be5bfb0c8f0bf88284fbab6fd58bb23360fdaad049870a519f27dabff54ecd13f91777dcaaa78df5f2823447dc3aa84db6689b120dad3351a8da891b0b55c9a2e5a24e72bbe1a95dfcd11e68502bc7795bdc9c607757b4504916598f8388b5648bd67c0a8ad77f0c4308e5334f9009c818594fde70bea32b4b1a24f0977f5ef7ad94c9dc9e6d88913d13310a91752a5c4fdbee9917347e26bb354e79c7a87376f4270552dc66670144b6b1791d4f5f1d4d0d3fc4c50776d97ffdbb94b7b2ba63eee34c1ed3c9c867f1f43254d5db25b1165e4c79d52ccfa21f5a6724740f426a7e8c8917244e827490aa8ce1764ce8cf7ad1f64bfba805a18f14f65f9ef2e51181c0328ec9006a44fbe0ddaded0a3d78e40d9b8cf0eff37c97ca5887e2c6e4bb80049ccd8416867a3ed0bc30ff7b8663f856d7a595ec16cde6eebff418922c9528b408d5855312bc950eae7f8e97930a9b7968c1e5ec341ceed89614d7cf165f31ff953d11a5f22da2ddb3d0005888d6c0519fc4b2570e0a34a4b9e3eee0f7fa7201d673bc62689fb4ad3fcaa27a49b7f6a2cf4317f2e1b4fde8604181acd0b6d1213b128489ca1d89bf5e28beb8391db317899895382a1a647bc1147ff7ecb585629f34662c5a6402b3883a200c2c175d510284b1bb8aa9874d953df1b6dbded1d2aaa4c82af3b3c28c1ddeb9aaaafa2dd153f18720b9c7dfbaf3cd9189a203b7974fb6214a2a09fc07950891e85c83046e4c3a910f61af168b1faf1c01362902095a816328076dafd1f8f26c034e55fc93db245245955b527fdaba103d97c0c59c1b57dc08d3a75c1c586552fe2ef1e08004a737ddadcd249b2389e53e4c51659685f8cdde6fb8189a476ba08a02765ddcd0dfc51bf791547c9da91fcd6b81ed372e496b3f4c018d68eb951e962eae630e13e321efb3107a3dc84a206c1c2e5a44158b25c150de861b50b16c48252b926d82b26a39da1434e24fe1b1731dc5f32f22136f14446d224aae10a588bf050fd54110f20957a67e26a320ba7e04daac262da1f23a4dc7bdb85727b31c122bb9c06cc2d94650aee81005e5862d209f2132243057ef21fd7e9133101cf1a7ef11f65c15be9823aa06b89b4dba4b4b4a67508d1f035a7652a348dff48b41b24d874e8330ad33ca27c816f56d02af6dcde286aa0072d4b92606de615007f90d1191bce817ffe1a962bc537cf7583810afb2120fcda8a122a8ae0148119322b7315f012375e7c05b078270222a318445827bfaa954f54b96356111ad9d25a53163d7c5ddc336810d33ef4d5c04284a2c57636be3993633ac481f28bd56e2b376b7a7c306fb7859de3fb61c30288083a8572b27aa94585c667cf1e8b34f39394add1793f3d46b7d1f7812dc2e9cf19c823206e548fd725aa90b53bef1469a0336fb7c7b6a4493d3ee4ab01ef9d9d383d2e34df4d3f04ca364da6d4639c49ec04ad3b6abcab968820a86793fa5b30809a72d52b02bc34118fc265d8ff2bb5ae763a99c69d53eda8d04fd9f3986d0aa661f841f32f34b5aa0e68db3e6f4af17ada99b9f357832202c9c99e0f9acf3daa9fdc4a9e1730a612aeaa669525b0ddfb5bb141eff4da0dc09503833cdb16412ca4bb93bb982869eef2e0ad87b638f2d80da4216571efc998ba7e8b43cccbddabc66f700f31db9cc0929694f48b3af02563c0cd767131b77e300d0e343b2a2952f04dc4e2cbbd3dae712f6d9fe87d0b283fa0633fb076faf4fedbbf88e91d21ca4bb381445dc5f14b87eace1fd724c33204be5401ac869ec266b23491b0911b3b631913f92078f05e4b2746500cf6622f9af6450cfa63d2a26b798bdbc28ea37bb853e03d9bf3aceadef2cd127504b3bc70fb60293c01ecd99bf7b4d01afad3a5ec10fd0c90bc7782855c1b5f76039ecbc92d9448cf4cc92ab4fcf9eb8cb7bdc384ccbcec365d02242291a2a140ac9e481990ebb05f631a285d4f15e059f16592bff2365ac1e50fa535cf48013c23da6c518d308beea2fba6816f620cee9663e9a4ebcc9c15791d053b1adc7168cd4b7e8cef7b3e90a1c9a766ce6bccc3f0be81206ef1fe635bbbc998cafd22c5445c54d6063de71a2a39435ee9467fc28b955f8067500dc50fcbb46844fcda52cb7784d0893fef10912e022eb6ef93d029a965f77ae5123b4ff9d996f8b4c0772ecc42a6ed855468d7fe8e423699096294fe9cb50da8cfb63ff9a90a2a981710c612482989cd1f7ae2ab8ed250208ffc442e7bef9159b4b90327876a512393e4749b071593d8b3a0e9e9b677205dfafd034bcbfa0dfcd177c4070f785bd16d87d693b260c0376997cce522cc8a25ad0c712d38baeebbee7c8384a9fab318051c0f9fdbcd49c8c3aeaf9defe51fc2d06e36ca3c5493805fc0a45d0a1f6cadd157d0013e836edf242f478bd6ced92a67409677db4ad77d826f46c47851cd53818d91ec0a42725ee6c8712c50dd2c07c8490671011069b1d60f84092c23fc710ca8b5639303b1ccd1ed8ea88622e398b99630673de4509871baad61c0a8b3bb7aced04f1d26b4f16653e2be29d6a53cefeaa081bc906bd05111a6766fbdafd681866dcd3e3d183d6936a134e874c9a3813432806dfbbade2ae56c2e3379a07ff7a4bf86233a43a3064b57d59e49aef2e424ffa00e20299d092c914824edcd806af15f22e6b23f0ae7454a7662890437a3ec2b525c16410dc36d34b7b425999caab1b03dae242b17e7e0596d1091af9332ffefb58becca4659702632133c007f38e40d029359f8dc4fac99d"}) 15:43:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, @rand_addr}, &(0x7f00000001c0)=0x10, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in=@multicast1}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) pread64(r2, &(0x7f00000000c0)=""/179, 0xb3, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 465.309917] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 465.309917] program syz-executor5 not setting count and/or reply_len properly 15:43:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, &(0x7f0000000180)=0x40000, r1, &(0x7f0000000200), 0x4, 0xd) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:10 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c000000000001286c96f7dac9fcfb14110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007f0a4ef81c000000ffffffff00000000e000000100000000ac1414000000000016d016b79b1d9355d62ea2081243983c4037552c277be4d5a2f70b8c5311cbfe32c606d685b528355e79dd31d4d9150f7bd3a0252876759ebeeba0"], &(0x7f0000000000)) getresuid(&(0x7f0000000100), &(0x7f0000000080), &(0x7f00000000c0)) exit(0x6) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7f8c, 0x208000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/222) 15:43:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000100)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r3 = accept$alg(r2, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000100)=0x25, 0x4) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 15:43:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:10 executing program 6: unshare(0x10000000) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) clone(0x0, &(0x7f0000000100)="9eca9339a0b6c4c2fc8fc9156ca5413b399476dd866c0012cc8046632b9d2d266543838ae2e86ec311799802804f4507a2369e4df7cd9cd12def1e5c54c6bb069a80b71e2f5ab7ab65fc7661ea0b644d6154a073967513fa43b22675df47d29d6e162bcbb6695880ebce9cb9af1fe7fe7ecb685e2861e115797a3e1daff6bd5ee709972fc9c1108a54815c164a4527e84771dc1da00b84e70bec", &(0x7f0000008000), &(0x7f0000000000), &(0x7f0000000040)="5b9d0f46f0801b3ee5a0a94add") prctl$intptr(0x24, 0xf91) 15:43:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4040) setns(r1, 0xc000000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x100000000, 0x101000) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000340)=""/4096, &(0x7f0000000100)=0x1000) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000014c0)=ANY=[@ANYRES32=r2, @ANYBLOB="3f00000009fca90a0dd616693990a1c87de5023923253631315df1245e02839c5baee15a0ad5d242a17b9bbd5d393fb6a400334228e5940e118e3a904ae2c4d77070a8893d8f44772719d78de68882d17dde5ba8d25d690eb36f4b3a23a10c36e14179e1f657363d02291ab47230a7cab40b460a1d573779889cf0b17bc5041ae75452837df572dced356bb7c2f82beb6e4687ee5125f5911917bb607e51f03cef8e571910d1e16436bf1527e1af592cb6b67767d32fbd5dafab5ad37f277322ffb6f9618d4a1c9809dad78756d1dde5c2c31ae39cdd47cb94e5d87eda9dd352493c3cff83c565a1816a1e86d3a35570bfc09274875027713b4619b624d33c2210930f59"]) 15:43:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) fcntl$setsig(r1, 0xa, 0x3) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 466.061131] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 466.061131] program syz-executor5 not setting count and/or reply_len properly 15:43:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x236801) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000002780)={@multicast1, @multicast2, 0x0}, &(0x7f00000027c0)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000002800)=r2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000440)=0xe8) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='\x00', 0x125}], 0x1, &(0x7f0000000180), 0x0, 0x200}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x90a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) write$P9_RAUTH(r1, &(0x7f0000000100)={0x14, 0x67, 0x2, {0xa8, 0x1, 0x4}}, 0x14) 15:43:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80080, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000040)=""/139, 0x8b}, &(0x7f0000000100), 0x11}, 0x20) [ 466.454804] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 466.454804] program syz-executor5 not setting count and/or reply_len properly 15:43:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x210200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r2}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000380)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={r3, 0x1, 0x6}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2000000000000600) ioctl$RTC_UIE_ON(r1, 0x7003) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000b223a8dc2f4b1b8ec2003f00000008040000"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 466.580028] sd 0:0:1:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 466.587423] sd 0:0:1:0: [sg_rq_end_io] Add. Sense: Invalid command operation code 15:43:11 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(0xffffffffffffffff, 0xffefffffffffff6f) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r0, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:11 executing program 3: syz_emit_ethernet(0x72, &(0x7f0000000240)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x8000, 0x80, 0x2}], {0x8100, 0x5, 0x6, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x84000) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x3f, 0x6, 0x8}, 0x200}) 15:43:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r1 = accept4(r0, &(0x7f0000000540)=@pppoe={0x0, 0x0, {0x0, @dev}}, &(0x7f00000005c0)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000600)=0x8, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x0) write$P9_RSTATFS(r3, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x3fdf, 0x85, 0x5, 0x8001, 0x3, 0x100000000, 0x8, 0x7fff, 0x773}}, 0x43) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000480)={0x10001, 0x0, 'client1\x00', 0xffffffff80000000, "0b3ba9bcb6e0cf73", "84b9d4c3ac0f9f649ff5075907b934cee2bae60d8a700bdc8a40d011152f3f6b", 0x1, 0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="681b6e726578c4de40ea1a85e54bbc7683d95c941f57e7c9682af753ac4b891cbb30928710c30fd2e4ceef849264e5d320c34c76ce4e63b1f080d55fcb8a8a9bddf3a4adbec1af60c2251e0877b559fe0d3b058e43aa459c451461506cf09c2d4898529392ce16c5f9c995dd6ac94a0c2e9c372134f363e9d5fb0b22c5a0e5825f39a58c893db78528ed243fbec3195217de6cdbadec41d8d73b6c8d5a", 0x9d) r4 = getpgid(0x0) syz_open_procfs$namespace(r4, &(0x7f0000000340)='ns/cgroup\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x9}}, 0x421d, 0x1, 0x1f, 0x2, 0x1}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000300)={r5, 0x800, 0xbd4, 0x3ff}, &(0x7f0000000380)=0x10) 15:43:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:11 executing program 6: futex(&(0x7f000053bffc), 0x400000085, 0x0, &(0x7f00008b5000)={0x0, 0x989680}, &(0x7f0000000000), 0xb0000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x620602, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x5b8, 0x190, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4, &(0x7f0000000140), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [0xffffff00, 0xffffff00, 0xff0000ff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00], 'tunl0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x3b, 0x8, 0x1, 0x38}, 0x0, 0x120, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {'ip6gre0\x00', {0x48, 0x20, 0x4, 0x9, 0x8, 0x1, 0x3, 0x80, 0x78}, 0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6ad, 0x7e0, 0x9, 0x0, 0x0, "146967ed46f2c6e02a185c6c0da504a4d3d28e5deac69b9ae84cc72b29fc5a805fa313da704ecb746fae63a6d655e820aa33376dde6517ecf5ec1b5dcbc2fcb2"}}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [0x0, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xff], 'bridge0\x00', 'teql0\x00', {}, {0xff}, 0x0, 0x6, 0x7, 0x4b}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0x5}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0x1000, 0x6, 0x3, 0x7, 0x7, 0x1, 0x4]}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x0, 0x5, 0x3, 0xffff, 0x20, 0x4, [@dev={0xfe, 0x80, [], 0x17}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @empty, @local={0xfe, 0x80, [], 0xaa}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @empty, @mcast2={0xff, 0x2, [], 0x1}], 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfffffffffffffffa, 0x2ad, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x618) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x7, {{0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}, 0x6}}}, 0x88) 15:43:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4008912, &(0x7f00000002c0)="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") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x4005) 15:43:11 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(0xffffffffffffffff, 0xffefffffffffff6f) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r0, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:12 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaa19db232deb23e8f44500005c8a07c8e40407b288c2bd740000000000019078ac1414bbac14341131049078000028024000000000f2abddccc0bc7e5bf528f51800000000320000ac1414aaac141400082c000000c8d61e06bff201ff295d478deee301000000000000007f000001000000000100000000000000000000000000000000"], &(0x7f0000000000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000100)="a195ee78717d35ebfe39ef2b9758051c3e97a77b68036cfdb2e113966f89aac375dcffc0bd5c28db4403c9fdaaf31d529daa0df450d1e2c1d67ed2c905e64aca0b3df1191ca71d000e52f0feba5a5920561103e2995a2a192a3b6a63d927849cf37b", 0x62, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffffffffff8, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, 0x1c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bridge_slave_1\x00', 0x3}) 15:43:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x102) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000100)=0x8, 0x4) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x64000400) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000100)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000002c0)=""/4096) [ 467.176189] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 467.176189] program syz-executor5 not setting count and/or reply_len properly 15:43:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025ccc3d6d345f8f762071") r2 = socket$kcm(0x29, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r3 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000040)={0x29, 0x6, 0x0, {0x6, 0x1}}, 0x29) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x80000080044d76, &(0x7f0000003ff8)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000080)=""/72, &(0x7f0000000100)=0x48) 15:43:12 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x2}) 15:43:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:12 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(0xffffffffffffffff, 0xffefffffffffff6f) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r0, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1'}, 0x34000) [ 467.431446] IPVS: ftp: loaded support on port[0] = 21 [ 467.557082] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 467.557082] program syz-executor5 not setting count and/or reply_len properly 15:43:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9c0000000000, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) 15:43:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) finit_module(r0, &(0x7f00000000c0)='skcipher\x00', 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000280)="d525e4a1344d7e0a88064c89bd2cc04fff5a2ede40179790f47460c82c1c6f78fa4558b0f5cd7814e813bfe83bb0f38101f65fceaf5c7535ebdd245246e3bd617a3b6ccba2b4ed648067c3e56dd4b0125afd941536e62b62b542e1f9d460cb68a83252137ec056de8e32932d923a285c9216c61a78bc2144d3b05786ea46759bbdb90ede5de44c175739b38d9d211065a97a37f7e499c895c97cf3d94f010e56d6f412e3b9ff0961c327faea6d97878d75e400d72b57acba5d899b94b7e233fcfed9f169980fba6e1b7fe4576fee6dd516f89bfc19d9dc2f61d1b7684d6cec8fdb692e8002ef") ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={{0x4, 0x0, 0x1, 0xffff, 0x26, 0x4}, 0x8, 0x4, 0x40, 0x7, 0xff, "595934e9f068e64748a909a076a3d7df729e5bc62e55a13fc2a6bf91d57b7daca037235f82e94ba525800910b7153ed17104f12d062643a429135a0e007c08cc7e8dee277098ec9c9c963be97acb78a32f18168ccbe0b4e6cfcd4b4266e0610396c9a99dc8b25149aafbe7b59850da712d0f3e70877bfa9fcd9fd44d97f45797"}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) write$FUSE_STATFS(r1, &(0x7f0000000380)={0x60, 0x0, 0x1, {{0xfff, 0x1, 0x7, 0x100000000, 0x1000000000000000, 0x1}}}, 0x60) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:12 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) sendmsg$can_raw(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x1d, r2}, 0x10, &(0x7f00000004c0)={&(0x7f0000000480)=@can={{0x2, 0x7, 0xb4ef, 0x5}, 0x6, 0x1, 0x0, 0x0, "93a450caf5fd22a0"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40840) fsetxattr(r0, &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000040)='security.capability\x00', 0x14, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000280)={0xa0, 0x0, 0x3, {{0x3, 0x0, 0x2, 0x76a, 0x3, 0xd2c7, {0x3, 0x8, 0x4, 0x6, 0xad, 0x2, 0xeea, 0x49, 0x400, 0x5, 0x80000001, r4, r5, 0x5, 0x200}}, {0x0, 0x1}}}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x1, 0x1000, 0x0, 0x0, 0x4}) 15:43:12 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 467.716191] IPVS: ftp: loaded support on port[0] = 21 15:43:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) socket$inet6(0xa, 0xb, 0x10001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = dup(r1) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x9, 0x101, 0x10000, 0x1b}, 0x8) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000180)={0x214, 0x2, 0x0, [{0x6, 0x5, 0x12, 0x100000000, 0x100000000, 0x100000001, 0x800}, {0x0, 0x1, 0x7, 0x3, 0xc5, 0x10000, 0x7}]}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x10100, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/61, 0x9}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 15:43:13 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xfffffffffffffffc]}) 15:43:13 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x141000, 0x1) ioctl(r0, 0x4, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000600)={@rand_addr, @remote}, &(0x7f0000000640)=0xc) r2 = memfd_create(&(0x7f0000000100)='security\x00', 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, [0x2, 0x7fff, 0x9, 0x1, 0x7fffffff, 0x100, 0x8, 0xffffffff, 0x20, 0x2, 0x542, 0x1f, 0x2, 0x5, 0x9]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000003c0)=r3, 0x4) r4 = socket(0xa, 0x3, 0x7) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000040)="6eb611d1ac8961d3d046f338cdff67caf8340f3052c7ad7c4b8510a95860c5062568617e6dfca7c04158825bcaeb1c003b39f8de418983e03205354cd8deb8f4675b00b634c823682a2ff0b791416496bd90b58ffb640f1efb709f4b737b259d5bfe5bab09caacc5280ae2f85c686cad56e70f02f2a4fcf7c84da72c5de456437a9e775c6f6ff5560677aef17fa53f9d85fc2a734734afc195dbc18ce2fde9085d331ba1296cf8f0f2b45433a2f1a132e289739c0e94d683d66f764e") pselect6(0x40, &(0x7f0000000440)={0x3e, 0x6, 0x525, 0x4, 0x80, 0x0, 0x80000000, 0x20000}, &(0x7f0000000480)={0x3, 0x5, 0x5, 0x7f, 0x4, 0x2, 0x484, 0x7}, &(0x7f0000000680)={0xfff, 0xfffffffffffffff7, 0x3, 0x7, 0x9, 0x1, 0x0, 0x4}, &(0x7f0000000500)={0x0, 0x1c9c380}, &(0x7f0000000580)={&(0x7f0000000540)={0x1f}, 0x8}) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='ip6gretap0\x00', 0x10) sendmsg$nl_generic(r5, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001400070000000000000000000aff0007669527a616fcb27bd905000000af4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d74d5000000"], 0x48}, 0x1}, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f00000004c0)=""/52, &(0x7f00000006c0)=0x34) [ 468.195424] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 468.195424] program syz-executor5 not setting count and/or reply_len properly 15:43:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r2, r3/1000+30000}, {0x77359400}}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:13 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1ac) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0xc49, 0xfffffffffffffdc7) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'gretap0\x00', 0x5}) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:13 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110500000002320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000000000000000000000000000f0fd08fc5a38fa807ec168d745cda0d64257c3a229c467f8ab59f64b2de1d76854ae164d192c0e63a00202a38de7358b7e34abb959ccd242a981d3242637a9c30d3e3b6404325aa9a351dfa63554308114eee95d765a4e61f8188d191ddc2c99ed84015528416d5261ba6f62b5e7e4641321cc"], &(0x7f0000000000)) 15:43:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x430102, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x10000000c6, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 468.739775] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 468.739775] program syz-executor5 not setting count and/or reply_len properly 15:43:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xfffffffffffffffc, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x40, 0x48001) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000040)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:14 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 469.077713] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 469.077713] program syz-executor5 not setting count and/or reply_len properly 15:43:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:14 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xc00000, 0x200200) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x10001, 0x4) 15:43:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup(r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) kcmp(r2, r3, 0x7, r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @in6={0xa, 0x4e21, 0xfffffffffffffffa, @empty, 0x7}}}, 0x90) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8900, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)=r5) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r6 = shmget$private(0x0, 0x2000, 0xa0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000140)=""/63) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r7 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x8, 0x3ff}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) eventfd(0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 469.301315] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 469.301315] program syz-executor6 not setting count and/or reply_len properly 15:43:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:14 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, [0x4000000]}) 15:43:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3ff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2100, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000000c0)) [ 469.549840] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 469.549840] program syz-executor5 not setting count and/or reply_len properly 15:43:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x80) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/21) r1 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TIOCCONS(r0, 0x541d) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000300)}}, &(0x7f0000000100)) 15:43:14 executing program 2: rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xac74, 0x400000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x7, 0x8000, 0x401, 0x6, 0x0, 0x1000000000000, 0x900, 0x1, 0x8000, 0x8d, 0x80000000, 0x6, 0x1bd5eb90, 0x6, 0x4, 0x5, 0x7f, 0x9, 0x100000, 0x2, 0x5f, 0x1, 0x5, 0xff6a, 0x2, 0x80000000, 0xb5, 0x7fffffff, 0x3, 0xfd, 0x857, 0x100, 0x1ff, 0x4, 0xbf, 0x5, 0x0, 0x1, 0x0, @perf_config_ext={0x140, 0x81}, 0x404, 0x5, 0x7, 0x0, 0x7ff, 0x1, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x2) r4 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r5 = timerfd_create(0x1, 0x80000) r6 = eventfd2(0x1ff, 0x1) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x200000) poll(&(0x7f0000000300)=[{r0, 0x1040}, {r1}, {r3, 0x410}, {r4, 0x200}, {r5, 0x401}, {r6, 0x10}, {r7, 0x1000}, {r8, 0x450}, {r9}, {r10, 0x20}], 0xa, 0x400) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000400), &(0x7f0000000440)=0x4) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r12 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x5, 0x800) ioctl$SG_SET_DEBUG(r12, 0x227e, &(0x7f00000003c0)) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r13 = accept$alg(r11, 0x0, 0x0) sendmsg$alg(r13, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r13, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:14 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x100) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000680)=""/54) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x401, 0x20, [0x8, 0x3, 0x57e, 0x3, 0x6, 0xfffffffffffffbff, 0x5, 0x4]}) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000180)='..\\vboxnet1bdev\x00', &(0x7f0000000700)='%{ð0)\x00', &(0x7f0000000200)=',-\x00', &(0x7f0000000240)='\x00', &(0x7f00000006c0)="6d696d655f74797065776c616e311c2700", &(0x7f00000002c0)=',\x00', &(0x7f0000000300)='em0)\x00'], &(0x7f0000000600)=[&(0x7f0000000380)='vmnet1\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='+eth1wlan1-:\x00', &(0x7f0000000480)='%$nodevbdev-)\x00', &(0x7f00000004c0)='.#\x00', &(0x7f0000000500)='{procmime_typemime_typevboxnet1/\x00', &(0x7f0000000540)='-\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='\x00']) 15:43:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x9) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl(r0, 0x8, &(0x7f00000002c0)="025ce63d7620700000000032ae5fecbf3373a6808f223d64122da78ac9dc45546a1735680eddf4ed7d002f35589132d122ffde65da537921ea1001fefea49e1abb94613076c6d35f270881257cf51a4118f2f70729c98aec0b8e79508349b05511d092b838c955fa6c8322dae7cda9457237b68ae767f7c5438fe4c73df60923bcedf72b5cc161ffc24c79d3a2d357ebfd754c1e008526f3ee4a9bae253220a2ba375af96fd01b6e93eaafff22850d929e2435b2b35955cf0f5196042b1b6fa59e1a8dd7") mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x9, 0x80000001, 0xcf, 0xfff, 0x0, 0x8, 0x108, 0xa, 0xdb81, 0x5, 0x10000, 0x5c, 0x7fff, 0x1000, 0x0, 0x5, 0xfffffffffffffffe, 0x6, 0x7, 0x9, 0x2, 0x0, 0x100000000, 0x32be, 0x7f, 0x1, 0x15, 0x100, 0xf8000000, 0x2, 0x36, 0x100000001, 0x3f, 0xfffffffffffffffd, 0x10001, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x40, 0x10000, 0x7fff, 0x7, 0x7f, 0x0, 0x4}, r2, 0x2, 0xffffffffffffffff, 0x1) [ 470.033235] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 470.033235] program syz-executor5 not setting count and/or reply_len properly 15:43:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:15 executing program 6: r0 = socket$inet6(0xa, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x2, 0x1}}, 0x14) fcntl$addseals(r0, 0x409, 0xe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x1000000016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="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") fadvise64(r2, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) 15:43:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) fcntl$setstatus(r0, 0x4, 0x4800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:15 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x90800, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000080)={@empty, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x7}, 0xc) 15:43:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x41, 0x3f, 0x8, "96cfcf2858c8583d5654c08de5b795388a8b20cfa0fdb4e1d8a150cdc0e597283a8230390657c8dd47adca72ab52e7e2194988198cc82811e0290792b14c8066d0"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025c5adef92fd8c971c5f11cc83d6d345f8f762070481e15e277190b913586da2eb8f5c0f5d469bd940f866bad76692e701686d0451a628b8cc50e12c02911362044b07f62e6f207090700000000000000e87e5d6478c879ec9a87edd3b98a4f0d65570382b99612f27a08ba8790ce0585121ddae6ff0c55fe79a5386172bd2ae4699ce97b8a9445a2da5a21c8ef54dc2ef7327c5ce9f03f38bed855c1b0e53e1b23c7f0e7f573c57e0ec26753a38459698d853938d732b1b81bad0ec33546abeeb9935ab5e3908e810ec59ef228a529801af0") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa8) 15:43:15 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff7fff08004500005c0000000000019078ac1414bbac1414110504907800002805000000000000000000ac141400082c000000000000000000007f05c484e29b1ce6000001000000c00c52238026129d00e000000100000000ac1414000000000000000000000000"], &(0x7f0000000000)) 15:43:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x80, 0x50002) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:15 executing program 6: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x20800, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000240)=""/238) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r1, 0x3, &(0x7f0000000380)="7f99eb3ddf1e6021531ecfd38abe0fead22891fd9ec9215483f2130a2b846e1fdd62cbc4975b39e54282a361d28e3452c390b25447e0904d43af02748637b7d924d83a85b3049da46e2983d8333889ffd0dd5aef3d74a1ffe14dd4e66bb834c38768586bbc162bd48bb34d936ef5a727c65d804467f0a2237746a61b6bd14ab1dd82ec8c409803cdadd49d774a4498db4f100b4e5dd8f2e0f824c6bddbc2c42f3432a3c2a1ea4625ba0592a56a2b060877f8ac88d7e7120d943f5cb0dcbcbe93c697904bcffbd4e01bd2b578de90955c2c3dec4ac3149cc5d577a46e2aade110819e3a7eb2e4dcef1e99f2bbf9494ef2") r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r4, 0x8}}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 15:43:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:15 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:15 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = semget(0x1, 0x3, 0x600) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/69) 15:43:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x56) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:16 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00'], &(0x7f0000000080)=0x8) getsockname(r0, &(0x7f00000000c0)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f0000000000)=0x80) 15:43:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x1f, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) wait4(r2, 0x0, 0x1000000, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) [ 471.348414] sg_write: 2 callbacks suppressed [ 471.348440] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 471.348440] program syz-executor5 not setting count and/or reply_len properly 15:43:16 executing program 4: r0 = semget(0x2, 0x4, 0x100) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f00000001c0)=""/140) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') ioctl$KDMKTONE(r3, 0x4b30, 0x3) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180)=0x9, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) ptrace$cont(0x7, r4, 0xffff, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xa60) 15:43:16 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x0, @empty, 0x7a17}}}, 0x80) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:43:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x68, 0x6}, 0x0) 15:43:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000100)=0x5) 15:43:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 471.759307] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 471.759307] program syz-executor5 not setting count and/or reply_len properly 15:43:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:16 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff00007c0000000000019078ac1414bbac1414110504907800002892587a180240000000470000000000320000ac1414aaac14b0197ec5b589cae9000000ff07000000000000000000fffffffff2ff0000e000000100000000acc62e04af8b74098cf6ce2c65cea6e00cb3a87ab00df16b6210c2fcdfa0de7826af6198ee"], &(0x7f0000000000)) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x19, 0x6, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xa3, "332516c7a70b66942c3e21fc9fb345842d976f2e9c57b9d479de7aa8a5bb073a1c5ae9951fb87eaf788bf06d089082d5f220ddca6914a9af3bf50b81897775f6240967ed0238cf4cf093976048309d672678fbff73fd7af1bae3b109d35b5fbc2e206a3c422738c33395743aa31ae1666439b383e1b2f11546c4a02900af7b6adc866f0f2a6a8744b3ca7202602667cb5992e5e462157e9bb9d06eb8440012746cb0f1"}, &(0x7f0000000240)=0xab) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x400, 0x8, 0x0, 0x3, 0x10000, 0x4, 0x1, 0x81, r2}, &(0x7f00000002c0)=0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 15:43:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) accept$alg(r1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20044800) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) 15:43:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:17 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xcec8, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="f80c150acd6698423ecce3802558a055c270ac578c9904df789d7506f07907f712c17a436362f649d25f08ecb197ba011662663356b3299cc1b7059a73f70a1f4ee120273a9fa23b65718b2c469a01c0ea68c4189b0f239eabc3532edb676466bccaf357bc74ded35e8420ebda5d40da3516cb77c27b837525d5b46b097a09f3a973a43717ca0f6c8e4a8223edb78c6b51ebc9e00b41eef3d84c00157cd04403a49064f1625bcd9d442fc6507754b7afa966cfb6c5c73ac2e9", 0xb9}, {&(0x7f0000000140)="fe6416539679f5abd13ef0934941a8a669c993b58219be21f2fd50a69df8a23448ec9aa9925ab3b64ee89559b9a4480f09f26e15ddf95578f49e5a0e42277cfbff6c8b982edf0b7b58976f13858d6568253875c9c1b56db7e75a9f7a3d17af52da8cdc4920eeadad8c75edba57fd477000c5ff64da20a3bf190c85b6793ce56934701fb79864e126fd8f90", 0x8b}, {&(0x7f0000000200)="1e6518d729a74acdaf00356807cbece5ea67e61263fe74269924ee781c39b492c82f9c87666567354417b930cb5d73bf21326b8ba40e20c7428d81888ded4f0f2872692360b1a1cf512ab80b27baee86b23565eef4386869ed3e770a780e0e9cc776c44b5a15ac9414afdf", 0x6b}, {&(0x7f0000000280)="543cc5c10aeda2133b84ebe14d2870a00becf4c77c69f52a6a1ecb8f267e82b951fd28899e58832588267c19aa09f0eed231c270ae1a12d881f6d5cf46fe7963855b2e3148b639b6d47f967c34d42ad97a4a2ddc1937f448ba7d85d7f52040c272a0248cae1fcb8c4b8350c076ab3caaf7da3bd82d8ecab917abcdb318ab553ca9b54822e986ef1cc3ca8c607fd577be2822e0fc774f5e74b17027b7e831b30dca466c98ccc56eafe56142dac40b03cea00d2ab2cee80b6a04533696467c7a1120182c2f3e358c006e5c", 0xca}, {&(0x7f0000000380)="bf5a1d92c2a7461e291f1c235e103629a8c1d83cb78a11c72e0ddd1a6ad0efb17252f2abc9f553f73e61ac88f6f852d2b25613199badba5f1ba4a0b3bf7c695e07069b36a8289a4ae1f6c8ff5315b902adc4ebeb248011ca7ce7736f335dc83f335d964dc8bd8c720bc1463ab2f47868e38a1432ddc50a0e71c497e31d859b66333860d53022a05ef8992e8e6e8329fd4bea9af2143d34f167179b0b9c51f77a82c75f3155bce2cc3218e85f42cd9d0ee169a88c5094d3de0c757a6462a90580696694eb9663599131f2785e32a0c3e2d87473d2cc6a495cf776bbe90cdf4f323240c922204fd3d200f1fde478a716b091ac66a248de", 0xf6}], 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x145000, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000540)=0x5, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', r2}) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000700)={0x6, 0x3}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000740)={0x6, 0x4, 0x2}) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000780)=0x2) openat$vnet(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vhost-net\x00', 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000800)={0x78, 0x0, 0x8, [{0x6, 0x200, 0x3, 0x9, '{\'\\'}, {0x0, 0xffff, 0xa, 0x7f, '/dev/null\x00'}, {0x0, 0x56, 0x7, 0x8001, ',[user*'}]}, 0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x7, 0x2, 0xcf0f0000000, 0x9, 0x5}, &(0x7f0000000940)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000980)={r3, 0x7fff}, 0x8) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000a40)={{&(0x7f00000009c0)=""/15, 0xf}, &(0x7f0000000a00), 0x19}, 0x20) accept4$inet6(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f0000000ac0)=0x1c, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000b00)="753b4eb41de6a71244fceaa8facbc260aea3e9bbc9fe32b2d8f33b3c9365fa5db31f88a3786194eb80db36cb94a1f18673ecd190f9e7564400075b7209634cfad79212bab1f401b42144eaea4e468f47af228481ac77f5ee940df3069ed1fbd9a8247370dd29f911a051e12cabdeac40c5a11399ff80cc5c113a11a7af27f0d38297cecd7563f2a6147a8e52496ebbf051426bf1f065fd27cad22c043540c821764590016c81f69fac84dfb9fb3be6228c3b76fa17d007c667e351", 0xbb) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000bc0)=@assoc_value={r3, 0x399}, &(0x7f0000000c00)=0x8) set_thread_area(&(0x7f0000000c40)={0x5, 0xffffffffffffffff, 0x4000, 0x100000001, 0x401, 0x42e, 0x604d, 0x800, 0x8, 0x5}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000c80)={r4, 0x8a64, 0x10, 0x7, 0x5, 0x3}, &(0x7f0000000cc0)=0x14) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000d00)) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$RTC_AIE_OFF(r0, 0x7002) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000d40)={r5, 0x3}, 0xc) bind(r1, &(0x7f0000000d80)=@hci={0x1f, r2, 0x2}, 0x80) r6 = creat(&(0x7f0000000e00)='./file0\x00', 0x81) write$FUSE_GETXATTR(r6, &(0x7f0000000e40)={0x18, 0x0, 0x1, {0x8}}, 0x18) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000060}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r7, 0x1, 0x70bd25, 0x6, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdb51}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40001) socket$inet_icmp_raw(0x2, 0x3, 0x1) 15:43:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:17 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) 15:43:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x40002) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x10000) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 472.488549] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 472.488549] program syz-executor5 not setting count and/or reply_len properly 15:43:17 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000194b2382d39e48e8ce12415386d504ce"], &(0x7f0000000000)) 15:43:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") signalfd(r0, &(0x7f00000002c0)={0x5}, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x7, 0x8001, 0x24cf, 0x80, 0x0, 0x5, 0x80, 0x0, 0x854, 0xffff, 0x4, 0x0, 0x6, 0x3, 0x9, 0x5, 0x1000, 0x1fc0000000, 0x7, 0x1, 0x6, 0x3f, 0xff, 0x8, 0x2, 0x150, 0x100, 0x6, 0x1, 0x1, 0x84, 0x1000, 0xff, 0x0, 0x6, 0x3, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x400, 0x970c, 0x6, 0x7, 0x7, 0x0, 0x9}, r2, 0x7, r1, 0x1) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x6, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:17 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:17 executing program 6: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) 15:43:17 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffd8c9150e004500005c0000000000019078ac1414bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000"], &(0x7f0000000000)) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="4091e8d5a2e55de0e6329d5a870dee362d32d6a30b815e6bc0eb310dffa03c84b105371f49a7542c2a265d2ab27b36168bc59fa5ac8cf28be43f06e04e6f1fe54061", 0x42, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x401) 15:43:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x39}, @in={0x2, 0x4e20, @broadcast=0xffffffff}]}, &(0x7f0000000280)=0x10) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) socket$alg(0x26, 0x5, 0x0) 15:43:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7fffffff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) fdatasync(r0) write$binfmt_elf32(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46ff0a0000feffffff00000000000000000000000000000000380000000000ffff0000000000002000000000000000000000000000"], 0x38) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r3, &(0x7f0000000000)={0x8f, 0x9, "b8d983196439ad018b6ea2d74a2d77bbe63000313099515b8a3e5c662b4e97a33202437f880fc7934e017c5fbf0c3e4ef82e749b13cf285347a4c1e77c32ef73c8edeb8baa618bfb3df291d498cc78fd41c61f5dbe8aa028f693172bb78e07ea5a532f2288121e01e935e44ee7147d41f8d18b8dbbecb87374f45c182f18b91cb13fca61d424b1"}, 0x101100) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000180)={0x100000001, 0x20, 0x4, 0x3ff}, 0x10) 15:43:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="b2fdffff3f00000008000064"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 473.020782] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 473.020782] program syz-executor5 not setting count and/or reply_len properly 15:43:18 executing program 6: socket$inet6(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x80000000000002e, &(0x7f0000b56f40)=""/192, &(0x7f0000000000)=0xc0) 15:43:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fe9000/0x14000)=nil, 0x14000}, &(0x7f0000000140)=0x10) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) [ 473.128630] generic_make_request: Trying to write to read-only block-device loop0 (partno 0) 15:43:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfffffffffffffff9}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 473.218134] generic_make_request: Trying to write to read-only block-device loop0 (partno 0) 15:43:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0x1000, 0x7, 0x1, 'queue1\x00', 0x1}) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/82, 0x52) 15:43:18 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x801) accept$inet6(r0, 0x0, &(0x7f0000000180)) getsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x27, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_getoverrun(r1) prctl$void(0x1f) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 15:43:18 executing program 6: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$key(r0, &(0x7f0000f21000)={0x0, 0x0, &(0x7f0000f21000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4fee000000000000e10000000000008e2a4c6b0036d20f5fd81a3bba964d2edda8071adc91e7e02d3429893e4d251ee18f9f4dcca56189fadcc1fabe74214188766d67a341668a30bb92c7d032737732e43382c1e861d9cd46b8fdca1d1ec63fb49914d932991369bcf59391d7d28ec88f68a2b6c9b1aea7c81f1b2185"], 0x14}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x2c, "8ab47147c009768f410634b9a562f0c49ba58eb97fc11ea67c688f4ed769fa6adba3d0f1d29e3e08e09bf5a4"}, &(0x7f0000000040)=0x34) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x100000001}}, 0x20, 0x100000001, 0x0, 0x8001}, &(0x7f0000000180)=0x98) [ 473.479727] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 473.479727] program syz-executor5 not setting count and/or reply_len properly 15:43:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:18 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x101, 0x10100) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x7, 0xedca}) syz_emit_ethernet(0xfffffffffffffe9a, &(0x7f0000000180)=ANY=[@ANYBLOB="cbaaaaaaaaaaffffffffffff060000000000000000ac1414110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000f70000000000ac141400000000000000000000000000003d80aa6881a1400c4cadf96fcaa2d03e5f7bc3083f9e539fb889f8791cb5397a54ca6ffb0080"], &(0x7f0000000000)={0x0, 0x0, [0x2df, 0xe33]}) 15:43:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x2) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x8, 0x1d, 0x5, 0xe, 0x8, 0x2, 0x0, 0x63, 0xffffffffffffffff}) 15:43:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0x20000000000003) [ 473.935586] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 473.935586] program syz-executor5 not setting count and/or reply_len properly 15:43:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0xa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001c00)=[@op={0x18, 0x117, 0x3}, @iv={0x40, 0x117, 0x2, 0x28, "bfd433e684d479d1618f14b852830214631e05f0dcc25b56d65e56fd407467d24688608b5248c1d4"}, @assoc={0x18, 0x117, 0x4, 0x3133}, @assoc={0x18, 0x117, 0x4, 0x80000000000000}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x1c8, 0x1}, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0)='team\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @remote}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000440)={@remote, @empty, 0x0}, &(0x7f0000000480)=0xc) clock_gettime(0x0, &(0x7f0000000e00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000d40)=[{{&(0x7f00000004c0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/63, 0x3f}], 0x1, &(0x7f00000005c0)=""/218, 0xda, 0x8}, 0x3}, {{&(0x7f00000006c0)=@nl=@unspec, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/117, 0x75}], 0x1, &(0x7f0000000800)=""/255, 0xff, 0x9}, 0xffffffffffffffff}, {{&(0x7f0000000900)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000a80)=""/112, 0x70}, {&(0x7f0000000b00)=""/214, 0xd6}], 0x3, &(0x7f0000000c40)=""/240, 0xf0, 0x8}, 0x9}], 0x3, 0x40, &(0x7f0000000e40)={r8, r9+10000000}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x6, [0x37a, 0x9, 0x401, 0x9, 0x243, 0x2]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e80)={'syzkaller1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001200)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001240)={0x0, @local, @rand_addr}, &(0x7f0000001280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000014c0)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000012c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000015c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000001300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001740)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000013c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000001940)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001980)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000019c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000001ac0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001b40)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0x14) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f00000021c0)=ANY=[@ANYBLOB="34050000", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="c0000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="6002020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f616463617374000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400fbffffff08000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="380001009e4648576ca52532ab85d18dd5deebc6240001006e6f746966795f70656572735f696e74657276616c000000c20dfe43d5425147dfd1530000000000000000080003000300000008000400010001003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000200000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004008100000008000100", @ANYRES32=r16, @ANYBLOB="e80102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004004000000008000600", @ANYRES32=r21, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r22], 0x534}, 0x1, 0x0, 0x0, 0x4801}, 0x4004000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:19 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x100000000000002, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x1ffc, 0x7ff, 0x100}) 15:43:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)='\x00', r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x20, 0x6, 0x8, 0x2, 0x4c, 0xffffffffffffff00, 0xff, 0xff, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540)={r3, 0x1000, "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"}, &(0x7f0000000180)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000340)={r3, 0x3}, 0xc) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file0', [{0x20}, {0x20, 'big_key\x00'}, {0x20, '-'}, {0x20, 'U'}, {0x20, 'lo'}, {0x20, 'keyring\x00'}, {0x20}, {0x20, 'selfvmnet0]bdev:}mime_type'}, {0x20, "ff4075736572"}], 0xa, "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"}, 0x1048) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:43:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, 0xa, 0x1, 0x1d, "861e2791b8d695193d4ef96e28fe427d123dcea3ecbe3bf54101ce2011ac6ea95d5b997638821c36ceafa4c8622d1666c387bb38ad66911df5a76c6fa57c113e", "bce518d04868c69deafbfd8ef3798c15991d6e342a80f485c4fb00701760e252", [0x6, 0x3f]}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 474.419606] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 474.419606] program syz-executor5 not setting count and/or reply_len properly 15:43:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:19 executing program 6: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x80040200, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@flushsa={0x14c, 0x1c, 0x411, 0x70bd2d, 0x25dfdbfe, {0x6c}, [@replay_thresh={0x8, 0xb, 0x6}, @ipv6_hthresh={0x8, 0x4, {0x57, 0x22}}, @algo_auth_trunc={0x114, 0x14, {{'sha384\x00'}, 0x640, 0xe0, "31c14b4c6a0690877c4b6e6af6aa9b413a924068275dc19ce02e1350045994b6a2a7459bf128166f6d7a0339ecad8e45e8acffef3b48d77806b8abadf80710f5722071b10b91d9618c4ad6f963ae7ff56c67348f2ad0a07a2975a27ac682ffeef6a9789743fb473d473e24c5520b0663d4518db2708ffba98035ae1f108251dc9dcbd184b4601a792d632797edbd92d139e4a8ab2b353420c8f77b8ade742be805ddc91052b5a90a9b4c34b1955a720c5deeb30e1fdf554382fcf5b6f729d4f818a64424faa62ccf"}}, @policy_type={0xc, 0x10, {0x1}}, @proto={0x8, 0x19, 0xff}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffffe, 0x101000) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x81, 0x4) 15:43:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x3}, 0x8) ioctl(r1, 0x8912, &(0x7f0000000000)="e15bc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:19 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080)=0x7, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x200000, 0x0) 15:43:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xb, 0x8080a, 0x6) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x107fffffff, 0x4) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x2a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f00000000c0), 0x0, 0x20040000}, 0x0) fcntl$setstatus(r2, 0x4, 0x800) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x42}) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @mcast2={0xff, 0x2, [], 0x1}, 0xbb}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x4}, &(0x7f0000000380)=0x8) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = accept$alg(r0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400)='team\x00') accept4$packet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'vlan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000b40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000bc0)={@empty, 0x0}, &(0x7f0000000c00)=0x14) getpeername$packet(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@local, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) clock_gettime(0x0, &(0x7f0000006740)={0x0, 0x0}) recvmmsg(r6, &(0x7f00000064c0)=[{{&(0x7f0000000ec0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f40)=""/163, 0xa3}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000001000)=""/157, 0x9d}, {&(0x7f00000010c0)=""/190, 0xbe}], 0x4, &(0x7f00000011c0)=""/108, 0x6c, 0x1bc}, 0x2}, {{&(0x7f0000001240)=@rc, 0x80, &(0x7f0000002780)=[{&(0x7f00000012c0)=""/122, 0x7a}, {&(0x7f00000024c0)=""/174, 0xae}, {&(0x7f0000001340)=""/36, 0x24}, {&(0x7f0000002580)=""/98, 0x62}, {&(0x7f0000002600)=""/213, 0xd5}, {&(0x7f0000002700)=""/95, 0x5f}], 0x6, &(0x7f0000002800)=""/97, 0x61, 0x6}, 0xff}, {{&(0x7f0000002880)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002900)=""/69, 0x45}, {&(0x7f00000013c0)}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f0000002a00)=""/234, 0xea}, {&(0x7f0000002b00)=""/37, 0x25}, {&(0x7f0000002b40)=""/211, 0xd3}, {&(0x7f0000002c40)}, {&(0x7f0000002c80)=""/18, 0x12}, {&(0x7f0000002cc0)=""/120, 0x78}, {&(0x7f0000002d40)=""/72, 0x48}], 0xa, &(0x7f0000002e80)=""/131, 0x83, 0x800}, 0xffff}, {{&(0x7f0000002f40)=@generic, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002fc0)=""/249, 0xf9}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2, &(0x7f0000004100)=""/1, 0x1, 0x4}, 0xd07}, {{&(0x7f0000004140)=@generic, 0x80, &(0x7f0000004500)=[{&(0x7f00000041c0)=""/5, 0x5}, {&(0x7f0000004200)=""/234, 0xea}, {&(0x7f0000004300)=""/20, 0x14}, {&(0x7f0000004340)=""/43, 0x2b}, {&(0x7f0000004380)=""/69, 0x45}, {&(0x7f0000004400)=""/252, 0xfc}], 0x6, 0x0, 0x0, 0x9}, 0xd8e}, {{&(0x7f0000004580)=@un=@abs, 0x80, &(0x7f0000005680)=[{&(0x7f0000004600)=""/127, 0x7f}, {&(0x7f0000004680)=""/4096, 0x1000}], 0x2, &(0x7f00000056c0)=""/236, 0xec}, 0x1}, {{&(0x7f00000057c0)=@l2, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005840)=""/31, 0x1f}, {&(0x7f0000005880)=""/8, 0x8}], 0x2, &(0x7f0000005900)=""/40, 0x28, 0x3f}, 0x6}, {{&(0x7f0000005940)=@xdp, 0x80, &(0x7f0000005b00)=[{&(0x7f00000059c0)=""/70, 0x46}, {&(0x7f0000005a40)=""/137, 0x89}], 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005b40)=""/47, 0x2f}, {&(0x7f0000005b80)=""/152, 0x98}], 0x2, &(0x7f0000005c80)=""/55, 0x37, 0x704ae0da}, 0x7}, {{&(0x7f0000005cc0)=@alg, 0x80, &(0x7f0000006340)=[{&(0x7f0000005d40)=""/203, 0xcb}, {&(0x7f0000005e40)=""/79, 0x4f}, {&(0x7f0000005ec0)=""/13, 0xd}, {&(0x7f0000005f00)=""/167, 0xa7}, {&(0x7f0000005fc0)=""/181, 0xb5}, {&(0x7f0000006080)=""/244, 0xf4}, {&(0x7f0000006180)=""/191, 0xbf}, {&(0x7f0000006240)=""/25, 0x19}, {&(0x7f0000006280)=""/182, 0xb6}], 0x9, &(0x7f0000006400)=""/150, 0x96, 0x3}, 0x2}], 0xa, 0x2, &(0x7f0000006780)={r15, r16+30000000}) getpeername$packet(r1, &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000006880)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000068c0)={'syzkaller1\x00', 0x0}) getpeername$packet(r3, &(0x7f0000006900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000006940)=0x14) accept$packet(r1, &(0x7f0000006a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000006a80)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000006ac0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000006b00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000006b40)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000006c40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000006c80)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast1}}, &(0x7f0000006d80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000074c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f00000075c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000007ac0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000007bc0)=0xe8) accept4(r3, &(0x7f0000007c00)=@hci={0x0, 0x0}, &(0x7f0000007c80)=0x80, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000007cc0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000007dc0)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000007ec0)=0xe8) getsockname$packet(r1, &(0x7f0000007f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000007f40)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000009180)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000009280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000009380)={'team0\x00', r13}) accept4$packet(r1, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000009400)=0x14, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000009640)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000009740)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000009800)={'syz_tun\x00', 0x0}) getpeername$packet(r1, &(0x7f0000009840)={0x0, 0x0, 0x0}, &(0x7f0000009880)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0xa57b641d667a2ead, &(0x7f00000098c0)={@mcast2, 0x0}, &(0x7f0000009900)=0x14) getsockname$packet(r1, &(0x7f0000009a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000009a80)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000b800)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f000000b900)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f000000c380)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f000000c340)={&(0x7f000000b940)={0x9fc, r7, 0xb00, 0x70bd27, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r8}, {0x160, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4710fe5f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r13}, {0x224, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9d6}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x2186f62b}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r20}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xe41}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x88, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffffffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r23}, {0x138, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001000000000000}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r29}, {0xb8, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x40, 0x3, 0x2, 0x505}, {0x0, 0x2, 0x100000000, 0x1}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r30}}}]}}, {{0x8, 0x1, r31}, {0x1f0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r32}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r33}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r34}}}]}}, {{0x8, 0x1, r35}, {0x178, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r36}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r37}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r38}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r39}}}]}}]}, 0x9fc}, 0x1, 0x0, 0x0, 0x40}, 0x4800) prctl$setmm(0x23, 0x7, &(0x7f0000ffa000/0x4000)=nil) 15:43:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x200000002012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25, 0x0, 0x0, 0x86040000}, [], {0x95}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x100, {{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x1, 0x3, [{{0x2, 0x4e20, @loopback=0x7f000001}}, {{0x2, 0x4e22, @multicast2=0xe0000002}}, {{0x2, 0x4e24, @rand_addr=0x7}}]}, 0x210) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x800, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x3d, "698da9bc05973743bc9000d2365949cf206a20aa7b767e0826a917f20b0a09d180f317cc6709a3d5db1a4917db0515e2b36f5a99131c02d143de12cf5f"}, &(0x7f00000001c0)=0x61) 15:43:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 15:43:19 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 474.983599] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 474.983599] program syz-executor5 not setting count and/or reply_len properly 15:43:20 executing program 7: r0 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='wlan0-[:-\x00', 0xffffffffffffffff) r1 = add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="52f52a8e92036dce3d80ea138714244c1038370883ac68e7ea905b800d", 0x1d, 0xffffffffffffffff) keyctl$link(0x8, r0, r1) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x1, 0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xffffffffffffffff, 0x400403) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:20 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504002802400000000000000000320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000"], &(0x7f0000000000)) rt_sigsuspend(&(0x7f0000000040)={0x400}, 0x8) 15:43:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x2, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x8000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x480, 0x140, 0x0, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000140), {[{{@arp={@broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}, 0xff0000ff, 0xffffff00, @mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0x0, 0xff]}, 0x1f, 0x7, 0x5, 0x0, 0x1f, 0x9, 'syzkaller0\x00', 'team0\x00', {}, {}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x8, 0xf, 0xffffffff}}}, {{@arp={@rand_addr=0xffffffff00000001, @broadcast=0xffffffff, 0xff000000, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x8, 0x1ff, 0x6, 0x8001, 0xac, 0x63f, 'bridge0\x00', 'veth0\x00', {0xff}, {}, 0x0, 0x200}, 0xf0, 0x118}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, @empty, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0x9, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:20 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x40200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x5}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540)={r1, 0x4}, 0x8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) unshare(0x2000400) mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) pkey_alloc(0x0, 0x3) setsockopt(r3, 0x65, 0x6, &(0x7f0000000040)="f0000003", 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000380)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000003c0)={0x0, r2}) 15:43:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 475.487719] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 475.487719] program syz-executor5 not setting count and/or reply_len properly 15:43:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x6, 0x169200, 0x6}, 0xc) 15:43:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7c4f6414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x20, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xa60) 15:43:20 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:20 executing program 6: r0 = socket$inet6(0xa, 0x8, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x20140) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x10000, 0x8, 0x0, 0xffffffffffffff9c}, 0x2c) r3 = fcntl$dupfd(r2, 0x406, r1) write$P9_RREADLINK(r3, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 15:43:20 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000003f0000000800000081374fd2c3a977f4d4640dbb8bfbf212fa420da7b694aa7a1019a62192be3c0a7da1715070de1b0a967467c5fd8d78705decce8a775412799277f17651f0c42057a178db443eed6cf4d563cd496b11f42791430a672c6aa78fbf2781fa16a4df51724d6feb17e6c6afd54a3053e6241e5a54490e02e85bd89e88008d6f9b83f59f9c590c5adec696d9fdcd2f733aed0fa2dd2539fa3b595e6d33"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000"], 0x15) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x37, &(0x7f0000000440)="025cc9206d762070bbb786248d23108d0c4b85f2039af001ed97c2c536d7223495bee69613338ca9a46ec5afb80df5ee550acc743847dda7571946250faeebdb2277d39e46aeb2563c931ab88a1c7a157999df401fb514644e78bd63064b0214df95ce8c47e75b87bf3489f6fe2f81e94d70000000000000000000000000") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x40000, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0x2) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 15:43:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a9061518096e35780f92345868058cac6f649666624599498d10f9243693bcc3b31b88d7986b7f49637134349fd6a295faf86e6", 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x701, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 476.031219] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 476.031219] program syz-executor5 not setting count and/or reply_len properly 15:43:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x80000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x2000024, &(0x7f00000000c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000180)=0xc) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000280)="c97668dfb5bba1b7448bd8589080729367100ade38564f4091c9c0d5800892203fa1c119b9ea0d52f67866fb1816de7a4306c6e34ecc97cb86f12a1d72d3db2d838f261d64e241561d67ed1bea150ffb4746cd62154a7aab864c", 0x5a) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f000000aa40)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r6 = getuid() ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000100)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000140)) r7 = getgid() write$P9_RGETATTR(r5, &(0x7f000000aa80)={0xa0, 0x19, 0x1, {0x810, {0xa0, 0x4, 0x3}, 0x11, r6, r7, 0x6, 0x4c4f, 0x1b4, 0x1, 0x7, 0x800, 0x7, 0x40000000000, 0x259, 0x0, 0x1, 0x7fff, 0x1, 0x4, 0x8}}, 0xa0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14c, r9, 0x0, 0x70bd2d, 0x25dfdbfb, {0x1}, [{{0x8, 0x1, r3}, {0x130, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4800}, 0x4011) getsockname$inet(r8, &(0x7f00000012c0)={0x0, 0x0, @broadcast}, &(0x7f0000001300)=0x10) 15:43:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:21 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x50) 15:43:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000"], 0x15) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:21 executing program 6: unshare(0x24020400) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)={0x1, 0x5}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) ioctl$TCGETA(r0, 0x400c55cb, &(0x7f0000000000)) 15:43:21 executing program 4: r0 = epoll_create1(0x0) r1 = dup2(r0, r0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1f, 0x37, 0x2, {0x2, 0x5, 0x8, r2, 0x1, ')'}}, 0x1f) r3 = epoll_create1(0x80000080000) close(r1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) ioctl$TCSBRKP(r1, 0x5425, 0x4) write$cgroup_pid(r1, &(0x7f00000000c0), 0x0) 15:43:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@generic, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/190, 0x98}, 0x0) write(r1, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f51108000100020100020800038001000000", 0x24) [ 476.495402] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 476.495402] program syz-executor5 not setting count and/or reply_len properly 15:43:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) kcmp(r1, r2, 0x5, r0, r0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0xffffffffffffff72) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:21 executing program 4: unshare(0x24020400) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="04000000fe00000005090101"], 0xc) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 15:43:21 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:21 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xad5]}) 15:43:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x0, &(0x7f0000000100)}, 0x8000000) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0xd2, 0x4) 15:43:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000"], 0x15) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) getpgid(0xffffffffffffffff) fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getpgid(0xffffffffffffffff) fcntl$getown(r0, 0x9) getpgrp(0xffffffffffffffff) getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000040)='io\x00') pread64(r3, &(0x7f0000000000), 0x0, 0x0) sendto$unix(r3, &(0x7f00000002c0)="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", 0x1000, 0x0, 0x0, 0x0) 15:43:21 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000040)={@random="da72d8d13764", @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [{[], {0x8100, 0x3, 0x4, 0x3}}], {@can={0xc, {{0x2, 0x9f, 0x1ff, 0x8}, 0x0, 0x1, 0x0, 0x0, "b1cbdf4772db2603"}}}}, &(0x7f0000000080)={0x0, 0x2, [0x59b, 0x7b, 0x2f5, 0x8ca]}) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110504907800002802400000000000000000320000ac1414aaac141400082c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000c510642598596f29acb9d8478476b5b561a83f5669db5ac5c3d54583d8b3afc4a8812233d3715aa2ee31435b9451e6efd5502dced448dab9bc1277b987daf4b5e37df644041c15772ba017ac47"], &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffc]}) 15:43:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = geteuid() setuid(r2) 15:43:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 477.142122] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 477.142122] program syz-executor5 not setting count and/or reply_len properly 15:43:22 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4002, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$KDMKTONE(r0, 0x4b30, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x0) 15:43:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86372da919fe8870288f6151", 0xffae) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x90300, 0x0) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0)=0x8, 0x4) statx(r1, &(0x7f0000000140)='./file0\x00', 0x2000, 0xfff, &(0x7f0000000540)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x1, 0x8e, 0x1, 0x7fffffff, 0x4}, 0x14) getdents64(r1, &(0x7f0000000240)=""/24, 0x18) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="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", 0x2b4}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600010076000000000000000000000000000000000000000000000000"], 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:22 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioprio_get$pid(0x1, r0) ptrace$setregs(0xe, r0, 0x1000000000000, &(0x7f00000012c0)="6ffbcf64342ded7be45a6c43eb2e7df1948b46449a6aa059c80463db24117d9003811bdb6948b0272bae1e59840f497b290e3fd164a3090df35ae71f4c8c01e1f2d2590e550061bcd72c85fae33d36102695bba2080b9d087e7f29d2662a2528943685d04f0887cc0c90c8497709fc9add94817c9b552215cf7653aaefa253fc23f75ef9554eeb7d2e3b5dd9161934d5830e5c06b5da89cb454fa1fcd06ff96625868786c45ee5022ff56262cd3d75efe300b4ab4c251a8b618f9386dfc7cb2e5f44fa441a5c4626fdbd7dc48ed5ae31cdd9d743d90d2665b71f3b19a51adf061cddce9f8640a250d9c624fc109dfdecb3cd89a506809c70a97cbba6cfd028eb40e8540e15154a094cc199a569878cba2fb91dc5406f615c9d5f2dd5686b59a7728d96880131bcbfa9c7bf11426b3a30cf4edd8308176572e2340242890205412201851ec3e6c46f75a3b724f21d36c824f1a73231dd540bc6422522b7badfcbbed253a2c21c328a300f00caf60b71d3fe65a8e92cb676a4b8028d213ee3c8cadb96f97b019427ce9a96767b85fab3f67576aae602d5d5762aaa471eb874f2c5a782ee4561f2bdbbb7c9bf12ea58232a10a40f205194de6919efdcafbcc16b07860b401b8f6b82dc55fc345e227dbb14320c64e1edbcc3aea7be71be59cd1cea134a408975a41a13bc3fe223a29d6ece3fcbd361547518b88142b8422d9bca9c2b0a908ef60f2751b04904125a51d88c8e0af32f5665db881b8f29b3485b74ab5e4cd648033fdf5c1929dd40f11ea1b67997da9d447dfaf6e668eda3a5c18bb9a808274a50a0647512c02729a468c48b5cf0cd3e2c8a25243ac2e3c73b2730a5c4f355db601e5838653285115035ac74570416ee0c6376fa8f93ea259c739c75541a401131dddda252d75b1230885ef2d81a685d1f0ba11a2881b5c20887dba5c9cf8400e76491aca3b0a42a5bef84185a6325f751fefb3c3be19b263d0f80b86096755e28d861ebf9e23954b8b853489b0887db71b2805152a8a624017679de0c9005ba2fd83af1e9059787d88ea2a0f86f51f663ff705f635d3cb2929b039354c65198c0397747ade3a4867fa28aad9ddfb5dcb3159b89e043cfe4da268037d1894f0e8c9c8bd9459954b889f68d41853590b05529a4967b5443825ad025bd93473761dde6cdd3bc0a65fe41a2ad3e8632ad2ecbec100df2cd66f6facc540573b1fee254769372e6d3674c4fc8e1605fe1b9964bc27bf6989308ee7caadc1e01ee8c171fc9231fc24fa52d91d6a46cc4319e4929974fbfd65419e51436c981f45d392c44e47b17bee0a6a8df3e5000967102b6de3b6f58eec8d25ce43bbb43eaad05e81383892b4b3c6c9131afe27f1d087fa1149e7d1aed8703773780822fde9483897098801ae8c8242c1eb46cef55b777088f044f659c31234ffcca534a22e7b5b2e921bb28282270260ab6c5143863e7a32d9ea291378993603febaa10b8ddfb454736f1f18615a2f261963bb244366a3ccb4f4b3397b658ad85a5e0a08cc6bf05556f3c60d65e77e520c99f648967a88bd6f59f4f16754d92990b3fd94817c0a43ef33ec056f6e0c148d359e20f67e054482ffeaf010f87b0a8c37440ad352abcd52a1e8bd09419bf0988aff34bef1c904d74eb7ceee98d0c627ffd7ebd4dd9c12671c19c65b66908b5d9a2a7e2d010e314f3ec4c62d53674d58b74da239190af1247019c124c897e19bf36610805ce24379a5d1ab17ff141cff14999340096735a4946f2a39412b3a99c9e8b2cb3fa5a35bfdab75f6c21b1f216405b7f3f81e3aead48de07b1e45df609c448ad368b6f26aaadc20f7c8e899c7371dd4b199234451840b96df7c88843992d39a368db75474349f09a15054134382e3e303b2845d810ddbd2305c5cf9fbe13100a81235cf42bdb0069c54d3d4c33bbfbcd3423b9dcb8fef474b9d97c1e0426dbbae7c90b2b6c5e756cf1d409444956c710a63505f9763de67fe57ac19ae963f82eca31dbf49ded3d68b762ed7c14edad34ee9d5b177f211947dbfa9bff2fe6f4798aa1de35d770a4f0dc49dbef8841eef6aab17043f5ad829825502d0c69936256cd6eafb100d418bbdb6fa940686563f3dfa93ae86938a74449cfb117240a2ead6ac91867b8837237871029728943476b6a03faf0a7c190959bdc799fbbe89d40bafac4ce5bb231f18b3b0fa93276567a5d190b8d2e2a4fd6aef9a9772377e915cc9cc112da9cc9290678e3700cbd595858d4cbcafebb51809f646bdd665c7e3afb8f7268bfc68fa644c0edf8c22e391bc146379458127e2d0867de75d6c61b3ab8df3471b9b4433caaaacb0234a6183c50227b4f61d79b41bc3c07a0fba1034db686d691bf35433bef22db98f8614818f76996645c4678145e56b203f1627f47402d76a42e40c5583a19bbf1f510a73d4ce484ee9db8c5ec20dbf8ddfe10f196ba1ef11e79206957c343e54d823d8d6e742dc4658e8ca5add59b7931f05bb0530f70f6aed4e62690d155313115a3c87c862cf08a2955e829a090c502143125177b4e17eedcf42465cc0fb20413950b2fd16a0d0ccff8c57d7b0954cfdf947e5b488251a6eb49dbcec8efc99ac0bcace9ac3ff70b59cd405e3bba227f0f97e90c52b20a8aa4b61bbea25057811ec1dcbdbbdf3d20b19ecd418aa2b6f7bc0adc70a7316ce2431a22fabc910452e6b41235cdec244db272213b0432ee642f6d498018c569bf985271b047fd7140ce39d23f75fb5fe76e7c594800bec299ab096cc93c545ec13f5caf3d619ca3e6beed2fb46bfa0a2fa222b47e32b737bf17d0ca8e06570ff04d1325b6c1291f4233c62097ccbf17675b5f9f4fd185ddcfb07a6b57a04f226252cbf45d10c3188e1e9e909ff06a8776d0ee2d018b6c5461180a1c521e6562c8facd45c4727c7f4e430328cfc9ec910d9b5e8c49b6fa1c1b9876ecd99e801b0de0e8b3a0ed244abd3443875e04836abade928d249e7907eea5ef6a17b3c4a7af8ecc04c86e652cacc25602540f4da3b14c354bb69b1bf0136abb0296b880ad99d3e290587c9a4be96d12853a89b3be9b0c92f0d0f4650927c9d0cadfd18effffea7b9c27b3e7a3fa2288c5a154e490677bead31015b2dad79d4d74cdcee8641fadfe239d09eeb785c8e4242d1074e9b6d3bd89b8a5401279adda27e893a06cc3e3e55e5f29fdba6b652f0d1bb182a671c8e854e1f3c8c91be33714d61ea350d79d9f9a8f72ac1dd530f99363c136b37ea8cae053b4c3c70af09ee5d1cc660eb6b69646681a465e4a71c0476837a2540080bfba669f6b597e5e3599e2eebb0a0a2d04b6508c9b479e5925e4600662e5a99a8695893c67563a18e59697cefb323fa005235f7acfab1d916d6bf144a44ed00477f5a459346741dde86e7da2273b7fa5709a18c64d2003a876ead301c58c7d91985f0b62d0692a7dec6ecdbcda59a9e5e761b8c0bd00cae476b9761ec99a59cc2bdad8e1d667b2920b9518545f6e341d96a875616d34f899790b30ac0c0915bd7a3fad40c0e57390a455cc5e7d562dd0f5b8464aaa92f92ebf10f4d4b8ed1e36042163911761e9d9aeb026e01a423fc439999bdf64099855b5768ad27e8abf54f6e89a4e3546c8de9cc3cfb81ff7f2da580841ef57a985f71f5251cbd695b0d96b1578205205761b3c4e4ec04693a113a6767b8fbfad8c457fcd66a106236669cd5488d56a6af819c47d85af29c537758ee3a64d54f574d9a98586015671022dce06aecbcf30c327aec08956a66c499d4a3b6820d883ab4406b7376a3435d7de32ba5012e369b879954f88541cd36c6545384d30ac8d9e6e054a72502795373b720cff32c8aba5b94e8d6c3bc6792825d1f3493d0e822a09945fa565f711bb6a694d449151809eb49b10c3b05aa5dcf74ed3bb478ba9538615dede7f1c1962bfc1c6adab53d15cc9f89ee283d4b7d899d32cd54a341283729f50040b7182bd29974aaf4eba3ca6e6c9834572379e38bd7794f28905ba0ead03c9d443a1d6cbb06410ae8101d156601e07e5f1379a799637ca3e75dabe6aa6295700d067b75b8a6888694459db91c35a55eb09f2ddc006045cc635f23f9bf1ac283ebb63a76e0255e19752caede311fa7969145fe612bf7b51ed100c2898743721f42a1aa2836f17f72caba7ed0958b0dbd47a57e1e0dee8a5f2743f62dc948247ec5a81c3de5ef556eb39c66df2fbcf75b486e7a684049c196d8266363c5fd186cfdde53d12253fd11189967d9f1b764c7da54f6012781202cca176b72c04821492b15529159e6f11893cd837745759368cb1b6273ff5e39bb9d8c6fe4a217a876aab1db5d2826ebdab1d2d840374ab0eabb2e7a48f08b8a56479a5a054d20dab1c83b3d520f1f930527c4c5bb2fd25d4b26f794ab302d0285198cfa6c169ab5a5814faff167013dc9edf56d17db79b5c56d7c498195650381b12a67b95240467ce4df230473ae4286a94b132b7ee9fabfb7bba1e37b57ce05eb35682c60a97d1ee129a56066510462883c1e693aeec5874faa035ded2bdd73ec04dba937fd3409b81079d61ad448aab16dba930301d57b157529b875be3a47fb0713cfcd6a21ccaaafbc150098b9e6fdf859305430d9d55ffa10debd3af96787dd334c8db83972500519466c9af7c36027855e9e65595f7fc6acebe64276734c24f1002715621ac4f1650d7045fefa98324465355f6bde91c2edcf039efad1d9c7535100aa1169efc9d22677130b5aa8af75844a986b96d605cc2005f92e14f456afc8e67871656ae2970c3f7b45396b156b8efa5aa8ce590685b36386a5b5ba99dd0d013dfd452220bf4d8faca80575f08cc6faa4ce028b0b58a68220189bf82347e06e7d7b819d2bf69fa750e4b027ec3fc571d5eec62323365475f35d28e3ef51bd7231be917997713cbf7b6994d7c89d6e1ad8df6524af1f24447b0999f08261e7392dd6d0b3029900d80cb5b78ae7c071e083d6502c770a2257c02cadb411f6adc8c78b758117ce232724f6fa2f1756555ea6c2e42ef78bf482db3ba12fdf4c99c395f225910cac1d529c9a4d5b728864d6143ddf08a355363fc433000331aa2e66fcb433a8e6c8fee694bf17abf132d61148cb5a85052c73706e1423ee6632fcc9c03bc461e178302f5432d9b280b6946b0e10e8102cbdf42466672feb3dfdabc6450b83897780deb3ff00fbfd54f3e24a2208bf0d5d6e014caf4fad2d3ab647f6dcf2193972a003e6af22adb5951db40709232102dcdbf7f6b89eae9e2d4957a0fb9ba4339f6cc7e9daf6eeea0e571b1fc2783b8658ba75a05dbde04e12ebb8ed04c38f2cd050f2af9c390f8525ea9e57e29ae5b1eca7f9672911284fc6f639bccf495dafd68a680f73ad9089b8fdafe5c60b853da181a43e0b6d91bb8cc1e958507c4df99411347a3115839c36f31c572dc68ec040c8c11deb46714b53cbc8b906fe033f02b423e36abdaa87e064f6ac1f363683bdf00f5b718c8287c386916486a21ada4ba20859b2da5709b90a1ac7f418e9f606f3bb18d5d77efea380eda9cd18e5e9853a2e3a2360ff522fa3330b32139d466736946daec0eac350a5f48c6b9bf888ef73d52457f9e85ca2bf00e05263c81ef5a2b5fd04c416f4555e042c787e9e03a9d91b634be1f9c3f9ac43a249c9e4bac952d04e9f90b178c71b68591d07aa6c35963a22485323d0cad9d66dab174e9a7586d312b8383132cd16590bd3742811b88c5f5a416941a0cdd3a2d1691bd5ac4c8f672a8a39250bf4101861cc8e9e3dce3794b74e51d117345274e395540a265642cdbf89d9b9e6a2144647b31332e1770856f1d79c21893ebb69e27d2364310c5e0a2fc65dd73d73ab4fc90f65bc840f662d292cc66cdbf626c74d5da552f443487be85e8f9f88d11c16c5b99735d20a3fde76a7bae9b9024d609ebac1adfd71ca6bdd37b1956288adcd536c3b90000000000000000000000000014a896") 15:43:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x80000001}, 0x10) r2 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000b89fe4)=@req3={0x10001}, 0x1c) dup3(r2, r1, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0xf, 0xb, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x66d0}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x1bf5, @dev={0xfe, 0x80, [], 0x1f}, 0x3f}, @in6={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3d}}]}, 0x58}, 0x1}, 0x40) 15:43:22 executing program 3: syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x228, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4032, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) [ 477.551540] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 477.551540] program syz-executor5 not setting count and/or reply_len properly 15:43:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x50000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:22 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:22 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:22 executing program 4: r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x3}, {0x0, 0x5}, {0x3, 0x8000}], 0x3, &(0x7f0000380000)={0x101}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x9, 0x2, 'client1\x00', 0x1, "3603bf09c861ec52", "952b8d9eefbe2985f45827b85dd16f11491348fa1b0a22aba2e73f3c9ccc258d", 0xffffffff, 0xd444}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) 15:43:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600010076000000000000000000000000000000000000000000000000"], 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r1) 15:43:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0103000001400000"], 0x8) r2 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x81, &(0x7f00000000c0)=""/156) fsetxattr(r0, &(0x7f0000000000)=@known='security.ima\x00', &(0x7f0000000080)='eth1selfem1\x00', 0xc, 0x1) ioctl(r0, 0xfff, &(0x7f0000000200)="025cc83d6d345f8f762070") close(r1) 15:43:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0xb, 0xffff, 0x2, 0x100000000, 0x3f, 0x6, 0x100, {0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0xad8, 0x6b8, 0x6, 0x5, 0x7a}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x4c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @multicast1=0xe0000001}]}, &(0x7f0000000340)=0x10) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000009c0)={r3, 0x3}, 0x8) sendmmsg(r1, &(0x7f0000006680)=[{{&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="e30ef8f69b01cfcb50d77a571c55a11aef7e76c62b760ed4bd225799bae05b2c4f201f7f62f3c6067b89d56a37ad5887fdf20ce302d6c9f9a70439", 0x3b}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000440)="96fe2149955c0b52f8791d454f84e935e39aab5bcbfd0bfa12f04cdf13de02daf04474a3de92443007e82b06560367f9cb2264557d5fade694b45bf26f70254fb313", 0x42}, {&(0x7f00000004c0)="c8fd6eeb1bb1e9a0aaea08c4f3867457da6e5e7b6ec3218cd83928f4348a9c56d88058b18a860b705634f14a26129619c5ac1478f04c332c7ac6dd5c5e886aad7fec25ae351b4fc441f712c44047735cfa59516c0fe5a6e6a386b843ee85b45f55bfc6f29029f6fd2365ae6b4d7c2fd9266ae4220e0711f48889616f39b182beed31dec997227b994ba365cd6632aa446de9763c90a0ef82a54dc220c23a5085d72c8b42a8c93b82ae37d6137ab4e1c98d35fb7fd93f2ab3af1af63c04b111a9f0d0843c7d21bf874e60b8cddb6cec22776c4dc211976919c6cc5e9eb570", 0xde}, {&(0x7f00000005c0)="4dade024b546d104dfe238581b9188173cd41de8a62d0c45ce22d53da212ea17bd7808cf8efee6d8af023fbd5448327a72f2131bd6df9b32850fb57d2fa16a38c761408b49a76607a7fe731397d959d042c06bd4bb0b5ffdcff1222efcd631cb854d5a", 0x63}], 0x5, 0x0, 0x0, 0x20000004}, 0x6}, {{&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @loopback=0x7f000001}, 0x2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000740)="d7a3e74cc9b9f1", 0x7}, {&(0x7f0000000780)="e663e3c7f709527300aca46767141bac4498ddbc3586f4539e6af26a1c287b18644e833dff583f9fc398be360e7556abda83cb5d86391952da7e057ee6c0b49b190e010687b3b617fda4a4c881e64df8c2d4641c4f4dc1584dc8f30e3e4e27c681b94357f4710f0c05d89fa41ecff7a5f5918cec529113d151902a2a4e1c02d60470c4b50f36bf9029ddeefac5dfa88a49edcbe80336f5b344d6bb7592c7d77d450b95f325ebb76e459918dafc3536d35b537c96877ae6a9d863570b7c386287f073bde711b60037ebed51612baf2a3334ef64236496cff76f4a102742fa4219c324d3cff013dd18406ea960322545fa2ca9", 0xf2}, {&(0x7f0000000880)="24134ffd6d7b00b5554d16d90872c65132caf9f821caf9e3e37f9d346ad7b016f472d030d05e350e15e600415b79b32d80767e0718deb266c71781cc8573342a", 0x40}, {&(0x7f00000008c0)="dff8e3b11e729663351d9d6aadc15aaa9fc8bd28fa35570d2b98be281613fb103c1886375527876e182bc159f6dfb59af02625b4fa9e53ac379d02115a32d999bed22dc712ef2af6fb82e79e5bc76f01c9eae5cb440bf3dc51fe55ddb0ef68be50b5cc2d8f00a4b5b02cc6c60e8a705296ad802042a8970934244056a3ff0debb7150cfb09bf3e4ae316f811994d9b675d1e02f3f5e022b80c806f96a0c92de0d8d6", 0xa2}], 0x4, &(0x7f00000067c0)=ANY=[@ANYBLOB="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"], 0x188}, 0x2}, {{&(0x7f0000000b80)=@ipx={0x4, 0x1, 0x0, "23335fec805a", 0x2}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000c00)="ab6ae8acb8e47fec7e549bf939b4a33ce476d677cc96a3e5b2056d437ee62d479b490f21b172fd6a111d338a5e94849a9d3f41b374568ca15011cb6320a138f8403593226ae048df375d85b0987e7fff1d6fccf80a99f8c858d0976f12822d2d5cd2c739b686312fef2584019bca1e8ab7d777034c6deda79a1e7af338111f4f22e4eea123b46e50a23d2f43632d7acc4d3a372f581b43179e47fe2918d02f3e9e728804ca9b1412cff064366d89572ce6c5f5724fa8403a4b77de1b4a328a9f698d9495", 0xc4}, {&(0x7f0000000d00)="6fb524ad350ab4f7b5020d9fc3d59352bf075672c4447fbeb84eea0f1b31a5132f53903ea378e6fce7ab08e46bb7632bfc9552078ef7c8389deda19e860c498261a99d81c0afd49c3effbc8f9d31832fab1153ab495d608c75624547b79f94ed2696dedc092742bc4af604a0ed1b92f16b19917f1ae31d67ab3eb7fa226ed6fbb80ee4001bbd164718380a3cd78330872ecc1cfb88256dd4219a5ce10fe2247044e557eae9b686d950f2c949591693429f6bb15b118222004bc061be8b72e54ef6414b0309c41e04b997ba2f3bd3d9c6d3459efcae26534b", 0xd8}, {&(0x7f0000000e00)="3e4e651b8c304deefb14bb2daa0f8efff47df6359c3ab80ccfbd9c055efcbe47058e4af35e2e5879", 0x28}, {&(0x7f0000000e40)="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", 0xfa}, {&(0x7f0000000f40)="6aa83153bf37d07d86761f7d9196614bd6f29764eedc0e7f9679fe9efbe495b485671de61b75eb4a9c6563ab5cc68a0a2be2cde465fbcd98c9d55d084fa4436e119c0421f35a78dd5cb17b84543721d07ca5e95e93bad053f98a49802c3e0a0bdbf54786b2af3632b2847bc4796a459df8cbdbd74968231a100b5ffea422dd89187b0d6dc09669fb11488d562104fc48abd368312ab60586ec293a865167d82e6c199471a17da6d149c7543f246cbf13c1c8586a15564d4f73564dc9d2eec99f5d35d3f4ec7024e7aa258c29f4fc", 0xce}, {&(0x7f0000001040)="aa3e31a3c803d7c3e552e4221048fb8080d3476ed57d707e8f0736a5d2822ee1edc2052a491a1bc66da71da8ed6be0f86a508fa8490aa700ca06342bd34aef5c391c0343d6e1381b3de735aaf076e4578d22f5a0290ce1c81651a93971d4aa68fa2464cc0c6fc00a73dbb4c9c7e9f7d8f826f689120f0a5c97bd52543eebdffc7ae05aa027525637246240c577b265794a659f8d5bf201276ca9e40a617273d0eb92ce5944827f4e5b26b1e834407e8823de07bed5b2f25a05915639a7ff21aa9dd539f95c46c635b1a12a74cfb14556ba2b4cd8cff3112742d8c043b8ed8ea9c9bcc18eb01e2d1dac496b2b32025d347cd4cd40", 0xf4}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000001140)="f9d600512cf658acec41e0239fe0079c0895fbdae5f2c19bcdd9f9be4f26f347e396eda655f74d4175d9b88c14548c6c45f7f58fc4ecaf5a67a3df85dfa6f1a3937691682a19bfb888a00b704342abf51b4cc6175859df920fefb7b70bdc33b908c8cd90578093cd58ac63deb94b656c693f340d5345305679a03de437e12f5cc4b9a869b7b6f070cb0b7cd56cab3d544b9bb63bad9c205c1be41d2380c88e675a", 0xa1}], 0x8, 0x0, 0x0, 0x4004000}, 0x4}, {{&(0x7f0000001280)=@pptp={0x18, 0x2, {0x1}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000034c0)="2e70afc504cb19d67109c4c67e11c9f0a04251da8834315ca0f6e4bb0a71fbbcd68188df41bdbeb25ef4de44bf42e800f05349b49d96fd9ff0ca4d2a37b2b3cc429ce239224cdb360e8db085d0b5f4c1ccb000ad9a10a6a8ab0ba2beeb1f6243bad9474e7be7623963278ae1773ea6515ef4e4e31022606a28c3824498b7d47a29b4816d74bcbb56577edf8bbe07cb641d1660cb74e44a4e4cc21195c381686275917b1e1e82ea2b84b7ede09668034218ba6915bf731a7a4ae0e1747e99139a0f396f329c06dd91ea9c5460adef9b18d66ec1936d2232dc889eb77806f25a90bafe0d3b9a4dd8f747a7b8d7b3822ac27c61a40e5e7f9c9247eb2a58d2a116ff91001eadd2014907745aa9dc472a5cd371e68aaf05f4873199841635b7be0d08c1aa503fbaa1306ddf51dea1206364520cd055a82432abcf2d7b06945a295d03de8e8718b2e263ab4f9ff7858cd28edbc13f874783f7abac0c24d688b3810db65ead5ed428f439a5cf48727cbdafa8b999a84f797f64cc1bd0259540c5fe5c85b6e2f5e846548f142d0c158504d910d23db76b8e9a42eeea0a47b3d88f83893cd47d2e85a7174beb4723c262c2bada154eb7729fbefe8a86331ab3c7c5892a9e0ff1b32765e567625de0cd88ca75e65410e8f1fc46f0924ad7e192e424999ff580794e47731313d670fe2f20a21fb212185b0a7e7fdcf8cd12936ecf2f0c61bdd16c195b193bb2559b0fb9baaf5235e4583e63fd661d66b571b38fb6308c5ab34d12246ee7e623e4f5532d80ed6dae7dd4cc2726ab66de84b87a071a4ebd83c06df1ee7828edc01329e57fb8a2e6c6d0c9a9a82cd3b821a112daaf1e2928a1bd4c70058b129ccd1cb6d1eb55997d71aef9b087e6095a51d99bb4047cedb96c7e3b218890373d172a0faf695483adff4dd80097937f43f37fde7a364c37b8a5526e1ff08edb7679fc77bbcd838e844555ecd42ac8964ebff7f7eae1ad8224fd94ef9605ee872038eeaebefb2b056bdb8993f4d5c44ac5509025e024663f9ff01008915666b80247eac9b66d50ebeffebc0ce044c22cbd6260988194f3a10b8228a49479280069087d8500740438334f7a783a82d8cf34b5fc367c843754c2ed441dc771ff0344af5052c5133da6cba531210fa592911ac3ac83accb337347fe697ce208c173835d262c7052ba9d797f002211004cf7c57f07fe543e525ab8e658d0e7577b2d1cc096fcbcb7f74886fb12a4d7200a7f9acd67a1cd06a213a68532584aef428839c7302b7a5625e0520c784e90caacc3e30d44a61543c47de0b1dddb5f184975e2ee431fd600c21fc6936792f5667485862386214e4480049b3aa3024ba853bdcff38e3f69669f5d2ade973d3e108552533c081343ffc02962f1916b89dd1b18d9da7d9c3b65283f4f712ec77320f1a8a7ec52327c8ffdd4752bd2393a66ebd978a9aa835ae456ad7b20d0e0173338268af03b9738c7398d62d25f6c2b62e7be369613dd04044fad3b17fe2d0fc4b7f0968f8632e5a938d745c125aa705719a6a5f033aab2cd6e53265a16c48660879e6c5170ba9a4082c7ff37506c3c6d1a88aa1b1a17b70feea48f9d3e9733e4bd9994d231498b72e784a3394924c94607f0a27ec3bace4ef310c2235aff7f709aa867bd80ab3395a4e264137a6a3c09f39983f6362a25cee6ab44b17a86848cec029784011dcff429eac084dfd79780791053a2d9570ca3ddfd764933538a32b1ad0ea98f4344e65459c9a81ab9c5cf48c36a7e4bb77d97826e29afc992021c5c5f0c58b9f7d3879de1e5a2e04db802fb6722a3640effff1e8119ca18a66403fc39996fa0946408667bab0f0f67e605bb595f789efa9363cda568eb655341f0acad0ec7bcf4016a43ee9e4b1f8f83757cb93781583da0369528d501cd06ef3383d7080588b53fa66e79d54efeab3eae61f0a6e9d6702e9e79b51679af8bee153d4e3da751979bef63b192d4bb060833e80148e524f75dc918b22ad45b58ca5bd722b44f01708602c13a0e2b9f3c0741e41e068de9f0fdee321e6264368c6a8901b8198af58a6977289f919c8161ddffba08c22d81bdd4c63cb0e6d228b6f8a20014deba44a75eaeb78483a9a27d43cdbaeb743fd5099969c7a76542f7aa8372922bd0af2461fb42156320068b28ab4c923f4d4f788ff796a764744c34d6b42c87818aa8c4b2528004b9bbbdcd634fb7c1cb2d28af0afa0366905a434d4e776b580f95678ce1f9548d2f96fa57ee305d0986878b63f7592aa99360cc1393af751e24a68ab3d4cc9d0a0b54a73a086dda0cfb80b288e39a9554ea9aa52f16df76d5ece1e1810e37672cdb8775e5dbedd6d374e45184569beb9c9ec89001cacac0237f90ce1809a195a05d73507eccb0e4017c12e8f9b43df455e79425ef269d8fdf516f7647843180b63155b3d073fa8411acd434a1ac99571cb73cd033b5469b994edaf4760d30bc4be0e930f7f1fc0092a392a17512f551be79a8dea822eedd7521a9f4ea089f3d4c2bbae0ad34b4770c152206d94a2fe1ed59149a8d10b4974f29c34f6d4783218167e85423cc572d3ddb246400d156307d7a03ef1158960065cf75bc6bf3f04f5d303974fc121dbf2ec28de01f0a797cc3b6df5f8d5a0a8dbd15df4183367ff70b8e354119cc95aadc41c80a98b3d4eb1e24d56c4e9f0b6914a66b2046edec0011fffaaa0c151c9ad034657fdc1472040d95c7edc927cb9a83e13ba14586c0dfda3aeae8208540477a5b00e80bb84037bd755f41566dff33bb09829b9d385bac6e2a3693d02dd4fe80853a45e67622aa35ccaa043ebf8837d34f5325cb3d9bfc08af8bf7d73ce92e9de133ffebd4d6486f75b44589c14dd42247f29412fb14b68ccda4481ab063d2fc7caf93e5e7f7d15cae8ff16c17bdb62f25a0179042c257807ff696fc6b106e9f1256440c420ec0d1673a110b1c6e57411b95680c5e7f0db40123a66d542550ecd90e4ac6045db7f6c373301f8084b0ebff72b1421b4c8ee0e3bd6b8838a79ccc0b6457d07bcc265b80da6a17cdf91d2b67ea8dbdea33d9a4dae1a3d09d57cc3541ce1a2b41f152916b4347f8848174a9659cf161d5690034a3901edbfa85d4200b6d9e989fb069733a07fe7bcffa5f6b20e5b3bdd8554a42111d9a49c3480c2f3bbc0a7f37ceaf9609d065a9b0a4aaea6167bc541ede4f86bd4290e02c965cacb7a0d87b6728389bd0408dc2a1fc0cad2daf4b098d6976a6e2c5331139a54e51352fec494ff06a9e20f2936eb73f43236bf2f7171767ad03b2616064669ccf62045a42c32a99de0ebd50294b4206a9bd7a06cd513cfe59a0bb973102081c01fad4bd0b7b01b03e875ddfccc85b329a7295cef8536542a9e3b0a32064d3f790c60d054bfb71fd3ae8f47e4a7b3dd0f6c68f5ad29e549c4e8d44d5fe366ffb36f850cbea5e141bb154a8caf2fb669ebc9caafe390d1c904e82cae03f591643b0373646bcfcda522cb614031d79e68742e9ff4df0d51796bcf8a87c20ca117ad7a0332a7d6791c3746f187e6b39552d5db29a5c02f76b38e0af90b3dd7bc64a74de4fe143d1c723ebe44daa0cb7abc61a3ee759e65e3c47027386b8601203e97667ae16bb0449c427ec05241ca0106c6158d3d0cd24a4fb5e94d4b4c3c142b5c0c85eb0d86d39c19d79aeb79f20ec9e6f1fb62925805f27a28e9ab527653471a38af179f2a128856dcf550120f34fdd3f48ed69cf068fb83c0b2ba5fa7d2c2d2e172228b4e04a379e5772a10f38228a27b66624968ebdc97eb9de8b7ab58bac70081cd46714ad156eb5c755e11ba4c63d528eb8d749dd21cfb2784e374720b78a96abf5c43d6ad48611f6fbffbfdec72fafa9e889d748693210737f8b562083534d4e561e6ba23df23dd31394eec32ea63e8ac0e8689a6a684f50bb4e099022639e81b48744e8bdc94bf2d7ac61fd3af4da7b4142193ac7578e746c85063d80e626ab86f1850fa6ba3d7a84342f0d6254964d61d493599407390a9f6de0e91c9c9c14de4f05f3539168653a5e7365eca021301a05f74b88485bbc3e97cbb6484a27c08ea58da897c273ce2778c862411ed13a3d827f0b9f2b509488125a999e2e7477d9b21ff6f9575dfebf13b1bd6f509909193fcb48f73a50b8d30676d4f2ec2b10a9e8c0289cd73b0908d7bdbc3569ea0fea26a41306b62a4df958e938a6c112109933d9f91ca92c9244179279bb2a1f64a448298014b737b4165fd3b76f8d3cb4f5e4fad48252278ebefbc8261649e3a821f57208f0cb3612d14903eafa26f609741efc834bbe101943b6b5a74cbf0e9cbac2a3d43740942c3231c3a5ad722b21373d1d6c667e6c9191e56c8d7f69e5739c5c081ccb9e63b99a4f45aae40288c1cbc86557ce031fb776d8c30d46cf36f917d5ba3dd302221c42b624bed9cbf00274ebcc1a366d9505c8f64292d1863280a6ede1d4ab0a482b2e397bb1d8a9cde8f641cb44338b3175b12923c6faf6014444fe561b558e2c11c18056677d38af4ae287788de671e90758f3f2154411a254362947e7ca2a72f1306e0c2f60c05a63018c4e2981d50b2b6eeca8c677eeaf7be09fc3923527d4d28cc143bfa7d24c47198492601e6b29d9c44e815dde25f4614b83a1c3523c30b209738775961f66b70f35a28877a6938cf4edeeca284cb5afe1befc1e53fe375f508ad66d32e26a0361f82d775b48368f2cf20f8ad55c1b13aa0e86869e76f1eb1de806efe0cdb83c9107fe460e0971764e89127450228d49aa3363d0bf1e54da067f69e670e550eb815bbe78071ff5fac9a4b45fb3b34631458d269372c5e1028bce33c278f732b8722bfd888fe984cc605e46dd066ff62ebc8a9b604b6c95d0e391124063970be09449f1a9acbef3667035e543089e69c94fd9d201d5412e279e24aa3b5f6cd231fac3d2dfaa3df99969f9d04d4d31fb97e68197ed55d26a933dc88646f5ec66882dff96bde9932593e53e7eb31041db6687e4cd899b6f24fddf3a23744a09359d490bab3e9b8e453889c630bcde802e50deb349a93ea1f48ce4dd25948c3a5d4ee2bbb718c780917b77e303919752470e4b8a78412f92fd4defffa97e18111111f8a4e309d9c605b0e6e60e1c38c375d9310410ef12451c43c051730d9b472c0268a6b7af8fd0379791bc27b6a57e820bad252ff5b99c4b272b8c4a61d1ded47d6f62f98c11de5673e8f75cb32c5e6bce147a48c926f2a31f1ba6082be08f31c1f722e169636a240ba9a69f580f999122b54e87c5accfda361d94f3bf0ef8a1ddb51cf3096e6b46f61ee1b67bc292ec781fdc987de9f26927d3e4aba9f71a1af1d9b2c5cb7986471cbd618f803df730aa86831aeb4b15a5e7143ca6fbecc08cbeed0072b3fb84767df0d24f6885ec5e6cc691f376690d7f76a796f5907d39e430dc2cdccb7f49cc63798da49c833bb63deea54ded409c521e3dbaa3ab64e49a6092deeb97ad596cc19c715d87a40c725c949968364609790e236e5ba53c9f7b840fd48c8795a5d11031ae1b9c5a50f60dc064c40aadc6308821672959990f82e303db9d8b3ef02b78193b171fbeedf27f8cf6e9980303c9735beee63c80e59afcd613c156d29869f1a92e1a594d6dd8dbf55bf2a087b7452b8b138c103e5f85127d74c78ee5a1c9a3dad1f3a672552ae66bdbb065ce506ed2c552a42f73f44b5fa41c6427676ebfc9861ac2b118ed49d77b741211370f572badcfa1f21849d7c4f4782dc7a93f7c151cf97fae9a5589db97bf0148f429ac15a29b0e", 0x1000}], 0x1, 0x0, 0x0, 0x1}, 0x100000000}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000044c0)="77e343c278d1cbb2741a329eeadd0a2bffd49a88e9c3e33c84633681662f385dbc6eb4ed3f4a214560688706d2564cfcc0e5a790daa9bc6840d804c58c4203d5532a39256bef5937597eca288931b5ed5643a7d6b79fd8c8787d8c8b3f42a76c25f9c1abe11dcd6d7c1ccc1d3b3d1a", 0x6f}], 0x1, &(0x7f0000004540)=[{0x10, 0xff, 0x9}, {0x108, 0x10f, 0x8, "becc01e602d39beedc29421c3cb6a07a704081ad0a8271bf4fd6e7b2c9318fc06a3337ac6a802a30c9f4302533c48547d399496568c24425c356ca2106d08ddec25fd9ece58b1a0a8ddb708f45a3404aaf41f95cde767c5c1b01d14d28b18ca96b8d137c3ed99684769aa910b88ea63c323ff88bc970b33b1fcbf65817d042c1d03d35c7165a901d8a7bcd1a20db5edc69aa7d773f93b9e5069b6bbb7f1191b9944a675770af4b264e447403b85b7479fe3721b713630b7d50461e4c286a94ee46704e5cb641124402e999cbe4a7730a9bcc861424fd14f5ecaa4292f3c6e38df48d7e1665be28de5d7f620fd15da54541b0ac5913"}, {0x1010, 0x6, 0x80000001, "2c92848ca746ccd817d71fb50e47be7c7acda18e6e98786cfe0dd85eb99607968730a546b8b849a148713e110b634111a36e0ed538a87056a9e2304844f1b178c6609033fd6cc60e991e44b15e86b627db98739b42b72483fb360a8ae893111925a59decfd662dc187a6145e5d671112bbe801da0a237b6027516b9db72be4d0239e1aa8f197c0210de51d9a878ac48d2074599aef7dc850e7109690cc39c8a8b3e51f8f8977a21010b46a0dae975a697e89c2941e1aefc83b6b3ef4b152b0fd5595f723ff088cb892f2e22dfcfcc2b3477609befa6aa4b92d72617d0fa62044d54d41a047c2e7f2ff18aa162d7cb0a6703111e24ce6245816ba3bd0c3be9df066871014e01a9d7bd6f99a717ddb39e56095d35c906cd20edbec2b49ef34b2aed5b2271f589721aa22ec631b06904da66f50a823d343f78b48b49637d3b7445edf11eb2ba156e4ae7121a5ea7775c1b062ead190f55d757abef3884fd05f7c74f4dc7f766edea600ad3e534641890d815aa752a76e6e257d986f58de90ec277c45f3956c5b3553445458769f623d73b76a6c03836a35bc8477d806236b156887ecfa613e250988562b57a0db330d8478eaad42fd0505d3be12e20193be3b40c6f69205006eb59e6562e57bf682588fe33d4d21c094b343ac83894af9fd3ebe92f07d3d20188a872e35fb8d81586d828aef52c5813400a8ee8d6bd42928be3644f0d8888291980c729c8bbef32b37389b28883e2477ec97edc2f546c2db12ca7f56aff1899ea2b1d4f874b810f1623f4e7b5cc64b1d6d8c0e55657f57e2e91d4233ee670ee1fb21550aaac3689579fc860f8b6afef5c6e0e189fdf7f049b319ee42e77778d6c1358d52dda897978fdbf642956aee0ee74ba40d859c0cdc482095b1ffee0a60b8106deed6806442d1fecaea53c8cd14cc8cfd2784a0bb9014b53a18fa9f00ef304356a3bc8965aa223d44206095a4f6498d838c35e2896f4426a91e87993f6333c75b6427415efbd04dfcaff86d0f23e915c6b6ce8233226729b28158f6125854d55192a124d284c2cbde074a182d9ee1da6f3fcb8b59bb2116366f0ee24ff8d611b9a2f87983c18328b4cdb36ca69c806048deda806f46dc358e311fab3e2c03a429dfa52342bf9ec512f65f6debf4435cdf4759f2c7b612a7149cbcfc0d0e045f8c27ff7cacd392908e7345d0b3f406533810467a86273369630d209f4b199242b7db236e74cb82997a83154407e4a9d0117a7d2797cc4a3eb1a869b5c38530926d9171a1a39c2aee90e65a22c14d57435822840e531b872fdddbd67f6923f87afd1ecd6f183152c41824e98b955e65aa02492c0c5ac4269631209fd604829c4a3ac1e07c23127dc68151702f08ae88b05fcabd05d14b224c93ef4464c845772d691e2c6de571951f931f84db614815d94d2998c490e7ec4ab8d969883e36263706c6dfa7bf673f9901e3b10be854cc95239ca38c38be02491e46d2b4db5b3be5c32e59d102c7d5c072db52e03ff270b028b22a9e20817d31b68f338086767c7191dad4da4a35399c9767623e300eb7f3edf8fb29a46b09d78166fbc8614c0178f0c4ce3aa6be5fce91eb4c441637b08005ad21e64a879602ef29749fe2aa957ec886328e19fa0b98b90d6fb5d231123ee8d210c8848dba6d227e4d6804bd6fad4e02e5eda3cd170d3f6946d5753004da03fb15bdb8cc4a4007009b61625793f2fce0f1c3a3e99f1dd9c78a8de4eccd4058bf5eed596c33127880407a8fc0bef69e354b2148a249ec37e6b8127994d17455eebfe7fef926cf378ebe85ca918c6b7c09b3fe6fb224306a186e0d7f87c3aac43ca86816048ee9b7897df16f1c1b28f94add0287080cfff817b3e2d8c470029b91b18df46af18841cad2653894c7c242c9d7fc22e34c5c3800a7601e6850ebb15c662e966b4b6f0ba54ab136071f7195e5717eeb2893bea435d3a264e2ad4a56cb443d8083f3ed00b1978b711adcda5faad064a6e84da8f84f976094250675c52178f9442ba12035760a7dc4d7919e65e74fbc9b171d48e0684e015d0a11a8bd947d6c14d6367a1b5f0891ee0873bbb527698a893a65c5c31d44a3460b27a56c7a088990ed2751c6437c4e13147e3bd2c961028a845ac3f9d2a301c8e704161823439f3dcfd226c80d662136720fcf93225ed71850bd3ff4211953e3303c8fb4a8150dc2964956510aef73901bd2fd6ca4b8cb7b93ca0f3b28b8869ff7cc7af2b650ae4da9559fee3d7c7c2850f2da20c8ff96fe898984a7c6a633ae4d6d14ebdb8e67e40f2d0535a189e597459f57b191032595d6044c53bcb13206039c430d3971aa3dee72b20577e9aefea0c77078b09c4705564366c95291d67de1cb048d8948f1e5241903382cd01ed61097984f99fcc22e7dc7388897b43b8c7bca7e976111f428a5ee9eaedc30b04e5f83016d8bcf242a74a5c86668a31fc99e887869d70db3111f3c55ef38bc274ddc89f02c9e0822839c86e15e36f94e7f2553670ee292e58f44f17d41473ba7be38945219fe11e76c54dc11900fe2db523a4c13caa8e016a36391c43f90837cab77223970a66cb9f762b4221ddc98d3605d5c2abdca911237aea642907ba348465eee6bb03dd8985196968c86a650f510fac547c9e0b0fd8f2559c013654c71c53ab8e91d9fd9fd190940981da4af086d5aef639359fa1a2924c0bcd5d0ae204e212b968eea3bf9b249ed6bc9b959c2726ea26302293e90b1f6de85319bb8ca6b44a30ecd64866bd432805204e08def8627fc49f4b5c7932d7aedd3ded248eb42acec5f6409e0fd1cbb6393d3817f9592fba9dacdb1c94fa71e61a579fdf4143aa579e722393bb39c5fc835a58799514d54514e11a4974d4e24bdbb5769b4bd2510c4b94e5d9f2efdac8cd2e6904899b2d0e152e7976a25bea3cff87198a0d0e3c5f6023a34326951092955e18433c987d21d8eb4792ffca71fb37a66992aace8de982ef41fcd1c9692719f15337d6b2f4a74068ff3dd156823bd5f99ecc8866820c9586927b8c94e4d654ee22db92fa101ca6d9133ac9c93625f91a30d183f2340585c084c2575aef433fbe48e564d181b9c1e4ddf9988a307e8dca9453582126449c32c01c03d1a3a7b854bd7cf6617d8588fe95ccb6a7a0237b6f48dc62434267eaddbf8da5d6a32c640908f054fefdfeffa98d5b31deb8f6e680abd2f7d355a6b228b69f9cfa6eb852bf80bd472f606a906716b2a20d8b662006175a56f61e5eca0e80e67c5ca165d45530ca44039ef8e5c1b6051c7d3eb4b3bae164196f835d24eddb6bb9599636b366114b86a6f6b3e5fd948e844898e5f188d9eab81a511c2492cbd9bb2992d0012b15fe8aad13c45a71086055c608710b3e751db3ca4c49d8e05a0da496a45354e6e7cc71ac0b43394004a3d5c2ddf12a4de65a964a7c33b3a13fdeda3fe48857c6e3ce1789d7f6a16279a5e5d245537c37788d69dab06874c5c2678ea1f39946f82f93b467cd7ac12a3dcff4f6274fb8eeb974894a1d0c2762ec359e574bb9b545ba395337f248a1207d51304812aef9c113eb053701a767ee5d4cf6567d8fa3821647fa2ebd8be6e4cc9faaac68570b6c7b0d53fb69914776bf7d7ff53580866e0ee642c975e2ee156b0a19540b7e93b189bf7e7ec254ff265fb5d6e83377f1fbd2eacd391a20f9fffa70663b4fb09e4335529f30fe852619815fc84a351c304a027f0f8d6f760d4edc40ae9d756e9587b651c0dba96f59404b0b40208ed59f6432fea8d0c851684256fc698ec3a3da6e60f4dabe0b7b76dc833b38e655635f428122e3137c451f0b342fa94c2b2c2eb1698e8c95736ae5f35f4b6f4ef96f54cf7f4f405e8200d1640393be00edd992e5b4b7fa366462f16395ba54d9dc8c3ddbba5c7e9966b3d54aada5fed47d34c3e6273e3b974d880925e2d4bc1f8b426d42b678cc86f0d39c35d7e5c726d50b4a37e57e79207359bea6f0c0615e5410bbb8d9617ec180f28fed3376252018a0ffdf4a6129853160c09da310d0bc707f879cb1deae7c6dc20e8c8181948fdf1a08addecabe22efdc59b09f876ac4e392702ef07c720f9b9efc3ccc336d43a05512479459752ddc29848e2558ad500349c3c641fa655fd49f210f5567788ee5428080d84c6e3c3ded4f43ae10560fc58709fbb9f79bc161e1691b6b1773d1cc46fc392d494d442fa0d7ead4ff493c2c2c4744bfe42ba069dddbee53a50177b0049dc9ed23098ca85af12b71b83a625432b08aa2366405899da306077b7d22daf6ca143650a6eadd1a55052977e5e35cd50bb7b43ec8039dfeea72dbc8a6f162f789d5c010537cff65a95e9d6697cac02bf379db99d6369b3473fc76e5c698ae1d0f653d62bb8bdda8657c12d1cd60d9dde6aa18ada92bddd2814dfed358f36b6a309b87b715b013d5b05bc987e8021f829c1ef5c8f97baec6c116403a33c31beefeeb3c5477eb90d315bbba4c2892d436c3213dd722eb00ca4eef884eaca8de970b4d85c06937b4c3c570c52c4fbc06d73e536b9585885d37dd39b4044b95b063ca4f4e59289a5697fafa6b2351a8fe0c80fea83cc6acba2cefb43b839cceaab1b3fda670cfd51fb32e16e9a3d5804d5f68c0b88603c1ee00ad4827eb46fe163e91217f7ce47f70f07a36314061d2962a395b471964133ffc159924c2c4010f8b96753630d43b6e73e249be3b17a060b7c6f915007ed58dd0d9ace25b6775a45301b821c5d03a998ca819b6dbcf9314dbf8b9c1ac0c123fa2e3031211b64a95adc40de84434e6a3d7087412aae2d435c8bcf704444e0693b00b883180aecd0d59ca719d6ee96cc56d7db1e6b19897e3c7a7d85cab15f8ee20b04921df6c4133c4161d82676c544bc157e1f0690b1d185633bd2c343cd6f9b340470259bc2ed60f850d2e19c86554a6e86cc12ec92f383082cacbc058b42952d4c72dd867020e104425581d5aa2d63ebb150cd8d390086e8805f80bd0946430c2737e6232bad2ddd0411d16c231af2d544b688deb1c75202a4b191b4e5650da1bd54da5223e2982536694946d83b407d6fa887e0ee03d46d0465961e13e093a6235febfb2d7b4fe81a41c1e9d27307f0c4b551ccdcba854dda3ee95cb59d83c82af85340eaa99eef02f0a6886d93c94b80c8b07f5031fa155784ca057c2d58e59d44cc9ac55dbcf9e7d1767c13d7c3d0ea8fed95b6ee900c3961b639584a13969e4a7ad5a46a4e33cd54b0826f3a1439cd32aef30362f2a7e2ebb3b833a26dd0f46b5595c668758e1bb6441f450acaa0f09ceea5bcba1622e7ad62785773c25bd38a704e1e51e371bbf1f33abe9973f0e8f03566b4b48d131820c7af85b6d152e3353a981a22703bc0dd66143956829b187afce2e399201313be6929f1f698c67085fa423ab704f6f789441a5a4ee5bd47708af4e103aba80fb936b3127b0a3cc027e153ca991f14476b72946f0e127515be9c44ff0271dcf3a3a2fe07b27ddc73426ac1ad3fa49865d20d3054c5a4272c3fff70694c4c34a37487e8bc6c5522decdf4f08f49ea6168ba910ebb646c7c8181f547a0d1d92b8b38d864d4f0e45e9f104564effc1eab8f56bebae3f11594310c067407f12adacfe71472a66968456bee4d139d5d3e3386672f01227112f4121f1a83d922f444ff60fb2588800b832409a7da769257be3bbd9cf944ae4b9d7a3ea4f9cd5acb60f786a353c9a1a5788206e6fa79f0f5eeec3e968cf442cc4f72e9c5ec69a086ac0e83213483d58b870b3e16becf439171e6f5"}, {0x1010, 0x18e, 0x100000000, "d05cef7c322f24f7fa15c208edfd918ee0e17666bb8c8eb51b5450819f74c8297cdab21b3aacfce1c8f22ddf76edc50fc518fa88c292fb211b8900424949f687f3966166627b069122530272839dedba6024fceac4cb66ade2f464b6eec6ffd8a4ee4e0a8fdb6d7c22c2f0b9f46d4d21abd7dce1a913f1dd221f7549f9ea78b3745767ba408d844cf01ea6e02cca767081056fb5e90d1b6d9e45977295b7506cab2f7b57b038dfbae0e0951cdb1575dc0efc4b51f612119f5dc8069f911ff1f7f4445844eae8f51448641b8d98b4a708138dddda72ab31faea5c6c98d7d99ff6ca2f6213c1bbc77e8b55df2ea26352a2673f4e757b24fae4d379e565781e486eb264419738a804d290de182f7b2397ee4d6ad0df6523658babaea2d5200dc4411497b2c84af1c726cf3dc58c427cdadc62d25d4e34b5a9dec4611241f33457ef01bcb0c0f9478d3d5bd28ef739d38e10e1427c1eaed206fb7226feaa823cd4a0ccdb2f39aaecadb9777c1378fe5a399348b301c31f4e78b27c2434ccad980f4b285e55b854ec7eb28a61c30dafcbf8a80739fc8ee67f8cf5b53d6bda84a1525f2ced5b9293b7020cfde830f8db50485e27109bf8d8312d265ab1bac0a713eedab0ffe1a9f00758768e5ae6b22ee7deacdae559ed75f6ef6a1b398ef55d7fc919ae7df6234561f84497479b9f1e3f08a1193c425625e0d54a58ae4a232e025e772be84ad29a85ccd45a65d0a4a036bb42b360b0df11764dfd9feba9792601c7eab7ee0f49626b0a60049ca490c15ea451355663023a34b7b49070c4719ac69d0f60375de55a72cb67ad08f28427e88f486f3d21cf547cba1a731892c09aec625e6dd0beae4ed3ca0010342eeca713cbb5814242ebc639a1c80ec8feb2edc684b56efbce3c701b2f40a4a904aaba73a7d56423e6174a4f0d993c8ba30c57a552eb3e69a05e0aec10af49b8b0ee78715bb28429d7205ef964e500619e1fbfdb29ec4d761a2bd346ad50e84a6bae2ef43599b18de08abde1e47a9503a4e09ca69a520341a0997bfa42e088c11abbc0d4f04a1f1e32df3161ce978a2fba30576fabb4d19494f28f049bb52bedca2539a4df6d74773941e5ac242a9d610461c4922db0860ba49ac7078b9562ba79422ece0ada7795c982f49366f4bd71347b6a60556f80986925bd02b2420a6f9f66d4ed68044eafadd90a54569ee1936d6ba3705641adb0d45a78584e4af88b480ee431dbafc83eb024d2b45e75afb30a4ff96b54df4c340b8cdc8d5f7106d355402fc8a3e788cc4902f11afaf4a2b6ebf8de1262a99115e3df5fd78d696bcb82dcdfe5b6332eba884e3110e883d54762322b4c12288db362820c0bb3dc6113da9d79f96e71a04f3a3a794cf829751c1719463d405ef8074534763b946fdc581053ab944fa18cffd0861808f0f81df39b9f5c12331d387ab1c596336dcb7fba2895819fcdd3c56c8c6c23bd2bf567e5ae7239287e906c552029483e22b38484133249a23e0896dff91990b671a6cef0b0d7c1f7e8b9576eb80fe3ecd8fe3b581053bb73026eabc2ee8f06934d0bf15493cd69326594ed9882485fd629b103b1370ea25eb209a15d90e6d0c556ee36a2046e10ab1c929ed887128fdc1463125344cbae9ebd8a36b03746c09342efe1ca45ef06cdd7041fe5b1a375bc81a7fd953b12e16e5ad1e6b3e4385b19f20081fe8c1cc941442304ec69d621fb11f9b703330946f602946bd09e28bcaed4c1a55fc6c764feaedd6c6e8bab56a98c9cd37ac7d18cee12a481de1f908484d5d1fa806468f8fe808e0b2c5eda7329b739b0cee11411b7c4b746109a0fbffb186d2d1dd9e870aa8c1b4adf9860b2d10d1440d394dc676ec2301d4de0de0b2cb9b7b62864b0d9e3f4424a36797414d396f968e9ab71abb24107d8894dea70b284622df68967c26728d3023fb47d94a14978f8bb7acc71489fd90b26da67f48300c7130813fba1cf0e391545f758ed5c5ab8a9afe4323d1b869428675b7ba6f5d1d2d446cfaf2c030d3d229fd6f44873d64d5f803119dd6fd225b3cdbfbcf8cc5a623b6b00de8338af0882ba0d5c90aa64eb8cca0d704ea5f10d61b4103b8b8071c1acc1532d759bd64fc8765c7ab61b1fdb95faa0f58f07e536a9b6717cc5509e2f53be72a6e3ef98a4b965bd7e6811ed419c7c5c444dae32ae49937b8feb5bac8c8113000d6123e0526ba993a61b73d87a8107bb53e1df1c2c6a841a12acabfb833158ecdb19a7ccba376282571a9f9b9510c77b1045298580411abc927d04ccb4ec04880784dfcf7a81894fe41ddd7e031d558b0a07903aed408facd83bbf97b15ea62eb4f5f0d80c2f2c5022a61737844b273b5d9ee0d8a4190f5f880e5f0329a85986a62a25d4dd02e1773e687ff40d2ae59a8a222e72b900112edc88967ec7a1f24e9a4c4203bfbe35151e92227d5e147279a23c3641506513a1de21e7999a8d91391d1b6b3790e6e9c7a018a0e38314f18d01cc32250cff00bc1d0ef90b01a5daeaa7c2670b041c5b59e63847f89bc48ed153143ec17e589e9d19985a126f3f2998268692d2369bb26a9c8bfc556490b41d470463b84b2209d24f55ef357eda47cf1f518fbd899bf53070bc3947cffdf82a79ca2c4c4e9956f307dbef719515752f740ec6b890ada0f42fbb343e7c83ce1899bf4896158b1c980fe0364bab21f63dfcb594ab84cdd8ef5fa948d3d884f2829522b820f55a0f0b5b4f5fcfeeacafd81541922222da9283745ba5586b1254cb32586c2cac6750cbe7f0ece22103b34d5cf24b0275f8b48fc27dd10f76821cbec0e2ec1b0fe5989d0aa293e99167286e1b724b6f57965d6b8f3b7c9f424a72c47639a2ff60f841646d96e972b7cae4a0ba05d97048acd6f50590e4466a82d6f4c716958cbfd1dc1752b293aa3306c46c558bc347443966fa2ec4fc459e394d99e7cb789f34eaaceef51cfcbd0226e3e292e2dbb281c17f84886b74caca787a3d5f2736c6663f0c71f5c15a689a8e6f9e0e6862d006b356d55b18c9300e1172b97d22417401242830df8b68c0bf9084db79bc9f9b01bf1ec3b382b9b1ccb2dc4a1edbd2c11509e7ea9b0aa4cb043071ce9b3def735858dd6625fbebf4dfb628c01d3ec613643c97250079285a45709a5c4f1128e6ae35b735e9c56fefff778ebe54ec2c384204a58dca8215826d1db1d0b4b0bbf84b3b35bb4421d91734b8a2850dfb4af08966f6e67aee3ea5489cd018ee9b0d7f02416f7fcded8af79c9c646fc3e877927059dbb27d9b0fabe85cd07140091a544af5e7faaa7430f2bea68067a98bcd14ad57da451c155d96d32f726bb5520308851db14d07950080d2f3b3e5aec508e7b2817e9c9282777670a5632100c6333be2c299f3aa3cb9f62c295fc3b24d2ae029a450706db62b387037aa99400ff57710b48ec5bbdce1cd5174adcbe0dd74eabe0b916d18a3b7378b1482fb9bae985b5c0a3a58a6d55273c9fd5aea98c8893d0cae4be442156c800a55e69ccee3f657c10431c7e035b7a5dd1489331b98a83e71cacec6161f101a10f6b58a74e997b1051af305361356ed07609f46f36cd0b1535a46910aa3f1c8c4e491b7c6a01d6dcb1cea6a422047a9b79c6702715ac8bae7530c5670b9cfacfa50eac0610eebed8b25e89e304faa862e041b90542c252939e393f19d3d5dc259e7159bd9f5fb24ab0bc26a8099b49fe045f4e9a457526301c6821fe3f108b74ab6946deb883550948876832d76c8e2f847992b389552f20dbedaeba63ee7ecfdf196b54e76946e198f9f7f3469fbca72bed09264b8af2962bca383e1b899e3f3345640aebb8ff6ac3d8f1ad98c6d82b00651e122d274ff9a697c2f19013eed01399b6853fa988ff16283a6fd0b467a927c0f63bf0f58f87be934115249f6763561f002f0ba33aafd908d8149cfd0ddcded40d46646aaadbbed058f0fdbdf5a1e782e3b83e3df290930c16c8cf598d17eeca4aef68db381a96241ebe36a7a8c1a52f8b6139a4177f09e88f51cdfa9cf23880f3ead8e472df131b2b32045d217a3dfd4d0410f2571656f9ed7137755927bfc6d229724e5858ba1f13c59be3efc3cb15ee285b1d755a470464f0c6ee8a554ae255856621ba5aa6f3af31e3c22b03ec9b8da3453e99de7f4b98560d631a5927e583f401c8b41c5f4d4bb949200cff9e52985e568c134471409aa19e2386cd7a71a0505b6a341772ada219c5003dd28132852a7550e57c2335c276cd3f86b1661fc4eb57ddac23441d3f15c2844b7b13d154f73b48768ac09aef0ed331647ebe22dd0e065a5f2b58efea62401065cf14fe8dc82ffa106b8f545ac65624fa8577863c6030d21ecd754140382f876a22664897392ece57486db2922209b0f58a0a386144ebbd8b242be659e152cfabac6d9138327453f4d47e436e8c67632d9784326c73d12c079cbac00a97a053f1a760cb334c2b491b0a1750c335da068f699a3b4d03c4d6cbea8b1c7b709dc1ae2f63e6f87664150a7ca930e6a42c8c350b55a5a0c075a7c23807ae657c2bd998a8da71a32353c41364c885f55554932e114edcecddd37cbc2fbc933ed9b219982226b15058d3b0737c9edad07986432fb25c23e60e7fa481b169d1e026553bff65cac164bc54aecf451d3c1085a58f2b67582d07a0822dee9254f8d90a887170a7c4122db8b6f5b522f45a9d7339283b76243300baff7ff3b6f35255fada34f50e1f3e1b6c09c9d124e5bfb110ec873091f35c74883eae4615ebbec7c6b161144ba90a677cf8265d642d040af6ee609c7a706ad7acad1f2fb3a4c7346c4a5d15152a67eaaaa1c3bcaa98d188d9e12d6bd061bbaa9c176363b13e261ef9ed82d8249925ac86a7dc55c5d30a6e396b2ac3e6b057d1d15ae6e41d87d462eb015e06630892a9b1c2dcbe2931f51f9ce17501487facab1571bc1ccd83ec5b81393466e9373d0547fb48d70324118405c84c7ee3148c46b68a9e1b1a704e0cc44ba1571c5dd9c73b4d1973010d0227ed997f95274b5ec5767508cb2e8268f559a5b27ec9c9e08b5e2c95725fe2ffaa772e0f3eeb1964728922eb0d37c0a6745273670abca8a95d761bd4fc26fcc5c9232a60e65b2de4197349b5fd154224d583a537f254635853bfd0a53916b0cabd9b0825dfc27e86186dd74741b65407665b07542fb1690e3307a6bd8aaf180f8d8a8134d29cab56d82b7cb09131ebe909a8615b5fc22908f4d96a7ebbd163d04818aad31cd25cfa6a8834330071bc3cfbb10916d72187f89a56255fbb6250f650da5e3ee59a9565167addda6978e94c8ccfe0e32c7203b2e8c65e9cc6342e47222587c8adf1247440da1eb733521faf8211d7766bd2da0cf2aadb850ac45b56e2395070bcacc1feaa4ce30f518abf627e43c722287fa8ee82194a986d93b477ce49ecd3c3cda6b6ce5edae8b52ee311c96c90c63165ac69bd56399667ac02a12ffaa5a32956d09eb7dd2aad8655f8dcfc2e6f29c6b12c82906e2208fb0a5152aa7b12d09f4a717af8d5ddbf478e1f89c5461c78cd93e4ac3ecf539c6a4600e18a9f7342ca43e469b92287aa748df16dfa67cf8632f1cab6b2e1f55de576f1ad09f63f91ed532ead812377b08497803b970989cf2eb5ecb46752be91973d75b723da119581478c6fa537754503503995529b2763440002801fc84e8a74f24a72167dfd5cc39e2dbe5f0029c24df46a4d310fa85fed3716c0fae8a6748d066c8dd8fd4c9b5d2c2aabde5d91cf928298ce41f39766e3b54f7ba07d19a138837"}], 0x2138, 0x40}, 0x1ff}], 0x5, 0x4000) [ 478.075909] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 478.075909] program syz-executor5 not setting count and/or reply_len properly 15:43:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x16) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000004300230100000000000000000a0000000c00010073797a5f74776e00"], 0x20}, 0x1}, 0x0) 15:43:23 executing program 3: nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000300)="9a", 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a}, &(0x7f0000000440)="16", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000004c0)={0x0, r0, r1}, &(0x7f0000000500)=""/11, 0xb, &(0x7f0000000580)={&(0x7f0000000540)={'sha3-256-generic\x00'}}) 15:43:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x143, &(0x7f0000000380), 0x0, &(0x7f0000001400)=""/123, 0x7b}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000340)=0x68) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb995}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) 15:43:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x28, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0x10001, 0x8}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x101000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000240)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x81, &(0x7f0000a4d000/0x1000)=nil, 0x4) 15:43:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600010076000000000000000000000000000000000000000000000000"], 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x4000000002, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f000095dffc)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={r2, 0x800, 0x2, [0xfff, 0xfffffffffffff001]}, 0xc) 15:43:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000017010000030000000000000000000000181000000000000017010000020000000010000041a87d94d2eec972287b97ed593b1c4b255ebe2b5324a3181493f2bb6e63933583ed20413bce514c50203ad4d31f388f99890227cf1792a55f68e47732a11d00c9ef042e53a7e4b051a62909b9b8438923580c03c44e17f4b861d70caf41b88c2990f0814d28352f49e0bccef191c3edc58b5ec68a97165dae4cd0458285df5d66491b7b673f9f0921b43add470ec0541909934015f411ff94b941e107f024c4726a1b986c10040c5bd6ef8220cc6dc0c7fd9a11fd4d011b52f0a728dd9ba4e3ff8e04e8f670df376425c1592fcd47a4642437fcd7c67cba4483b11204ee6cf2783e317ecfd86397ad475db144658cccf7b857df8853b540ee1fef6797df5896a3eef6a030bcaa619cca0ea6e56be0de55a4a29c6904d8a28560f79f37d13ed5bbbdfab017b2f0ea8e3f7d0b2f46be067325077956b4944ba0c7748b0ad7b88db94c003668cf4093a2e3508bc757483e68a8c4d1673682c9a153424ee8ff5c169a1ede0ad636ba26a343c81fdd1509961cfe59a55310d2f31422fdb5f71b1da70cfe02cc02df8fd1647fe6e3ceba82cf5362d6a225e903df495e0ab03c5f0fc0e391eecf10c69fd0ea2e3361a09af8973d8cfb162dcb2f3610d91b3b8f9f6d641781bd660970587ebaa15a8211131cb18c586e49f9176fffc8bb9394d20701b26a67fd51a26a75494c9b37b305abc90c01ad93e7bc3f5dd6edc8ee69f5f32de00cd71f37d7b827d43d3d972b7dab1c00a8f07954b63d1aed01654836d8602754e94787c00174bcfd78a3eb03128cf61b3faeb394caeb73420e78df828ae3947f2926081ce7fa108bc0601674ccc0d32a8cf54ca0355e3deb4c6a714c51d50c8ae6e53d96bf31a8aa4538419b8a054a8275584a322f7a4ecfb995fe3682704b8d843d409474a45d23134ef7d0d430aab6310e26d1e49484ee3949f71885ebba4bbe58912a4a099955857267c3697fe83318f094b31d27ba5731c23be2a2582721272d0d483e63fa7817cca80dcc538c33f0754748fe20ce06ca8be6dd07f07182faa7d4d588992191b30399dba3925b1bbcfda71346b3690a028e7d3ea32a703b761d4600f8c04bb9acdd4a0f3562b3f4dda7e81d84d8d379c5e56675c6218e1b8fadd86fc595757e13c2bf770320058b7820445e877e2e018029b5eff17e7f6e5a702c836c2d83208a6b2a23e716b08b378006916f9d3bfeaaafc7ae542457771982967c5cdfc0d9b65b1057b832b4612f8881a69b97d32d0a3cd8786dc8da05406f0962e51f64dd0e36a02d7d4177bfb28bb6964908f0fdea88d901a78dbd630232458fa1242827d28ad4be70cd2922f38329f960ccd23ba8c8c150c2c6968351f7fa6be9d74e5d9af9e118f8abef441f81d3605911560e9b1482a028e9fa9931f2414a288df13286b16fb49789c0c5e5d14af9be8c796aefbeb3d63ab2523fadaaccb7d9e584543836ef1dd99bc1adc8713373cb27f75c92c818daaea3c7cb769b0df28ddc578e1b1f677789e3d31a73fef7d28734953d3aa757917f05d26ff27672e7c8fcc77b9cb8dcba9bbb8b811cee57e9c2ca0371e979d51f1615f6bc6257b7dd499671793c41db44597025006792d64dba77cdc23ffe91e9b7df869da9b649831b57954bd0f640eb0563e41ab3f303d34e58627255eeb92a1111c0a0e6bba79e915993b05d00fda6c27bb749594fd27aeede10759144d726947c581008301ae92a09771773ea644b550c490bdc9c2929e538a607f2993064894338738260154705b7346a5d92e557d0d3a02ca858c425dead7b2b7c7dcaf49f52d57f1e77fb940258e1fedd56811d5523e56b2f425deadf943cb5167419917501bce9dbd6ba71d7c5a00e283bd6e42d3bd7b740bee40b125be3211901fd6e68fa66cec248d37f6ca8c64940d382fa24da208f6d9a89b89b3106ca0919f780e50bf7029e63ee4fa90e83b04e34880b82ca09d4634b743cb51d0f365ea3b6a166e88bb5ad40019ce32ff5e084fe769409bd6affbeee15d0014958167486e5326a85d23f8ae0767001d178ecde8011a141c19cf720ec4c163bcc583d6025af51cb19f2d0ccf0cc2f5aaeb7c6d0a19b8f5848de879989d7b581fd3782544c63d1143012897be5fe0e494a15b53e93c6ada50003ebff38f65f50f6b41ef337948ce48e37a25eeee7654a07d44db5503c3ac1c975c80247705c60d5938ac79fa744e4eca6376229ae47c12df1d7aff78d113d6546dc6aae3714832dd43b23abdcffce28d409aa82080c99038e69d389b694f828c04c9f0c41920ce512b507f4a9bcad7619cd3a3a52639d1f863f00f937d11ba6b9c074d2d7b977a06a1679670f36af49958070713d01190cac2a56c51a40853903ffb3a41288d1786d2f87dc90f69adc2c5d7530d5ddcdc9c4f4cf514181edf506ef2de2c9393a05436165b39f28b6387eff4ed8ca96adad45957f3b6a08c1f0195a63a33d87a62770f6c5628a536edfe6883ee30cf20c1648087894376935f84ac67d7fb94c66abbd6ba4f7bed8be66a1e9a6a7d788b8e3a6121ff0dd57089cd891f23168d5435b7c65918c76d0b71ada7df91d319a66d8ed07752beafc502df883d38c53937f6835e470df5c175576d8c83d80f63dcbb79831ce0802add26e557c616ea8e7b9142f0ae79d7d56e7cda8dec39ba044ebede4f00c8912ffe092e24810982431f7dad59cb3198aadd2d88f95962f44ae7f17af93514f4b3c728600d63e547c505cfc2ec52c5334833aec08c64786247f3097c1ae030ad6b4d0ba6b9af7ffe9700fd494ce0ec6d1268de5f7a5521b327348bdb59296eebf22f3c00ce14ac31480b4bce4a43836ddd1f14ca6c79a653f20b79c07f5f53cf79410d9dea47653b40e3c642dbd8e5ec6a1ee0837d5a6f3efba1edf989bebb59800995b5dc1d6f3be135410210738ce41a870fb6da481be61c384fb224d062d1bcf1996a17406d1d2b2989d5a4153d8fdfe2c62b77369d29b9dde941e7378378d01175861d70033df463380d58b686294e73b0911b36b49d3f3ee8d61e45a23d83f205c96aa2634f7011a7e78ab8fb3cdf6eb87c94572bedfe65ee9b28494402bc81218b5fa44cd43c7dc5453d23e2e4e1a65468faa5946611554eb66024ee3e82dabfb38a7d389193064434cc9a3acc7842be988a5d44962878f951394c74697edcd46a56b7729d5aa14b3d32ef9a5246e6b89407c5388c42d8d60e73a6a5276630bf54b596caded109924cc8fd1853291703d3654d54c3181d80159fc0fd0dfb496f5f765b8702d29bf6241fe4f8bde4f38175aac9aa08a6bc09aa6a043a2d703998a55d048bf4607eaf4f1e8af91818aaeff1edf5713c4dec9e1a5d3d68b4132f7772934f3221f01499b00c26b370f4b67b942077fd7bc9729da93f57c46ba9d83149b03e4d41e174e6bf3f370d1f48f59fbd990c757cf5dda0786edd67ab01d24e40a9dd1c6525f4e93cd2364f057803eeae0f27a3a0a0f7e748621da41db2188bac3f019022e1b2a83f54ea0cc3acffb54d9fc4274cd041e48345952b5aba7160e32983df87a5a626532c7ae52f36ac55ddc3c9bbbd755c1c346257d45e297f46c607ed1cfd8212abc26148e9ed6b14f13bc93e0902c1ea75ad3cf9aa83a034cdcd72d53be55ace43bcf68c3e1f66d9a8e9a4981ebe475e775f4d7ec0eadd10f44f9a56fae203e28a43eded72073c94f3f51ef3587dffda4f2e9e725a72692638da395320b210043f69e34329d2c303a2f4cd028e3dd3de1e237eb780437a9a7c57a18fa3deb10a84be1cbc3beee2a98f1b91cc24697a21271b8fa208ca10e26fa6fe0629a0967fb3549dac6d378dc80db58736f6d6430f36d07455af1f26fd99fc2e12659813d8f5400ef846f28172b996e2e39ecf51ca98c675071780b5a2c91ff00303a76e78397f3c40d1fab972ee053a5571dded94314e9c608d91a05837b57200ade82b3a914968553cc5f47dd8317b9c533e52c0c91be75f777cc81ac88ba8f1cf9c19062f423767c612c66edd481ac77b6454cd6690096ae5bcec4b33ffa12725695f829baa4ee7c117c185a4fc14c2d34dcae9f10dfa9314d847ebe9b98be9c239879227082bb6d583896cf99e179e2648df9019cf3ae041251c32531940441550d9ca022e0867756536fc0017215b984a8abab4eec246d9bc188b5edc201db084d81970459688ba216500d45dac6f42678d248a109206508067053aa0f4b958e6eadcbf42f737d6a3d5a281ba641b9e2f1ab1723497c353e0cac2bc69d5302580444889c7fd822660864550622c658ff9850ef0984ca3ebd3dd07b397d256ba97c2d6d10374db6605958f0646dd15a14ee01282f3571c62eede802a17430bcf34e10b002df5e413147c7d58685fd03e9fee0d8974e762b270943741f6dbfa4f210a7b10930aee9a1c69421907c95ce4aab56bc6fdf21345ea87185bbce931c0656066ac5246e4707ffd3917a2e794ec84240d3f5401c64a75b8572a7c735379ea5e365d105b78ffb7fec52c07b15f025cbf41295facd95242863b4baa6e2c3dac3d150ea2dc345e06411c807dcf889bb06f27481eb7e10b1347addb1db0dd21527bbc9e7d53bbd9238409fa07a372e72cc508f02dfa777b413e41fa333a17ea4f39af6f9ee0d3a2469a49ee4e25f999afb16b64196a065c3742e5fc4e784616167938539e34a9db799beabd3adec92cfd9709a7456923fa9cf33f8b345942bdb527d55281ebae1ef45188170d0ae1cb110f79c175251d74c8c7359d487b53779d18177cc5b5b95d7bf3823c8c5c4dd83cb53bc9bcf388803a7490f78b0867451fe556b53f533ed94a686f49c7494c602326398283a1be61488ac5c4c0a4a721059a535f76bbc7d900e485af4533feb7deb7c4d6668b3125ebf332b4dd3ed6c851ef4afb68476df123d83b27506d4169f8862e130935e11c95f23ac60c5781b22342862f63c58d749480414bf2abd71600f2958bc95da4e0f565e7234a5bb8d3b0f6c73708956fecb23d4e692b8ed2627509ee9e21e5ba8fcad1e9160e6be68e71c921b0fa922427b1382733a8bdbabd934b0348e5a4952a327ed68ba1f437b017da464cae8d3fc7c03f84e9ff4ff761c866aa09fa554f8ed9c71de1ec3d30620f698941cf075b7dfb1e27a7b9bdfb5d0c9c18bfb969918d3a73b71a1ee316d59b03964f3e88698e25c97ad7d490b9b62522684a1c4bb61db7ca82869cc30871512e26577867c4d2ddb5e33e1490d3471f0313c836d97e386d48268c7b4f831fb259c857d155155d9f2e0c3a7e3a13818dbda648fd8b8d58883c23e810822da6da6f227059edb65109df09edbd914415e62081da212a00032cebbabdbf4625b164475fa5d7425d6cefba81eed4a95e0593021026d3d1e7b272fd78e8c747cc7e9f9a08916a5633c0c0d75266e5870796ed99013078ebad477f6f1334e475ef1d295fd970aca17db8be4c68de2f24eb647520ca6447160881061239c824173a369b67d648face07962923a56c07e5d6d0137add92abd55382c0d11a761fffd411d634ffa6f463350b291530f1e8e800046c94badbb85282f6815554af31174e7ede0a84fa35ba5aba7f3fe19f817e8e2980caefab8c85dc9daa13433ba97818605f367fd98de036ea3bff74b2d8c917bfd4fe13854b69d55fc220259742e57f2366d472e59c2c54d7c0f785eb315cf240dd03e1a622184efeebcf93da8254c249a039700885f90310e7b28b0ff1adfdf479291dc63118783960127f5f1dbb61afe4ddfd886e41c31b8abe24d94618b00000000b62c9c2fbad5ebe77492ae963c86505f66031c7b0ab05e0bb9be00fceeba2de5192731e957fa329e808ac5b4c57c309b702cabe447b55570679bf408a05f82eb54dc2681249a3c7ee644899453bc834cffd14cae"], 0x1030}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 478.510935] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 478.510935] program syz-executor5 not setting count and/or reply_len properly 15:43:23 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x200040, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)={'syz0', "c58807d1f2ff0082c9e62b7923b562fe5c5c0c35c8118c3a3d0592eaf15f265fa4ca999872a5a28b646bc4a400a76cadc382a16b625841eb0e5e439451a65598308b4d5f9addd89740296822c4069c31e3b30d33f24f111d3e50551e7300a755656297401fb1ba7dbf35a22dc5d0a8a846ff1c2646dccf1d50d8f8762b3fcce1a68870599917e28483722ecab625f397ab8ca110e19301bd4f734ccc05ebd033436486f9d4bc651d020aed16c9956156bb"}, 0xb5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(r1, r0, 0x80000) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x0, 0x0, {"2612a366255162a392b1aee3639243e7"}}}}, 0x90) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40381, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6, 0x4000000000000003, 0x3ff0000000000000}) 15:43:23 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000100760000000000000000000000000000000000000000000000004000000000"], 0x25) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x200, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x7e4c, 0x495, 0x10001, 0x8, 0x5, 0xfffffffffffffc00, 0x6, 0xfffffffffffffffa, 0x4}}, 0x43) bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = accept$alg(r0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) fchmod(r2, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff3f3, 0x8000) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:23 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:23 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000080)="2813e0a293fffa915988e5836082716bcbec2a935fb13a49785f43a0892db8691a94de972553a5ce4f18fd6a1fd5b83919fc0c6a5d61d84816483d676f26e4ea94f519a3ca7fef5d0b85f81311a0ab204c526e9402c71b5b927bad2f402379ac8d2938da9e5a33f8dd464cc4df05ec48547374d9e84c03daf741747109ecda97d743f2d05a18b00b27da19c7c5", &(0x7f0000000140)=""/154}, 0x18) futex(&(0x7f00002a4ffe), 0x8, 0x0, &(0x7f0000000040), &(0x7f0000000200), 0x0) 15:43:23 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x201, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x83040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {0x1}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {0x10}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback=0x7f000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x14}}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendfile(r0, r0, &(0x7f00000004c0), 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000000500)='fou\x00') write$binfmt_aout(r0, &(0x7f0000000540)={{0xcc, 0x7, 0xad06, 0x6a, 0x127, 0x400, 0x13e, 0xb62}, "f2320cfe9227c0d06551563ae9d774757fa577fe2b3c6cba8d1b2a6790f49ecd16a7c360ab650bcf4053ced56faf66f77d9decb7aee2ad71a8006852a274490fc362a558d3c400a0a20f700e9c16f5f0c066a66faa8bc72600fbc12dfcf3749959be165a3538617f006be5fabc76e19f2331965b0960f2a8e5e39523af07dca0e3b9b30f04eecb2c32794276c5", [[], [], [], [], []]}, 0x5ad) r3 = syz_open_dev$sndtimer(&(0x7f0000000b00)='/dev/snd/timer\x00', 0x0, 0x20000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000c40)={0x39, 0x3, 0x15, 0xe, 0x3, 0x20, 0x0, 0x7c, 0x1}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000c80)=@req) fcntl$getflags(r0, 0x408) uname(&(0x7f0000000cc0)=""/203) syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0)='IPVS\x00') r4 = openat$cgroup_ro(r0, &(0x7f0000000e00)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000e40)={'icmp\x00'}, &(0x7f0000000e80)=0x1e) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x458, 0x0, 0x118, 0x230, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000ec0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa733, 0x3, 0x2}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0x4}}}, {{@arp={@rand_addr=0x8e, @multicast2=0xe0000002, 0x0, 0xffffffff, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}, 0x2, 0x7, 0x8, 0x40, 0x3f, 0x2, 'ipddp0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @rand_addr=0xffff, 0x4, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4a8) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000013c0)=""/97) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) unlink(&(0x7f0000001440)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000001480)={{0xb693, 0xb5}, 'port1\x00', 0x81, 0x80000, 0x4, 0x100000000, 0x1, 0x401, 0x5f4d, 0x0, 0x1, 0x8000}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000001540)) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000015c0)={r5, r6/1000+10000}, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={r3, 0x1, 0x1, 0xa7, &(0x7f0000001600)=[0x0], 0x1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000001680)={{0x5, 0x5}, 'port0\x00', 0x1, 0x81040, 0x7fff, 0x1000, 0x1, 0x952, 0x80000001, 0x0, 0x37261647d91b1c06, 0x3}) [ 479.046004] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 479.046004] program syz-executor5 not setting count and/or reply_len properly 15:43:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xbf37, 0x200000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x200, 0x7}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) 15:43:24 executing program 3: unshare(0x64000400) r0 = gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0xfffffffffffffffe, 0x2, {0x6, 0x2, 0x0, {0x5, 0x800, 0x5, 0x6, 0x1, 0x3, 0x49, 0x5076, 0x78, 0x2, 0x100000001, r2, r3, 0x7ff, 0x80000001}}}, 0x78) r4 = syz_open_procfs(r0, &(0x7f0000000000)='net/route\x00') pread64(r4, &(0x7f0000000440)=""/123, 0x7b, 0x6) 15:43:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000000180)={r2, r3+10000000}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000240)=@ipx, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000540)=""/23, 0x17}, {&(0x7f0000000580)=""/6, 0x6}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x9, &(0x7f0000000680)=""/179, 0xb3, 0x2}, 0x40000102) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x9, 0x200}, 0x2}, 0x20, 0x0, 0x0) [ 479.458693] IPVS: ftp: loaded support on port[0] = 21 15:43:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2da) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x80) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) accept4$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@mcast1={0xff, 0x1, [], 0x1}, r2}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x28, &(0x7f0000000100)}, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) 15:43:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000100760000000000000000000000000000000000000000000000004000000000"], 0x25) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:24 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/253, 0xfd}], 0x1, 0x0) 15:43:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x1f) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000000, 0xfffffffffffffffc) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000003f00000008000000efb2be19"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'bcsf0\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xfff, 0x400000) r3 = getuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f00000002c0)={0x90, 0x0, 0x4, {0x1, 0x2, 0x100, 0x10000, 0x7fff, 0x8, {0x3, 0x800, 0x100000000, 0x3, 0x9, 0x8, 0x61a9, 0x14be, 0x0, 0x1f, 0x6, r3, r4, 0x0, 0x3a84}}}, 0x90) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 479.671777] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 479.671777] program syz-executor5 not setting count and/or reply_len properly 15:43:25 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x28, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0x10001, 0x8}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x101000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000240)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x81, &(0x7f0000a4d000/0x1000)=nil, 0x4) 15:43:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000002600)=@in6={0x0, 0x0, 0x0, @mcast1}, 0xfd12, &(0x7f0000002780), 0x2d8, &(0x7f00000000c0)=""/176, 0xb0}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 15:43:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00fd0600000000000000c302050000000000000800000000000000"], 0x20}, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4200, r1, 0x9, 0x0) 15:43:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r1 = accept4(r0, &(0x7f00000003c0)=@hci, &(0x7f0000000140)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000b00)=ANY=[@ANYBLOB="0800dfdd0f5809d79ddd5dee8fcb0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x24) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x5, 0x10001}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01ab464d4f8a906151", 0x27) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x101000, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x7a, "fedeee3e19f9fb1fb618a9d40f1b34a08e982c08e465e51cfc171da06692b0d51cfe3c22056eb05043bf598c2630df5d0bf148a5c50697157077e19f7fdfbc3d48150fbcf753f873b9c6eacaa62f25fb215517575beb0f0481160a1338feb8fdb371a5b314749e512b14bb388f17a8245d814028fff8eaed1f4d"}, &(0x7f00000000c0)=0x82) setsockopt$inet6_dccp_int(r3, 0x21, 0x15, &(0x7f0000000280), 0x4) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r4, &(0x7f0000001480)={0x0, 0x1b2, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/90}, {&(0x7f0000000580)=""/197}, {&(0x7f0000000680)=""/203}, {&(0x7f0000000780)=""/17}, {&(0x7f00000007c0)=""/144}, {&(0x7f0000000880)=""/71}, {&(0x7f00000014c0)=""/4096}, {&(0x7f0000000900)=""/37}, {&(0x7f0000000940)=""/237}], 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000100760000000000000000000000000000000000000000000000004000000000"], 0x25) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:25 executing program 7: r0 = socket$inet6(0xa, 0xffffffffffff, 0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 15:43:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000000c0), 0x184, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 480.193581] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 480.193581] program syz-executor5 not setting count and/or reply_len properly 15:43:25 executing program 3: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) unshare(0x2000400) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r5 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f00000007c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) r8 = getuid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000f80)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000010c0)=0xe8) fstat(r1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000001680)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc, &(0x7f00000015c0)=[{&(0x7f0000000480)={0x334, 0x28, 0x20, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xc0, 0x42, [@generic="4b18410cd32150179bab58109a1590c7ec6de7da2844157d7c836a78d5d99fbe561ef8a723d3047ce5a6dba87a60e88a2cb75f7ef60ed97dd491ca4ad114525cf65ddfa0b16d5f0f63d324a49f26b4eebc87724d8b355919a7c758ef16fe1f3586f2d5c6dc290d062c761dbeac8b089db2faa41f220ec02f00d8adacd103cdcd2b46edeefd8d2f8de79609c4d983544218bc69a2bae5eaced063e9ac9c26b14dfcc4a073ee377cd2d509ed246fa7749411e1cd7e620c32fe5d"]}, @generic="8de8c34eda0312bedf7b3a5def5fdb27dee3ed31fafbcf7c9bce9c4f34646fb78215d9bd52d697e6cf189e2769fa4d450aa0ef591ae7bf2d7404e95b62358d272bd171df75dd", @nested={0x6c, 0x5a, [@generic="4f5eb1452206a325737d4bcad5ce8d426965d8cd17da5c3ac38c1ed3a67d", @typed={0x8, 0x40, @u32=0x1}, @typed={0x8, 0x86, @pid=r2}, @typed={0x8, 0x6f, @pid=r3}, @generic="b333c11e0496c70bf4fd1be18de7a0afef38b04521e914c949a799dba9f7f3", @typed={0xc, 0x9, @u64=0x7fff}, @typed={0x4, 0xe}]}, @nested={0xec, 0x3f, [@generic="6b8e96d9c5a6ce1b0be909b42d53dcb329e15824bce5f36d1974e38db67d2001b8930f85bfdf7ee0b8a0b2107bc8860fbc6185d67ffba5da3a6d98431cf9d8a39de63f610c037a744d7a0413f156fea5b868cb7af77ef193633ad8a75b1d0c68b1cd3cb2a7132cbb3a762a8fc2e491e90be33912a388158a6bd7cb1fde27f9729ebee76c7a4614c96658a354167a25ccce334873151ba88f9d8b3e558d1f5ccc55d4244e3cbd01ea0692f51d2c677965b59b0d21d1fdb1599eef39b3f4720c5bdb07c8f5d70ba7259a078d5c063481124a", @typed={0xc, 0x84, @u64=0x10000}, @typed={0x8, 0x6b, @u32=0x400}]}, @nested={0xb8, 0x2b, [@generic="8bf4ab22460e6ffa5ee72a00687cae62ad44d64829a599c47dacd8e5dc550ee1b0e5dd3b59082a479f05afc583a667be94059b77ac21da663fe0888cadaa27a58eaf9eab566da5c5265e5ad43ebd96a310522906c8a8078792db87bd507638ededf24a6e28d4afa58c3a216b13027431b83bb48e1b6a98dc13c99b6a6106bf4c340a0afc428148e70a18f590b90f863b5366ee7a762dd70e7669825404679ffe3e736cb5a28ec71c78521304", @typed={0x8, 0x34, @pid=r4}]}, @typed={0xc, 0x60, @str='nodev-\x00'}]}, 0x334}, {&(0x7f0000000800)={0x100, 0x2b, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf0, 0x25, [@typed={0x8, 0x12, @uid=r5}, @typed={0x8, 0x9, @pid=r6}, @generic="c6622d882fe124cc486c10349a96e05f39bf858b444692f506c74f2251d2e17baea7b862ec4f712e3087e3f07b2775cd382f787a956ae351e649472b27edc971d91afa2e1d5045ff6326d833379d60588256d95b6042a11b46272152b607ca492014d92d7757be6fb9d58fd4fda761d2a9194b1aa7715cb0d3910cfee3cebd8a149b6bf47d1e7e6f60c61e14131670826dfdc851e1a41130c96b5a5bf7939670d10598d9fd500515cf66de2c8c3f95a3634c69d8edf2d441d438390137615f9dff1cdd87d8826f1383b40a363ebf934de4d82db4682ec7eb1f"]}]}, 0x100}, {&(0x7f0000000980)={0x5f4, 0x3b, 0x400, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x1d, @uid=r7}, @nested={0x19c, 0x3e, [@generic="c88fbc3d2a00ca7f5baa0769d5e085fe4333dca1173fa4970bc844f4dc3fe2ca63a1b02e32a2d948e1fe1f4597aeeccec126215e8f742d57b62685d4f3724196a990ca941c478dcb71f8b54a383e5eabe73d10277f569f2f4b99550c790ea3ba41eb0b5d5ae766f66a3b3d88ea5f56c472bf3621fb5b29feb1c40a2d185e535901988d71a876286f", @typed={0x14, 0x35, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="400a0083ceb8dbe4080c0ab68bb9a3ebd077099f08300dc552282422fddf3e16ba82e84279552db92c64c32be95d8efae1e145b42916a1e940ccb2a6a134a0c2eaf75af13af062a4bcf63f5b4952ce6b83b78234e7b979beecfa2ff2451970fafad01179bfe6de34c741548661980bb974a056ce2e84f7327e133b6461748d6f101fc4f21bb9c3249b56e7fdac08fe8808095656a7682323c22ab8944e5b76b0bc849fb83a5bc8144e9aeba5d047fbc7221f81e25e9b56a0c9c58ab497dd8958c26607d81484f8c3eaf02dcf062e47a6c2811e7bd0bb21c606a6915c3a8de2ca567191b00bc01ad7d05adca3870844a255", @typed={0x8, 0x2f, @fd=r0}]}, @nested={0xf0, 0x6f, [@typed={0x8, 0x7a, @u32=0x101}, @generic="8064c925448f33bfce1e6b72b24a58dffa", @generic="d0704a149e50a6cd8ef199adaa82429b4a24ac0ff5f8b53696136a3a2171c4d76aa0fb1de18af1610bf6fa7dba46447018b8ad970ff617d74b05e396daec04331951aafb32317116bf03bbbc9fc4c499e54c15f0b260ea1b135c25e7e641034f81d0bcac8906a1504ab242073dece0559cccb32740a1f022c9de550d357f2bb453011f743bcd7e4452215219a0a0c919f13dc2f61faf41754309df685981c8df97a809b36c6d71adf50af7071dcdcfe745d2deb18ac61257109deb2aa757bf8fdc662bac5491d748b9ade899f77c3b33fb35"]}, @typed={0x4, 0x4c}, @typed={0x100, 0x3, @binary="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"}, @nested={0x1f4, 0x2e, [@generic="832d2400c72d70922e01bdea2f26eb99a7e63f3529591dd965a1982d875ac64f05d701f62fab17676fa9d969a743b8c4c0d14f959a672483f08563c0ec24c5c9b961cf3a94a89b5efc916d5baf59dae5a435a0d717e9324675f3017f6b5196178d47c457420b22b1933ef152a63ccebb55bc44aa7d8a4239b7dd26daa2c167f846d4f023efeb9d20132736be635e644dd7ec619d3df8dc4c88ad6d297f8b0a4eebd09f5f60c24cd4af7e1ea53c425bdd96cf492f21f6cb4c69dd43885831c1e7ae3a9a", @generic="09f022915d6e33a70e650e28b2412f19afd2deb321e33acf7016a598f61c89f8033759cf4094940ef1f91b25015f7cca511e5363e79c", @typed={0xc, 0x8a, @str='filter\x00'}, @generic="b7f76a0f56a56f6b8ce0906e39db669c2608dbb7ff0d316c", @generic="fb3cb02d7651cc408547e9a2b53084568806f3d0155743d0e6e276b4f95c2aca400de813cbb9887502d31e9a2b53212496a2ded931f693c4411bba1a6258417e23362e0cd9fce9fe0b2c74a2c212e4bf64e960f4baa209908363b9fdb5c4b81d52fb486e1b02786c1296ac796bdaa69cc0da9914749a92afaf6b7fd9aab8f2800296a11a3c87b5f599518a1d5275f43f0e600a31e5088adaa12627ce0da2fc2da4ccbd0ec599fdc2530653e9c8dd32d0cb4d36c7ecbf84f7fb17dffea9cadcb9bc70ac62c14dec687d", @typed={0x8, 0x62, @uid=r8}]}, @generic="531646181586140a2f73a53cf855c325b1dae87254056448e23fc39fa99b28f394117624b558eff6644c804273f7f631d8f3ff486e9fab69b72a61d567af7c2b61ef2fd9e0d0635338049e11dac86d3266a577511806284a"]}, 0x5f4}, {&(0x7f0000001180)={0x34, 0x20, 0x404, 0x70bd26, 0x25dfdbfb, "", [@nested={0x24, 0x39, [@typed={0x8, 0x89, @u32=0x6}, @typed={0x8, 0x6d, @pid=r9}, @typed={0x8, 0x50, @uid=r10}, @typed={0x8, 0x18, @uid=r11}]}]}, 0x34}, {&(0x7f00000011c0)={0x3e8, 0x20, 0x200, 0x70bd27, 0x25dfdbfb, "", [@nested={0x40, 0x29, [@typed={0x34, 0xd, @binary="776bf387beee63bd536362dee7511ddeca5bc11836e9e59047367ddf569951e8c55186840d601583d6173c6e3804"}, @typed={0x4, 0x10}, @typed={0x4, 0x35}]}, @nested={0x1f0, 0x50, [@generic="6e257d1430385d9ab5718c6886aefd172370269630c88222fb9834789947576ce14a032fa8e0c2222c6dd034e3cb98c2f85e21e7986b88a7886f86e57ab1b0b9427431abfe19911a5e4b6527e063f2934aef21d6f9d09a606d8b4af27cf3c538af718bb9fb5eabdd24356b8b39a6375dc4a3b37c50c9b3409841b614f73c114dbbd22b2a4ad6311fac24cc407967dd94d06e97414370a074ff5522776458863630356a746355c1fc557de2e481d32d53d53a0f6fdd8b6ab053b4f9bcc5", @generic="7da5106357fd62c46d10cd59a8b86c82e8e6448ce1bdeb033aee1c324eaa1957da6ed53d4754a164733525c4551709f42235016d17e222541e018b90ec09a21dc9f966718f96f60a394d60361a20275411846c9529b64c67ca2816c961db7223c9fe5898ea362ccb053a5bd42234704b01f3c027e400d0b98679ed13a7dac1ca9aec5d69563716f25eb3d05c4c2a2edc1b31a30a8ccf7de55363ea7701a9d024f9ef6773effff8e57c2f2d273a932fa0cf5139db0de4b0b312320f5a6c", @generic="1225a45509bba1f5502cf0273f6995e3c8364def345e41ac707cc25f4c293b19bc4a3c9c9b95f517f43949a13ac8e95d96950fa4899e9a1d35eb23c4dbc3ddb7a4f9495affe8f59f8d6ac237c3e56b4026950a27308e4892d60b80a4b4d9d0dd64647197", @typed={0xc, 0x68, @u64=0x80000001}]}, @typed={0xc, 0x72, @u64=0x1ff}, @generic="bc115312ba0757fd2adcb75d23c5f3f9d4f28a6b3e0076e13f8bfa6afcdd5f342bbe637aff8eb262f6302913db6f02739b040a0b7ce20077a7a3a42ee98dc9736f83c9798f3856a12813187853ce4ecfc59270ae72c648e89c029846d442e9693257dfcc7125ffc0f4941f86973b7222f37eb1a7c66e920011ead281e1bcd006dd21e366f22505bf8ac2330d3cc092622964d612", @nested={0xcc, 0x83, [@generic="799ff8d6a3a3c33fbc8609de21356c36f663a33e2cc694000199cf214e0b03347cbe52a0765d6b1221a15b58759924b3288de1437eba74d533261352c054fd62adf5b7a24bf90b926ea04bfca5b40879d073272c273e602c245f09c1e88fe300666687b4a2a41c709042a36948fe9840e2e7700a10d7de18157acfec1bb42027b766e4bfe413f76df8c925d0874cb9c8636e19da96c8a9a70a3c6406675b2f1166e7d129ce6094ecf599dca51145ccb01d91710f5a6698db746b22798a07eac4590913f3a6c8"]}, @typed={0x8, 0x28, @ipv4=@loopback=0x7f000001}, @generic="5b6ea92d4c97228af2edb870ce683d272dda86cafbdfdd0104aafa66e28d8a8d570ef60ecde7d05976209d6474d784c1dc34325f"]}, 0x3e8}], 0x5, &(0x7f0000001640)=[@rights={0x18, 0x1, 0x1, [r1, r1]}], 0x18, 0x4000000}, 0x884) ioctl$KDDELIO(r1, 0x4b35, 0x1f) r12 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r13, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000340), &(0x7f0000000440)=0xfffffda2) 15:43:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000100760000000000000000000000000000000000000000000000004000000000000000"], 0x28) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0xffffffffffffff6b) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) pause() write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "ab88af69eb601e1e2a0e2be81e89258e9bb00eb356becfd0b99617634e178653cea4c3d617898b1f7d85b752c56994e220ab1f991c0917474cfbf922ed36fd5bbbf9b3951e105967746cb559f0a196eb671626dc0a67e492968a8caee869d4192699c499e917d9117e07165fe539e50806306324c91a4e9cb875b324e451c890cb08"}, 0x8d) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003680)=[{{&(0x7f0000002a80)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002cc0)=""/179, 0xb3}], 0x1, &(0x7f0000002f00)=""/227, 0xe3}}, {{&(0x7f0000003480)=@can, 0x80, &(0x7f0000003580)=[{&(0x7f0000003500)}, {&(0x7f0000003540)=""/62, 0x3e}], 0x2, &(0x7f00000035c0)=""/168, 0xa8}}], 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x8, 0x2, 'client0\x00', 0x4, "0ab8fc5c6141f4b2", "717902982247ab2aeb8799414afd91c4ac71cd62074a8abaf41966712e7e1d9b", 0x6, 0x1a7}) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$inet6(0xa, 0x2, 0x91a4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x6, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x20008000) [ 480.638910] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 480.638910] program syz-executor5 not setting count and/or reply_len properly 15:43:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:26 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r2}, 0x10) 15:43:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000100760000000000000000000000000000000000000000000000004000000000000000"], 0x28) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:26 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) exit(0x2000000000000000) dup2(r0, r1) 15:43:26 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x8a40) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x6, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x0, 0x2, [{{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e22, @loopback=0x7f000001}}]}, 0x190) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_cmd={0x1}}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, 0x32, 0x122, 0x70bd27, 0x25dfdbfb, {0x17}, [@nested={0x8, 0x91, [@typed={0x4, 0x7a}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 15:43:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x28, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0x10001, 0x8}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x101000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000240)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x81, &(0x7f0000a4d000/0x1000)=nil, 0x4) 15:43:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 481.364351] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 481.364351] program syz-executor5 not setting count and/or reply_len properly 15:43:26 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffff, 0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 15:43:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46000100760000000000000000000000000000000000000000000000004000000000000000"], 0x28) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x482, 0x8) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/168) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 481.922775] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 481.922775] program syz-executor5 not setting count and/or reply_len properly 15:43:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x64000, 0x180) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x508) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600010076000000000000000000000000000000000000000000000000400000000000000000"], 0x29) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x28, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r1, 0x10001, 0x8}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x101000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000240)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x81, &(0x7f0000a4d000/0x1000)=nil, 0x4) 15:43:27 executing program 4: unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ptrace$peekuser(0x3, r1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f00000000c0)=0x54) 15:43:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000280)=0x6) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=""/123, 0x7b}, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000200)={0xe0000000, 0x6, 0x2, 0x1, 0x30000000}) r3 = gettid() r4 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x41) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x1, 0x8, 0x90f, 0x2, 0x0, 0xfffffffffffffffd, 0x40000, 0x9, 0x0, 0x80, 0x40, 0x4, 0xffff, 0x6, 0x3666, 0xffff, 0x7, 0x0, 0x0, 0x6, 0x80, 0x0, 0x15e, 0x4, 0x100, 0x7, 0xffffffff, 0x8000, 0x8, 0x7fffffff, 0xf66b, 0x10000, 0x400, 0x8, 0xeb4, 0x20, 0x0, 0x800, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0xfffffffffffffffa, 0xfffffffffffffff7, 0x0, 0x2cf, 0x9, 0x80000001}, r3, 0x8, r4, 0xa) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f00000001c0)=0x61adc1c5) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0xffff, 0x8, 0xffffffff7fffffff, 0x5}, 0x10) [ 482.362390] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 482.362390] program syz-executor5 not setting count and/or reply_len properly [ 482.527079] IPVS: ftp: loaded support on port[0] = 21 15:43:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f00003a4000/0x3000)=nil, 0x3000, 0x2000000, 0x32, r2, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x4, 0x8000) 15:43:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fstat(r0, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8000000000040, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000080)={0x7, 0xfffffffffffffffd}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r3 = socket(0xa, 0x1, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0xdd44, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000140)=0x5, 0x4) 15:43:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600010076000000000000000000000000000000000000000000000000400000000000000000"], 0x29) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 482.926122] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 482.926122] program syz-executor5 not setting count and/or reply_len properly 15:43:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback=0x7f000001, 0x0, 0x3c}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}}}, 0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = geteuid() getgroups(0x1, &(0x7f0000000040)=[0xee01]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r1, r2, r3}, 0xc) syz_emit_ethernet(0xfffffc8e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000200aafe8000000000000000000000000000aa0000ebf3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x100]}) 15:43:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x115000, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x422}}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@loopback=0x7f000001, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x5c35, @loopback={0x0, 0x1}}, 0x1c) 15:43:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3, 0x141000) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x1000, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x401}, 0x2c}, {@allow_other='allow_other', 0x2c}, {@allow_other='allow_other', 0x2c}]}}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600010076000000000000000000000000000000000000000000000000400000000000000000"], 0x29) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 483.314426] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 483.314426] program syz-executor5 not setting count and/or reply_len properly 15:43:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x73e0) sendfile(r1, r2, &(0x7f0000e64ff8), 0x8e18) sendfile(r1, r2, &(0x7f00007ed000), 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="fd04c76652bb4a6bdb42ac47f0364242170f0fe68e1d0bcc9ca7837a9e26eb5ea6797f02c72e9af0c4e9a2c2890b9f8b2816f234c11c069e2f721d693675025486775f30c6fb10c6dfb03bcd85d6ea4dfcb10bbe8a79a739f773f077cbd7c25c68ab0847c3f0cb9ce92aa6f2b5252881c80cce2d95df31cc9f39b6d09cc6448e37236ce77d7b3099761666cacbec81a646ec37d5", 0x94) 15:43:28 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:28 executing program 6: pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000002c0)={0x6, 0x1f}) r1 = semget$private(0x0, 0x20000000104, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x7fff, 0x1000}, {0x0, 0xf9a4}], 0x2, &(0x7f0000000100)={0x0, 0x989680}) r4 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x8, 0x10100) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000240)=""/31) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x9}, {0x0, 0x8c, 0x1800}], 0x2, &(0x7f00000000c0)={0x0, 0x1c9c380}) 15:43:28 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 483.770204] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 483.770204] program syz-executor5 not setting count and/or reply_len properly 15:43:28 executing program 6: r0 = epoll_create(0x5) r1 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000004}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) ioprio_set$pid(0x1, r2, 0x5) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000100)=""/4096}, &(0x7f0000001100), &(0x7f0000001200)=""/190, 0x0, 0x0, 0x0, &(0x7f00000012c0)}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:43:28 executing program 3: unshare(0xc000000) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)='posix_acl_accessem0keyring}bdev@\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='\x00', r1) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x10000) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)=@known='user.syz\x00', &(0x7f0000000480)=""/201, 0xc9) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000990f7bc919f2d40e20ae518b77273140bbe26f107ef05f956ce960dc80516fa04cc9ce6a55f05c4b9c83eec026385513cdcade1238edab0f7e61d99ef0c0a57bcdf3e713f5cc1128fdb1fa4bf142c957e12d3c7f91ae146d6b52a7118f1a92b952e9de8ddd4f991a4a81aeb7e018f902b0c0cb13cf043a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}}, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x10001, 0x30}, &(0x7f00000005c0)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000600)={r4, 0x2}, &(0x7f0000000640)=0x8) ioctl$KDMKTONE(r2, 0x4b30, 0x6d20) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000200)=0xfffffffffffffffe) 15:43:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x4b7) accept$alg(r0, 0x0, 0x0) r1 = dup(r0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x200, 0x7, 0x199}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x80000000}, 0x8) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = creat(&(0x7f0000000100)='./file0\x00', 0x30) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x2}}, 0x1e) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f00000000c0)=0xa8ec, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x44, 0x3f, 0xd3a0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:29 executing program 4: r0 = socket$inet6(0xa, 0x20002000000805, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) getpgid(r1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ustat(0x5, &(0x7f0000000040)) 15:43:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x0, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = creat(&(0x7f000002bff8)='./file0\x00', 0x0) r2 = inotify_init1(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="e576b84da204fa73a5ef83d79957d8f87c6101089a27aa8ab9d0c596f6a096c01da906fd78dbdf", &(0x7f0000000080)="590dd9fbd43b656e253676d3faafabfedf3e3e614ebe2e188377d9240e0bd31bcf448060c5ad08d013d677d3f1670de93a7c8b9841f58a56c74a7fe6e477eec48997ed5304920eb253c41ddaadc4601c5dfd41fab94f64ad6253a1e8ee8a2512f59facc7e994f0d5cad836e95abc0ab8774002a3a20552ce5bf4b0fe168029a468c271a9c435693ff3eca1cbf4531879f4dc3769acb92e", 0x1}, 0x20) open_by_handle_at(r0, &(0x7f0000000000)={0x3a, 0x4, "7782d800eb401965bbd043b77893ed5c26375f99e87e762d068d36976379d85cb96041ed770cf8350dd8de3b0116793b724c"}, 0x200) inotify_add_watch(r2, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) 15:43:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x309, 0x0, 0x0, {{{@in=@rand_addr, @in=@dev={0xac, 0x14, 0x14}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x6c}, @in6=@dev={0xfe, 0x80}, {}, {}, {}, 0x70bd26}}}, 0xf8}, 0x1}, 0x0) prctl$getreaper(0x800002, &(0x7f0000000100)) [ 484.286103] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 484.286103] program syz-executor5 not setting count and/or reply_len properly 15:43:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x6) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/37) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) mount$fuseblk(&(0x7f0000000240)='/dev/loop0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuseblk\x00', 0x10, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other', 0x2c}, {@max_read={'max_read', 0x3d, 0xffffffffffff323a}, 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@blksize={'blksize', 0x3d, 0xc00}, 0x2c}, {@max_read={'max_read', 0x3d, 0x7}, 0x2c}]}}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x101000, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x20, 0x3b2, 0x10000, 0x5, 0x4, 0x100000001}) 15:43:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=@gettaction={0x1a8, 0x32, 0x0, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0xffffffffffffff80}, [@action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0x10, 0x1b, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x14, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x1c, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x18, 0x11, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x98, 0x1, [{0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x73e}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x60e}}, {0x18, 0x1e, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x14, 0x1e, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x14, 0xe, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0xa, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x1b, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x13, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) fdatasync(r0) r2 = memfd_create(&(0x7f00000000c0)='ceph\x00', 0x2) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000100)) mount(&(0x7f0000000140)='A::2:e:\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='sockfs\x00', 0x8000, 0x0) 15:43:29 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) [ 484.533500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor4'. [ 484.589526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor4'. 15:43:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480), &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:29 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000d19000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000440)='bdev}trustedself}.\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000e0e281ab42fb897c0d554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a984237d092ef1c00b517026f8bd7f2b0436a4c40960ab3f6bc482809f6bd82caa34799193b35445293b992ab5e44573eef5fd0f423a5cfb386f9cc996c6effde7e603fdeab448671b63bec6e9395aabab4d045f1ad982a2a897fafa710be9e681f3c6a45db03d9e6cb58fbec3d8397005f17d6f7afa102ded1837bcb805600000000000000000000") pread64(r3, &(0x7f0000000040), 0xfe7b, 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000300), &(0x7f0000000500), 0x1000) 15:43:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x3ff, 0x200, 0x81, 0x56, 0x0, 0x800, 0x700000, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0x2}, &(0x7f0000000240)=0x8) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r1) getdents(r0, &(0x7f0000000180)=""/239, 0x28) ioctl(r0, 0x3, &(0x7f0000000040)="69f647a4b506538a280cd34e53e11b0a26c6fae7d7b6355ad67754288b524459d6") r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101400, 0x0) dup3(r2, r0, 0x80000) getdents(r0, &(0x7f0000000340)=""/181, 0xb5) [ 484.816999] libceph: bad option at 'ceph' [ 484.905014] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 484.905014] program syz-executor5 not setting count and/or reply_len properly 15:43:30 executing program 6: r0 = socket(0x10, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[{0x68, 0x18f, 0x0, "7684c1f9f8424ee4e0985be93e137fb12e2a9a806709ab3135a4aed0c87612cc37865841c4a5ed0c9885d96970b80156a48fc7611355bcf8116087802b433bb28c3aec502572de284af38c46f40a046e5d"}, {0x28, 0x103, 0x0, "a73e9155c641697ddf1f42ee84b3211d489f938f"}, {0x2b, 0x0, 0x8, "45e9839e4ba7f18706301d0eda41cf4fa2abeb45f572652e9b10f9fcb741da5e04fcc7fb1855a7a9d2c08daa0fc69b13393e1cf1d5ab943163325f287023624aec996c1fafe52310814518e97650e54bc1e803f47f3f37332823796f4e730e9d0cc0126b3d74f3256f12528c90b36e1e170901eda0e8456a02862ae9e55db29d4584fc6192371188fa39e51286001892ca853e9c30c8d61da05c12078a9d7cee6b20e367c2a5a3dabd152ba3dfd2d2196e6722648c65deeadf980dc0edf9a583ffce9d1a4a3526370d1f2bb8dda38fb02a0d19e40e2a57"}], 0x178}}, {{&(0x7f0000000000)=@generic={0x10, "23f725e7b84d065383d8e8aa5ea1737ab9525bcfa003c81033db12ace35f949365df82dc5df46579fe09b30c1b76e072d120664b5c59690dd2b39e490dab5fd5a4a67a2cbfdb7ac55ae2dfd65b4e46d5bfb100d97f3a6da00957e9cb640c57dd09f8466a0d287eb30b045e94065d14f414e5f33f6c09c9fba48f14dd20e4"}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000080)}}], 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0xd9f, 0xfffffffffffffff9, 0x6, 0x0, 0x0, [{r0, 0x0, 0x7}, {r0, 0x0, 0x2}, {r0, 0x0, 0x400}, {r0, 0x0, 0x7}, {r0}, {r0, 0x0, 0xfffffffffffffffe}]}) 15:43:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_proto_private(r1, 0x89e5, &(0x7f00000000c0)="806760b0556f44854d679d32542731bf4c74e33c3db6b8b565f55e210fa2fd7e7bedeb437a199a41") setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x120}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x7, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r2, 0x1, 0x1ff, 0x5}, 0x10) getsockname(r0, &(0x7f00000003c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000440)=0x80) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000480)={r2, 0x8001, 0x2, 0x2, 0x41a, 0x77ea}, 0x14) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:30 executing program 4: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000000)="fc63b7490ec61a24983be66d8e476198", 0x10) 15:43:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x3, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0xf751}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x15, &(0x7f0000000000), 0x8) close(r3) close(r1) 15:43:30 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) userfaultfd(0x800) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/4096) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) close(r0) 15:43:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/139, 0x8b, 0x1, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x80000001}, 0x1c) [ 485.509893] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 485.509893] program syz-executor5 not setting count and/or reply_len properly 15:43:30 executing program 4: unshare(0x40000000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100)=0x20040000000002, 0x4) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000140)={{0x6, 0x7fffffff}}, 0x10) capset(&(0x7f0000000080)={0x399f1736, r1}, &(0x7f00000000c0)={0xffff, 0x10000, 0x140, 0x8, 0xa60}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 15:43:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e67", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 485.732724] IPVS: ftp: loaded support on port[0] = 21 15:43:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0xfffffffffffffefc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 485.947565] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 485.947565] program syz-executor5 not setting count and/or reply_len properly 15:43:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) accept4(r0, &(0x7f00000000c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x80, 0x80800) getpeername(r0, &(0x7f0000000180)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000200)=0x80) exit(0x5bd7) r2 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffa, 0x109000) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000002c0)={0xffffffff, 0x81, 0x7054, 0x4, 0xffffffff80000001, 0x3}) r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x7, 0x480000) ioctl$TCXONC(r3, 0x540a, 0x1) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 486.032355] IPVS: ftp: loaded support on port[0] = 21 15:43:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(0xffffffffffffffff, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e67", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:31 executing program 4 (fault-call:13 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:31 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="dc63396886a3717840df3ad959f5ef4034d0b7f8f3323b92fb12d33128e26e35a3676651def90115636e956632a4c7395e25c5490982b4c34f8f8dc8dde6653ce6b8c2a48c48625abf6694c9ec6766e72ccbe5c24867a48087f56dc73a8c7365e3a6f0ba41cf6db15bb7688f109e7eb7872a5f4e0bb3e38df1eda4a16c4afae0e32fa1f74190b983aa226218c9b78460fd371aac099cdcfab0dfbf280d5e1afaae03dd61c94ba381332df20e47d7c31b0d1cda849299b016e949614dee679d2a7070ecd90d6cf35acfa5afb4db8f80deb847e8e80411ae45a1715269f5cbaee97ece652089c3a6a767fff20e1b40af4c10", 0xf1, 0xfffffffffffffffc) r2 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='/dev/ppp\x00', 0xfffffffffffffffc) keyctl$unlink(0x9, r1, r2) r3 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xf, r3, 0xb034, &(0x7f00000002c0)="ca3e24344267a33b34a0c6c85582f740f15e2918d54869db66f841c8b28a453c42ffcc13a2922f8d688261d6fe95b7c75de0f4e5482bd16a3e57f35e5950c7c3ac1d5563953072ebdde6c913d61062250ade46cd0f") unshare(0x2000400) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)) [ 486.412558] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 486.412558] program syz-executor5 not setting count and/or reply_len properly [ 486.575513] FAULT_INJECTION: forcing a failure. [ 486.575513] name failslab, interval 1, probability 0, space 0, times 0 [ 486.587001] CPU: 0 PID: 25123 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #28 [ 486.594401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.603785] Call Trace: [ 486.606431] dump_stack+0x185/0x1e0 [ 486.610100] should_fail+0x8a7/0xae0 [ 486.613881] __should_failslab+0x278/0x2a0 [ 486.618186] should_failslab+0x29/0x70 [ 486.622140] __kmalloc+0xcb/0x370 [ 486.625658] ? sg_build_indirect+0x110/0xc90 [ 486.630111] sg_build_indirect+0x110/0xc90 [ 486.634385] ? rcu_all_qs+0x3f/0x210 [ 486.638134] ? _cond_resched+0x3b/0x100 [ 486.642144] ? mutex_lock+0x61/0x110 [ 486.645916] sg_common_write+0x251f/0x3fb0 [ 486.650234] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 486.655678] sg_new_write+0x2a89/0x2f70 [ 486.659741] ? rcu_all_qs+0x3f/0x210 [ 486.663528] ? scsi_block_when_processing_errors+0x63/0x3c0 [ 486.669320] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 486.674767] ? scsi_block_when_processing_errors+0x31a/0x3c0 [ 486.680655] sg_ioctl+0x22bc/0x4ea0 [ 486.684374] ? do_vfs_ioctl+0x16a/0x2740 [ 486.688511] ? __x64_sys_ioctl+0x280/0x320 [ 486.692791] ? sg_poll+0x630/0x630 [ 486.696371] do_vfs_ioctl+0xdef/0x2740 [ 486.700293] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 486.705695] ? __fget_light+0x6e6/0x760 [ 486.709751] ? security_file_ioctl+0x92/0x200 [ 486.714323] __x64_sys_ioctl+0x280/0x320 [ 486.718453] ? ksys_ioctl+0x260/0x260 [ 486.722341] do_syscall_64+0x15b/0x230 [ 486.726279] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 486.731494] RIP: 0033:0x455ab9 [ 486.734693] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 486.754315] RSP: 002b:00007fe4932d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.762086] RAX: ffffffffffffffda RBX: 00007fe4932d16d4 RCX: 0000000000455ab9 [ 486.769399] RDX: 0000000020000540 RSI: 0000000000002285 RDI: 0000000000000013 15:43:31 executing program 6: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) 15:43:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x5, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e67", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0xffffffffffdffffc) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x2, 0x40000) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8000, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x1}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r4, 0x1}, 0x8) ioctl(r0, 0x8, &(0x7f0000000200)="b86a9118d328f66621ab2829358435ce55a813a361265cd6a324d18f89587563c5fb80398fa0fe7e44667f58c55958c3a4033f8859dc8bd3624290b094e4be73a7be1be49015cbf05ffee0a935bdefd31b0deaa0e02760ec3e048e4774c1a4558a6a428f9fbe6b037d5ac478ca326566a25ea91240e050e5dcc1e95992c43dc30d69629c76b24b8ea6760ddb766f3e") getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x9, 0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 486.776702] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 486.784007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 486.791311] R13: 00000000004be6f0 R14: 00000000004cd378 R15: 0000000000000000 15:43:31 executing program 6: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x10) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") clone(0x88042400, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000001c0)) 15:43:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:32 executing program 3: unshare(0x2000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00'}, 0x28) [ 486.977585] sg_write: 1 callbacks suppressed [ 486.977612] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 486.977612] program syz-executor5 not setting count and/or reply_len properly 15:43:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00009c74754b010000000000"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:32 executing program 4 (fault-call:13 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000), 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x131680) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, @empty, @remote={0xfe, 0x80, [], 0xbb}, 0xd7b4, 0x7, 0xffff, 0x100, 0x30, 0x200020, r2}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:32 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80, 0x0) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) bind(r0, &(0x7f00000001c0)=@ax25={0x3, {"c0e1cc6da95912"}, 0x5362}, 0x80) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x401, 0x4) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000003000)=""/174) 15:43:32 executing program 6: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) unshare(0x2000400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 15:43:32 executing program 3: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000300)={0xfffffffffffffffb}, 0x0, 0x8) socketpair(0xe, 0x3, 0x7, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000001c0)) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, &(0x7f0000000040), &(0x7f0000000080)={0x77359400}, 0x8) rt_sigprocmask(0x0, &(0x7f0000000100)={0x7fff}, &(0x7f0000000140), 0x8) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) 15:43:32 executing program 6: r0 = memfd_create(&(0x7f0000004fff)='\x00', 0x4) getsockname$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/41) fchmod(r0, 0x0) 15:43:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0xfffffffffffff890, 0x111000) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000400)=0xffff, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x100, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000380)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x10000, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0xff) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000000c0)={0x200, 0x7ff, 0x5, 0x0, 0x0, [{r4, 0x0, 0xfffffffffffffff8}, {r0, 0x0, 0x2}, {r0, 0x0, 0x6}, {r4, 0x0, 0xffffffffffffffff}, {r4, 0x0, 0x4}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) capget(&(0x7f0000000240)={0x20071026, r5}, &(0x7f0000000280)={0x6, 0x81, 0x2, 0x0, 0x2, 0x4}) r6 = openat$cgroup_ro(r0, &(0x7f0000000440)='pids.current\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x4d37ec15, 0x4) 15:43:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="250df2794e20e3d03d31eb30da36d68a89f9663d10979c2bc9d123", 0x1b, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x2e, 0x79, 0x7a}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f00000001c0)="f8e69c96aefac0e7a5d847baf8dbe99d0818b5e6faaff51d44996d3b8e1b28b6787ee196a8be546505248888fa74e2efb0e9e4029cff238dc1f16567038b6a3411807dcf60596fe6d97deb723d645eb85f821eaf8de63af835effb6c10abd19c14376bc89bb31c7d3150ec3f05aee68555a0cc18b22711a3623459eb3aa3f7457a7b8a2223b5242f2f3812565b269b80ced059467c3d27051a677959cf658b87668e716cc2e70a62") [ 487.721332] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 487.721332] program syz-executor4 not setting count and/or reply_len properly [ 487.820239] Invalid option length (756) for dns_resolver key [ 487.826997] FAULT_INJECTION: forcing a failure. [ 487.826997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.839116] CPU: 1 PID: 25170 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #28 [ 487.846416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.846921] Option ' ' to dns_resolver key: bad/missing value [ 487.855787] Call Trace: [ 487.855842] dump_stack+0x185/0x1e0 [ 487.855879] ? __alloc_pages_nodemask+0x622/0x6320 [ 487.855909] should_fail+0x8a7/0xae0 [ 487.855965] __alloc_pages_nodemask+0x622/0x6320 [ 487.947044] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 487.952453] ? __sbitmap_queue_get+0x1e7/0x4f0 [ 487.957098] ? kmsan_set_origin_inline+0x6b/0x120 [ 487.961972] ? __msan_poison_alloca+0x183/0x220 15:43:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000), 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 487.966682] ? kmsan_set_origin_inline+0x6b/0x120 [ 487.971567] ? __kmalloc+0x117/0x370 [ 487.975364] alloc_pages_current+0x6b1/0x970 [ 487.979819] sg_build_indirect+0x4ee/0xc90 [ 487.984104] sg_common_write+0x251f/0x3fb0 [ 487.988412] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 487.993815] sg_new_write+0x2a89/0x2f70 [ 487.997873] ? rcu_all_qs+0x3f/0x210 [ 488.001648] ? scsi_block_when_processing_errors+0x63/0x3c0 [ 488.007423] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 488.012853] ? scsi_block_when_processing_errors+0x31a/0x3c0 [ 488.018714] sg_ioctl+0x22bc/0x4ea0 [ 488.022415] ? do_vfs_ioctl+0x16a/0x2740 [ 488.026533] ? __x64_sys_ioctl+0x280/0x320 [ 488.030804] ? sg_poll+0x630/0x630 [ 488.034377] do_vfs_ioctl+0xdef/0x2740 [ 488.038303] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 488.043702] ? __fget_light+0x6e6/0x760 [ 488.047752] ? security_file_ioctl+0x92/0x200 [ 488.052318] __x64_sys_ioctl+0x280/0x320 [ 488.056445] ? ksys_ioctl+0x260/0x260 [ 488.060301] do_syscall_64+0x15b/0x230 [ 488.064244] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 488.069460] RIP: 0033:0x455ab9 [ 488.072657] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 488.092252] RSP: 002b:00007fe4932d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.100022] RAX: ffffffffffffffda RBX: 00007fe4932d16d4 RCX: 0000000000455ab9 [ 488.107321] RDX: 0000000020000540 RSI: 0000000000002285 RDI: 0000000000000013 15:43:33 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$addseals(r1, 0x409, 0x6) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000012000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 15:43:33 executing program 6: set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0xff9) r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x400) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x2000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000001c0)) seccomp(0xf70cc96f29886b9c, 0x1, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x1, 0x8000, 0x44039eb4, 0x2}, {0xfffffffffffffffd, 0x4, 0x100000000, 0x7}, {0x79713dea, 0xb3, 0x1, 0xd97e}, {0x4, 0x872, 0x0, 0x4}]}) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) delete_module(&(0x7f00000000c0)='/dev/loop#\x00', 0x800) r4 = memfd_create(&(0x7f0000000080)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x81003) ioctl(r4, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x80}], 0x1c) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000300)={0x6, 0x80000000}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$evdev(r4, &(0x7f00000003c0)=[{{0x77359400}, 0x9, 0x1}, {{0x0, 0x2710}, 0x4, 0x6, 0x80ce}, {{0x77359400}, 0x5, 0x4, 0x5}, {{r5, r6/1000+30000}, 0x5e1, 0x0, 0x7}, {{r7, r8/1000+10000}, 0x400, 0x10001, 0xc4}, {{0x0, 0x7530}, 0x0, 0xffffffffffffff5a, 0x8001}, {{0x77359400}, 0x31, 0x2, 0x2}], 0xa8) sendfile(r3, r4, &(0x7f00000ddff8), 0x102002f01) [ 488.114614] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 488.121902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 488.129193] R13: 00000000004be6f0 R14: 00000000004cd378 R15: 0000000000000001 15:43:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x245) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x1000}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={r2, 0x7}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a912b93f0265df5c71cdd8b55ec9722904010acff0062950b5054941f0088cecdb79ace1f", 0x28) r3 = dup(r0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) ptrace$peek(0x2, r4, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f00000000c0)={0x20000000}) r5 = accept$alg(r0, 0x0, 0x0) socket$inet(0x2, 0x80000, 0xa05c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xfffffffffffffffd}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000003c0)={r6, 0x51}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={r6, 0x9}, 0x8) sendmsg$alg(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:33 executing program 4 (fault-call:13 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:33 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}}, &(0x7f00000001c0)=0x335) r2 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone(0x0, &(0x7f0000b17fff), &(0x7f000067e000), &(0x7f000000fffc), &(0x7f0000000fff)) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 15:43:33 executing program 6: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) close(r0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={{&(0x7f0000600000/0x4000)=nil, 0x4000}}) [ 488.719881] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 488.719881] program syz-executor4 not setting count and/or reply_len properly [ 488.822112] FAULT_INJECTION: forcing a failure. [ 488.822112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 488.834011] CPU: 0 PID: 25226 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #28 [ 488.841289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.850650] Call Trace: [ 488.853254] dump_stack+0x185/0x1e0 [ 488.856902] should_fail+0x8a7/0xae0 [ 488.860639] __alloc_pages_nodemask+0x622/0x6320 [ 488.865427] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 488.870890] ? get_page_from_freelist+0xb01f/0xbb50 [ 488.875922] ? __save_stack_trace+0xa45/0xca0 [ 488.880431] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 488.885829] kmsan_internal_alloc_meta_for_pages+0x9f/0x730 [ 488.891555] ? is_bpf_text_address+0x47e/0x4b0 [ 488.896165] ? kmsan_set_origin_inline+0x6b/0x120 [ 488.901033] kmsan_alloc_page+0x80/0xe0 [ 488.905028] __alloc_pages_nodemask+0x105b/0x6320 [ 488.909891] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 488.915266] ? __sbitmap_queue_get+0x1e7/0x4f0 [ 488.919871] ? kmsan_set_origin_inline+0x6b/0x120 [ 488.924728] ? __msan_poison_alloca+0x183/0x220 [ 488.929600] ? kmsan_set_origin_inline+0x6b/0x120 [ 488.934493] ? __kmalloc+0x117/0x370 [ 488.938222] ? rtnetlink_init+0x80/0xe10 [ 488.942308] alloc_pages_current+0x6b1/0x970 [ 488.946746] sg_build_indirect+0x4ee/0xc90 [ 488.951014] sg_common_write+0x251f/0x3fb0 [ 488.955291] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 488.960674] sg_new_write+0x2a89/0x2f70 [ 488.964681] ? rcu_all_qs+0x3f/0x210 [ 488.968410] ? scsi_block_when_processing_errors+0x63/0x3c0 [ 488.974143] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 488.979520] ? scsi_block_when_processing_errors+0x31a/0x3c0 [ 488.985339] sg_ioctl+0x22bc/0x4ea0 [ 488.988991] ? do_vfs_ioctl+0x16a/0x2740 [ 488.993065] ? __x64_sys_ioctl+0x280/0x320 [ 488.997314] ? sg_poll+0x630/0x630 [ 489.000867] do_vfs_ioctl+0xdef/0x2740 [ 489.004764] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 489.010136] ? __fget_light+0x6e6/0x760 [ 489.014135] ? security_file_ioctl+0x92/0x200 [ 489.018656] __x64_sys_ioctl+0x280/0x320 [ 489.022741] ? ksys_ioctl+0x260/0x260 [ 489.026551] do_syscall_64+0x15b/0x230 [ 489.030460] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 489.035658] RIP: 0033:0x455ab9 [ 489.038849] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 489.058183] RSP: 002b:00007fe4932d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.065912] RAX: ffffffffffffffda RBX: 00007fe4932d16d4 RCX: 0000000000455ab9 15:43:33 executing program 2: r0 = socket$inet(0x2, 0x80000, 0xce45) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000380)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@loopback=0x7f000001, 0x100000000, 0x74, 0x4e22, 0x9, 0x2, 0x80, 0xa0, 0x7f, r1, r2}, {0xfb, 0x1000, 0x3, 0x3, 0x1, 0x4, 0x2, 0x9}, {0x1, 0x6, 0x1, 0x9}, 0xfff, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@ipv4={[], [0xff, 0xff]}, 0x4d2, 0x33}, 0xa, @in=@loopback=0x7f000001, 0x3503, 0x0, 0x0, 0x5, 0x71fd7944, 0x2, 0x7fffffff}}, 0xe8) r3 = socket$alg(0x26, 0x5, 0x0) setuid(r2) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000500)={0x0, 0x1, 0x1, 0x2, 0xffffffffffff970a}, 0xc) r5 = accept$alg(r3, 0x0, 0x0) syncfs(r5) sendmsg$alg(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000040000000000000000000000000000000000000000008a00000000000000000000000000000000000000009e7945f73a7d8c740000000000000019cf00000000000000000c00"], 0x68) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000), 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 489.073191] RDX: 0000000020000540 RSI: 0000000000002285 RDI: 0000000000000013 [ 489.080463] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 489.087765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 489.095041] R13: 00000000004be6f0 R14: 00000000004cd378 R15: 0000000000000002 15:43:34 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000), 0x0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:34 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, 0x1c) r1 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1, 0x2002) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001200)="f67f986af9dc3aa1a19f79f854272aa52bf5c533ae9816f4e5bec9bdd4546287209739ae649266f0", 0x28}], 0x1, &(0x7f00000003c0)}, 0x0) 15:43:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 15:43:34 executing program 3: r0 = socket$inet6(0xa, 0x804, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x200042, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1e, &(0x7f0000000180)=""/167, &(0x7f0000000240)=0xa7) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80, 0x4080) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x4c21, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1}, @in6={0xa, 0x4e24, 0xffffffffffffffe1, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffc}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x20}], 0x64) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 15:43:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000003f00000008000200"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:34 executing program 6: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x5, 0x4) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x342cba36}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r1, 0x3}, 0x8) 15:43:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xffffffff, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000100)=0x1ff) 15:43:34 executing program 5: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) fsync(r0) 15:43:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e23, @rand_addr=0x7f}}}, &(0x7f00000001c0)=0x84) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 15:43:34 executing program 6: r0 = socket$inet6_sctp(0xa, 0x40, 0x84) ioctl$sock_ifreq(r0, 0x100008995, &(0x7f0000000040)={"623a70de00010000000000ff0040ec00", @ifru_hwaddr=@random="85e653015699"}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) [ 490.054278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 15:43:35 executing program 4 (fault-call:13 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) delete_module(&(0x7f0000000040)='j\x00', 0xa00) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x88}, 0x1}, 0x0) 15:43:35 executing program 6: socket$can_raw(0x1d, 0x3, 0x1) unshare(0x20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000801ff8)=@file={0x1, './file0\x00'}, 0xa) r3 = fcntl$dupfd(r0, 0x0, r1) sendmsg$unix(r1, &(0x7f0000000fc8)={&(0x7f0000f5aff6)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000471000), 0x0, &(0x7f0000000ff0)}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x2b, "2ce69210b3737bc995768f44e4e0b664b7c7fb5b0e1f79f5c4f80062d433d3cad880f2c7bb09b7483fd221"}, &(0x7f0000000100)=0x4f) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) r4 = dup2(r3, r1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xe9, 0x100000001, 0x100000001, 0x6, 0xff}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000200)=r5, 0x4) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 15:43:35 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x40, 0x5, 0x401, 0x0, 0x80}) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000240)}}) ioctl(r0, 0xb24, &(0x7f0000000000)) 15:43:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @rand_addr=0x6}}, [0x6, 0x3, 0x3, 0xa80, 0x2, 0x8, 0xffffffffffff9b8b, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffffffff1ec3, 0xfffffffffffffffd, 0x6, 0x3]}, &(0x7f0000000180)=0x100) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='lrw(camellia)\x00', r1}, 0x10) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x14) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={r4, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) r5 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x1ff, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x1}, 0xfde2) sendmmsg(r0, &(0x7f00000074c0)=[{{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000004380)="7956922559f3aadc7fff35fa88441e9498bc51d7dda00a0505eeeb44827545d67e5287b3", 0x24}], 0x1, &(0x7f0000004540)}}], 0x1, 0x0) 15:43:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xfffffef7, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x8, 0x16, 0x16}, @FRA_SRC={0x14, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x8, 0x13}]}, 0x44}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40c100, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) [ 490.497193] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 490.497193] program syz-executor4 not setting count and/or reply_len properly [ 490.637961] FAULT_INJECTION: forcing a failure. [ 490.637961] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 490.649841] CPU: 1 PID: 25314 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #28 [ 490.657123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.666574] Call Trace: [ 490.669180] dump_stack+0x185/0x1e0 [ 490.672821] should_fail+0x8a7/0xae0 [ 490.676558] __alloc_pages_nodemask+0x622/0x6320 [ 490.681353] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 490.686812] ? get_page_from_freelist+0xb01f/0xbb50 [ 490.691837] ? __save_stack_trace+0xa45/0xca0 [ 490.696351] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 490.701740] kmsan_internal_alloc_meta_for_pages+0x10b/0x730 [ 490.707551] ? is_bpf_text_address+0x47e/0x4b0 [ 490.712163] ? kmsan_set_origin_inline+0x6b/0x120 [ 490.717034] kmsan_alloc_page+0x80/0xe0 [ 490.721023] __alloc_pages_nodemask+0x105b/0x6320 [ 490.725888] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 490.731260] ? __sbitmap_queue_get+0x1e7/0x4f0 [ 490.735857] ? kmsan_set_origin_inline+0x6b/0x120 [ 490.740712] ? __msan_poison_alloca+0x183/0x220 [ 490.745394] ? kmsan_set_origin_inline+0x6b/0x120 [ 490.750253] ? __kmalloc+0x117/0x370 [ 490.753981] ? rtnetlink_init+0x80/0xe10 [ 490.758067] alloc_pages_current+0x6b1/0x970 [ 490.762499] sg_build_indirect+0x4ee/0xc90 [ 490.766762] sg_common_write+0x251f/0x3fb0 [ 490.771032] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 490.776418] sg_new_write+0x2a89/0x2f70 [ 490.780419] ? rcu_all_qs+0x3f/0x210 [ 490.784142] ? scsi_block_when_processing_errors+0x63/0x3c0 [ 490.789864] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 490.795238] ? scsi_block_when_processing_errors+0x31a/0x3c0 [ 490.801059] sg_ioctl+0x22bc/0x4ea0 [ 490.804700] ? do_vfs_ioctl+0x16a/0x2740 [ 490.808758] ? __x64_sys_ioctl+0x280/0x320 [ 490.812997] ? sg_poll+0x630/0x630 [ 490.816549] do_vfs_ioctl+0xdef/0x2740 [ 490.820436] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 490.825798] ? __fget_light+0x6e6/0x760 [ 490.829789] ? security_file_ioctl+0x92/0x200 [ 490.834293] __x64_sys_ioctl+0x280/0x320 [ 490.838358] ? ksys_ioctl+0x260/0x260 [ 490.842154] do_syscall_64+0x15b/0x230 [ 490.846050] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 490.851238] RIP: 0033:0x455ab9 [ 490.854409] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 490.873599] RSP: 002b:00007fe4932d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.881312] RAX: ffffffffffffffda RBX: 00007fe4932d16d4 RCX: 0000000000455ab9 [ 490.888587] RDX: 0000000020000540 RSI: 0000000000002285 RDI: 0000000000000013 [ 490.895863] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 490.903121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 490.910389] R13: 00000000004be6f0 R14: 00000000004cd378 R15: 0000000000000003 15:43:36 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r2, 0x10, "29d1c033f984a3017007f47ab5074a34"}, &(0x7f00000002c0)=0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', 0x5002}) r4 = dup2(r3, r3) listen(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0x3ace, 0xbb21, 0x8, 0x3, 0x400, 0x100000001}, 0x80000001}, 0xa) sendmmsg$inet_sctp(r4, &(0x7f0000002280)=[{&(0x7f0000000080)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000600), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008400000007000000e00000010000000015acb32f467dc8ea96bd6940f519e3cd4ee8186d401df0fbcc1130d1cb3c54e5a4a7282478f79d2c0f0a1eb4c1d8df0d0ea8a3c91d393fabcdae43f462ad0856e6eaceb06bea2b03fb126d4f74820d4af986e45d83627827a2051479adedf7985bd9adebaff0a581526e36f756aa378d478c06a2e42283e46add7376ba56bce0f2250478f423a9abd76e518bc1af0070be50f129cec168b40dbe07fdd98ce9ff93802eae6495b3ea1d763207321f2a3402e51e43504062ddf6b3b2bbfbbe968b4e6450676aea0fd2f1e3664dbd"], 0x18}], 0x1, 0x0) 15:43:36 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x280a00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x40, r0, 0xfffffffffffffff7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000470000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2, 0x80000000, 0x8}, 0xc) 15:43:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:36 executing program 4 (fault-call:13 fault-nth:4): r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="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") ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, @local}, &(0x7f0000000280)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x3b2, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x0, 0x3f, 0xffffffff, 0xfff, 0x9}, &(0x7f0000000400)=0x98) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0xfffffffffffffe4e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) getpeername(r1, &(0x7f0000000240)=@rc, &(0x7f00000002c0)=0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000340)="f36e5fecc89a9bd318306d1dbac6c2f63ac7f2d97b41e284e229b079eb5a33be2bea56d8b4efa075b9d928eb0c8a9dbda89725bbf49e221d90eeeae61960d92b1723d71fb1bd8673177bea1009c7777517b76832d4ef9856d677192f9119fc5a7c4cfdc75a92ad49ba2a34c00cbdb869b16c8a78abf7ee12beb3062ba267cbd40a8cca61bc22975ae0050d8582aaa4980a8ff651ea11e1066602990ddaa4ba76b9574fa25b", 0xa5) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) sysinfo(&(0x7f00000000c0)=""/218) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 491.233375] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 491.233375] program syz-executor4 not setting count and/or reply_len properly 15:43:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, [@IFLA_OPERSTATE={0x8, 0x10}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201}}}}}]}, 0x50}, 0x1}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 491.323845] FAULT_INJECTION: forcing a failure. [ 491.323845] name failslab, interval 1, probability 0, space 0, times 0 [ 491.335296] CPU: 1 PID: 25345 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #28 [ 491.342596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.351970] Call Trace: [ 491.354610] dump_stack+0x185/0x1e0 [ 491.358279] should_fail+0x8a7/0xae0 [ 491.362063] __should_failslab+0x278/0x2a0 [ 491.366368] should_failslab+0x29/0x70 [ 491.370288] __kmalloc+0xcb/0x370 [ 491.373821] ? bio_copy_user_iov+0x225/0x1570 [ 491.378367] bio_copy_user_iov+0x225/0x1570 [ 491.382750] blk_rq_map_user_iov+0x537/0xd70 [ 491.387232] blk_rq_map_user+0x22d/0x2a0 [ 491.391349] sg_common_write+0x2ed8/0x3fb0 [ 491.395659] ? sg_common_write+0x2d41/0x3fb0 [ 491.400127] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 491.405560] sg_new_write+0x2a89/0x2f70 [ 491.409613] ? rcu_all_qs+0x3f/0x210 [ 491.413393] ? scsi_block_when_processing_errors+0x63/0x3c0 [ 491.419171] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 491.424601] ? scsi_block_when_processing_errors+0x31a/0x3c0 [ 491.430465] sg_ioctl+0x22bc/0x4ea0 [ 491.434164] ? do_vfs_ioctl+0x16a/0x2740 [ 491.438286] ? __x64_sys_ioctl+0x280/0x320 [ 491.442569] ? sg_poll+0x630/0x630 [ 491.446143] do_vfs_ioctl+0xdef/0x2740 [ 491.450067] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 491.455468] ? __fget_light+0x6e6/0x760 [ 491.456643] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 491.459511] ? security_file_ioctl+0x92/0x200 [ 491.459572] __x64_sys_ioctl+0x280/0x320 [ 491.459625] ? ksys_ioctl+0x260/0x260 [ 491.479371] do_syscall_64+0x15b/0x230 [ 491.481177] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 491.483307] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 491.483331] RIP: 0033:0x455ab9 [ 491.483339] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 491.518703] RSP: 002b:00007fe4932d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.526454] RAX: ffffffffffffffda RBX: 00007fe4932d16d4 RCX: 0000000000455ab9 [ 491.533751] RDX: 0000000020000540 RSI: 0000000000002285 RDI: 0000000000000013 [ 491.541047] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 491.548343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 491.555643] R13: 00000000004be6f0 R14: 00000000004cd378 R15: 0000000000000004 15:43:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}, {[@rr={0x7, 0x3}]}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000040)) 15:43:36 executing program 4 (fault-call:13 fault-nth:5): r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) [ 491.932122] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 491.932122] program syz-executor4 not setting count and/or reply_len properly [ 492.271295] FAULT_INJECTION: forcing a failure. [ 492.271295] name failslab, interval 1, probability 0, space 0, times 0 [ 492.282668] CPU: 0 PID: 25367 Comm: syz-executor4 Not tainted 4.18.0-rc5+ #28 [ 492.289970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.299354] Call Trace: [ 492.302002] dump_stack+0x185/0x1e0 [ 492.305668] ? __should_failslab+0x278/0x2a0 [ 492.310113] should_fail+0x8a7/0xae0 [ 492.313867] __should_failslab+0x278/0x2a0 [ 492.318168] should_failslab+0x29/0x70 [ 492.322112] __kmalloc+0xcb/0x370 [ 492.325615] ? bio_alloc_bioset+0x54d/0xc90 [ 492.329975] ? bio_copy_user_iov+0x484/0x1570 [ 492.334507] bio_alloc_bioset+0x54d/0xc90 [ 492.338686] ? kmsan_memcpy_origins+0x111/0x1b0 [ 492.343405] bio_copy_user_iov+0x484/0x1570 [ 492.347815] blk_rq_map_user_iov+0x537/0xd70 [ 492.352279] blk_rq_map_user+0x22d/0x2a0 [ 492.356393] sg_common_write+0x2ed8/0x3fb0 [ 492.360712] ? sg_common_write+0x2d41/0x3fb0 [ 492.365200] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 492.370628] sg_new_write+0x2a89/0x2f70 [ 492.374678] ? rcu_all_qs+0x3f/0x210 [ 492.378454] ? scsi_block_when_processing_errors+0x63/0x3c0 [ 492.384235] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 492.389686] ? scsi_block_when_processing_errors+0x31a/0x3c0 [ 492.395552] sg_ioctl+0x22bc/0x4ea0 [ 492.399252] ? do_vfs_ioctl+0x16a/0x2740 [ 492.403365] ? __x64_sys_ioctl+0x280/0x320 [ 492.407637] ? sg_poll+0x630/0x630 [ 492.411206] do_vfs_ioctl+0xdef/0x2740 [ 492.415126] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 492.420516] ? __fget_light+0x6e6/0x760 [ 492.424566] ? security_file_ioctl+0x92/0x200 [ 492.429124] __x64_sys_ioctl+0x280/0x320 [ 492.433249] ? ksys_ioctl+0x260/0x260 [ 492.437101] do_syscall_64+0x15b/0x230 [ 492.441027] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 492.446232] RIP: 0033:0x455ab9 [ 492.449427] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:43:37 executing program 6: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x101002) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xffffdf8}, 0x68) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x410100, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0x3, 0x2, 0x9}) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x20000000) 15:43:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e23, @rand_addr=0x1}}}, 0x84) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) 15:43:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="ba644c86cd7622e751ff61277293a495bc0491c900134f90c3121637976b3616735f1f6f0bd92bef8e8edd7b41c26da7fce55f90e38bdeca019ad637172bb60302cad368417a2ee2f1add9ffef60e7c1236b45468ee77cdf8fb0fce6b17678f6da94daf505b498bd"], 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$int_in(r1, 0x80000080045017, &(0x7f0000003ff8)) sendfile(r0, r1, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000396000/0x2000)=nil, 0x2000}, &(0x7f00000001c0)=0x10) 15:43:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='#'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000580)='/dev/sg#\x00', 0x1, 0x4000000000002) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000640)="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") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/sg#\x00', 0xffffffffffffff9c}, 0x10) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1, 0xd3}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x21, 0x97fb, @scatter={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f00000002c0)="6ab7a53281ce6eb47282431c90d95a3f35cb3ae45b84c5bbb44630fec93729ebda", &(0x7f00000001c0)=""/57, 0x0, 0x0, 0x0, &(0x7f0000000200)}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000003c0)={0x8, 0x8, 0x4, 0x8, 0x2, [{0x80, 0x0, 0x8000, 0x0, 0x0, 0x80}, {0x7, 0x1, 0x2, 0x0, 0x0, 0x1}]}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x1, 0x1f, 0xffffffff, 0x5, 0x20, 0xe4fe, 0x8, 0xd02, 0x2, 0x8001, 0x80000001}, 0xb) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x8455, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in6={0xa, 0x4e23, 0xa721, @dev={0xfe, 0x80, [], 0xb}, 0x100000001}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @loopback=0x7f000001}], 0xb0) 15:43:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="ddf9000004be810000e424f7"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 492.469018] RSP: 002b:00007fe4932d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.476780] RAX: ffffffffffffffda RBX: 00007fe4932d16d4 RCX: 0000000000455ab9 [ 492.484091] RDX: 0000000020000540 RSI: 0000000000002285 RDI: 0000000000000013 [ 492.491397] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 492.498702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 492.506011] R13: 00000000004be6f0 R14: 00000000004cd378 R15: 0000000000000005 15:43:37 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x4003) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x7ff}) 15:43:37 executing program 3: r0 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x0) 15:43:37 executing program 2: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace(0xffffffffffffffff, r2) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0xfe98}], 0xee, &(0x7f0000000100)}, 0x0) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=""/123, 0x7b, 0x1}, 0x0) accept4(r3, 0x0, &(0x7f0000000180), 0x800) 15:43:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x2000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) fadvise64(r1, 0x0, 0x8001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0xe, {{0xa, 0x0, 0x10001, @remote={0xfe, 0x80, [], 0xbb}, 0x100000000000000}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 15:43:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x408000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r2, 0x4, 0x13, 0x1fc, 0x100000000003f}, &(0x7f0000000280)=0x18) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x7fe}) 15:43:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, r3, 0x7fffffff}}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000940)={0x4, 0x9, 0x8, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) [ 493.085112] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 493.085112] program syz-executor4 not setting count and/or reply_len properly 15:43:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:38 executing program 6: r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000200)=0xe8) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) r5 = getegid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="f801000000000000080000000000000006000000000000000200000000000000060000000000000003000000b62c91bd6eae57c2bbf98f6241000091ee0600000004000000040000a650040000000000000000000000020000000000000400000000000000050000000000000008000000000000000000000001010000080000000600000000000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000000010000000000000005000000000000000000000001000000060000000000010072616d6673000000030000000000000000000000000000001f00000000000000008000000000000001000000000000000400000000000000000000000000000000000100000000002904000000000000000800000000000000000000000000001f0000000000000007000000bd0c000026000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0900000004000000000000000000000000000000f90f0000000000000a000000c00d0000656d312b2c6c6f2a242700000000000000000000000000000000000000000000058c000000000000050000000000000003000000090000000600000000000000ff0f0000000000007f0000000000000001000000000000000000000000000000aa00000000000000080000009c050000120d00000700000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0500000007000000000000000300000000000000cf00000000000000060000000000000072616d6673000000"], 0x1f8) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000005c0)='./bus\x00', 0x0) r7 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fffffff, 0x200000) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000000c0)={0x3, r8}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1=0xe0000001, 0x0, 0x0, 'lblcr\x00', 0x3, 0x4}, 0x2c) exit(0x5) [ 493.144778] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 493.144778] program syz-executor4 not setting count and/or reply_len properly 15:43:38 executing program 3: unshare(0x24020400) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x80, &(0x7f0000000080)=""/128}]}) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) [ 493.254778] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 493.254778] program syz-executor4 not setting count and/or reply_len properly 15:43:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socket$inet_dccp(0x2, 0x6, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f0000f33fc0)={0xbffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 15:43:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)={0xa5, 0x5843, 0x100, "4b1afbef501019be82b75b05000115863c4ebe012c55b2c8635feb0c6f74ac92e48c654d1890e5474c551f9efaeccb927791197be33e3eb0d38eba66de8f77664de7a5d1ef2d7784a657c2edc3f86d6b62ccc5ca14478a5c009fe28dee34fe346230866ea67e193c5c256505b750618c8317346a9f435010fcb3e76431a0e5d37a6d5aad4d7b58227c7a709303ede455b202f55f80ff01f29f5dd2ff4bae800c4a60a077a2"}) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 493.358171] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 493.358171] program syz-executor4 not setting count and/or reply_len properly 15:43:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x20, 0xd4, "bf4f6b72ec372706bbe9ee863193b5a21adad40d2f601dcf86a5249a8e1c8c10d41e18d5813e6621fd1c2be5df02223f7a7dd5c1e1848155229c5bb366093a090890358dd998ddf56c41f9e4462b4b213571dd986bc6653f3f756add6e67c968f5a0dd5bacefe7271325d30ef1afc6c3da11679af4ed7d6e240935958d49d130214738410b5bbdde487a5bc99bff7986ee30d3c921eca7d1493162fdd05921031948a2ab50af71246d00f808020d65874e9c68e6313cf3568b4433dbb05c3bea2b16c2e8d04a86fba336b17d596469c12daf427e"}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000003f0000000800000047886196bcbbdaaaa79a6b0b55f2fac1788b499d0360043f0be821d6d07aef7fa03c16e4b3af0900000032629fd6f57a0c3843b9e4bc233f4a0cee91ee81a0910547d8a7e7a1c48556a82d95e9e5bafed1074110a35f5680f1906faf88185b4710002ee864fa2644840634beddc98be23272c04e9b7c65c9a9f22c16391a2b6841db4b2cadab4097adcedf9960b0e2c8d43a451c6701e12209ffefb65b2c8d5a40b823854a54675b3f092e000000000000000000000000"]) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(wp512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0xfffffffffffffd4e) r1 = accept4$alg(r0, 0x0, 0x0, 0x7ffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000000c0)={0xfffffffffffffff9, 0x0, 'client1\x00', 0xffffffff80000000, "a9ceaa60ddc6d86d", "eef49216a29bc6b5383bda93f392ebb822e0530d12fc6a652253b14280449f31", 0x6, 0x2f01}) recvmmsg(r1, &(0x7f0000004c00)=[{{&(0x7f0000003900)=@ax25, 0x80, &(0x7f0000004a00), 0x0, &(0x7f0000004a40)=""/12, 0xc}}], 0x1, 0x0, &(0x7f0000004d40)={0x0, 0x1c9c380}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x8, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 'yam0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000400)={@multicast1=0xe0000001, @broadcast=0xffffffff, r5}, 0xc) setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f0000000080)=0x200, 0x4) 15:43:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x8, 0x3, 0x4}}}, 0x18) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = dup3(r0, r0, 0x80000) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 493.838773] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 493.838773] program syz-executor4 not setting count and/or reply_len properly [ 493.937316] sg_write: data in/out 134218217/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 493.937316] program syz-executor4 not setting count and/or reply_len properly 15:43:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, r3, 0x7fffffff}}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000940)={0x4, 0x9, 0x8, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 15:43:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xf97, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000140)={0x1, 0x9, 0x8, 0x10000}) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x440, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240), 0x0) [ 493.998402] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 493.998402] program syz-executor4 not setting count and/or reply_len properly [ 494.009645] alg: No test for hmac(wp512) (hmac(wp512-generic)) [ 494.064143] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2ac1/0x2ce0 15:43:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/253, 0xfd}, {&(0x7f0000000140)=""/73, 0x49}, {&(0x7f0000001340)=""/174, 0xae}, {&(0x7f0000001400)=""/144, 0x90}], 0x5) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x7400}]]}}}]}, 0x40}, 0x1}, 0x0) [ 494.174015] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 494.174015] program syz-executor5 not setting count and/or reply_len properly 15:43:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x9a000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 494.254877] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 494.254877] program syz-executor5 not setting count and/or reply_len properly 15:43:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 494.337671] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2ac1/0x2ce0 [ 494.365950] sg_write: data in/out 593982219/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 494.365950] program syz-executor4 not setting count and/or reply_len properly 15:43:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x20000000000000, 0xfffffffffffffffc) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000000)=""/150, &(0x7f0000000140)=0x96) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x80, 0x80) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000100)=ANY=[]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e23, 0x40, 0x4e21, 0x7, 0xa, 0x80, 0x80, 0x3e, 0x0, r3}, {0x3, 0xfffffffffffffff8, 0x8, 0x5da9, 0x5, 0x7, 0x4, 0x3ff}, {0x7fffffff, 0x40, 0x80, 0x6}, 0x947, 0x6e6bbd, 0x1, 0x0, 0x1, 0x3}, {{@in6, 0x4d4, 0xff}, 0xa, @in=@multicast1=0xe0000001, 0x3500, 0x7, 0x1, 0x800, 0x1, 0x0, 0x4}}, 0xe8) 15:43:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, r3, 0x7fffffff}}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000940)={0x4, 0x9, 0x8, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 15:43:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000180)=0x2) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0x7530}}, &(0x7f0000000100)) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=""/105, 0x69}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000000880)=""/185, 0x31e}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f0000000500)=""/63, 0x3f}, {&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000000700)=""/101, 0x65}], 0xf7cc83839bcb5f7, &(0x7f0000000240)=""/123, 0x7b, 0x4000000000}, 0xffffffffffffffff) 15:43:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x2, 0x0) fchdir(0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xfffffffffffffffe, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffffff}, 0xfffffee9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4cc, 0x20007ffc) r3 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r3, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) r4 = dup(r0) write(r3, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095fbf2534f610701aa9469de8b62ce12f664691b805f7281dbd0b3e8c5a9cef332cef4262a15a8372c52d2661862cc1d4103c96ef66d12998e2ebd09d35b4893ff197c3a11c141c1764b5b969c740d99aa90eeaf4be1ae5cffc4b624270284e2438ddcb1a133b770829861ab12d20a04c2d3862195fef04cbe001000000f61480b3007d42858f358d4c276a6c11fbdee5d20210fc39688c973ca5b307d42a474d09f293312ce059eb682a1521f4139b9eeb7d91a1304da93207d9187f268f8cfb54d3630d2cbb59508378cbc9dd6bfcf117c5f5c2fa4a57c585959f41090664d5023e"], 0x2e) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) write$vnet(r3, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)={0x303, 0x33}, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0xf42447dc2e9be9ec, 0x3f, 0x9}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:39 executing program 6: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x42}, 0x14) socketpair$inet6(0xa, 0x80800, 0x12cd, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 15:43:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, r3, 0x7fffffff}}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000940)={0x4, 0x9, 0x8, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 15:43:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x4a, 0x6, 0x80, "a2f0da29e5aa8835523c9f8c33690b445f2b23246839f5878e2d19f7dcd5384b39a4f4c9c6bdd7c23501090f37bb35b8ace3c6593a2c482ea6a4ec5fdea00684bf023e894fc2cc314da4"}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:40 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 495.106932] netlink: 'syz-executor3': attribute type 2 has an invalid length. [ 495.143968] netlink: 'syz-executor3': attribute type 2 has an invalid length. 15:43:40 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, r3, 0x7fffffff}}, 0x48) 15:43:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r2, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r2, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r2, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r2, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) [ 495.498802] sctp: [Deprecated]: syz-executor4 (pid 25558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.498802] Use struct sctp_sack_info instead 15:43:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) r2 = accept(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r3, 0x400, 0x70bd2d, 0x25dfdbff, {0xb}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x88}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x2400c804) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r4 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x6, 0x100) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) 15:43:40 executing program 6: unshare(0x24020400) r0 = socket$inet6(0xa, 0x400001, 0x101) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) [ 495.640928] sctp: [Deprecated]: syz-executor4 (pid 25561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.640928] Use struct sctp_sack_info instead 15:43:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:40 executing program 6: ioperm(0x0, 0x3, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x800002000000, 0x50, r0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000380)={@multicast1, @loopback}, &(0x7f0000000480)=0xc) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000440)={0x30, 0x5, 0x0, {0x0, 0x2, 0x6, 0x1}}, 0x59) timerfd_create(0x7, 0x80800) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4000000000046800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') getsockname$unix(r1, &(0x7f00000003c0)=@abs, &(0x7f0000000140)=0x6e) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c7bcfd4d", @ANYRES16=r2, @ANYBLOB="00ff0000000000250300000008000400347e000014000300080008000000000008000800ff090000aeb8e564080005000100000008000b0473697000080004004e2600000800050001003822f68903bd000030000300080007004e230000080004b11a82ff02000000000000000000000002000108008e8acc6f2213e3030f73326a84b31eb71abb28c675d65ddf11fc4fdcbfbe7336c3e77100c2481f5af3761844227524123ae31d1e13d45d15516c644690ede6c92af4f348af95a08e912666cd630156c597f52e1147"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x40) io_setup(0x8000000007, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200), 0xfffffdcc}]) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f00000005c0)="6c7a0ba977885351ca0f2560febbe04227cbb4fb2ebef0944ee1dde04b7ee8228ca4653614f0b06d2b1dc27b879fe1458fd19615f68642651ace879a91743d692bec10745569bcb7a247cfed38fd4f950455303579b8824f0bca0e0f0269c7fcabcaea39b5f03920eee4903284d0a80749ca785b57d7fd5aa79009ef8e22974f7ec2f7aeea41df7cb7c075d624016f46fde2287037784f4cf142eb85cbfa51133b39eeb6ae5909f4dd7e2ab4c5c5a02fa82310a5279d767e0bc6c8260cf1dd7fee0858", 0xc3) ioctl$TIOCSTI(r0, 0x5412, 0x80000001) 15:43:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) r1 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x4}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r2, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r2, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r2, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r2, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=',', 0x1}], 0x1, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x257}], 0x1, &(0x7f0000000200)}, 0x8000) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="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", 0x2d5}], 0x1, &(0x7f0000003b40)}, 0x0) 15:43:41 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x2, r1}) r2 = socket$alg(0x26, 0x5, 0x0) flock(r2, 0x2) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20201, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x20}) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x100000000000000, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0xb}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 15:43:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997af610701ae12f664691b805f7281dbd0b3e8dcf624d9a68e27f8b"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c460001c2f607040087aed528195000760000000000000000000000000000000020000000000000dccadfad47323d1dcd711f568cbab8ab4a9ae82e1e56da2c7c5c195760fcaa8d305e8ee0e1c1dcb1bc8df2cefb0c027f1e963e6475949b7eb889a943912972e74c9a921d8e63d59a1b017cd82cf4d60903e6cca9720ac110823900eb271b4989446e5c322d36661ed13122917f6ba9b792d0755a9c35d94014b37dc33e7abeee77e8dbd453b6f003b17863ab69bb2efbe5d2454d86fb00586b3d9353300739e86f90a0743ed901bec811455f7ca003df0d2bf95f95c8c368"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:41 executing program 6: r0 = socket$inet(0x2, 0x2000000083, 0x2d) r1 = socket$packet(0x11, 0x800000000003, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc), 0x4) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000cf9000)={0x2}, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 15:43:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0xcf2, 0x1f, 0x81}, 0x8) r2 = msgget$private(0x0, 0x80) msgctl$IPC_RMID(r2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r3) r4 = socket$inet6(0xa, 0x801, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x200000, 0x13) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={0x0, 0xe76}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e24, 0x7, @loopback={0x0, 0x1}, 0xfffffffffffeffff}}, 0x5, 0x8, 0x80000000, 0x7, 0x18}, 0x98) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 15:43:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) fcntl$setsig(r0, 0xa, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) ioctl$KDDISABIO(r1, 0x4b37) r3 = accept$alg(r0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000240)={0x9, 0x3f, 0x15b6abff, {0x77359400}, 0xfffffffffffffffc, 0x24000}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 15:43:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00']) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x110, r0, 0x0) 15:43:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xffffffffffffff94, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r3 = getpid() wait4(r3, &(0x7f0000000000), 0x1000008, &(0x7f00000008c0)) 15:43:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = msgget(0x2, 0x200) msgctl$IPC_RMID(r1, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(cbc(blowfish),poly1305-simd)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = dup3(r0, r0, 0x80000) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0x7fff, 0x6, 0x2}) socketpair$inet6(0xa, 0x1, 0x81, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100)={0x380000000000000}, 0x4) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:41 executing program 6: r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0xaf5) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x75, "6f0668be9eb104f7c9d63ccf05c8c55332735a6bbab21bf3e146660e9d2a10be6b19aa54e005b3ed512bb2ab3709e055bd7ee8b763241b2df76d2d24df06e717569ac7f69c734adb347a0d9e318ed00c3f1d59074b0b425f2fe86782ac9805ef4caf479891bdef37849251bbb28e583e2feba31b32"}, &(0x7f00000001c0)=0x7d) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r2, 0x8f, "cc228da95c01b8ac61df99a7b112d60e32404a67776501d0967fb9e345eae95b4141162f0405ae7f03b6c83a04cf0a4a992df7a5c8cb54c7053544cd237ef322110c9d8dab3624a420b5a91d2ed57ded47a6d2c6eba982e14bf36af9a01c622497be56cb08f4307663bf3786217fa6c45a3a499abfe3ab826041d30e4ee3379f76840d9ff5f4e70f52ff2d7b8a21a4"}, &(0x7f0000000200)=0x97) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080), 0x8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f00000000c0)) close(r5) close(r4) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x0, 0x80000000, 0x9, 0x8, 0x8001}) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 15:43:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) socket$inet6(0xa, 0x1000000000002, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x18) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:42 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) socket$inet6(0xa, 0x1000000000002, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x400) r2 = gettid() write$FUSE_LK(r1, &(0x7f0000000040)={0x28, 0x0, 0x1, {{0x7fffffff, 0x6, 0x1, r2}}}, 0x28) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r3 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r3, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r3, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r3, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r3, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) socket$inet6(0xa, 0x1000000000002, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 15:43:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)=""/163, &(0x7f0000000180)=0xa3) 15:43:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0xffffffffffffffec) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(0xffffffffffffffff, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x3f, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x810, r0, 0x0) 15:43:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x6, 0x220081) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) r3 = semget$private(0x0, 0x0, 0x400) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000240)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, r4}, 0xc) 15:43:42 executing program 3: socket$inet6(0xa, 0x802, 0x9) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 15:43:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x206, 0xffffffffffff9d7f, 0x8, r3}, 0x10) 15:43:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfce4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$KIOCSOUND(r0, 0x4b2f, 0xd3) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x220) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file0', [], 0xa, "997a289c095fbf2534f610701ae12f664691b805f7281dbd0b3e8c5a9c8d04d0c130fe"}, 0x2e) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$vnet(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000740)=""/226, 0xe2, &(0x7f0000000180)=""/21}}, 0x68) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c460001007600000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x62, &(0x7f0000000400)=""/98}, &(0x7f0000000480)="6829ac9e6778", &(0x7f0000000680)=""/131, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 15:43:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x9d4}) socketpair(0x10, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="7f7a7b23bbf223ce3eb13ce63008db6d83", 0x11) 15:43:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) 15:43:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff6f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write(r1, &(0x7f0000000000)="f5", 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 498.202370] sg_write: 43 callbacks suppressed [ 498.202400] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 498.202400] program syz-executor4 not setting count and/or reply_len properly 15:43:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) r1 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x8) ioctl$sock_bt(r1, 0x8907, &(0x7f0000000240)="8eacbceb15a124b641daa3b8a36079c799b70d00bb139b1ec9ba04e3c74e23126b4d0f726bce5e689ab51eb85e4ff97eb4b10de1d7ba3e81c15675f28eef8a2a6c8973e6202d6f9b64c5b4ac5afd52ed41474e63a67238f6c78f5bda737bbed086d8589727b2928ffc339e7f7eea807c3cf9b5aea6bb56076f06ce29b3dadcc9cd0a339e846f8418d718b8bd9d5d8ad6c13548ce921cbcbbc6af11e68d72be921fc382af9b42ecc1202a5cbf2ca3b62ca706c938f55729dcd0ae1021c5631263d4879dab121a787726e5a0625a48e8ba4cc1a13fc2673fefc46cbaf97d786702192ccaa83a6b1ea11c3c431098a589e52a279c60aaa9be80b8ca5a232db4a5c961697e0b4515ce01cdd379edc1b972dee640f2c4827c2f9d2c6c815f503ba2ceca7bd5d0b125067b94ceecaa1b80d4c0ba6421d1e68341ffbe15e74a1dfa7eeb97647eb588ba227501f3601f88f15c63b15c721171b728b87369cf8068fd499fc14e7c6646da1bcb5dad08b6cff1472b19365f16e1da5558a6af9f8dad42a655038bc96a909a0d3aea68ace34a3d3c19bd7b6555387587eccaf17b251477a2e5c849bca1e0571e903875ea7a74091cc6c6fb4432a92dceac64d33bb581de0c9fa87346033a21d93c6f0e146488aa14066572691ac076b1d5f2fd399e4930bb72721ec3cefc7b7949c57a57f3275229d27c45b575d7c1a4b75281ce4ef821e3b6f3c32d00972ddda542dc46c8b64846598c37d0c3afc505c5cad022e2d0d06af9d14f2527a84364f8a9dab8d07191609a74937b4036d442a289d488c16532ef08c56707f9a8cc51cd8abc135db1687bcac113f690310edb49718156778c4bb3ea0f6d4788b2966e6a92162173e1e2c5e356ce4f3779e2f9e5866290cf05f303b27829a8cbe54042f00dc467fedda7c05b07116ca124cf1bce905f5a3ad3d568a9a331628582a710ebb27f9dd6226665e32c16ad6213184ee62094505df632daa39e1e926be53cbccadf0252ba9f025b48985e21edbe902949423e37c73f6573e1109811ee89458f89edaabbd7fbd3077da7bbec56ebb93740f9d761e566e5e54895fef450b7c483c5e1ae41fbf2af4e8bbcbcfc2357c109ae5453fe0b2cc9ab1ae029e2e3dd283c2caa6a327c2ab88ab7ba728fe88fe832286563d43549d8937ac73f3bb6ac54765edfcce42067ef171a3062c7b2a3664d0998e4e041115731dd33401e3ca5ff0fa81cea6e1731fe299a2a0232ca04e1339bd6137672ae84b08f5f2b9f015c805d8db3720dab4fdab3bd179afb8f4e26400106f50f85f85c9358bf86c7f55b46451cc1f07ee22b2f381a051542d43dab60845481ff06d36c062632a87df33d2fe4ac93284b1f4e3e5ef4d9fe3574463a94627a7f90fffc46585fd461c8b287cbca13b1ef2282057b7e315d76ee496311325a7a69d0d04f9db8d0c7635cccae094a70b5e352d5ef83abab43da319e7e8570e7981d63c2daff4ef6fe03bf364431fd79bc68b886b641cf118d4a43a35a8ffd2f2ae4097bade62afdd57e418b640832f8a3bc57fc8873ab0fbf7cb41378500cc9e0ad1bdd424ba50add5e625edf800c8fe6dead968958b0be140403ce02abc5da783fcd3fe89bf8faea502ada0d69dadc768fe4e7030f1e2523da6cd5d59f22e6623c3473de3ee378241f93a35ca0f4cabe1952c0ed7426546cb616f8043690b79e18680a2edf1948874d9df56aac15f29b76f5e0e8994f5cf581e0f6d636146b0e24f8501252f0d71d82c91ab4892ba227e17e6da7bda260704102ed82a29a5b720c29f5576d252163c0fc70f073fde4d9183ff237b581e5e674c66fe5fcef6a0505414908c9264acad64616da3b504feaead703c53647e6541ff07ec66d7a40b7f42ff7eb2923e0aa9e38cde8e918ebdae5bc044fb563d2b8c1d42c459b492bd004a2bde16dbb410eb4cd6bd7fb15ee7721a90d8d90d662c7da81ba1fe92e60e3e5eada60357391e8f6e8e1f63fd76f45aabcf7f77352b26d7938b9c340923f404bc42ebf9689e5645f91182a4cfe01b3475d9b63f55913daecd1360aa9aa8daf9e5b64171f515a948bf3bcf813dfada20d3099095779444bba17a2d79d47ec0611e9a3649929ae8895823d7733c4c7dd1cd0472bc60f087119111840f58a3197366776c93a1562e637365e34c7bf5b4cf1ef542490872a37a694391c50f85266d81f135f3ddcb38e6468039ecaa883935025908766bdff48ff4a8c516f9ecace7bead4491d951c481dd2774a91802c30d97634736a5b805698e79bde1a439355aab50ba207852a35158e8236900cfe0f23da91408d19ff1b40524bf147e3ad0bdbe4830ddb87d4658710c5eb1d63eac89b6ba01b2f4601db2b994271f36e01544e2669dd22712831ae059cc2f53836fc97474da16ba6496218720a683615deafce249fe7090037713d4bb0b71739916b5d35e4bdc7dd655e9859f567bdee57ec6f4c1834015263957595250bb17abd7bebf8edb383be4c89f46a58dc9a1a26031190ae860e3f342704bd6eb835c0494aeaf754ebf08e8118fc303b95c47e5d73b4fc1d343ed80f78d59bffe5314393c85bb908adae9ad1356e5b3e3ab235b6a78ba138e2783ddb81111aff157c11c5ac4de89291ec7d055d4b0a541ae4ecf33959cfcda1988bbe415209d80fdbff1dac949decc123ed6c9efb84747e26fa1104506de25b66d8e4d561572c864197ce98e3deaab955c2dbf45505d733665e1adff79257ca3e0ff09f14f9822c89de48e71153751f40f42aea06db4b380b20093a9e5528ba5dacb5fd2f8449067e248d0058dcb12fbe6bc711f2f76b9ae5781c765637951a3059c55c46794f343f2d3302a866448c87b4bfddce2f58659df0bb084019b8843d6823ac1b0c94a5da9bcd6d60adf3a3e0211a20f83bc81763c26fe7a64e0e743c4a230d0bb9294e7471206aa34d0575ad8323c99077729d2d1e49a4b2ff1ea1d65d2267b8abd271fe7a12d378d3ccfff280aef593295af4a0ada8fc13c4b2cca74e643d94a93e1cd94038e528aef35e29c3c364d68c2529072d65f5cca8fc2a9dd77bd007ff233e26a98e622ae1f448186620e320eea89b240c664983b828c84e710bf9c7cd5069b4938ef4552c06c125bf668987afd79d701d34f29d1df57da46b2a3f788811db450a2f2c152f96b6d45cc8f54f7a7590e92b3069e5dce98db692d14f21b8e388fdd040b8e1f652c4603134f1f689eb43a341828129124466fdb0e56ee26af24d9ed3ec52508dbb232b86ca3c1e2575cbbbb94b9c920095fda31792576ba9f3df50f42dcd1c8b0cd652a2a9bb660120e73dcb5d8fb7bc8207c81018995fb5832317ea9a359ca0b2a16023e716d111886c8c247e2463265ada3e26a7b3b201e28fb4e9f893f368afa25b2966616dcf3e029a37b3ece146e23236393c98ffd571576d9af6c0afd455abc46f0dea2b4539d674dd51190463c46d85f4e832fe1f0425adeab8b3321549144554cf56031be83455a7cce8c323cd9f4de400b99360bfb39c8dc9c8908ade196b110a26c4ed0737d6560f809af78afc8eb8322a4c7c01b727b8c414478f963e5092872655f9eb49e718af384a39c191d451d149eb78b57422eb2893d49f31855b279aeb492da3fe6ea70e8aa8794819cfe084fac0672cf3f048b9a478442f53686b28854fd643d9576d6a8404b1a53c2f18fff035b635601570ce06f6fb480abb87eee6c8b71b2114d2f3db4e5424ef0a84cf032366b662085992ded157ca3afc58479fef7a18465224d09fe201dcecec7e36721a961eb274bba2573ae7bc90b55a03cc0f72729e76b73ea9c0ce762c09e6d6c695feb7375087b1caedd062b6ee34e97b5c5813a4d356e6cb77e4e1f062aa9163004138c1748e8cf596b781f7621049d745b98ac6e1018395718cb47bf1e6e11125e72b2ee164b939618e3fa363af9c5218f51826c38e0147cc7057e5b05b8b4ef4a562a0dd760c056451fae7503bdb59f8c315259256dec6b0ca1dd6f0866713745b08e8089dd423ba3e2f1c7698d5d37536f8151f21b19f8161d1e6e539bb4a3d325f40a998254c7a5776056e640af57921f9d9a197f1f7183a6146baa1f6d051bb05b9f4002543680a774f76d5c0ed299932711b53f524df66546e518eafb349e259693a7ff1ed2aeed82e8f953a9c733a7d5b7ed14b5914bcee84a1cef3628293958a8911ecda497270d64ff0fda7d71d6b435cceab14f047aba0dd95e89c7c3fe8c78ecce9d93426863c1ac90bff333f43d3f9287b6e3c79e9b8309fa848acb711f761d8c2326ac63778eaffd00d575fbea00c337ebd9c25fcc5984be29a711d1bc5107c41335c16859d397fb28f6adcd9b847aa5ed02832f047cb51f46eb9b876b2b25c1f6e508fe388e7faac2b007c93de3f171d6e1b453bbed5a8c2225076ed20cee335f92f17a021796d601043297c475959d070853ce94b5740aef56e2f951bc4c92bc6974ac0bd6e548c3ffef5b97361038bcebcb123472ffacf8155558c22bad5f86d680fbabdda7914fe8a8cbcb1d7a503f59fcf2b08478e867053a99b92cb4dd741545dc6aa0c8fb4bc199db4a95d7dec3b2f6e627a5a1ff4210e8e80739deead7d6bbb82a7f82535d71695853aeb5f6bcbdb101273bb503c259552f2b78e9b80b556f8099f12346cb8bb1f5687aea0818200e0f2405fc1c5660c0f960e27bdfd6b8effdceafa82c63ef385c2ee1cf748b8183e07e848cbe3b3d0a29e4d47d49ff588a92a535814283a27437f57b336f190fb050ad56ec90cd2132caa7443f8517ffd5be99e6e72fbdb17699cb1aecf2b016a87fc507d05bb55b5a6ca59bd655e35c1802339873299a6b884552872a390dc90b420b043d567019b06dec2103527460cecce99df05ce44b74d6bab436b7579cf3af59ff795c35231e9cd6549fcf27e4d16d59a6d5184ff914c823c2abd44f07cb6a3804b025f06781f57a9aa82c15545a6bdd84f1b0d1dba40ff9bc793138ce4c029d336a8d87fba70ffc0badd4c95b9b43fa209f5edb06013ad7189daf49471447caa6d0696ee4c51a9e0989a7bcbf570b642315d699c847753f3ddd2d2eeb2399fba80e21e437ddc4d50ba05d07cdf9e7a21b153ca17f214759876c243db6e71615bf2015dd4f1383be03076685c57327df5d43fd66331d1ccb7a7c1b5eea5fa2081e9500c6df9322fad2def038818ef2536d02f9426318e5f12031c368768b2c8ee8b7ba1535f2f3608849111e06b743c07abef01687d2ee51dda2ea4428b47aba342a2271ebba56e398f7865a490705c6f0d57a5077cad3126bf196c78bb36612cda1b46f22f276847065684db3a3c7311d5d8425dfb3192b8ac35507d0669eeedd21f9c62734663ba71bf007c9b9e7d034d4aa7620b7621d666bed3ec64e4bc87308f66405afba679be611b49f238ef883922c3b08c00fa065d85d5aa3957eb1161267e772a04eaf0e28a503ea934e198dfb6ba35d9031639af26d0ac8df2123672ed786069e5cc0433f67899d47810748f5eba18f448c0e981b1f8693c4a73ddb799a5e273c8e0f374a52c44ed82e41b04b08e00f2bb214ba475a81cc61fd76d01b3e365c8d0dca6e6a311be3192052003b3b5c996de87ea3e76210ce5764aabd0b7c1149428a329162bada29e75e519163d7e3f8858571c09ba7acf2b8dc0d975c8ad5aae4607ee8c1e4f2ef8de70e85f74c2ff76844fdaea963214905aedb6e63ddadd64daf4a2eed47c5d6ad402cef3a06354b0def2a626e639d0b6913e7499109d") r2 = accept$alg(r0, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) sched_getparam(r3, &(0x7f00000000c0)) sendmsg$alg(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="40d8b48ff78ddd37d137035298ff95b93b8b99283bcfe3a9a5891eda1b51f7303b2c6e4338b82aa0b283f51734fed3081841b735ff070000d116fcbb8a60cc941b2b5f9dd974175655de288beade50237e7a254d06699d285984fc7deddaf3", 0x5f}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 498.310919] sg_write: data in/out 1954546043/498 bytes for SCSI command 0x33-- guessing data in; [ 498.310919] program syz-executor4 not setting count and/or reply_len properly [ 498.388895] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 498.388895] program syz-executor5 not setting count and/or reply_len properly [ 498.428569] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; 15:43:43 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b4090000303a0000000000000000000400ffffe0000002ff02000000000000000000001c000001810090780000040060b680fa0000000000000000000000007900ffffff84f4f3ffffff00000000000000000000ffffac"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fff, 0x10000) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) [ 498.428569] program syz-executor4 not setting count and/or reply_len properly 15:43:43 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x82102, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000727000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00001e1000/0x4000)=nil) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock(&(0x7f00006ab000/0x12000)=nil, 0x12000) [ 498.481399] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 498.481399] program syz-executor5 not setting count and/or reply_len properly [ 498.515343] sg_write: data in/out 1954546043/498 bytes for SCSI command 0x33-- guessing data in; [ 498.515343] program syz-executor4 not setting count and/or reply_len properly 15:43:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55ec9722904010acf9b062950b86bc01abc8464d4f8a906151", 0x28) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000180)=0x1f, 0x8) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, &(0x7f0000000100)}, 0x0) recvmsg(r2, &(0x7f0000001480)={0x0, 0xffffffffffffff61, &(0x7f00000013c0), 0x34a, &(0x7f0000001400)=""/123, 0x7b}, 0x0) 15:43:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x80, 0x80) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) 15:43:43 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_submit(r1, 0x20000000000000c8, &(0x7f0000000000)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000480)}]) 15:43:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000005c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0x0, 0xfffffff4, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f00000001c0)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7364694323442300202018707573657429202f6465762f736723000000000000"], 0x30) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) write(r1, &(0x7f0000000840)="7f1cd54e9f018074b2588ead159027ed7898a23ea94a0193480d3665b69642033560a68a33284315317ec881dc9f", 0x2e) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="2321202e2f66696c65300a997a289c095f281dbd0b3e8c5a9c8d04d0c130fe"], 0x2e) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000008c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, {0xa, 0x4e22, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0xffffffffffffffff, 0x7fffffff}}, 0x48) [ 498.782848] ================================================================== [ 498.790307] BUG: KMSAN: uninit-value in af_alg_free_areq_sgls+0x61f/0xb80 [ 498.797250] CPU: 0 PID: 25743 Comm: syz-executor2 Not tainted 4.18.0-rc5+ #28 [ 498.804531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.813900] Call Trace: [ 498.816516] dump_stack+0x185/0x1e0 [ 498.820165] kmsan_report+0x195/0x2c0 [ 498.823989] __msan_warning+0x7d/0xe0 [ 498.827838] af_alg_free_areq_sgls+0x61f/0xb80 [ 498.832454] af_alg_free_resources+0x66/0xf0 [ 498.836887] skcipher_recvmsg+0x16c9/0x19b0 [ 498.841253] sock_recvmsg+0x1d6/0x230 [ 498.845076] ? skcipher_sendmsg+0x160/0x160 [ 498.849438] ___sys_recvmsg+0x41e/0x850 [ 498.853468] ? __fget_light+0x67/0x760 [ 498.857459] ? __fdget+0x4e/0x60 [ 498.860848] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 498.866231] ? __fget_light+0x6e6/0x760 [ 498.870247] __x64_sys_recvmsg+0x3a4/0x510 [ 498.874517] ? ___sys_recvmsg+0x850/0x850 [ 498.878688] do_syscall_64+0x15b/0x230 [ 498.882606] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 498.887812] RIP: 0033:0x455ab9 [ 498.891006] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 498.910362] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 498.911741] sg_write: data in/out 536870876/78 bytes for SCSI command 0x0-- guessing data in; [ 498.911741] program syz-executor5 not setting count and/or reply_len properly [ 498.918083] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 498.918095] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 498.918105] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 498.918114] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 498.918124] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000000 [ 498.918142] [ 498.918149] Uninit was created at: [ 498.918174] kmsan_internal_poison_shadow+0xc8/0x1d0 [ 498.918189] kmsan_kmalloc+0xa1/0x120 [ 498.918205] __kmalloc+0x147/0x370 [ 498.918220] sock_kmalloc+0x14e/0x270 [ 498.918233] af_alg_alloc_areq+0x85/0x320 [ 498.918248] skcipher_recvmsg+0x353/0x19b0 [ 498.918261] sock_recvmsg+0x1d6/0x230 [ 498.918275] ___sys_recvmsg+0x41e/0x850 [ 498.918289] __x64_sys_recvmsg+0x3a4/0x510 [ 498.918301] do_syscall_64+0x15b/0x230 [ 498.918342] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 498.985912] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 498.985912] program syz-executor5 not setting count and/or reply_len properly [ 498.988851] ================================================================== [ 498.988857] Disabling lock debugging due to kernel taint [ 498.988866] Kernel panic - not syncing: panic_on_warn set ... [ 498.988866] [ 498.988887] CPU: 0 PID: 25743 Comm: syz-executor2 Tainted: G B 4.18.0-rc5+ #28 [ 498.988894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.988901] Call Trace: [ 498.988927] dump_stack+0x185/0x1e0 [ 498.988951] panic+0x3d0/0x9b0 [ 498.988992] kmsan_report+0x2bf/0x2c0 [ 498.989015] __msan_warning+0x7d/0xe0 [ 498.989040] af_alg_free_areq_sgls+0x61f/0xb80 [ 498.989068] af_alg_free_resources+0x66/0xf0 [ 498.989094] skcipher_recvmsg+0x16c9/0x19b0 [ 499.106759] sock_recvmsg+0x1d6/0x230 [ 499.110584] ? skcipher_sendmsg+0x160/0x160 [ 499.114925] ___sys_recvmsg+0x41e/0x850 [ 499.118918] ? __fget_light+0x67/0x760 [ 499.122817] ? __fdget+0x4e/0x60 [ 499.126194] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 499.131569] ? __fget_light+0x6e6/0x760 [ 499.135579] __x64_sys_recvmsg+0x3a4/0x510 [ 499.139842] ? ___sys_recvmsg+0x850/0x850 [ 499.143999] do_syscall_64+0x15b/0x230 [ 499.147909] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 499.153103] RIP: 0033:0x455ab9 [ 499.156297] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.175641] RSP: 002b:00007f2a93b48c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 499.183366] RAX: ffffffffffffffda RBX: 00007f2a93b496d4 RCX: 0000000000455ab9 [ 499.190656] RDX: 0000000000000000 RSI: 0000000020001480 RDI: 0000000000000014 [ 499.197937] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 499.205226] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 499.212533] R13: 00000000004c0af6 R14: 00000000004d0ee8 R15: 0000000000000000 [ 499.220536] Dumping ftrace buffer: [ 499.224077] (ftrace buffer empty) [ 499.227765] Kernel Offset: disabled [ 499.231376] Rebooting in 86400 seconds..